The New York Associated Press recently put out an article about regulators planning to fine six investment banks for failing to produce e-mails sought in investigations of security industry practices. Security companies are required to retain e-mails and other documents for three years.

Since we have an "Investment Department" should we be following this rule?

What about the interoffice e-mails? What is the required retention, if any?

Thanks in advance for your assistance!

Anyone subject to the SEC rules should be abiding by them, or anything more restrictive.

Other e-mails should be retained the same as though they were traditional hard copies. Is it a RESPA related inquiry on a mortgage, is it CRA related, related to ongoing litigation, etc.