(6-10-04) It’s 2004, Do You Know Where Your Data Is?. "In an era of diminishing trust and public skepticism, regulations are being en-forced with greater vigor to enable regulatory authorities to accurately reconstruct past processes and events from electronic records. These sweeping initiatives are being targeted throughout the economy, with some regulations focusing on securities broker-dealers, pharmaceutical companies, healthcare organizations, major manufacturers, and public corporations with more than $75 million in market capitalization. Legislation now requires many of these U.S. organizations to retain certain records in a way that prevents them from being erased or modified for substantial time periods, sometimes 30 years or more. Steps must also be taken to prevent records from being accessed by those without authorization. Some of these regulations, like those based on the Sarbanes-Oxley law, are new. Others, such as SEC regulations applying to broker-dealers, have existed in one form or another since the 1930s. However, the common themes are broader regulatory purview over more types of records and substantially strengthened enforcement. The main thrust behind strengthened records-retention regulations is the government’s desire to maintain an exact record of past activities to order to improve corporate governance, protect investors, enhance national security, ensure the safety of new drugs or medical devices, and modernize medical care while protecting patient privacy."
Comment: Document retention requirements for all industries is becoming the norm.