A multinational corporation, \"Aethelred Analytics,\" is reviewing its information lifecycle management practices for customer data. They have identified a dataset containing personally identifiable information (PII) that was created on January 15, 2023. This data is subject to a mandatory five-year retention period due to regulatory requirements, including the General Data Protection Regulation (GDPR), and internal corporate policy. The data is no longer actively used for business operations but must be retained for its full duration. Aethelred Analytics is considering various methods for the eventual disposition of this dataset. Which of the following approaches best aligns with the principles of information governance for securely and compliantly managing this sensitive data at the end of its active use but within its retention period?