3 ms·

> Our logs confirm You retain all logs back through to (at least) March 2023?

by justinclift 17d ago

ErroneousBosh 17d ago
You don't? For some stuff, I've got logs going back to 1993...
- bdcravens 17d ago
  Many companies only keep logs as long as they're legally required to. It can't be discoverable if it doesn't exist ...
  - indymike 17d ago
    > It can't be discoverable if it doesn't exist ... This cuts both ways. I've seen plenty of litigation go south because one side had evidence and the other side had nothing because they deleted/shredded/lost the proof.
  - ErroneousBosh 17d ago
    > It can't be discoverable if it doesn't exist ... That's great, and for some things the court can ask you "Well *why* haven't you got it?" and then you're fucked. Now you're explaining in front of a parliamentary committee why you destroyed what would turn out to be evidence.
    - AdamJacobMuller 17d ago
      "Our standard process is to only retain logs when legally required to, either due to being notified about a litigation or through legally mandated periods" is a fully complete sentence. Unless you're required to retain logs for some reason like a litigation hold or legally or contractually mandated retention period and you violate those, while the adversarial party might be annoyed at you for not retaining logs there isn't much they can or will do beyond being annoyed. Of course if you destroy logs after being notified of litigation or inquiry, you're gonna have a bad day.
      - ErroneousBosh 17d ago
        > "Our standard process is to only retain logs when legally required to, either due to being notified about a litigation or through legally mandated periods" is a fully complete sentence. And for some of that, the "legally mandated period" is "since the beginning of time itself".
    - bdcravens 17d ago
      If you automatically delete everything after the statutory retention period, you're fine. If you conditionally do so, that's when you have explaining to do.
      - ErroneousBosh 17d ago
        You're not fine, you're in the shit and have deleted the evidence that says it was someone else's problem all along.
- shaunpud 17d ago
  > For some stuff, I've got logs going back to 1993... Find anything?
- justinclift 15d ago
  Most places I've worked in the last few years don't have logs greater than 12 months, and some even only retain logs for 1-3 months. Apart from specific 7+ year legally mandated systems for things like financial records.

> Our logs confirm You retain all logs back through to (at least) March 2023?

ErroneousBosh 17d ago

You don't? For some stuff, I've got logs going back to 1993...

bdcravens 17d ago
Many companies only keep logs as long as they're legally required to. It can't be discoverable if it doesn't exist ...
- indymike 17d ago
  > It can't be discoverable if it doesn't exist ... This cuts both ways. I've seen plenty of litigation go south because one side had evidence and the other side had nothing because they deleted/shredded/lost the proof.
- ErroneousBosh 17d ago
  > It can't be discoverable if it doesn't exist ... That's great, and for some things the court can ask you "Well *why* haven't you got it?" and then you're fucked. Now you're explaining in front of a parliamentary committee why you destroyed what would turn out to be evidence.
  - AdamJacobMuller 17d ago
    "Our standard process is to only retain logs when legally required to, either due to being notified about a litigation or through legally mandated periods" is a fully complete sentence. Unless you're required to retain logs for some reason like a litigation hold or legally or contractually mandated retention period and you violate those, while the adversarial party might be annoyed at you for not retaining logs there isn't much they can or will do beyond being annoyed. Of course if you destroy logs after being notified of litigation or inquiry, you're gonna have a bad day.
    - ErroneousBosh 17d ago
      > "Our standard process is to only retain logs when legally required to, either due to being notified about a litigation or through legally mandated periods" is a fully complete sentence. And for some of that, the "legally mandated period" is "since the beginning of time itself".
  - bdcravens 17d ago
    If you automatically delete everything after the statutory retention period, you're fine. If you conditionally do so, that's when you have explaining to do.
    - ErroneousBosh 17d ago
      You're not fine, you're in the shit and have deleted the evidence that says it was someone else's problem all along.
shaunpud 17d ago
> For some stuff, I've got logs going back to 1993... Find anything?
justinclift 15d ago
Most places I've worked in the last few years don't have logs greater than 12 months, and some even only retain logs for 1-3 months. Apart from specific 7+ year legally mandated systems for things like financial records.