Skip to main content
SolarWinds MSP
  • Login
  • Support
  • Partnerships
    • Partnerships Overview
    • Solution Provider Program
    • Technology Alliance Program
    • Distributor Program
SolarWinds MSP
  • Products
    • SolarWinds N-central Automate what you need. Tackle complex networks. Try this remote monitoring and management solution built to help maximize efficiency and scale.
    • SolarWinds RMM Start fast. Grow at your own pace. Try this powerful but simple remote monitoring and management solution.
    • SolarWinds EDR Defend against ransomware, zero-day attacks, and evolving online threats with Endpoint Detection and Response
    • SolarWinds Backup Manage data protection for servers, workstations applications, documents and Microsoft 365 from one SaaS dashboard.
    • Mail Protection & Archiving Protect users from email threats and downtime.
    • Password Management Easily adopt and demonstrate best practice password and documentation management workflows.
      • Passportal Demo
    • PSA & Ticketing Manage ticketing, reporting, and billing to increase helpdesk efficiency.
    • Remote Support Help support customers and their devices with remote support tools designed to be fast and powerful.
  • Solutions

    I'm looking for...

    • Security Solutions
    • Monitoring Solutions
    • Efficiency Solutions
  • Resources
    • Blog
    • Webcasts & Events
    • Ask the N-central Experts
    • Daily Live Demos
    • RMM Foundations Training
    • Upcoming Events
    • Upcoming Webcasts
    • Resource Center
    • COVID-19 Resources
    • Resource Library
      • Case Studies
      • Product Information
      • eBooks
      • White Papers
      • Infographics
    • SolarWinds MSP Free Tools
    • GDPR Resource Center
    • Security Resource Center
    • MSP Institute Webinar Series
    • MSP Advice Project
  • About
    • Contact
    • Customer Success
    • Worldwide sales and support
    • Careers
    • Awards and Recognition
    • Get A Quote
    • Newsroom
      • Press Releases
      • In The News
      • Media Contacts
      • COVID-19 Response
    • Leadership Team
    • Legal
      • Cookie Policy
      • Privacy Notice
      • Software Services Agreement
      • Terms of Use
      • Backup Fair Use Policy
    • Security
      • SolarWinds Security Statement
      • Vendor Data Protection Requirements
    • Support
  • IT Departments
  • Contact Sales
    • Get A Quote
    • General Inquiry
  • TRY NOW
    • SolarWinds RMM
    • SolarWinds Backup
    • MSP Manager
    • SolarWinds Passportal
    • SolarWinds N-central
    • SolarWinds Mail Assure
    • SolarWinds Risk Intelligence
    • SolarWinds Take Control
  • Request a Quote
  • Try Now
    • SolarWinds RMM
    • SolarWinds N-central
    • SolarWinds Backup
    • MSP Manager
    • SolarWinds Mail Assure
    • SolarWinds Passportal
    • SolarWinds Risk Intelligence
    • SolarWinds Take Control
Request quote
Filter Blogs
  • Filter by:
  • MSP Business
    • Automation
    • Backup & Disaster Recovery
    • Security-series
    • Best Practices
    • Business
    • Business Growth
    • Business Risk
    • Cloud Computing
    • Customer Service
    • Cybersecurity
    • Cybersecurity Awareness Month
    • Data
    • GDPR
    • Internet of Things
    • IT Support
    • ITSM
    • LOGICcards
    • Machine Learning
    • Mail
    • Managed Services
    • Marketing
    • Mobile
    • Networking
    • Operations
    • Podcast
    • Product
    • PSA
    • Remote Management
    • Research & Trends
    • Risk Intelligence
    • Security
    • Security Vlog
    • Service Desk
    • Services & Support
    • The Head Nerds
    • Tips & Advice
    • Training
Home Blog MSP Business Your guide to email archiving under UK law
MSP Business

Your guide to email archiving under UK law

By Danny Bradbury
12 November, 2015

Email archiving and e-discovery isn’t just a technical challenge. Laws, regulations, and industry best practices set a complicated framework of guidelines and rigid rules that organizations must adhere to when retaining email records. What laws and regulations should UK companies reference when creating a corporate email retention policy, and how will the rules affect their strategies?

In the UK, there are no general cross-sector rules for how long email should be retained, unless you are in an industry that is affected by some specific legislation or heavily regulated by an industry body. Thanks to EU law, the telecommunications industry falls under the former.

The telecoms sector

TelecomsIn the communications sector, telephony, SMS, email, and web data must be retained under the EU Data Retention Directive. It stipulates a 12-month retention period for internet email (along with Internet access and telephony records) but it is important to note that it applies only to metadata. Communications companies must store data necessary to trace the source and destination of an email, and the date and time it was sent, as part of their email retention policy.

Significantly, this Directive was struck down by the European Court of Justice, but the UK law implementing it, called the Data Retention (EC Direction) Act of 2009, still stands.

The UK Government subsequently attempted to address this with the Data Retention and Investigatory Powers Act (Dripa) 2014, but this was struck down as unlawful by the High Court in July 2015. Currently, the UK government is set to introduce the Draft Communications Data Bill, widely expected to enforce an equivalent or higher email retention policy on communications companies.

