Voice Over IP - Retention of Call Content and Call Activity

["Sherry, Cathy" <csherry () UMASSP EDU>]

 I am in the Policy and Risk Management unit within the President's
Office of the University of Massachusetts.  We are investigating some
issues relate to Voice Over IP implementation.  I researched record
retention of VOIP call logs on the Internet and found no current
legislation or best practice in this area.  The European Union wants a 1
year period however this requirement has not passed vote.

 

I reviewed the Massachusetts State Records Retention Schedule and found
no clearly stated retention period for VOIP call log records so I
contacted the Secretary of the Commonwealth - Massachusetts Archive.
The section they referred to (F.4.3) applies to digital renderings so it
does not address our issue.  The only other possible section that could
apply is:

 

   7.3  Voice Mail Correspondence Files

Consists of information and communications sent or received by
individuals connected to voice messaging systems. Records 

include transmission messages.

Retention Period:

Retain until administrative use ceases.

 

Basically, there is no clear retention period either at the federal or
state level.  Legal counsel has suggested we follow the "default state
retention period" of 7 years.  Does anyone know of any best practice or
have an internal policy/standard for the retention of VoIP call logs?
Do you log VoIP call content?  For those of you with experience with
VoIP, how would such a long retention period impact the storing and
maintenance of this data at your sites? Thank you in advance for your
assistance. 

 

 

 

:: Catherine Sherry, Principal Security Specialist
:: University Information Technology Services (UITS)
:: University of Massachusetts President's Office

:: 508-856-1547
:: 508-856-4844 Fax
:: csherry () umassp edu <mailto:csherry () umassp edu> 

University of Massachusetts : 333 South St. : Suite 400 : Shrewsbury, MA
01545 : www.massachusetts.edu <http://www.massachusetts.edu/>