It is therefore necessary that such communication providers ensure that any third party service providers understand which data must be retained, the appropriate time limits for retaining the data and other pertinent details of the regulatory requirements such as audit access arrangements.