Whose data is it, anyway? [Compliance]

Abstract

The need for compliance and litigation readiness is no longer a US-specific requirement, but one that also crosses the pond to reach the UK. Now the debate has shifted to the issue of whose responsibility it is to make sure that a company complies with data retention and deletion requirements set out by regulatory bodies such as the FSA, and by laws such as the Data Protection Act and the UK Companies Act, and how this is best achieved.