On Sat, Jun 21, 2008 at 3:22 PM, Brion Vibber <brion(a)wikimedia.org> wrote:
The data retention policy is, shall we say, super
vague. It makes no
specific provisions, but iterates our general preference for not keeping
lots of private data around for a long time.
"the least of amount personally identifiable information consistent
with maintenance of its services, with its privacy policy, or as
required by state or federal legal provisions under United States of
America law" is fairly specific. If you can keep less, but still
fulfill your services, the privacy policy, and the law, then the data
retention policy states that you should do so.