A privacy request requires removal of eligible personal records, but some records are subject to a lawful retention requirement. Which approach best fits?

1. Establish data ownership and catalog governance metadata.
2. Grant separate least-privilege data and pipeline administration roles.
3. Apply a reviewed retention and deletion policy that accounts for legal obligations.
4. Maintain and inspect data lineage.