This base is covered too

Posted Jul 14, 2008 10:51 UTC (Mon) by paulj (subscriber, #341) [Link]

For a business difference is not so big: you must keep a lot of logs anyway (or else you can be sued) so it does not matter who and where keeps the logs.

That's contrary to my experience of medium to large scale corporates: Smart business keep as *few* logs as are required by either legislation or business needs precisely to avoid problems if they're sued.

Perhaps you havn't yet worked for a company that's been subject to a "dumpster diving" order, allowing a 3rd party to trawl through all recorded memos, documents and emails looking for evidence. Such companies may, on legal advice, institute policies to *minimise* records kept (e.g. requiring employees to delete emails upon certain conditions, e.g. time since arrival). A lot of the SarBox work in companies has been precisely about that, despite one of the purposes of SarBox being to require good, corporate, record-keeping.