Record Compliance - Check List


In the recent issue of IDM (Image & Data Manager) magazine (May/June 2006) there are numerous articles on compliance:

The ISO Standard for Records Management (ISO 15489) defines a record as" information created, received and maintained as evidence, and information by an organisation or person, in pursuance of legal obligations or in the transaction of business."  Quite a broad statement that means that SMS messages, e-mail, Instant Messenger conversations, video conference and phone conversations can be included as part of a business transaction or legal obligation for the purpose of complete and compliant recordkeeping.

What are the Compliance Criteria:

Criteria                 
  1. Trustworthy     The records can not be altered or deleted without leaving a trail of evidence.
  2. Complete Record    Capture both internal & external communications relating to a business transaction or legal obligation
  3. Retention Period    The length of time a record is useful to the organisation and/or to comply with State and Federal Government regulations. These may vary from 6 months to Never To Be Destroyed
  4. Privacy    Protect against unauthorised access to records, especially personal data.
  5. Chain of Custody    An audit trail of all transactions with the record eg when it was accessed and by whom.
Now lets compare those criteria against the various systems of hard-copy, electronic and microfilm.


Criteria   Paper versus Electronic versus Microfilm
  1. Trustworthy  
  1. Complete Record  
  1. Retention period   
  1. Privacy   
  1. Chain of Custody   
In conclusion the only best practice is to utilise electronic for ease of access and microfilm for long-term preservation of the original documentation/business transaction.  Imagine having your critical business information not only saved electronically but preserved in microfilm.  With any litigation you would be able produce a guaranteed copy of the original document that no-one could dispute.
 

**************************************************************************
George has had 15+ years in record and knowledge management and 30+ years in IT. http://www.gosmcro.com.au