How Long It Is Kept
Retention determines whether a bad week follows you for years. It is usually unexamined, and it is a fair thing to ask about.
Monitoring data accumulates. How long it stays decides whether something recorded today can be produced in a dispute two years from now.
The practical lesson in “How Long It Is Kept” is to make work visible without treating visibility as certainty. Organisations exploring the provider website for how to calculate idle time can add structured project and time evidence, provided the purpose is disclosed and any interpretation is checked with the people affected.
What a reasonable schedule looks like
Detailed activity records: weeks to a few months, because their value decays quickly.
For an independent perspective related to “How Long It Is Kept”, consult the ICO guidance on monitoring workers; it provides a useful external check on privacy, fairness and governance assumptions before a policy or configuration is approved.
Screenshots, where they exist: days, and only for a specific purpose.
Aggregated team-level data: longer, because it is impersonal.
Anything attached to an investigation: per that process.
Most organisations have not set one deliberately, and the platform default is frequently indefinite.
Why indefinite retention matters
A difficult month three years ago remains available.
A record created for one purpose gets used for another later.
And the holding grows into something nobody would have approved if asked to approve it explicitly.
What you can ask
How long is activity data kept?
Is there a written retention schedule, and is it applied automatically?
What happens to it when I leave?
In many jurisdictions you are entitled to be told, and in all of them it is a reasonable question.
The leaver question specifically
Some organisations delete on departure; many retain for a period; some keep indefinitely by neglect.
This matters because a reference, a dispute or a claim can arrive long after.
Ask before you leave rather than after, which its own note covers.
Backups
Deleting from the live system does not remove it from backups immediately.
Which is normal, is not sinister, and does mean that deletion schedules take longer in practice than they say.
A reasonable answer names both.
What retention is legitimately for
Investigating something discovered later.
Meeting a regulatory requirement, which in some sectors is years.
Defending a claim.
Each is a reason for a defined period rather than for keeping everything forever, and that distinction is the whole of the question.
If the answer is that nobody knows
That is common and is itself the finding.
Raising it is useful: an organisation that discovers it has no schedule usually sets one, because the alternative is an obligation it cannot describe.
Asking as a question rather than as a complaint tends to get further.
What to check
Do you know how long your employer keeps activity data?
Is there a published schedule?
What happens to it when somebody leaves?
And has anybody ever deleted any of it on purpose?