| ▲ | alsetmusic 6 hours ago |
| > Deloitte Cyprus said it could not comment on the specific allegations because the documents were more than 20 years old and no longer accessible. That's convenient. Also, I received a similar response when inquiring about a financial account that had been overlooked (there are reasons, I'm not getting into it) for a couple of decades. "Can't help you. Too old for us to have records." Well, my records are printed documents. Why can't you tell me anything? Reminds me of when the USA government stole my money from a bank transfer claiming suspicion of whatever (my landlord had a Middle Eastern sounding name and it was the 2000s) and then said they had no record of it when I provided all the required documentation to recover it. In both cases, unfortunately, I concluded that the odds are so stacked against me that I gave up. Convenient system if you're fabulously wealthy or a massive org (such as corporations and government). |
|
| ▲ | postalcoder 5 hours ago | parent | next [-] |
| Most institutions (especially financial) have strict document retention policies to protect themselves from situations like this. It's not shady – just a way of limiting liability. At my first job I made the mistake of discovering a cache of old documents, documents that were far older than the company's seven-year document retention policy. The cache, being my discovery, meant I became the one responsible for destroying it. It was dozens on dozes of bankers boxes filled with documents that I had to de-spine before shredding. You would have thought that the process was a chore but for me it was exhilarating. The slowness of the process gave me the opportunity to speed read through it all. There was nothing scandalous in there, but I became somewhat of a historian over many quiet nights. |
| |
| ▲ | throwitaway222 2 hours ago | parent | next [-] | | Company finds 7 year old financial data in banker boxes: We're going to need a bigger shredder! Company finds 7 year old customer records with PII, location data, etc..: We're going to need a bigger production hard drive! | | |
| ▲ | dhosek 39 minutes ago | parent [-] | | Nope, they destroy digital records as well, at least banks do. If you ever work for a financial institution, you’ll have mandatory training about data retention timelines. | | |
| |
| ▲ | saghm 2 hours ago | parent | prev | next [-] | | Covering up for screwups so that they don't get in trouble is like the textbook definition of "shady" | |
| ▲ | dmd 3 hours ago | parent | prev | next [-] | | > I became somewhat of a historian over many quiet nights Please step into the shredder, sir. It's not personal–it's just policy. | |
| ▲ | rithdmc 5 hours ago | parent | prev | next [-] | | > It's not shady – just a way of limiting liability. And storage costs. | |
| ▲ | lkbm 4 hours ago | parent | prev | next [-] | | > Most institutions (especially financial) have strict document retention policies to protect themselves from situations like this. It's not shady – just a way of limiting liability. Yup. With every data breach, HN is full of (correct, imo) comments about how tech companies should treat private data as a liability and prune it aggressively. You go look at mature businesses and you'll find that they do exactly this. | | |
| ▲ | Arubis 3 hours ago | parent [-] | | And less mature businesses that are in highly regulated industries, since they know nobody will fund them if they can’t prove they aren’t a legal timebomb. I’ve worked across clients in edtech, fintech, healthtech, aerospace, and in all of them making sure they didn’t die by regulation was present from early on. (Granted, places that don’t care about things like that don’t work with people like me.) Edtech in particular tends to be pretty conscious of just never having the data in the first place. PII for minors is radioactive. |
| |
| ▲ | cubefox 5 hours ago | parent | prev [-] | | > It's not shady – just a way of limiting liability. It's not euphemistic – just diplomatic phrasing. | | |
| ▲ | II2II 4 hours ago | parent | next [-] | | I wouldn't go that far. If it's a legal practice, it's a legal practice. I can understand why a company would want to limit their liability over something that happened seven years in the past, even when they are confident that their procedures are both rigorous and in compliance with the law. On the whole, I would say the problem isn't so much using language to whitewash the practice as the troublesome tendency to turn a blind eye until someone becomes persona non grata. | | |
| ▲ | shimman 3 hours ago | parent [-] | | Just because something is legal doesn't make it right or good for society. | | |
| ▲ | kakacik 2 hours ago | parent | next [-] | | Look, if you want better behavior lobby for longer retention, simple as that, laws will be passed if there is enough will behind. Or some centralized store, whatever. Eveeybody will align if things are clear and legally required by date xyz. Dont blame any private company that its not overstepping its legal requirements and adding risks and costs to their business. Its like blaming a guy, any guy, heck all HN we dont pay more taxes than we have to pay, it goes to good things and is moral no? | | |
| ▲ | shimman 2 hours ago | parent [-] | | We can do both, it's not hard to advocate for change while calling out bad actors as bad actors. Many companies openly degrade society while following the law. That still doesn't make it right. These are just excuses to allow authoritarians to degrade our lives and society unabated. |
| |
| ▲ | esikich 3 hours ago | parent | prev | next [-] | | Do you honestly expect all businesses to keep all records forever? Do you understand the costs and labor required to do this? No one does this. | | |
| ▲ | nullstyle 3 hours ago | parent [-] | | In an age of exabytes, -yes- | | |
| ▲ | esikich 3 hours ago | parent [-] | | Lol ok champ. | | |
| ▲ | Larrikin 2 hours ago | parent [-] | | You can be sarcastic but there is no reason you've said why emails and documents of a few megabytes can't be permanently saved by companies using Exabytes of data. Make your point | | |
| ▲ | esikich an hour ago | parent | next [-] | | Understanding the intricacies of large enterprise data and all the forms it can take is an exercise left to the reader. It isn't simple and I'm not sure why anyone would think it is. There isn't just like, a single fileshare you have to monitor. There are many more numbers than just X amount of data. | | |
| ▲ | nullstyle 44 minutes ago | parent [-] | | In a world where I’ve had a dossier in some corporate database since Rapleaf in 2007, I’m completely unwilling to accept your opinion that basic document retention based on account id is more complicated than I’m assuming. |
| |
| ▲ | shimman 2 hours ago | parent | prev [-] | | Apparently it's way too hard and complicated for a multi-billion dollar enterprise to retain documents but quite easy to tell clients how to evade taxes. What a fucked up world. |
|
|
|
| |
| ▲ | nyc_data_geek 3 hours ago | parent | prev [-] | | They downvoted him because he spoke the truth |
|
| |
| ▲ | RobRivera 5 hours ago | parent | prev | next [-] | | Please, this is quite literally why the policies exist. If you want to change the world, you must first accept it for what it is | |
| ▲ | close04 4 hours ago | parent | prev | next [-] | | In most jurisdictions there are retention policies defined in law. Companies, like almost anyone else in the world, will do the bare minimum necessary to meet the legal requirements because it doesn’t make sense to do more. They only incur expenses while exposing themselves to all kinds of liability. | |
| ▲ | cyanydeez 5 hours ago | parent | prev [-] | | "Its just how we commit crimes quietly" | | |
| ▲ | blitzar 5 hours ago | parent | next [-] | | Even in the year of 2026 not everyone is dumb enough to record themselves committing crimes and then brag about it online. | |
| ▲ | oleganza 5 hours ago | parent | prev [-] | | Organizations are not run by a single person. Imagine yourself as an investor into a large organization. Or you are invited to work as a CEO. You would definitely want to limit your own responsibility (in terms of financial losses or legal costs) when there are hundreds or thousands of people working together and anyone can make a mistake. Of course you'd have compliance department to look over the processes to minimize the risk of mistakes and correct them ASAP (if you don't, you'd be liable for negligence and open yourself to a higher chance of failures). But since mistakes and miscommunication is inevitable anyway, you'd require hard limits in every obligation - in terms of time, money, scope etc. Organizations that are not protecting themselves do not live long. And this principle has nothing to do with the nature of their activity. |
|
|
|
|
| ▲ | throw1234567891 4 hours ago | parent | prev | next [-] |
| Because the legal requirement is to keep those financial records for a maximum of 10 years? I'm sure it depends on jurisdiction, and the type of the document, but financial records generally 10 years in Europe. |
| |
| ▲ | realusername 3 hours ago | parent | next [-] | | Don't worry, if they think they can extract more money out of you, you can be sure they still keep the documents. Case in point my HSBC account which is officially closed since 2014 and they still try to contact me illegally. | |
| ▲ | franktankbank 4 hours ago | parent | prev [-] | | What about financial accounts? I need to ping my accounts every X years or the company just keeps the money? | | |
| ▲ | stearns 3 hours ago | parent | next [-] | | Depends on the jurisdiction. In the US, each state has escheatment[0] laws governing how untouched accounts are retired and how they may be subsequently claimed by their original owner. That process typically happens through a government agency rather than through the original company that held the account. But other parts of the world have other processes. [0] https://en.wikipedia.org/wiki/Escheat#Transfer_agents_and_es... | |
