The limits of data retention