Industry standards for data retention

Industry standards for data retention

After reading Bill Oliver's answer to the question, "What are the average industry standards for the length of time data/tape are stored off site? Do we keep a quarter, a month, etc. I understand it's different based on your business but just as a general guideline...," I would like to know WHERE online may I find posted individual state and/or federal regulations for data retention.

    Requires Free Membership to View

    When you register for SearchStorage.com, you’ll also receive targeted emails from my team of award-winning editorial writers. Our goal is to keep you informed on the hottest topics, the latest news and the biggest challenges you face as a storage professional today.

    Rich Castagna, Editorial Director

    By submitting your registration information to SearchStorage.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchStorage.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

Unfortunately, I have to concur with Mr. Oliver. One of the major challenges many backup and storage administrators face on a regular basis is the absence of an organized and central repository for this type of information. A simple Web search using the words "federal data retention guidelines" shows numerous choices among which for example, a 139-page document called "Records Management Guidelines for Law Enforcement Agencies" ... for the state of Washington alone!

There are acts, laws, rules, policies and guidelines. Some are regulated at the federal or state government level or per agencies; others are SEC driven for example. To make matters worse, some rules dictate when you CAN dispose of data and others, when you MUST dispose of data (privacy).

The problem remains that there is no "one-stop shopping" for this type of information. The only way to narrow down your search is by focusing on the type of business your organization is in and the type of data you are enquiring about. There are books available on the subject but you must make sure you consult one that was written recently as things change fast. Many find it useful to seek legal counsel when they are concerned about the legal requirements and particular nature of the data that they want to store (or delete).

This was first published in March 2005