Our organisation works in the Health space and as such we have a legal obligation to keep records on file for 10 years. On the other side of the coin we also have to comply with Privacy legislation that allows clients to 'be forgotten'.
What solution do you know of / recommend for archiving, that would allow us to get records away from end users but still accessible to selected users for legal purposes?
Do you have a preference for a native solution, or a separate one?
And do these solutions generally integrate with back-up functionality or would you keep that separate?
Big Objects could be a good option for long-term archival, particularly for large volumes of historical data. Scheduled/Batch Apex can be used to move eligible records based on the retention policy, while access can be restricted to selected users.
For the privacy requirement, I would recommend defining the retention/deletion policy first—legally required records should be retained as required, while data that no longer needs to be retained can be anonymized or deleted.
Thank You