Email usage & retention policy

I am seeking guidance on where to find industry related information pertaining to email/server usage and retention policy. Are there any good sources on industry standards that we could research? I am developing policy standards to be enforced for the enterprise, which also will assist in risk mitigation in regards to privacy laws, so a certain amount of “legalise” will need to be included in the reports.

Thanks in advance for your RSVP.