Legal Compliance

UK legislation EU directives US legal requirements

 

EU directives

EU Data Retention Directive

By August 2007 member states must implement the directive which enforces the retention of communication details of emails for not less than six months, and not more than two years. To be compliant with data-protection laws, that information should be held securely.

European politicians are also considering security breach disclosure laws,
similar to American laws in 33 states that require companies to tell everyone
affected by any breaches.

EC Directive 95/46

Requires the safeguarding of any information relating to "an identified or identifiable natural person ("data subject")".