The acts that demand effective storage of email include Electronic Communications and Transactions Act (ECT Act), the Regulation of Interception of Communications and Provision of Communications-Related Information Act (Interception Act), the Financial Advisory and Intermediary Services Act (FAIS), National Archives of South Africa Act and the Companies Act.
In addition, The King II report, which guides South African companies on what constitutes good corporate governance, requires companies to identify and mitigate risk.
The challenges are vast and include the cost of storing millions of emails in a way that doesn't erode the integrity of the mail, the infrastructure to retrieve and archive the emails and the people to manage it all. This isn't just about a few servers down in the data room. It's become about making sure that every email is one ‘search phrase' away.
There are a few things that companies can do to get it right.
Automate as much as possible. Expecting users to take responsibility for archiving is just setting you and your staff up for failure and a mountain of written warnings.
If the email has been changed in any way, its power as a piece of evidence is eroded. Using immutable storage together with encryption technology can ensure that a ‘forensically sound' copy can be sourced. This is vital in any legal situation, where the only piece of evidence between your company and a hefty fine is one small email.
Store the email in a way that makes it easy to search for. We have heard horror stories from clients where it has taken seven straight days to locate one email because it was all stored on tapes which required a person to physically go through data on each and every tape.
Remember to inform your staff that every email is going to be stored, archived and saved for 10 years. The communication has a few positive outcomes:
Correctly managing your company's communication can only benefit the business, and considering that up 80% of an organisation's fresh intellectual property (IP) can be found in its emails, it makes sense to make sure none of them get away.