Skip to main content
SolarWinds MSP
  • Login
  • Support
  • Partnerships
    • Partnerships Overview
    • Solution Provider Program
    • Technology Alliance Program
    • Distributor Program
SolarWinds MSP
  • Products
    • SolarWinds N-central Automate what you need. Tackle complex networks. Try this remote monitoring and management solution built to help maximize efficiency and scale.
    • SolarWinds RMM Start fast. Grow at your own pace. Try this powerful but simple remote monitoring and management solution.
    • SolarWinds EDR Defend against ransomware, zero-day attacks, and evolving online threats with Endpoint Detection and Response
    • SolarWinds Backup Manage data protection for servers, workstations applications, documents and Microsoft 365 from one SaaS dashboard.
    • Mail Protection & Archiving Protect users from email threats and downtime.
    • Password Management Easily adopt and demonstrate best practice password and documentation management workflows.
      • Passportal Demo
    • PSA & Ticketing Manage ticketing, reporting, and billing to increase helpdesk efficiency.
    • Remote Support Help support customers and their devices with remote support tools designed to be fast and powerful.
  • Solutions

    I'm looking for...

    • Security Solutions
    • Monitoring Solutions
    • Efficiency Solutions
  • Resources
    • Blog
    • Webcasts & Events
    • Ask the N-central Experts
    • Daily Live Demos
    • RMM Foundations Training
    • Upcoming Events
    • Upcoming Webcasts
    • Resource Center
    • COVID-19 Resources
    • Resource Library
      • Case Studies
      • Product Information
      • eBooks
      • White Papers
      • Infographics
    • SolarWinds MSP Free Tools
    • GDPR Resource Center
    • Security Resource Center
    • MSP Institute Webinar Series
    • MSP Advice Project
  • About
    • Contact
    • Customer Success
    • Worldwide sales and support
    • Careers
    • Awards and Recognition
    • Get A Quote
    • Newsroom
      • Press Releases
      • In The News
      • Media Contacts
      • COVID-19 Response
    • Leadership Team
    • Legal
      • Cookie Policy
      • Privacy Notice
      • Software Services Agreement
      • Terms of Use
      • Backup Fair Use Policy
    • Security
      • SolarWinds Security Statement
      • Vendor Data Protection Requirements
    • Support
  • IT Departments
  • Contact Sales
    • Get A Quote
    • General Inquiry
  • TRY NOW
    • SolarWinds RMM
    • SolarWinds Backup
    • MSP Manager
    • SolarWinds Passportal
    • SolarWinds N-central
    • SolarWinds Mail Assure
    • SolarWinds Risk Intelligence
    • SolarWinds Take Control

Email Retention Policy Examples

The simplicity of email has made it a valuable and indispensable tool for businesses of all shapes and sizes. According to The Radicati Group, "business email will account for over 132 billion emails sent and received per day by the end of 2017." Several different industry sectors have strict data security regulatory requirements, including email retention policies. In this article, we describe several email retention policy examples and explore email solutions IT professionals can rely on to adapt to any organization's policies.

Data Retention and Archiving

choose data protection with LogicNowAs companies increase their dependency on emails for daily communications, more and more of them are asking questions about how to handle this data avalanche.

  • How long must they retain emails?
  • What should they do with emails when they are no longer required for daily business operations?
  • Can emails that are no longer needed be destroyed or must they be archived for long-term retention?

As a managed service provider (MSP), you can answer these questions — and profit from them — by adding email retention services to your collection of client offerings.

Why Do Clients Need Email Retention?

There is a myriad of reasons why clients should — and are often required to — retain emails.

Personnel, human relations and other departments that engage with company employees work with an enormous amount of documents containing sensitive data. Email data in this case can include resumes, employment applications, reference checks, payroll information, drug tests, performance reviews and more.

Because many of these records contain personal identification information, they are subject to a variety of federal and state regulations. Each of these laws and regulations requires records containing personal information to be retained for a specified period of time — many times after the employee leaves the company.

Some examples of additional regulations that will influence an organization's internal email retention policy include:

locks securing the world

  • Gramm-Leach-Bliley Act
    Affects the email and data retention policies financial institutions follow to protect sensitive consumer data
     
  • Health Insurance Portability and Accountability Act (HIPAA)
    Protects the privacy of patient health information, including information that is shared via email
     
  • Payment Card Industry Data Security Standard (PCI DSS)
    Requires "all entities that store, process, and/or transmit cardholder data" to maintain secure data retention according to technical and operational guidelines

Beyond these regulations, organizations are encouraged to retain employee records in the event they should face future litigation.

Companies that comply with federal or state regulation are subject to periodic audits and investigations that may require them to produce emails. A company that is unable to comply with such requests can be deemed as non-compliant and become vulnerable to litigation and penalties.

Email Retention Policy Examples by Industry

Most laws require companies to retain their email from three to seven years. However, best practices recommend consultations with legal experts to determine retention periods. Such consultations should also cover whether an organization must comply with more than one regulation. For example, a hospital might have to adhere to OSHA in its medical facility, HIPAA in its medical records department and Sarbanes-Oxley (SOX) in its finance department.

The following table summarizes certain industries and the corresponding regulation and data retention period.

