or should have:

Jan. 21, 2009: The Senate confirms Clinton as secretary of state.

Oct. 2, 2009: The U.S. Code of federal regulations on handling electronic records is updated: “Agencies that allow employees to send and receive official electronic mail messages using a system not operated by the agency must ensure that Federal records sent or received on such systems are preserved in the appropriate agency recordkeeping system.” The responsibility for making and preserving the records is assigned to “the head of each federal agency.”

June 29, 2011: A State Department cable to employees is issued under Clinton’s signature (as are all cables) after Google revealed that hackers were targeting the personal e-mail accounts of U.S. government employees. The cable warns: “Avoid conducting official Department business from your personal e-mail accounts.”

August 2012: The State Department inspector general issues a scathing report on the performance of U.S. Ambassador to Kenya Scott Gration that includes criticism of the fact he used a private e-mail account to handle “sensitive but unclassified” material. Gration is later fired.

“The Ambassador’s requirements for use of commercial e-mail in the office and his flouting of direct instructions to adhere to Department policy have placed the information management staff in a conundrum: balancing the desire to be responsive to their mission leader and the need to adhere to Department regulations and government information security standards,” the IG report said.

Feb. 1, 2013: Clinton steps down as secretary of state.