Freedom of information

Edisovery1Government departments are regulated by the Freedom of Information Act, which doesn’t dictate specific archiving times as part of an email retention policy, but does require departments to set a clear retention and destruction schedule under the Lord Chancellor’s Code of Practice on the management of records.

In professional sectors where companies are heavily regulated, different rules will apply depending on the industry. For example, the Solicitors Regulation Authority requires a wide variety of records to be kept for six years, including records of transactions and commissions.

In the financial sector, an email retention policy must make emails available for six years, according to the Financial Conduct Authority.

In the UK, the Civil Procedure Rules make it possible to bring a claim for breach of contract within six years, and they also require companies to be ready for e-discovery for electronic records including email. This alone should encourage a healthy corporate email retention policy.

Data protection

DataProtectionFinally, it’s worth considering what requirements apply to email that you have retained, whether you needed to or not. The Data Protection Act (DPA) 1998 asks organizations only to retain personal data (which would include emails referring to individuals) for as long as absolutely necessary.

The Act also allows people to request copies of any personal data held about them, which includes emails referring to them. If requested, a company has 40 days to comply. This is one reason to consider a forced deletion policy if email archiving is not regulated or needed.

All of these rules create legal and compliance risks for companies, but can also be useful tools to help reduce risk if companies comply. Organizations building an email retention policy should get technology experts, legal counsel and compliance officers together in the same room to create a binding policy that will protect them.

You might also like...
MSP Business

What to do when your customer's Office 365 service goes down

MSP Business

Grow your MSP business with strategic alliances and partnerships

MSP Business

The smart MSP's guide to Service Level Agreements

MSP Business

Saying goodbye: How to handle losing a client

MSP Business

Talking money: Three ways to uncover a client's budget

MSP Business

Costing your labor - The importance of accurate staffing costs

Want to stay up to date?

Get the latest MSP tips, tricks, and ideas sent to your inbox each week.

Loading form....

If the form does not load in a few seconds, it is probably because your browser is using Tracking Protection. This is either an Ad Blocker plug-in or your browser is in private mode. Please allow tracking on this page to request a subscription.

Note: Firefox users may see a shield icon to the left of the URL in the address bar. Click on this to disable tracking protection for this session/site

Recent Posts
  • What the Head Nerds Were Up to in 2020
  • RMM and PSA Tools: How to Make the Most of Both
  • How to Empower an IT Help Desk Team for Success
  • Six Tips That Will Make Managing Your MSP Company Easier
  • January 2021 Patch Tuesday: One Actively Exploited Vulnerability and a Few Likely to Be
Categories:
  • Security (230)
  • Tips & Advice (122)
  • Best Practices (94)
  • Managed Services (86)
  • Backup & Disaster Recovery (83)
  • The Head Nerds (75)
  • Business Growth (75)
  • IT Support (42)
  • Business (39)
  • Automation (37)
  • Cybersecurity (37)
  • Operations (34)
  • Mail (33)
  • Remote Management (28)
  • ITSM (25)
  • Cloud Computing (21)
  • Networking (21)
  • Data (21)
  • Marketing (14)
  • Product (11)
  • PSA (11)
  • Service Desk (5)
  • Services & Support (5)
  • Mobile (4)
  • Risk Intelligence (4)
  • Customer Service (3)
  • Internet of Things (3)
  • GDPR (2)
  • Research & Trends (2)
  • Training (2)
  • LOGICcards (1)
  • Business Risk (1)
Show moreless
SolarWinds MSP

Products
  • SolarWinds RMM
  • SolarWinds N-central
  • SolarWinds Backup
  • SolarWinds EDR
  • SolarWinds MSP Manager
  • SolarWinds Mail Assure
  • SolarWinds Risk Intelligence
  • SolarWinds Take Control
  • SolarWinds Passportal
  • All Products Use Cases
Solutions
  • Security Solutions
  • Monitoring Solutions
  • Efficiency Solutions
  • Identify which RMM solution is right for me
  • Drive Efficiency with Automation
  • Manage my MSP Business More Efficiently
  • Manage my IT Department More Efficiently
  • Layered Security
  • Cross-Platform Support
  • Data-Driven Insights
About
  • About Us
  • Careers
  • Newsroom
  • Leadership Team
  • Upcoming Events
  • Subscription Preferences
  • SolarWinds
  • SolarWinds Trust Center
  • COVID-19 Response
Support
  • SolarWinds RMM
  • Solarwinds N-central
  • SolarWinds Backup
  • SolarWinds Mail Assure
  • SolarWinds Take Control
  • SolarWinds MSP Manager
  • Solarwinds Risk Intelligence
  • Solarwinds Threat Monitor
  • SolarWinds Passportal
  • SolarWinds Take Control Downloads
  • Backup & Recovery Downloads
  • Service Status

Footer 2

  • Legal Documents
  • Privacy
  • California Privacy Rights
  • Security Information
  • Sitemap

© SolarWinds MSP Canada ULC and SolarWinds MSP UK Ltd.
All Rights Reserved.