Retention of Data Obtained by Subpoenas

Information obtained by administrative subpoenas is stored and archived, as needed, by CISA subject to the following deletion requirements:

  • If the information in an administrative subpoena response is unrelated to critical infrastructure, CISA destroys non-public information from the administrative subpoena response immediately upon providing notification to the entity.
  • Unless otherwise agreed to by the individual whose personally identifiable information (PII) is contained in the administrative subpoena response, CISA will destroy the PII contained in an administrative subpoena response no later than six months after receipt of the response.

The CISA Privacy Office periodically audits records of active and completed administrative subpoenas to verify that these administrative subpoenas are maintained and disposed of in accordance with the handling and disposition requirements from the law and procedure.

Was this webpage helpful?  Yes  |  Somewhat  |  No