XML Feed

Record Retention and Destruction Policy Template

Record Retention and Destruction Policy

Current Rules and Regulations Regarding the Protection and Destruction of Confidential and Sensitive Documents require that any person or company that possesses or maintains such information to take reasonable measures to protect against unauthorized access to, or use of the information in connection with its disposal.  In addition Sarbanes-Oxley requires that records be retained for all audits and legal proceedings.

Some of the records types and retention time periods for physical and/or electronic records are:

The Record Management, Retention, and Destruction is a detail policy template which can be utilized on day one to create a records management process.  Included with the policy are forms for establishing the record management retention and destruction schedule and a full job description with responsibilities for the Manager Records Administration.

You areas included with this policy template are:

  • Record retention requirements for SOX sections 103a, 302, 404, 409, 801a and 802.
  • Policy
  • Standard
    • Scope
    • Responsibilities
    • Record Management
    • Compliance and Enforcement
    • Email Retention and Compliance
  • Job Description Manager Record Administrator
  • 12 forms for Record Retention and Disposition Schedule

A record is essentially any material that contains information about your company’s plans, results, policies or performance. In other words, anything about your company that can be represented with words or numbers can be considered a business record – and you are now expected to retain and manage every one of those records, for several years or even permanently depending on the nature of the information. The need to manage potentially millions of records each year creates many new challenges for your business, and especially for your IT managers who must come up with rock-solid solutions to securely store and manage all this data.

“The Financial Modernization Act of 1999”, also known as Gramm-Leach-Bliley (GLB Act) applies to every business with 100 or more annual transactions, and gives authority to eight (8) federal agencies and each state, to administer and enforce the Financial Privacy Rule, Disposal Rule and the Safeguards Rule contained in the FACT Act.  The Federal Trade Commission is actively enforcing this Act in the following business segments:

  • Financial institutions - lenders and traditional financial institutions, insurance companies, banks, securities firms are the primary targets of enforcement. Also receiving scrutiny are: auto dealers (leasing and financing departments, service and rental divisions), of particular interest to the enforcers are auto rental agreements, drivers license copies – used for test drives; mortgage brokers, real estate settlement companies, and those retailers who issue credit cards, gift cards or related items.
  • Service institutions -payday lenders, check-cashing services, professional tax preparers, accountants, and electronic funds transfer networks, as well as credit counselors, independent psychologists, and related service firms are also targets.

There are hundreds of document types that may factor into an investigation or legal action.  Such records are assumed to be searchable and quickly available upon request, under the rules of SOX. This even applies to less official types of records, like Emails or instant messages.

 

 

 

 

 

 

 

Record Retention and Destruction News

 


Doc's Talk: Did Israel Use "Disproportionate Force" in Gaza?
Israel did not have "secure and recognized boundaries," so retention of some of those territories was possible under 242. Israel is not a "foreign" military occupier in the West Bank but, pending final negotiations, the lawful military ... -  more info

Save what rainforests?
Despite the wealth of knowledge regarding the value of these forests their destruction continues at a rapid pace. Rainforests are more vulnerable than ever, and the factors which lead to their decimation are compounding. ... -  more info

Backup and Backup Retention Policy
The Record Management, Retention, and Destruction is a detail policy template which can be utilized on day one to create a records management process. Included with the policy are forms for establishing the record management retention ... -  more info

Record Management Policy
Record Management, Retention, and Destruction Policy Template. -  more info

Supreme Court mum on Obama-birth case : The Swamp
Each jurisdiction has different rules about how entries are made in the public records. Some I daresay actually have a "retention" (read, "destruction") policy that shreds reporting forms from hospitals once the entries are made in the ... -  more info

not for profit
45 Application of Sarbanes-Oxley to Charities? ‱ Whistleblower protection and document destruction provisions do apply by their terms. ‱ DO: Consider the adoption of whistleblower protection and document retention procedures. ... -  more info

it consulting fees
... NLRA compliance 40 41 42 43 Personnel / HR Records 44 Personnel / HR record keeping Promotion / transfer / separation processing Human resource information systems 45 46 Administrative time - File Retention times, File Destruction ... -  more info

Don Griesmann's Nonprofit Blog: One Phase of Nonprofit ...
What policy and procedure will you have for destruction and retention of records? What system will be used for retrieval of documents? Who has access and who has the right of access to these records? Where do you store the old records ... -  more info

