reply to TSI Marc
Re: Discussion about log retention I'd honestly say 90 days would be reasonable business practice. Again considering the lack of safe harbor laws in Canada, outright scrapping logs could be seen as condoning shady/illegal activities, as there's no paper trail to be held accountable to.
At the end of the day, it's simply a log of an ip address to an account. It's not like the information stored shows every site you've visited within the last 90 days, or any other specifically defining usage.