Legal would probably tell you to purge anything older than 180 days, unless there is active discovery for a lawsuit, in which case retain until end of law suit. Retention is a legal policy issue, which may vary from company to company, and change when a new GC onboards. That should be driving the technical requirements.

(Not a lawyer, and thankfully, never deposed.)