There are a number of privacy issues regarding storage of call detail records. Agencies and other organizations should review these issues with their legal advisors. US Government guidance on these issues includes the following:

• the Privacy Act of 1974.
• Office of Management and Budget “Guidance on the Privacy Act Implications of Call Detail Programs to Manage Employees’ Use of the Government’s Telecommunication System” (See FEDERAL REGISTER, 52 FR 12990, April 20, 1987).
• NARA General Records Schedule 12, which requires a 36-month retention of telephone CDR records http://www.archives.gov/records_management/ardor/grs12.html
• 21 CFR 102-172, Federal Management Regulation (FMR), Telecommunications Management Policy. 21 CFR 102-172.

Note that 21 CFR 102-172 replaces 21 CFR 101-35, Federal Property Management Regulation (FPMR), Telecommunications Management Policy, which expired in August 2001. More…