Implementing a retention and disposal authority