I presume longer retention policies apply to specific data rather than arbitrary communications. The place I worked with a 90 day deletion was maniacal about adhering to the letter of the law and they didn’t seem broadly concerned about any data that was solely in email.
Well until they went to sue someone else, then they’d grab and freeze all email boxes that ever communicated with the defendant and instruct all parties to immediately forward any email from that party to legal and ignore it.
I presume longer retention policies apply to specific data rather than arbitrary communications. The place I worked with a 90 day deletion was maniacal about adhering to the letter of the law and they didn’t seem broadly concerned about any data that was solely in email.
Well until they went to sue someone else, then they’d grab and freeze all email boxes that ever communicated with the defendant and instruct all parties to immediately forward any email from that party to legal and ignore it.