As the Compliance Officer of a global public company you are tasked with creating a written records retention policy for matters received through your company's hotline.
Although your company is a U.S. company, it also has locations in Canada, France and Germany.
You must conduct research into the privacy laws of the all countries where your company has facilities and incorporate retention periods into the policy as applicable.