Compliance requirements - The issue is much larger then just Sarbanes-Oxley and HIPPA.
The need of companies to be able to produce copies of e-mail when discovery happens in civil ligitgation is going to be more common place faster then most people think.
Several changes in the procedures followed in various jurisdictions have all ready happened and this trend will acclerate.
It is there responsiblity of the producing party (the one served with the discovery
motion) to supply the e-mails. This effects ANY business that has an e-mail server.
There is a need for the ablity to be able to index, search and produce all the e-mails sent with in an organization based on the terms of the discovery order issued by the judge.
This is NOT just a big company issue, it is all company with e-mail.
Hopefully the Exchange Team is having some discussion with the computer forensic's / electronic discovery community about these issues.
drh at hibbeln dot net