Also data retention policy: automatically purge old data when it is no longer actively being accessed
source: i work in this field
But I don't think it is short, and it at least extends as long as you are selling the material to which it relates, since it is expressly illegal to sell depictions without the records.
They could be accused many years after the fact.