topic Re: Chat retention in Teams or Slack in Governance, Risk, Compliance

Chat retention in Teams or Slack

4d4m — Mon, 09 Oct 2023 09:33:32 GMT

Does anyone have a custom policy on how long chat is retained/deleted for tools like Teams and Slack that they are willing to share.

The default in most tools now is to retain indefinitely.

On the one hand it can be useful in a project to keep persistent chat to refer back to, on the other hand this may cause legal issues if kept for too long or cause contractual issues around data retention.

Just wondered if anyone has landed on a happy medium!

Thanks

Re: Chat retention in Teams or Slack

Lamont29 — Thu, 25 Jun 2020 15:07:57 GMT

Hi,

It appears that that should be a part of and follow the organization's data retention policies and de jure standards.That would be my directive, unless there's more information about it that you'd like to share.

Re: Chat retention in Teams or Slack

4d4m — Thu, 25 Jun 2020 15:53:18 GMT

Thanks, yes, that is the default position.

But, I was wondering if anyone was keeping chat for much shorter periods than say email?

Re: Chat retention in Teams or Slack

Lamont29 — Thu, 25 Jun 2020 17:22:40 GMT

My thoughts are that there would be no 'industry standard' pertaining to
how long information is kept. You can reference GDPR or CCPA, select the
most rigid standard and go from there. But I would assume that you'd take
the information from your security assessment, query the company executives
and let that information be your guide.

Lamont

Re: Chat retention in Teams or Slack

brucebeam — Thu, 25 Jun 2020 17:36:54 GMT

I have been at companies with zero retention which can be painful for the end-user and blessing for the legal / discovery teams. I think finding the balance while working with your legal and compliance teams is a key factor. If you do not have a starting point, I would recommend mirroring email retention policies to keep it clean.

Re: Chat retention in Teams or Slack

denbesten — Fri, 26 Jun 2020 03:16:27 GMT

My employer expires emails after 3 years and chats after a month. These intervals were decided by legal, entombed in written policy and implemented by I.T.

We are now considering that Teams, with its persistent chat conversations might need a retention period between these two extremes.