Electronic Records Management Guidelines

Medium

Revision Date: Monday, July 10, 2017

The purpose of this publication is to provide guidance on effective management of electronic records to North Dakota state and local government agencies.

Introduction
Background
What is Electronic Records Management?
Creating Electronic Information Systems
Using Electronic Information Systems
Maintenance of Electronic Records
Disposition of Electronic Records
Establishing a Records Management Program
Security of Electronic Records
Conclusion

1. Introduction

The extensive use of automation to conduct government business has resulted in the proliferation of electronic state records. Electronic records create many new concerns regarding the management of such records.

Records in electronic format are hardware and software dependent. These records can only be read and understood if the storage medium can be read by existing equipment and if the programs used to create the digitized data are still available.
With the move to personal computers and web applications, the risk of data loss increases and the likelihood of regular migration decreases. Desktop users are less likely to be aware of necessary documentation procedures to ensure data can be read in the future.
Currently, most electronic information systems used to create, receive, and store these records do not provide full records management functionality. Agencies need to adopt electronic information systems that provide proper controls over the creation or acquisition of records, maintenance of records in context with the function or activity performed, and disposition according to approved retention schedules in order to manage their records in electronic form. Only systems possessing these characteristics can be defined as “Electronic Recordkeeping Systems.”

The purpose of this manual is to provide guidance on effective management of electronic records to North Dakota state and local government agencies.

2. Background

Concern about the Management of Electronic Records

Information is vital to the operation of government offices. All state and local government agencies depend on electronically-generated data to accomplish their basic functions.
Information is among the most valuable asset that state and local government agencies have at their daily disposal. It is the basis for decision making, justification of resources, determination of benefits, as well as a variety of other routine government operations.
Information is expensive to create and maintain. Especially in times of limited resources, state and local government agencies need to manage their resources to achieve the greatest benefit possible.
While technology gives state and local government agencies the capability to respond to the growing demand for information, it also presents a number of concerns, including:
- Long-term retention
- Compatibility
- Accessibility
- Security
State and local government agencies must ensure government records, in any format, are managed in compliance with records laws and requirements.
- Records maintenance and disposal - North Dakota Century Code Chapter 54-46.
- Open Records Law - North Dakota Constitution Article XI, Chapter 6 and North Dakota Century Code Section 44-04-18
- Federal and State Rules of Evidence
- Confidentiality of specific records - Federal and State laws
- Privacy laws relating to personal information - North Dakota Century Code Section 44-04-18.1
- Retention requirements of specific records - Federal and State laws.

Every employee using a computer must assess whether their records are made or received pursuant to law or in connection with the transaction of official business and take appropriate action to ensure official records are properly created and maintained.

Not all electronic information is considered a record that is required by law to be included on a records retention schedule. The technology or medium in which a document is created, stored, used, or presented is not what decides whether it is a record or not. What makes a document a record is the fact that it documents a business transaction or is made or received pursuant to law.

The advent of personal computers has transferred the responsibility for records management from central records management sections to individual employees. Increasingly, employees are responsible for the creation and management of their own records. They may often be working without a clear understanding of the value of the information resource under their control nor their legal obligations and duties. Without guidelines in this area, the potential exists for significant losses in terms of history and accountability.

These guidelines are designed to assist agency management to develop appropriate and consistent procedures for the management of electronic records. The records management principles outlined are widely understood in the context of paper records, but should now be applied in the electronic context.

Definitions

The manual assumes a basic understanding of records management practices and some familiarity with technology. Following are some definitions:

Content: Basic data or information carried in a record; substance of the record that captures sufficient information to provide evidence of a business transaction.
Context: Documents the relationship of the information to the business and technical environment in which it arises; can include origin, date, and time.
Data Element: Specific entries under a field.
Electronic Content/Document Management System: An electronic system in which records are collected, organized, and categorized to facilitate their preservation, retrieval, use, and disposition. Electronic document management systems are distinguished from information systems by links to activities they document and their ability to preserve and provide access to the content, structure, and context of the records.
Electronic Documents: A subset of electronic records. They are collections of data which may be produced in the following ways:

Original output (typically created as a text document, small database, spreadsheet, or graphics)
A combination of existing data (which may be extracted from databases, text files, e-mail, etc.)
Data received from outside the organization (i.e. via e-mail, scanning)

