New Federal Rules of Civil Procedure

Companies are required to keep all relevant information,including all emails, whenever there is pending litigation or even potential litigation

HIPAA

All patient records must be retained in a physically or electronically secure repository Patient records must be retained for at least 6 years Some hospitals are electing to keep all patient records cradle to grave

Sarbanes-Oxley

The recommendations for public corporations is to retain all documents and emails. Company officers may be in violation if IT security is being handled in a slipshod way.