How long is too long? Visitor photos are personal data, and “forever” is not a retention policy. The right answer balances security value against data-minimization principles.
Retention per site, deletion on schedule
Set retention policies per location, and let visitor data — photos included — delete on your schedule, not ours. Counsel gets the policy; the CISO gets the audit trail.

