Case Study: Verra Mobility achieves defensible, centralized data management and retention with Exterro

Laying the Foundation for Defensible Data Management and Retention

Verra Mobility, a global smart-transportation company, faced a rapidly evolving compliance landscape after going public and growing through acquisitions. Its legacy retention policies hadn’t kept pace with GDPR, CCPA/CPRA and other jurisdictional rules, leaving Verra over-retaining sensitive records (including DMV and fleet data), exposed to DSAR obligations and security risk. Leadership tasked its compliance and IT teams with building a defensible, business‑purpose‑driven data inventory and retention program.

Working with legal counsel Squire Patton Boggs and technology partner Exterro, Verra interviewed 135 custodians, created a records‑type master list and a retention schedule tied to business purpose and regulation, and implemented a centralized Exterro solution. The result: an operational retention program that handles anonymization, DSAR retrieval, jurisdictional customization and audit trails, scales through acquisitions, reduces legal and security risk, and embeds an annual review process and cultural shift away from unnecessary data hoarding.

Verra_Mobility

Paul Richardson

Director of Contracts and Compliance