Claire McCaskill actually said...
I am looking at my notes here and it says that the rule for the time period that you protect this information as source sensitive says at least 3 years.
Context
McCaskill references notes on the 3-year protection rule for sensitive information.
03/05/2014