This is Scary

Who cares what your privacy policy says?

[cmarshall]

SecurityFocus Article on The Register UK [theregister.co.uk]

Blurb:

A series of legal events means that companies that have no business reason to retain documents or records may be compelled to create and retain such records just so they can become available for discovery.

This especially affects me, because I run sites for NPOs that have über-tinfoil privacy policies.

[vincevincevince]

Doesn't fit well with the data protection act which specifies that you can't keep things which you don't have a reason to use and weren't collected for that reason. Just 'in case' isn't good enough for the dpa.

[cmarshall]

I suspect this would be US-only, which would probably trigger an exodus of hosting to non-US ISPs.