BACKUP AND DISASTER RECOVERY
Email retention policy: A step-by-step approach
Bill Tolson
08.29.2006
Rating: -4.00- (out of 5)
Email retention tip: Bill Tolson outlines the steps you should take to create an effective records retention policy for your organization's email.
A SearchStorage.com reader recently asked: Can you offer a step-by-step approach to creating a records retention policy for email? What are the most important things to consider?
When creating a records retention policy for your company's email, you need to take several things into consideration.
First, the mistake most companies make when creating an email retention policy is not involving all areas of the company in the construction/review process. An email retention policy is not just a legal document, it will effect employee productivity company-wide. So, the first step is to create a policy group with representatives from all major areas of the company. It is important that you understand how employees use the email system. Do they create their own personal archives? How often do they reference old emails? Understanding these things will ensure you don't put in place procedures that will adversely affect employee productivity.
Second, you need to understand what regulatory or legal factors you are subject to. Is your company in a heavily regulated industry that has existing data retention requirements? For example, banks and other financial institutions have data retention requirements under the Gramm-Le
To continue reading for free, register below or login
To read more you must become a member of SearchStorage.com
ach-Bliley Act, brokers and traders have data retention requirements under the SEC and NASD regulations, hospitals and other medical institutions need to worry about regulations under HIPAA and all publicly traded companies in the U.S. have data retention requirements under Sarbanes-Oxley. These regulations all have retention requirements which include email. Legal considerations mainly revolve around your company's current legal status, i.e., are you in the midst of a court case which could include discovery of company email. It is always best to have an email retention policy in place before legal proceedings.
Third, you need to decide how you will enforce the policy. Are you planning to put an automated email archiving system in place, or will you rely on manual procedures? If you will rely on manual procedures, you will need to include step-by-step email retention instructions that employees can follow and employee training to ensure the policy enforcement. In most cases, an automated email archiving system will ensure policy enforcement and raise employee productivity.
Also, you must communicate the new policy to the employees. Employee communication and training can lower your compliance and legal liability.
Lastly, a good email retention policy should have the following topics:
Do you know…
The benefits of CAS for email archiving?
|
|
Rate this Tip
|
To rate tips, you must be a member of SearchStorage.com.
Register now
to start rating these tips. Log in if you are already a member.
|
DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.
|
|
|
|
|
|
|
