Which of the following elements is least likely to be included in an organization's data retention policy?
A. Legal requirements
B. Business needs
C. Employee preferences
D. Data sensitivity