Each STATEMENT element that does not include a NON-IDENTIFIABLE element MUST
contain a RETENTION element that indicates the kind of retention policy that
applies to the data referenced in that statement.
The STATEMENT element is a container that groups together
a PURPOSE element, a RECIPIENT element, a RETENTION element, a DATA-GROUP element,
and optionally a CONSEQUENCE element and one or more extensions.