Read time 9 minutes

Summary: Retention policies in SharePoint Online are your key to smart data management. Understanding their importance is paramount for maintaining compliance, streamlining workflows, and thus full data security. In our latest blog, explore how to apply these policies and optimize your SharePoint experience and establish a robust foundation for data governance. We will also introduce Kernel Migration for SharePoint, your go-to utility for any SharePoint migration needs.

In modern business organizations, the size and volume of data are increasing exponentially, and storage space is filling quickly. Cloud platforms give the flexibility to increase the storage space, but it requires constant monitoring and management to protect the data. The number of emails, attachments, documents, chat messages, and other items fill any storage in the least time. Efficient management is necessary due to the following reasons-

  • Reduce the risk of data loss due to litigation or login breach – Deleting older and unimportant data and saving accounts from unauthorized access.
  • Following the industry regulation and protocols – Several industry regulations compel businesses to keep their older data indefinitely. For example, in the United States, the business must follow the Sarbanes-Oxley Act, in which you must keep the document for seven years. Best SharePoint Backup Solutions maintain the data structure and help the user keep optimum use of the retention policy.
  • Sharing useful knowledge between the users – You should help the users provide the latest and relevant information for completing their tasks.

Retention settings in Office 365 help the business to centralize the control of managing their content two actions mainly-

Action Reason
  • Retention
  • Deletion
  • It prevents the permanent deletion of content and makes it accessible in eDiscovery search.
  • It permanently deletes the content.

How does the retention policy affect the data in Office 365?

When any data is included in the retention policy, it does not show any symptom or message to the data. The user can continue to access their documents like nothing has changed. But, when the user deletes any item or changes them, a copy of the same file will be placed separately. SharePoint items are saved in the Preservation Hold library.

How to apply a retention policy on SharePoint Online items?

You can collectively apply a retention policy for SharePoint Online Site collection and even certain retention tags to an individual or all folders.

You can apply a retention label to any item like Word, Excel, or even OneNote files in a SharePoint library. The non-MS Office files like PDFs, images, notes, and sites are also available for retention.

Where can retention policies be applied?

Retention policies are applicable across various platforms including:

  • Exchange Mailboxes
  • SharePoint Classic and Communication Sites
  • Skype for Business
  • Microsoft 365 Group Mailboxes and Sites
  • OneDrive Accounts
  • Exchange Public Folders
  • Teams Channel Messages (both Standard and Shared Channels)
  • Viva Engage Community Messages
  • Teams Chats and Copilot Interactions
  • Teams Private Channel Messages
  • Viva Engage User Messages

These policies can be efficiently implemented either across multiple locations simultaneously or targeted to specific locations or users.

Regarding the initiation of the retention period, there is an option to choose between the date of content creation or, specifically for files in SharePoint, OneDrive, and Microsoft 365 Groups, the date of last modification.

How long does it take for retention policies to take effect?

The time it takes for retention policies to take effect involves a multi-step process:

Upon creating and submitting a retention policy, you need to wait of up to seven days for its implementation:

  • Distribution Phase: The retention policy initiates distribution to selected locations.
  • Application Phase: Following distribution, the policy is applied to relevant content.

To monitor progress, check the distribution status on the Retention policies page in the Microsoft Purview compliance portal. If you encounter delays, investigate by selecting the policy and reviewing the status in the flyout pane. If an error is indicated or if deployment is taking longer than expected, consider reattempting by executing the Set-AppRetentionCompliancePolicy or Set-RetentionCompliancePolicy PowerShell command.

Planning the SharePoint Online retention policy

Implementing a SharePoint Online retention policy requires understanding its impact on all documents, including those created pre-policy. Options include basing document retention on creation or last modified dates, affecting deletion timelines. This policy, once applied, universally affects a site’s documents, potentially leading to immediate deletion of older documents. It’s crucial to communicate the policy’s workings to users clearly.

The policy permits customization in applying different retention durations to diverse documents and SharePoint sites. This aspect allows for the consideration of varying retention or deletion needs for specific documents. It also includes the possibility of user discretion in marking particular documents to be exempt from the retention policy.

Upon finalizing these considerations, you are all set to create the retention policy.

Configure retention policies in Office 365 Admin Center

The retention policy is not a rigid system, but a flexible policy creates different approaches to protect data from various threats. There are several pre-defined compliances that you can also apply to the policies.

  1. First, log in to Microsoft 365 Admin Center and go to the Admin application.go to the Admin application
  2. In the Admin Centers, click Compliance.Click Compliance
  3. Choose the Data Loss Prevention option.Choose the Data Loss Prevention option
  4. In the DLP section, you must create a new policy for your business. Go to the Policies tab and click Create Policy.Go to the Policies
  5. In the first step to create a DLP policy, there are several categories that you can choose. You should also choose the country or region for the business. Make your selection and click Next
  6. In the example, a U.S Patriotic Act has been selected as the policy. You can provide a new name and description. Click Next.Click Next
  7. In Choose locations to apply the policy, you should disable others and choose SharePoint sites. Use Include or Exclude to select parts of sites. Click Next.Choose locations to apply the policy
  8. On the Define Policy Settings page, you can either follow the same settings in the selected policy or create a custom setting by providing additional details. Click Next.Click Next
  9. Choose the option to detect when the policy will work on Office 365 data. Then, click Next.Choose the option then click next
  10. Select the protection actions and use the checkbox to select useful actions. Click Next.Select the protection actions then click next
  11. Choose who has access to shared SharePoint and OneDrive files. You can also leave the settings to their default type. Click Next.Click Next
  12. You can test the policy, turn it on or off instantly, or keep it off. Make your choice and click Next.Make your choice and click Next
  13. Review the settings of the created policy. Click Submit after you are satisfied with the terms of the policy.Click Submit after you are satisfied with the terms of the policy
  14. It will take approximately 24 hours to finalize and enable the policy for the entire organization. After that, you can apply this policy to any item in SharePoint Sites.

Limit policy changes with Preservation Lock

Use Preservation Lock to control modifications to policies. In certain instances, organizations must adhere to regulatory mandates like SEC Rule 17a-4, stipulating that once a retention policy is activated, it must remain enabled or become more stringent.

Preservation Lock provides a safeguard, ensuring compliance with such regulations. This feature essentially locks a retention policy or retention label policy, preventing any modifications—be it turning off the policy, deletion, or relaxation of restrictions—by anyone, including administrators.


To recover deleted files from OneDrive and SharePoint is next to impossible if you do not have a proper backup. That’s where the Retention Policies save the data from being deleted abruptly. Retention policies may not be enough to backup your SharePoint library, site, or site collections. So, it would be best to use professional backup software specializing in SharePoint because it can help overcome many avoidable mistakes in SharePoint migration.

Kernel Migration for SharePoint is one such tool that backups all the contents of SharePoint. Also, the SharePoint Migration tool will migrate the data to a new account as per the user’s needs.

Kernel Migration for SharePoint