Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> The real answer is: just fucking use email.

I know of at least one large company that forcibly deletes emails older than N months, as part of their legal retention policy. (I'm assuming it means non-retention to limit exposure to lawsuits.)

That would be problematic for persistent documentation.



I'm willing to bet money that for every company that deletes emails older than some age also deletes Slack messages, and deletes then sooner.

I speak as someone who worked for a company where email got archived and then deleted after 6 months, and currently works at a company where everyone only uses Slack, and Slack is purged after 30 days.


Our email has a 90 day retention window, and Slack is permanent. We're the largest in our industry.


Isn't that just a company policy? At some-point, the lawyers will get clued-in and require that even on Slack and other company-wide chat there be a limited retention window!


Cool! Where should I send bet money?


Mozilla or EFF, your choice. :-D


Excellent, $25 sent to EFF!


Do the people who wrote the email policy know that Slack is permanent? That sounds like the kind of thing that could easily be not-understood by legal.


Yeah this policy mismatch definitely seems like a "nobody in legal has noticed yet".

They're gonna notice real quick the next time they get sued by somebody clueful enough to subpoena that goldmine.


Have your Slack chats been subpoenaed yet?

If not, you are very lucky that you are being sued by people with incompetent attorneys.


That sounds like a pathological case. How many companies actually do that?


Many, at least in the US. It's not just companies, government agencies also have similar needs due to sunshine and open-access laws.

The alternative to having a document retention policy is to just have employees delete things in an arbitrary manner. It's not just CYA for leaving inconvenient doc lying around, it's also to ensure the proper retention in the event of a preservation order or public records request.

Some companies go way further than others. One place I worked included "notes of a personal nature (eg, birthday cards)" in the retention policy and let us keep them for a week or two before destruction.


That's weird, my company has the opposite policy. Nothing can be deleted. Employees can delete emails on their side, but the server keeps a copy of every email indefinitely in a "vault". That's for legal purposes apparently.


Most Fortune 500 companies have a document retention policy that every employee needs to read the generic training video/documents on when getting hired and agree to.

This sets a general policy of deleting documents/emails/etc after $X days. This is really a CYA policy to purge old conversations if a big lawsuit comes down asking for document retention in relation to some scandal, and if its older than $X days you're covered since your standard legal process was followed.


Also depending on industry you may by law need to delete things.


What is CYA in CYA policy?


cover your ass.


Usually that varies by legal department.

Attorneys who sue or investigate people for a living want everything forever, and those who get sued want to delete email before it arrives.

Email is a great way to get in trouble, as people tend to say dumb things, even about things that they have nothing to do with!


If they do store persistent documentation in emails, the problem lies somewhere between the chair and the keyboard.

Actually, forced deletion - if users are aware of it of course - is likely to sanitize everyone's practice. Email ain't a backup tool.

That's symptomatic of people doing the most silly things and then blame the failures on their tools.


The legal retention policy itself looks persistent. How is it documented?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: