When a member of staff leaves, assuming they didn't delete them, how long should we keep their user files/mail box?

In the past when someone has left I have copied their files to the subject folder on our shared departments network drive and asked the head of department to delete anything that they don't want to keep. I was wondering if we had any obligation to archive these files.