3Data governance and compliance

• 3.1Data retention and eDiscovery (Vault)

  Understand Google Vault retention rules (retain data for a period / delete after it), holds (preserve specific users data), eDiscovery via search and export, and the precedence of retention vs deletion (a hold overrides deletion).

• 3.2Data protection and compliance (DLP, data regions)

  Understand data loss prevention (DLP) rules to detect sensitive data (e.g., credit card numbers) and block sharing, data regions to control storage location geographically, trust rules to govern sharing with external organizations, and classification with labels.