@Carnival-Boy said in Backing up Office 365 mailboxes:
Has anyone been involved in an e-discovery action?
I have never implemented an e-mail retention policy. I really should. A quick Google brings up this document https://www.theemaillaundry.com/wp-content/uploads/2015/07/Email_Retention_UK.pdf, which says:
Is your company in a heavily regulated industry that has existing data retention requirements? Outside of regulations
governing certain industries, the answer is usually a bit nebulous in terms of defining clear retention periods. In the US For
SEC- and FINRA-regulated firms, Rule 17a-4 of the Securities and Exchange Act requires retention of emails for at least three
years, with the first two years stored in an easily accessible place. In the UK the Financial Services Authority (FSA) regulates
financial services providers. The FSA's regulations require all financial institutions to store all business emails sent and
received for up to six years, and some emails indefinitely, so that cases can be reviewed.
But outside of financial services, there is no universal law for document retention. The only far-reaching requirement is to
preserve documents, emails and information when a company is on notice of pending litigation (per FRCP(US) CRP(UK)). At
this point, a “litigation hold” must be implemented to retain information the company reasonably believes is discoverable in
anticipated litigation. However, email retention requirements vary from industry to industry and from case to case.
I'm in Manufacturing, which doesn't appear to be regulated. I believe any retention policy should centre around less is more, ie delete as much e-mail as you can legally get away with to reduce your exposure during e-discovery. So on those grounds, I think I should be actively NOT backing up e-mail and should NOT use GFI to archive e-mail or purchase licences for O365 legal hold. I believe O365 retains deleted mail for a maximum of 30 days which covers you for accidents and malware but not much else.
Then again, should I be losing any sleep over this when the next President of The US gets away with just using Hotmail?
Any views?
That's pretty much my feelings on it. I think our retention here is two years. At which point it auto-deletes!