A team must apply legal holds to selected records while routinely deleting expired data elsewhere. What should govern this behavior?

1. A retention schedule with legal-hold exceptions
2. Let individual users decide without documented requirements
3. Delete all records strictly by age even under hold
4. Keep every record forever without classification