On Fri, 11 May 2007 10:42:14 -0400 "Jason Frisvold" <[EMAIL PROTECTED]> wrote:
> > On 5/11/07, Brandon Galbraith <[EMAIL PROTECTED]> wrote: > > My understanding was data you had needed to be turned over when > > requested, but CALEA provides no specification/guidance on log > > retention. > > Agreed. My understanding, to date, is that the data to be turned over > is data collected from the beginning of the CALEA tap. Historical > data can be requested, but I'm not aware of any official legal > guidelines on retention time. > There are no legal requirements on proactive data retention in the US. Gonzales has suggested that there should be one, but at this point it's just that -- a suggestion. I think that at the moment, the odds of Congress enacting a Gonzales proposal are rather low; they'd much rather impeach him than listen to him... There is now an EU requirement on retention, but the EU's jurisdiction rules are, shall we say, complex. --Steve Bellovin, http://www.cs.columbia.edu/~smb