My guess is that you did not read the article (and, from reading most of the other comments, you are not alone). They
were using "auditable email logging solution that keeps communications for whatever their applicable policy dictates." The issue is that the CDC had a policy where lower level employees had their emails deleted after 90 days (and there was nothing secret about this, it was their standard procedure), but there is disagreement over how long these lower level employees have to have their emails retained due to the CDC agreeing to a "Capstone" records retention program from the National Archives. The article has the details.
Issue being, the headline is written in a way that deliberately makes it sound like something nefarious is going on, where it sounds like an underlying disagreement over the interpretation of how long records were required to be retained due to this signing on to the Capstone program.
Regardless, this is the Internet, so I'm sure everyone with an axe to grind will read this as "WhaT tHe CDC doEsn'T wAnT yOu to Seeeee!!!!"