Dark Data
Dark data is information an organization collects, generates, and stores but never analyzes, uses, or even inventories, leaving it unmanaged and often unaccounted for in retention and disposition decisions.
Dark data is the vast body of stored information an organization holds but cannot see clearly, because no one has inventoried, classified, or assessed it for value. It typically accumulates in forgotten file shares, old backups, departed employees’ mailboxes, log files, and abandoned systems. In recordkeeping, dark data matters because content you cannot identify cannot be properly appraised, scheduled, or disposed of. Records buried in the dark may quietly exceed their retention period yet survive indefinitely, while genuine records of value go unprotected. The risk runs both ways: dark data can hide personally identifiable information or controlled unclassified information that creates privacy and security exposure, and it can become discoverable in litigation, expanding the burden of e-discovery and the danger of inadvertent disclosure. Consider a decommissioned drive holding a decade of unindexed scanned forms; until it is inventoried and classified against a retention schedule, the organization cannot lawfully dispose of expired records or defensibly demonstrate what it kept. Bringing dark data into the light through inventory, metadata capture, and appraisal is a core information-governance discipline.