Prohibited content and privacy: incident response and chain of custody, licensing (EULA, DRM, open source vs commercial, personal vs corporate), PII, PCI DSS, GDPR, PHI, data retention

Technicians see a lot of other people's data. Sometimes you come across prohibited content or activity on a device, such as illegal material, stolen data or clear policy violations, and sometimes you simply handle regulated data during routine work. Handling both correctly protects the users, the organization and any later investigation. This topic combines three areas the exam tests: responding to prohibited content, software licensing, and the types of regulated data and how long to keep them.