I work on the Privacy Engineering team for one such company. Data retention is a huge topic and while there are often good guidelines, there usually aren't hard-and-fast rules. It's an exciting specialty for anyone that enjoys ambiguity (I like to joke that I enjoy the space since my dad was a philosophy professor). It also pays well and is recession-resistant.