The dangers of emails being used against an organisation was something that former Microsoft chief executive Bill Gates discovered the hard way during United States antitrust investigations. After that point, Microsoft internally discussed a practice of not keeping any emails for longer than six months.
In many other cases, emails have been obtained by journalists and others and used against the owners under Freedom of Information requests.
Deleting emails after a set amount of time would have helped a great deal with Sony's problems but it comes with its own issues. Many organisations, including universities, are subject to legal regulations governing how long official records need to be retained. Emails can be considered part of official records and so it is sometimes difficult to apply a blanket policy that requires all emails to be deleted after a relatively short time.
The problem of email could also potentially be solved by using other forms of electronic communication instead. There have been suggestions that email could be replaced with instant messaging. This is certainly the case but many of these services keep records of conversations. Google for example, allows individual hangouts to be switched into "off the record" mode, but does not allow this setting as a default for all conversations. To delete the record of the conversation, it has to be done individually.
Special software that automatically deletes conversations can be used such as messaging apps Telegram and OneOne but these require widespread use. In terms of the types of email exchanges that were highlighted in the Sony releases, it is unlikely that the participants would have had the presence of mind to use more secure communications in any event.
Although companies should be advising all of their staff, especially the senior ones about good email hygiene, there is still a much easier way of avoiding all of these issues by not writing the email (or document) in the first place.
If that is not possible, then there are a few definite things you should do when writing email:
Always keep it brief. The more you write, the harder it is to check you haven't said something you will regret.
Never write an email when you are angry or emotional. Leave it for 24 hours before writing, if at all.
Never write an email when you have been drinking.
Never include personal, intolerant, or insensitive statements in corporate email.
It may also be useful to imagine a prosecuting lawyer looking over your shoulder as you write every email you send.
David Glance is the director of UWA Centre for Software Practice at University of Western Australia.
theconversation.edu.au
