Which of the following is the FIRST consideration when developing a data retention policy? 

Answer options:

A. Determining the backup cycle based on retention period
B. Designing an infrastructure storage strategy
C. Identifying the legal and contractual retention period for data
D. Determining the security access privileges to the data

D