This is often not legal. For example, Sarbanes Oxley requires seven years retention for public companies in the US[0]. Depending on industry it can be higher; I

This is often not legal. For example, Sarbanes Oxley requires seven years retention for public companies in the US[0]. Depending on industry it can be higher; I believe some financial segments are required to retain email indefinitely. [0]: https://www.sec.gov/rules/final/33-8180.htm https://www.sec.gov/rules/final/33-8180.htm