[AusNOG] How are you handling metadata?

[Ross Wheeler]

On Wed, 27 Jan 2016, Paul Foote wrote:

> This seems like a fairly redundant act if it's not required for your
> business. All of the people doing metadata retention are doing so because
> they have a business requirement.

Apart from the logs and data businesses have always had to keep for 
PRODUCTION purposes (billing, diagnostics, etc), I doubt there is anyone 
who is keeping this stuff, and in the manner prescribed, for anything 
other than LEGAL requirements.


> If your business requirement is for diagnostic purposes or even billing 
> related you would be far better off collecting flow data rather than the 
> limited set of data the government is requiring ISP's to do.

Most ISPs will already be recording some of the information, but few will 
be encrypting it at the point (and time) of collection/creation, nor do I 
expect most of them to retain all that data for exactly two years.


Using the term "Businesses", I think, should be avoided because it 
encompases (or implies) far more than "carriers and ISPs" who are the only 
businesses with additional obligations imposed by the DR legislation.

R.