The asset owner shall have policies and procedures related to data retention during the entire IACS lifecycle, including purging.