Re:Hackers are stealing years of call records from hacked ce...
by PeterisP on Tuesday June 25, 2019 @12:40PM
(#20276018)
The possibility to steal years of call records doesn't arise because of a legal requirement to retain such records for 18 months.
You can meet those legal requirements while (a) deleting all records after 18 months have passed and (b) storing all 'archive' records (e.g. between 30 days and 18 months) on a separate system that's only used for these specific requirements and has all access (which should be rare and narrowly specific, unlike daily business) logged.
You can meet those legal requirements while (a) deleting all records after 18 months have passed and (b) storing all 'archive' records (e.g. between 30 days and 18 months) on a separate system that's only used for these specific requirements and has all access (which should be rare and narrowly specific, unlike daily business) logged.