And as usual, the ACLU is right. The records should be kept for several years AT MOST unless they're a subject of an active investigation.

Punishment for violating the rule should be swift and harsh.