Creating and Configuring Policies for Document and Records Management

A policy is a set of rules for a specific type of important content.
Policies can be used to control and evaluate

- who can access the information,
- how long to retain the information, and
- when and how to discard information that must be destroyed.

Policies are usually added to lists and document libraries by compliance officers or records managers. Office SharePoint Server 2007 includes predefined policies that non-developers can use for a number of common scenarios, such as records retention, records expiration, and auditing. Office SharePoint Server 2007 also includes policies for document barcodes and official labels.

--Source
Microsoft Elearning