A retention period is a pre-established timeframe for how long data will be stored for. For example, a business may have a 3 year retention period where data is stored securely for 3 years, then destroyed after that retention period has passed.