Electronic Information System: A system that contains and provides access to computerized records and other information.
Electronic Records: Records that are in machine-readable form. Electronic records may be any combination of text, data, graphics, images, video or audio information that is created, maintained, modified or transmitted in digital form by a computer or related system.
Long term: A period of time greater than ten years.
Metadata: The description of data and its underlying applications and programs. Data that must be captured along with electronic records to enable them to be understood and verified, as well as support their management and use. Includes data dictionary, logical and physical models, diagrams and other systems and software details.
Migration: The transfer of electronic information so that it remains compatible with current technology storage and retrieval methodologies.
Non-record Material: Includes library and museum material made or acquired and preserved solely for reference or exhibition purposes, extra copies of documents preserved only for convenience of reference, and stocks of publications and of processed documents.
Official Record: A record that was made or received pursuant to law or in connection with the transaction of official business.
Record: The complete set of documentation, regardless of media or format, which serves to document the organization, functions, policies, decisions, procedures, operations, or other activities of the agency.
Records Management Task Force: A group responsible for reviewing and approving records retention schedules. Includes the State Records Management Administrator, State Archivist, and representatives from the Attorney General’s Office and the State Auditor’s Office.
Record Series: A group of logically related records with the same retention and disposition value. An electronic record series may support one or more operations within an organization.
Structure: The physical and logical attributes of records. Physical attributes include the font, font size, margins, line spacing, headings, and labels. Logical attribute is the order of the information.

3. What is Electronic Records Management?

Electronic records management is the efficient management of records stored on computerized systems. The key to electronic records management is to be able to support such documents through their entire life cycle.

Lifecycle of Records Concept

The life cycle of records is a management concept that all records and information pass through three stages: creation, maintenance and use, and disposition. Within the framework of an information system, these stages are not always distinct. Agencies should track all user information needs and determine records retention requirements throughout the life of the system to as great an extent as possible.

Whenever agency staff create purge criteria for data in information systems, they are setting retention and disposition policy for the record or parts of it. Agencies need to be aware that established purge criteria should reflect retention and disposition schedules approved by ITD Records Management and the Records Management Task Force.

Application of the life cycle concept to an information system may follow these stages:

Identify policy or program needs for development of a new system or modification to an existing system.
Maintain currently active records in primary storage, on-line or immediately available.
Migrate semi-active or inactive records to less expensive, slower storage media.
Identify records/data that are eligible for disposition or deletion, erasure, or transfer to the State Archives.

4. Creating Electronic Information Systems

Electronic recordkeeping systems must have accurately documented policies, assigned responsibilities, and formal methodologies for their management.

Electronic recordkeeping systems must meet the following criteria:

Consistent: process information in a manner that assures the records they create are credible.
Complete: contain content, structure, and context generated by the transaction they document.
Accurate: quality controlled at input to ensure the information in the system correctly reflects what was communicated in the transaction.
Preserved: records must continue to reflect content, structure, and context within any system by which the records are retained over time.

For electronic information systems that produce, use, or store data files, disposition instructions for the data shall be incorporated into the system's design.

State and local government agencies shall maintain adequate technical documentation for each electronic information system, including documentation of system design, implementation, use, and migration. The following documentation is required:

Narrative description of the system;
Physical and technical characteristics of the records, including a record layout that describes each field including its name, size, starting or relative position, and description of the form of the data (such as alphabetic, decimal, or numeric), or a data dictionary or the equivalent information associated with a database management system including a description of the relationship between data elements in data bases; and
Other technical information required to access or process the records.

Written Policies/Procedures and Training

Since computer systems are used to create and store records, agencies should write policies and procedures to control the use, access, and productivity on the personal computer. Personal computers require a great deal of financial resources for up-front costs, maintenance, and training time and expenses. If the “automated” information on the personal computer cannot be located or costs more, but offers little improvement in access, accuracy, quality, or productivity, the consequence is a wasted investment of time and money.

All employees who use computers should receive guidance on the following issues:

How to distinguish official records from non-record material;
How to organize records for ease of access, use, and disposition;
How to mark or classify documents for filing or incorporation into an electronic document management system with recordkeeping capabilities, when appropriate; and
How to contact the record coordinator in their agency or ITD Records Management for assistance.

Computer Directories and Subdirectories

State and local government agencies should use directories and subdirectories to organize and control information stored on computers. An electronic directory acts like a folder or drawer in a filing cabinet. You use a directory to group electronic applications, documents, files, and subdirectories into a logical association, just as you would in a paper file folder or file cabinet. This is the primary means to control information placed on a computer.

Directories allow you to specify the content and location of information on your computer. Within each directory you can create one or more other directories called subdirectories. The structure created by placing directories within directories is usually called the directory tree or nesting. Subdirectories help users organize electronic documents by subject, document type, originator, or some other grouping. Although subdirectories are an excellent control method, creating more than three or four directory levels is not recommended. The deeper you place a file in a series of subdirectories, the more difficult it becomes to remember all the subdirectory names.

Standard Naming Convention

There are many advantages to standardizing the terminology used to name computer directories and electronic files. Standardized directory and file names provide the ability to:

Access files easily and rapidly.
Reduce redundancy of files.
Avoid loss of information.
Find the latest draft or desired version of a document.
Name files quickly, easily, and consistently.
Share files easily between employees.

Each state agency should develop a standard naming convention for electronic documents based on their specific program needs and the types of records created. File names should reflect the purpose and content of the file.

ITD Records Management recommends using the North Dakota Subject Classification System when creating directories and subdirectories.

