Educause Security Discussion mailing list archives

Re: Email Archiving


From: "Lorenz, Eva" <evalorenz () UNC EDU>
Date: Wed, 20 Jan 2010 10:51:26 -0500

Brad,
If you have a retention requirement in place, it would affect also non-email records. Retention is based on content, 
not on format.

As a start, check with your General Counsel, as others have already suggested, to determine whether there is a 
retention schedule in place and then determine under which retention requirement email would fall. It is possible that 
email may be subject to a number of retention requirements based on the specific content or that a general "retention 
bucket" would cover email, if the legislature addressed the email format specifically.

A general advice that I received from records managers was, if you keep any email, to always keep the sent email and 
not delete it. A specific retention schedule for your business unit or school is certainly the better way to go.

Retention schedules can be invaluable if you receive discovery or FOIA requests since you can point to the active 
schedule and explain that certain records were disposed off in line with the specific retention requirement. In our 
state (NC), retention schedules are centrally approved by the state (Dept of Cultural Resources) and certain records 
must be archived forever (and I mean forever, no excuses for formats no longer supported etc.)


-       Eva



Eva Lorenz
ITS Security
2800 ITS Manning
211 Manning Dr
CB3420
Chapel Hill NC 27599

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Brad 
Alexander
Sent: Wednesday, January 20, 2010 10:21 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Email Archiving

We are installing a new email system here on campus and my question is, is it a law that we are required to have email 
archiving?

I have been doing a little light reading of the Federal Rules of Civil Procedures and EDiscovery, but now I am more 
confused.

I see that 17 states have adopted the rule and another eighteen states are considering it.  I thought a federal rule 
was mandatory for all states.




IS staff will never ask you for your password. Do not share your password with others.

----------------------
[cid:image001.jpg@01CA99BD.B932E6F0]


Current thread: