RECORD RETENTION POLICY

Similar documents
Retention and Disposal of Library Records

The date when this policy is posted to the online Company Policy Manual and communicated to all business lines: December 14, 2012

Records Retention Policy

Cell Phone Policy. 1. Purpose: Establish a policy for cell phone use and compensation allowance.

POLICY TITLE: Record Retention and Destruction POLICY NO: 277 PAGE 1 of 6

College/Division Administrator Meeting Minutes July 14, Mary Dickerson, Executive Director, Information Technology Security

Policies & Regulations

Retention & Archiving Policy

Data Protection Policy

Subject: University Information Technology Resource Security Policy: OUTDATED

RMU-IT-SEC-01 Acceptable Use Policy

Records Management at MSU. Hillary Gatlin University Archives and Historical Collections January 27, 2017

RECORDS AND INFORMATION MANAGEMENT AND RETENTION

POLICIES AND PROCEDURES

Records Information Management

DIRECTIVE ON RECORDS AND INFORMATION MANAGEMENT (RIM) January 12, 2018

Appendix Data Retention Schedule

COUNTY OF EL DORADO, CALIFORNIA BOARD OF SUPERVISORS POLICY

Employee Security Awareness Training Program

Records Retention Training

UT HEALTH SAN ANTONIO HANDBOOK OF OPERATING PROCEDURES

Farmingdale State College Records Management Training PRESENTED BY DOROTHY HUGHES INTERNAL CONTROL OFFICER AND RECORDS MANAGEMENT OFFICER

Frequently Asked Questions Related to The Arkansas General Records Retention Schedule

Privacy Statement. Your privacy and trust are important to us and this Privacy Statement ( Statement ) provides important information

UNIVERSITY OF MASSACHUSETTS AMHERST INFORMATION SECURITY POLICY October 25, 2017

Wireless Communication Stipend Effective Date: 9/1/2008

The Trail of Electrons

UNIVERSITY ARCHIVES RECORDS RETENTION SCHEDULE

DATA BACKUP AND RECOVERY POLICY

PART 5: INFORMATION TECHNOLOGY RECORDS

Chapter 10. Administration

Checklist: Credit Union Information Security and Privacy Policies

Criminal Justice Information Security (CJIS) Guide for ShareBase in the Hyland Cloud

HPE DATA PRIVACY AND SECURITY

What is a Dataset? Information Security and Privacy Office (ISPO) Risk Assessment Program August 2018 Version 1.1

COUNTY OF RIVERSIDE, CALIFORNIA BOARD OF SUPERVISORS POLICY. ELECTRONIC MEDIA AND USE POLICY A-50 1 of 9

Community Unit School District No. 1. School Board

NSDA ANTI-SPAM POLICY

Privacy Policy on the Responsibilities of Third Party Service Providers

The University of Texas at El Paso. Information Security Office Minimum Security Standards for Systems

CERTIFIED MAIL LABELS TERMS OF USE and PRIVACY POLICY Agreement

Frequently Asked Question Regarding 201 CMR 17.00

SUBJECT: Effective Date: Policy Number: Florida Public Records Act: Scope and

IDENTITY THEFT PREVENTION Policy Statement

Privacy Notice. Lonsdale & Marsh Privacy Notice Version July

CARROLL COUNTY PUBLIC SCHOOLS ADMINISTRATIVE REGULATIONS BOARD POLICY EHB: DATA/RECORDS RETENTION. I. Purpose

Acceptable Use Policy

Credit Card Data Compromise: Incident Response Plan

Ashford Board of Education Ashford, Connecticut POLICY REGARDING RETENTION OF ELECTRONIC RECORDS AND INFORMATION

Why records management matters top 10 reasons

Seattle University Identity Theft Prevention Program. Purpose. Definitions

Care Recruitment Matters Limited Privacy Notice

Record Retention Policies: How Long Do We Keep This Record? Pari J. Swift, CRM, Senior Records Manager

8/28/2017. What Is a Federal Record? What is Records Management?

Policy Summary: This guidance outlines ACAOM s policy and procedures for managing documents. Table of Contents

WIRELESS DEVICES: ACCEPTABLE USE AND GUIDELINES

Institute of Technology, Sligo. Information Security Policy. Version 0.2

MANUAL OF UNIVERSITY POLICIES PROCEDURES AND GUIDELINES. Applies to: faculty staff students student employees visitors contractors

GM Information Security Controls

SALARY $ $72.54 Hourly $3, $5, Biweekly $8, $12, Monthly $103, $150, Annually

Gramm Leach Bliley Act 15 U.S.C GLBA/HIPAA Information Security Program Committee GLBA, Safeguards Rule Training, Rev.

The University of British Columbia Board of Governors

CPM Certification Examination

5/6/2013. Creating and preserving records that contain adequate and proper documentation of the organization.

QuickBooks Online Student Guide. Chapter 1. New Company Setup

OHIO HiSTORY CONNECTION

HBW LAW LTD T/A HESELTINE BRAY & WELSH

Development of your Company s Record Information System and Disaster Preparedness. The National Emergency Management Summit

CHARTERING SITE QUICK START GUIDE

Mark Your Calendars: NY Cybersecurity Regulations to Go into Effect

UNIVERSITY OF MASSACHUSETTS AMHERST INFORMATION SECURITY POLICY September 20, 2017

Table of Contents 6.1 CORRESPONDENCE

LCU Privacy Breach Response Plan

CHIEF EXECUTIVE OFFICER/MANAGING PARTNER AND COMPLIANCE, REGULATORY, AND LEGAL DEPARTMENTS

Electronic Official Personnel Folder (eopf) Frequently Asked Questions for Department of the Army Employees

WHEATON COLLEGE RETENTION POLICY May 16, 2013

Mobile Communication Devices. 1.0 Purpose. 2.0 Policy NO Virginia Polytechnic Institute and State University

County of Sacramento

Data Protection Policy

Application Guideline for BOP/Volume Zone Business Support Coordinator UZBEKISTAN in FY 2015

This procedure sets out the usage of mobile CCTV units within Arhag.

Information Security Incident Response Plan

2. Who we collect information (data) from & why we collect it

Information Security Incident Response Plan

It applies to personal information for individuals that are external to us such as donors, clients and suppliers (you, your).

QuickBooks Online Student Guide. Chapter 1. New Company Setup

UTAH VALLEY UNIVERSITY Policies and Procedures

RECORDS MANAGEMENT RECORDS MANAGEMENT SERVICES

YEAR END PROCEDURES (2017)

ACH Audit Guide Step-by-Step Guidance and Interactive Form For Internal ACH Audits Audit Year 2018

Southington Public Schools

Terms and Conditions between Easy Time Clock, Inc. And Easy Time Clock Client

Management: A Guide For Harvard Administrators

Terms of Reference for the EIF Trust Fund Manager (TFM)

THE SLAC ARCHIVES AND HISTORY OFFICE PURPOSE

DATA SUBJECT ACCESS REQUEST PROCEDURE

Managing Your Record Retention Policy Safely

INFORMATION ASSET MANAGEMENT POLICY

Archive Legislation: archiving in the United Kingdom. The key laws that affect your business

SPRING-FORD AREA SCHOOL DISTRICT

Transcription:

RECORD RETENTION POLICY I. Purpose It is the purpose of this policy to establish a consistent record retention policy for (the Organization ). II. Policy The Organization shall retain records for the period of their immediate or current use, unless longer retention is necessary for historical reference or to comply with contractual or legal requirements. Records and documents outlined in this policy include paper, electronic files (including e-mail) and voicemail records regardless of where the document is stored, including network servers, desktop or laptop computers and handheld computers and other wireless devices with text messaging capabilities. It is the policy of the Organization to preserve official records as provided in the Record Retention Schedule of this policy. Records that have exceeded the retention period provided in the Schedule are authorized to be discarded consistent with the policy provisions that follow. The Schedule s retention periods have been established consistent with Federal and legal regulations. However, if an official investigation is underway or even suspected, document purging must stop in order to avoid criminal obstruction. Thus, records pertaining to programs under litigation or audit are to be retained until such issues are resolved. III. Procedure A. General Records The Chief Executive Officer shall appoint and maintain a Records Deputy who is to work on all matters of document retention. Such Record Deputy will audit and inventory, as needed, section records and take timely steps to insure section compliance with the following record retention schedule. Record Retention Schedule Accounting and Audit Accounts payable/receivable ledger reports Audited yearly reports Bank statements and reconciliation Budget analysis and reports for sections Cancelled checks Cost rate proposals/work papers Depreciation schedules

Financial transfers documentation (see Fixed asset schedules Internal audit reports Monthly closing ledgers Monthly financial statements Monthly general ledger documents Monthly travel reports Supporting documents for grant monitoring/auditing Tax records/supporting documentation for tax purposes Vendor invoices Review after Closeout of grant + 3 years Administration and Organization Resources Applicant resumes Audit responses Review after Benefit and compensation studies Board minutes and books, bylaws, charter, founding documents Budget & Audit reports Review after EEO Charges/Investigation 10 years Payroll files and timesheets Personnel and Consultant Files (see Service of employee + 7 years Operational administration documentation (see Retirement and pension records Risk reports Contracts, notes and leases (expired) Contracts (in effect) Insurance policies (expired) Insurance records, current accident reports, claims, current policies Inventories of products, materials and supplies Trademark and copyright registrations Correspondence General business correspondence Legal and tax correspondence Official Chief Executive Officer's Correspondence (see Email correspondence 2 years See III.B Grants Records General grants records and supporting materials (see after filing final financial report

Personnel workload analysis Trip reports Policy and Procedural Employee guidelines manuals Employee procedures materials Organization training manuals Publications and Events Organization publications Supporting documents for publications (see Official event-related documents (see Preparation documents for events (see Review after Review after Review after Review after Review after Retention Schedule DEFINITIONS Financial transfers documentation Accounting and Audit; Records such as wire confirmations, wire transfers, and cash receipts which document official financial transfers General grants records and supporting materials Grants Records; Records which document the grant-making process (as either grant maker or grantee), such as: Grant proposals and budgets, accounting questionnaires and payment forms, grant applications to funding agencies, private foundations and other donors, email correspondence, monthly grants payable reports, financial reports, narrative reports, evaluation reports, preliminary grant files, grant closeout forms, independent assessments and evaluations, grant review tracking sheets Official event-related documents Publications and Events; Applies only to official documents relating to an event, such as the invitation, transcript, program, other handout Official Chief Executive Officer s correspondence Correspondence; only applies to correspondence stored in the Chief Executive Officer s Chron File Operational administrative documentation Administration and Organization Resources; Any record which is necessary to ensure the normal functioning of the Organization, such as: Organization tax exemption papers, insurance policies, office leases and management succession plans Personnel and consultant files Administration and Organization Resources; Records such as benefit forms, W2 tax forms, I-9 forms, that provide basic documentation of Organization personnel and consultants Supporting/preparation documents for events Publications and Events; Any documents created in preparation for an event, or for administrative support of an event, such as: RSVP lists, draft programs, invoices

Supporting documents for grant monitoring/auditing Accounting and Audit; Any records which support or document audits of Organization grants, such as: accounting questionnaires, risk assessments, core on-site reviews, audit logs Supporting documents for publications Publications and Events; any documents created while preparing a finalized Organization publication B. E-mail Records For the purposes of this retention policy, Email (or E-mail, e-mail, email ) is defined as Electronic mail that is: destined for a specific user or set of users internal or external to the Organization from a specific, identifiable email address (real or virtual) received by our internal electronic mail system The following items are expressly not considered electronic mail: items from an unidentified source (i.e. no entry in the From field) notifications from systems indicating system status, backup success/failure, hard drive space warnings, or any similar types of notification notifications from the SPAM (or associated) filter (although items released as a result of authorization from the SPAM filter are considered electronic mail) any items not allowed through by the SPAM (or associated) filter (except as noted above) a notification from an automated process or system trapped, quarantined or otherwise impeded by the external filtering system or internal anti-virus/anti-spam systems All email received and stored by the internal mail system, regardless of whether it is sent by an external source or an internal source will be maintained by the system for a period of 6 months (approximately 180 days) from the date of receipt by the mail system. Even if a user deletes an email, the system will maintain an accessible copy for a period of 6 months. For the purposes of consistency and enforceability, all data will reside solely on the email server. The various additional functions provided by the current electronic mail system, to include, but not limited to, task lists entries, journal entries and notes (or e-notes) are also subject to the same 6 month time frame. Meetings will be automatically deleted from public calendars and individual calendars 3 months (90 days) after the meeting date. Items placed within folders other than the Sent Items folder, either by human intervention or by a rule which is initiated by the user will be retained until the user s electronic mail account is deleted. Individual contact information will be kept as long as the account is active.

The deleted items folder will be set to empty upon closing of the mail application on the user s computer. A user s electronic mail account and associated contacts and personal folders will be automatically deleted 30 days after the user is no longer employed or contracted by the Organization. C. Legal Holds From time to time, the Chief Executive Officer may issue a notice, known as a Legal Hold, suspending the destruction of records due to pending, threatened or otherwise reasonably foreseeable litigation, audits, government investigations or similar proceedings. No records specified in any Legal Hold may be destroyed, even if the scheduled destruction date has passed, until the hold is withdrawn in writing by the Chief Executive Officer. IV. Record Deputy - Appointment and Reporting The Chief Executive Officer shall appoint a Records Deputy who is to work on all matters of document retention. The name of the Record Deputy is to be communicated to Organization staff. Such appointees serve at the pleasure of the Chief Executive Officer and shall be changed from time to time as operational needs warrant. V. Responsibility It is the responsibility of each Department of the Organization to adhere to the Record Retention Schedule. The Chief Executive Officer is responsible for resolving questions of interpretation about this policy and to develop and present organization-wide training to facilitate sound administration of this policy. Matters requiring further resolution are to be referred to legal counsel. Effective Date 9/24/2009