 

Industry

Regulation

Number of Years

All companies

Internal Revenue Service

7 years

FOIA

3 years

Sarbanes Oxley (SOX)

7 years

Banking and finance

Gramm-Leach-Bliley Act

7 years

Federal Deposit Insurance Corporation (FDIC)

5 years

Biological products, food manufacturers, and pharmaceutical

FDA – Title 21, Part 11

5 to 35 years

Brokers and dealers, insurance agents, investment bankers, and securities firms

SEC 17a(3) and 17a(4)

7 years to lifetime

Credit card and processing companies

PCI DSS

1 year

DOD contractors

DOD 5015.2

3 years

Healthcare

HIPAA

7 years

Investment advisers

SEC 204-2

7 years

Telecommunications

FCC (Title 47, Part 2)

2 years 

 

A Compelling Reason for Automated Email Retention

When it comes to retaining emails, companies are faced with the dilemma of whether to handle this requirement manually or automatically.email security button in red

Adopting a manual email retention policy puts the burden of email retention on users. While this approach may be easy to implement, it is problematic and fraught with holes that become apparent when companies attempt to retrieve critical information. Leaving email retention to employees also reduces productivity by taking employees away from their core job responsibilities.

A better approach for your clients is to adopt an automatic email retention policy using a proven solution. Storing archived email at a central site mitigates the loss of emails that employees delete, either inadvertently or intentionally. IT staff also aren't forced to search to hunt down an important message when it's needed for legal reasons or for an audit.

Email Retention With SolarWinds Mail Assure From SolarWinds MSP (Formerly LOGICnow)

SolarWinds Mail Assure from SolarWinds MSP allows MSPs to support their clients with an email retention tool that conforms to their retention policy. SolarWinds Mail Assure offers industry-leading indexing and searching capabilities that makes it much easier for users to find emails any time they're needed. This can also be done in bulk using date tagging, and retained emails can be exported or forwarded out of the archive securely and with a detailed process log.

Some examples of the email retention features of SolarWinds Mail Assure include:

  • Stores archived email in the cloud and backs it up across geographically distributed data centers in North America and Europe
  • Data centers meet SSAE or ISO regulations while delivering an impressive 99.999% uptime
  • Ensures bullet-proof security by encrypting all email being sent, received and retained in the archive
  • All archived email is compressed during archiving and electronically sealed with a checksum to verify its authenticity and aid legal team in establishing the integrity of messages
  • Platform-agnostic and compatible with all on-premises and cloud-based email infrastructures including Microsoft Office 365 and Google Apps
  • Archived messages can be accessed directly from Microsoft Outlook via a custom plugin
  • Existing emails can be imported to SolarWinds Mail Assure’s archives quickly and easily
  • Supports Microsoft Exchange’s Personal Storage Table (PST) file-storage format as well as mbox and EML formats

Improve Your Client's Retention Practices

If your clients face litigation or compliance issues and immediately need specific email communications and attachments, would you be able to support them? Can you narrow searches to a specific range of dates and then pinpoint the records associated with the matter at hand?

SolarWinds Mail Assure allows you to deliver the industry’s most robust archiving and searching solutions. SolarWinds Mail Assure can be used with other data-protection solutions from SolarWinds MSP to enrich your product offerings and offer clients a layered approach to their IT security requirements.

To experience for yourself these examples of how SolarWinds Mail Assure supports any email retention policy, start your free trial today.

For more information, contact SolarWinds MSP.

----------
Sources:

Radicati Group: www.radicati.com/wp/wp-content

FTC: www.ftc.gov/tips-advice/business-center/privacy-and-security/gramm-leach-bliley-act

CTA Image

SolarWinds Mail Assure

Advanced Threat Protection for Inbound and Outbound Email.

Try It Free Learn More

Related Content

Network Risk Assessment Tools
Network risk analysis should be the bedrock of an MSP's security strategy. Find out how MSP Risk Intelligence from SolarWinds MSP can help.
Remote Access Software
Internal IT departments are expensive. Remote access software like MSP RMM from SolarWinds MSP is a solution for businesses and MSP's alike.
SolarWinds MSP

Products
  • SolarWinds RMM
  • SolarWinds N-central
  • SolarWinds Backup
  • SolarWinds EDR
  • SolarWinds MSP Manager
  • SolarWinds Mail Assure
  • SolarWinds Risk Intelligence
  • SolarWinds Take Control
  • SolarWinds Passportal
  • All Products Use Cases
Solutions
  • Security Solutions
  • Monitoring Solutions
  • Efficiency Solutions
  • Identify which RMM solution is right for me
  • Drive Efficiency with Automation
  • Manage my MSP Business More Efficiently
  • Manage my IT Department More Efficiently
  • Layered Security
  • Cross-Platform Support
  • Data-Driven Insights
About
  • About Us
  • Careers
  • Newsroom
  • Leadership Team
  • Upcoming Events
  • Subscription Preferences
  • SolarWinds
  • SolarWinds Trust Center
  • COVID-19 Response
Support
  • SolarWinds RMM
  • Solarwinds N-central
  • SolarWinds Backup
  • SolarWinds Mail Assure
  • SolarWinds Take Control
  • SolarWinds MSP Manager
  • Solarwinds Risk Intelligence
  • Solarwinds Threat Monitor
  • SolarWinds Passportal
  • SolarWinds Take Control Downloads
  • Backup & Recovery Downloads
  • Service Status

Footer 2

  • Legal Documents
  • Privacy
  • California Privacy Rights
  • Security Information
  • Sitemap

© SolarWinds MSP Canada ULC and SolarWinds MSP UK Ltd.
All Rights Reserved.