As a records manager, I have no problem with keeping email with valuable content as long as it is useful, but way keep a decade plus of all that other "stuff" that has no value? When litigation comes (and it will come) someone will have to sort through all of it when and search tools are only of limited use. Besides, while storage itself may be "cheap" (debatable), the cost of supporting that storage is not. At 25+ terabytes and counting, I know that many of my legal department colleagues and I are looking forward to some serious deletion.
Latest security headlines from Network World:
Browser war redux, patch time, iPod news
Libertarian Barr, EPIC outline privacy agenda
Microsoft to release four critical patches
|
Does Verizon's Voyager stack up to the iPhone? |
|
|
5 IT skills that won't boost your salary
[1,407]
Women 4 times more likely than men to cough up personal info
[589]
Japan's 10 funniest tech-related commercials [Videos]
[407]
Throwing away a promo CD is "unauthorized distribution"?
[1,265]
Adults too quick to dismiss educational video games
[682]
Attack of the iPhone clones [Slideshow]
[578]
10 things IT needs to know about AJAX
[1,258]
This Year's 25 Geekiest 25th Anniversaries [Slideshow]
[409]
|
|
But the eDiscovery Costs!
As a records manager, I have no problem with keeping email with valuable content as long as it is useful, but way keep a decade plus of all that other "stuff" that has no value? When litigation comes (and it will come) someone will have to sort through all of it when and search tools are only of limited use. Besides, while storage itself may be "cheap" (debatable), the cost of supporting that storage is not. At 25+ terabytes and counting, I know that many of my legal department colleagues and I are looking forward to some serious deletion.
eDiscovery costs
There are really three issues here: 1) policies need to be created to determine what needs to be kept and what can safely be deleted, 2) good spam filtering tools need to be implemented to make sure that spam doesn't get archived, and 3) good archiving tools need to be deployed to make sure that your data gets stored properly and can be accessed.
Many companies have found that their archiving solutions either were not scalable enough to index all of the data they need to preserve and/or that searches take too long. That's why it's important to spec a system properly based on anticipated long term storage requirements and to make sure that the search capabilities won't result in superfluous data being produced.
Also, most data does not need to be kept for a decade or longer. Some content can safely be deleted after much shorter periods, although legal counsel (and regulators in some cases) will be able to advise on retention periods for specific data types.
Messages other than eMail?
Could you please comment on things like Voice Mail and Fax? In many systems these are now attachments to eMails....or are purposely kept separate "so we don't need to retain them". Doesn't the Federal Rules for Civil Procedures treatment of ESI make that "keep it separate" thinking dangerous for all the same reasons you've discussed here in regards to eMail? I'd love to see you address this topic at some point! Thx
All ESI must be retained
You're exactly right. Any electronicallly stored information -- voicemails and faxes included -- should be retained for discovery purposes. While a judge could rule that voicemails, for example, don't need to be included as part of a discovery order, he or she could rule that if they're stored electronically they are subject to review.
Best Practices
There is no valid reason to keep ESI longer than necessary for a) business purposes and b) legal or regulatory requirements. Implementing an automatic delete policy (60 days to 365 days) is a sound business practice. Email is a communication tool--not a business records repository in most businesses.
In addition to the cost of storage and archiving software (read the blog as an advertisement) you must consider that if litigation occurs someone (read lawyers as several hundred $$ per hour) are going to have to sift through all of that email to determine whether it is relevant to the lawsuit (or worse, the DOJ investigation).
All of those emails and IMs that would have been telephone calls in the past ("Want to go to lunch, now." "Sorry, can't make it yet." Etc.) are clogging up your servers and costing you dearly when the eventual lawsuit gets filed.
It's about content...
To minimize an organization's risk in retaining email (and any other records, paper or electronic), organizations should manage all records based on the content of the record. Records retention policies should be created based on this record content, and followed consistently regardless of the media format. When a record has reached the end of its life cycle, that record should be destroyed in the normal course of business. Courts look favorably on organizations that manage their records based on this content approach, versus managing records haphazardly, based on which media format it happens to be stored in.
Keeping email for very short time periods or very long term periods is not the answer. The question that needs to be asked is what is the value (legal, regulatory, business need) of the records content, and then manage accordingly.
Electronic records management systems (ERMS) are available to help organizations manage the retention of their records using this content approach. There is also a national (ANSI) standard and technical report dedicated to this subject: "Requirements for Managing Electronic Messages as Records" (ANSI/ARMA 9-2004) and "Procedures and Issues in Managing Electronic Messages as Records" (ANSI/ARMA TR-02-2007).
Kevin Joerling, CRM
Sr. Manager, Standards & Records Management
www.arma.org
Improving e-records
As businesses create ever-growing mountains of electronic records, lawsuits fight over the records in e-discovery and record retention disputes. Knowing that litigation is inevitable, businesses can use technology proactively to render the records potentially more benign. --Ben http://hack-igations.blogspot.com/2008/05/nix-smoking-gun-e-discovery.html
shesanice
i'd like to retrieve if possible old e-mail from this subject pls