Record Deletion Policy

Our team has been looking into database cleanup and part of that conversation has included the possible deletion of records. I have availed myself of the many thoughtful discussions on the topic of record deletion in the community, but I have a slightly different question I wish to pose to the forum. What I would like to ask is if record deletion is something that you include in your organization's policies and procedures? If so, what does it look like? Does it outline who has the authority to do so and under what checks and balances (if any)? Does it set down the criteria that a record must meet to be deleted? Thank you all for any info and insight you can provide!