Why was the data retention period for auditable records in Sarbanes-Oxley chosen as 7 years?
<p>In Sarbanes-Oxley, does anyone know why the figure of 7 years was chosen as the data retention period (and not, say, 6 or 8 years)?</p>

<p>This is not really a legal question; it's more a question about the political process to finalize the law or one about technical implementations of the act's requirements. Try</p>

<p><a href="https://www.sec.gov/rules/final/33-8180.htm" rel="nofollow">https://www.sec.gov/rules/final/33-8180.htm</a></p>

<p><a href="http://www.soxlaw.com/" rel="nofollow">http://www.soxlaw.com/</a></p>

<p><a href="http://www.sarbanes-oxley-forum.com/modules.php?name=Forums&amp;file=viewtopic&amp;p=10121" rel="nofollow">http://www.sarbanes-oxley-forum.com/modules.php?name=Forums&amp;file=viewtopic&amp;p=10121</a></p>

data-storage