| ▲ | quietbritishjim 3 hours ago | parent | prev [-] | | That doesn't seem logically related (though that doesn't mean it legally isn't). If there's a statement from last year saying that the account has x amount of money in it, then that's a document within the 10 year retention even if the last deposit was more than 10 years ago, so there's still a record that the account exists. |
|
|
|
| ▲ | alibarber 3 hours ago | parent | prev | next [-] |
| The irony of these documents being (allegedly) backdated, and this response, is not lost on me. |
|
| ▲ | georgeecollins an hour ago | parent | prev | next [-] |
| "when the USA government stole my money from a bank transfer claiming suspicion of whatever" Details please! That is really interesting. |
|
| ▲ | Aurornis 2 hours ago | parent | prev | next [-] |
| Document retention policies are often constructed to require documents be discarded after a certain date. Having a universal rule is about the only way to ensure decisions aren’t being made for other reasons and that they comply with your privacy standards. |
|
| ▲ | emeril 3 hours ago | parent | prev | next [-] |
| public accounting firms are, as a rule, generally loaded with people who aren't that capable (there are exceptions for sure) I doubt they even knew what was going on |
| |
| ▲ | Hasz 3 hours ago | parent [-] | | turnover is also extremely high; only partners are going to be around that long. At this rate, many of those long-time partners are being forcibly retired to make way for the next gen. |
|
|
| ▲ | csomar 3 hours ago | parent | prev | next [-] |
| There should be a limit. You can’t expect me to keep a client’s records for two decades. For software development, I think 2 years is reasonable. Many industries already have proper (and mandatory) limits, usually somewhere in the 3-7 year range depending on the field (finance tends to be higher) and the country. Some countries, especially developing ones, have no bookkeeping rules at all. But after 2 decades for a financial account, I'd assume any recovery as a gift rather than a right. |
|
| ▲ | delfinom an hour ago | parent | prev | next [-] |
| If that account was truely forgotten about, there is no way it wasn't closed and simply sent to the relevant state Unclaimed Funds group of the state treasury where it waits to be claimed for quite indefinitely. |
|
| ▲ | Propelloni 4 hours ago | parent | prev | next [-] |
| Oh, come on. HN complains about excessive data hoarding all the time. Now it's wrong to not hoard data? This is just another damned if you do, damned it you don't situation and, predictably, the outrage option is voted to the top. |
| |
| ▲ | N_Lens 3 hours ago | parent | next [-] | | Nice false equivalence. | |
| ▲ | AnimalMuppet 4 hours ago | parent | prev [-] | | Strong disagree. You want to keep track of how many times I go to the bathroom each day, and how much toilet paper I use each time? I complain about data hoarding. You're handling my money? You'd better not lose it, and you'd better keep accurate records, and you'd better keep them forever. And in these specific cases, 20 years ago? They weren't handling stuff with computers 20 years ago? They didn't keep backups of that? (Another commenter notes a 10-year record keeping requirement in Europe, so in that case it may have legitimately been removed.) But it's worse with the government. It wasn't 20 years ago, you just did it. And you don't have records? That's theft. | | |
| ▲ | infecto 4 hours ago | parent [-] | | Why would you need to know anything about 20 years ago. In a sense financial data is even easier. There is a ledger and if you have kept 10 years of detailed history that is plenty. |
|
|
|
| ▲ | ktallett 6 hours ago | parent | prev [-] |
| 2013 is not 20 years old so those documents should be readily available. |
| |
| ▲ | mathgeek 6 hours ago | parent [-] | | 2003 is, though. Apologies if I missed anything but a quick ctrl-f on the articles didn't find anything for 2013. | | |
| ▲ | ktallett 2 hours ago | parent [-] | | If you click through to the IBJ investigation it states the backdating ran from 1999 to 2013. I don't know why the BBC only reported up to 2005. | | |
| ▲ | mistrial9 2 hours ago | parent [-] | | I believe that almost zero wealth centers are scandal-free, and that some people collect the info badly, others do it very well, and there is an economy based on that alone. Enforcement is selective, intermediaries are constantly paid by various means, and time is on the side of many involved. Picking on particular scandal to publicize is more like picking from large heaps of content in a collection, not anything unique or unusual at all.. just not widely known for real reasons... Tax evasion is a game played by 100% of sophisticated players, to start IMHO |
|
|
|