i dont know the specifics but i'm fairly sure sarbanes oxley specifies that emails should be retained within their document retention guidelines.