Hacker News new | ask | show | jobs
by css 2307 days ago
This is often not legal. For example, Sarbanes Oxley requires seven years retention for public companies in the US[0]. Depending on industry it can be higher; I believe some financial segments are required to retain email indefinitely.

[0]: https://www.sec.gov/rules/final/33-8180.htm