...

Scope

This data retention policy covers all shared systems providing services to NCSA staff or customers. Currently, these are the systems operated by the Integrated Cyber-Infrastructure directorate at the NCSA. More specific system data retention policies and contracts/agreements can supplant this default policy. 

...

Exception to the privacy provisions, however, must be approved by the Information Infrastructure Board.