Nowadays, good information security and data management in organizations is crucial. They should all have well-established IG (information governance) programs and a well-developed infrastructure to collect, retain, and remove information. For example, section 500.13 of the NYDFS Cybersecurity Regulation states that companies "shall include policies and procedures for the secure disposal on a periodic basis of any Nonpublic Information that is no longer necessary for business operations or other legitimate business purposes, except where such information is required to be retained by law or regulation.