I think that's a standard within the Privacy Act, but again we would work with her office to determine what an appropriate period of time would be. I think 15 is the maximum allowed under the Privacy Act.
On November 19th, 2012. See this statement in context.