The Sarbanes-Oxley Act of 2002 (often shortened to SOX) is legislation in response to the high profile Enron and WorldCom financial scandals to protect shareholders and the general public from accounting errors and fraudulent business practices. The Sarbanes-Oxley Act introduced stringent new rules “to protect investors by improving the accuracy and reliability of corporate disclosures made pursuant to the securities laws”. Sarbanes-Oxley is not a set of business practices and does not specify how a business should store records; rather, Sarbanes-Oxley defines which records are to be stored and for how long. The Sarbanes-Oxley Act states that all business records, including electronic records and electronic messages, must be saved for “not less than five years.” The consequences for non-compliance are fines, imprisonment, or both.
