> They have to keep records of all internal communications for years.
Except for those that happen in person, which is bizarrely arbitrary, especially in times of hybrid work. I do feel like there really should be a digital/remote equivalent to an in-person conversation – but (for specific industries only!), there isn't really.
One could even say that the status quo is a huge scope creep in terms of the original intent of the regulation, which was apparently focused more on "things one intentionally writes down", not "things that got written down because that's just the medium in which a conversation happened" or "things that were recorded because it's technically feasible" [1].
[1] https://www.bloomberg.com/opinion/articles/2022-09-28/the-de...