Breaking News on SkySports.
Burnley and Leeds write letter to Prelimeleague askinf them to require Everton to keep all emails and data related to business activities.
Wow they must be hurting 
There are laws in place already covering the retention of financial data that apply to all businesses, not just football clubs, so there is absolutely no need for the FA or the Premier League to request that this information is retained. I'm pretty sure that those in charge of financial regulation at the club are already acutely aware of the laws of the land and the penalties for breaching said laws.
Emails are a different kettle of fish altogether, and if there's no emails, then there's nothing to investigate, but there's no law that says that a business must retain all emails. There are rules about email security, which are covered under GDPR, but nowhere in law is there a rule that prevents a business from having a robust hoiseleeping policy. In fact a robust housekeeping policy is actually actively encouraged within Data Protection law. I worked alongside a Data Protection Officer at a large company for a while, who wrote a set of guidelines for employees that strongly recommended that they trawl their own mailboxes on a regular basis and permanently remove ALL NON-ESSENTIAL communications. The policy with regard to attachments was that all essential documents ahould be saved to a secure folder on the corporate network and the email should be deleted to prevent data loss. Non essential data should be removed. In fact, we had a strict policy with regard to mailbox size and were restricted to a mailbox of no greater than 50MB. If you required additional mailbox space, the request was made to the Data Protection Officer, who would review and reject it. There were also strict firewall rules in place preventing any large files entering or leaving the corporate email system, also to prevent data loss and protect the corporate network from cyber attack. If there was a requirement to transfer a large file, it was reviewed by the DPO and either approved or rejected, with a timeslot allocated for a secure file transfer, but never over email. A secure VPN or CSG would be established with a strict timeslot and data transferred and sandboxed in quarantine until it had been checked and was deemed to be safe to enter or leave the network. You would hope that a business the size of Everton FC would have similar robust policies in place.
Just a desperate attempt by both clubs to retain their Premier league status by any means possible. It's just a shame that both of them can't go down tomorrow.