Law Enforcement Policy and Procedure Manuals
-46- POLICY AND PROCEDURE 211.20 FILES, BUREAU AND DIVISION PERSONNEL Index: Title; Personnel Files Refer: DIR 330.00 Internal Affairs, Complaint Investigation Process City Auditor’s Record Retention Schedule, 8000 Series POLICY ... -  more info

Corporate archaeology and the “insanity of retention policies”
Any record destruction policy must include a “litigation hold”. A litigation hold means that record destruction must stop when litigation is anticipated or pending. But in a complex enterprise, it is tricky to know what litigation the ... -  more info

Tech v. Law - a Plea for Mutual Respect « e-Discovery Team
Meet with IT personnel and fully understand their data architecture and record retention practices, and then advocate and explain their position in the litigation process, appearing in court as co-counsel of record when necessary. ... -  more info

RECOMMENDED PRACTICE
how established document retention timeframes and the process of document destruction after. reaching the destruction date within the retention policy are adhered to. This information should be gathered through interviews with selected ... -  more info

You Can't Make This Stuff Up « Climate Audit
That's why companies have record management policies and systems - for legal protection. So they can prove that the destruction was in accordance with an established and reasonable policy. 15 reply and paste link ... -  more info

are employment policies or handbooks really necessary?
... like law, nanotechnology, pharmaceuticals or energy, will probably have to address a greater number of employment issues via written policies; eg, safety, hygiene, record retention and destruction, and regulatory agency reporting. ... -  more info

ARSIPARIS: Slogan - Slogan Kearsipan
Weblog Khusus Kearsipan (Records Management and Archives Administration), Sektor Publik Penopang Tata Kelola Organisasi Yang Baik (Good Corporate Governance)Untuk Mewujudkan Transparansi Dan Akuntabilitas, Dengan Melihat Records Sebagai ... -  more info

February 20, 2008 - Things to Consider in the Future
1) Transfer of EPIC Email features from Pixi.com to Google Apps. 2) Edits to Document Destruction Policy and Record Retention Schedule. 3) IPS Template Production Academic: 1) ACC202 - Public Company Analysis (Ch. 18 Team Project) ... -  more info

INFORMATION TECHNOLOGY (CERTIFYING AUTHORITIES )RULES, 2000 ...
Computer records of applications transactions and significant events must be retained for a minimum period of two years or longer depending on specific record retention requirements. 11. Measures to Handle Computer Virus ... -  more info

Freedom of Information Act: Assessing & embedding compliance (post ...
The Revised Study of the Records Lifecycle, including both a Function and Activity Model and a records retention Schedule (a JISC initiative which provides a breakdown of the retention periods required for the types of records produced ... -  more info

Service Level Agreement and Metric Template
Record Management Policy Businesses looked to information management suppliers like Crown for consultancy services, retention policy counseling, offsite storage solutions, escrow services and destruction policies. ... -  more info

Incident Management Capability MetricsVersion 0.1
Documented policy exists defining organization guidelines for record retention [R]. Documented procedures for archiving, retiring, and destroying records exist [R]. Personnel are appropriately trained on the procedures and relevant ... -  more info

The Audit Process - GIAC Research in the Common Body of Knowledge
Verify the tape retention schedules and the tape/hard drive retirement and destruction process are performed IAW policy. Evaluate the use of encryption that might have a regulatory requirement. Evaluate for the use of off-site backups ... -  more info

Ellen Tordesillas » Blog Archive » ‘English First’ policy will ...
So, for the record, much as I want to make use of my “picture pretty vocabulary” I’m known for, I realize that if I do that, the utak ipis unano above ghosting in Ellen’s blog will just continue to make “baboy” of her blog and this will ... -  more info

The HR Cafe: Exclusive B21 Survey: Document retention
Document retention policies must be tailored to your own business environment and business needs. Info-Tech has created an editable Document Retention Policy Template to help you build one customized to your business. ... -  more info

1 E-Discovery Risk Management Is the “New New Thing” KBA Bench and ...
the records during the pendency of the action. 
. [T]he company should have a process under which it can quickly evaluate. whether it needs to suspend, in whole or part, the document-destruction. component of its retention policy, ... -  more info

O'Neil Record Storage & Management Software On-Line Internet Training
Records Retention Updates (added ver 3.04), Records Retention has been updated to allow more options on calculating the disposition date and greater control on the selection of record series codes. Windows Media ... -  more info

 

 

 

 

 

 

© 1999 - 2009 Janco Associates, Inc. - ALL RIGHTS RESERVED  --  Revised: 12/24/08.