Directories/subdirectories should be created as needed for the types of files maintained on your computer. New files should be named and stored under the appropriate category subdirectory.

State of ND Subject Classification System Definitions
#	Code	Subject	Definition
01	(ACT)	ACCOUNTING	All functions involved in a financial transaction.
02	(ACD)	ACADEMIC	Information related to academic functions.
05	(AF)	AGENCY FEDERAL	Information related to a federal agency (reports, data, correspondence, etc.) which are not directly related to programs administered by your office.
10	(AS)	AGENCY STATE	Information relating to any state agency (reports, data, correspondence, etc.) which are not directly related to programs administered by your office.
14	(AOC)	ASSOCIATIONS	Information concerning organizations outside of the department (Corporate data, membership rosters, institutes, trade groups).
15	(AUD)	AUDITS	All information related to audit projects (reports, data, correspondence, etc.). Generally, audit information will be placed under 01 - Accounting. Upon request, ITD Records Management will evaluate the need to place audit information under this category.
17	(BUD)	BUDGETS	All information related to budgeting (reports, data, correspondence, etc.). Generally, budget information will be placed under 01 - Accounting. Upon request, ITD Records Management will evaluate the need to place budget information under this category.
18	(CR)	CIVIL RIGHTS	Material relating to affirmative action, EEO, equal employment, minority businesses, and Title IV, VI, and VIII, and Americans with Disabilities Act.
19	(CF)	CASE FILES	Includes all records retained as case files, except legal cases.
22	(C/M)	COMMITTEE/MEETINGS	Committees, councils, boards, objectives, agendas, schedules, minutes, reports of and on meetings for the department/agency.
26	(COM)	COMMUNICATIONS	Material dealing with any form of communication the agency has with the media or public.
28	(CON)	CONSULTANTS	Companies, engineers, or individuals that are or have the potential of being contracted by the department.
30	(C/L/A)	CONTRACTS/LEASES/AGREEMENTS	Information or documents regarding office agreements, leases, and contracts.
35	(ED/T)	EDUCATION/TRAINING	Any information regarding education, training, seminars, etc. that an employee attends or that is sponsored by the office.
43	(EQ)	EQUIPMENT	Any information related to equipment actually owned or leased by the office (cameras, computers, software, copiers, typewriters).
44	(FOR)	FORMS MANAGEMENT	All original forms used by your agency.
45	(GC)	GENERAL CORRESPONDENCE	A miscellaneous category used only if records don't fall under any other category. These should have a short life span.
47	(INS)	INSURANCE	Any insurance related information which pertains to the office.
50	(LG)	LEGAL	Any communication with the legal division or law firms.
55	(LEG)	LEGISLATION	Reference material on what is proposed or enacted into law (federal, state, county, township, municipal).
60	(PER)	PERSONNEL	Any information relating to personnel of the agency.
65	(P/P)	POLICIES/PROCEDURES	Guidelines on established principles and methods of operation for the office.
70	(PS)	POLITICAL SUBDIVISIONS	Any city, county, or township information not relating to a project file.
72	(REF)	REFERENCE MATERIALS	Material used for reference purposes only.
75	(SA)	SAFETY/SECURITY	Records relating to operating safety requirements, precautions, protection from damages, risk, injury, and reports pertaining to safety.
80	(SPS)	PROGRAMS, PROJECTS AND SERVICES	Programs and services not related to other categories. Includes programs and services provided by your agency.
81	(SPR)	SPECIAL PROJECTS	Special projects provided by your department. These projects are generally one-time and are of shorter duration than programs or services.
85	(S/D)	STAFF/DIVISION/UNIT	Statistical data, memos within your own staff or with other divisions within your own agency/department. These will have a short life span.
90	(S/S/R)	SURVEY/STUDY/REPORT	Statistical data, comprehensive or comparative studies, and recurring reports that don't pertain to any other category.
95	(TS)	TRANSPORTATION SYSTEM	Material relating to airways, railways, roadways, and waterways.
97	(VI)	VENDOR INFORMATION	All information received from vendors for equipment not owned, leased, or used by your department.

Electronic Content Management Systems

Electronic Content Management (ECM) is the act of managing content to be used to achieve business goals. ECM is essential to provide compliance, collaboration, continuity, and cost savings to an agency. Each agency is faced with some form of compliance, be it regulations or records retention, and managing records in a centralized solution makes it easier to meet those requirements. Collaboration is the ability for staff to work together on a project with access to the same information, wherever and whenever, they need access to it. Cost savings is something that is hard to measure and yet it can be seen daily. Implementing an ECM solution can reduce the time to respond to requests, decrease staff time needed to find records to do their job, and reduce legal costs. Continuity is the ability to keep a business running no matter the situation or event. Storing electronic records in a centralized repository ensures that if an event occurs, there will be access to the documents needed to run the agency and meet the needs of the customers.

There are two levels of ECM provided by the State of North Dakota: Basic Content Services and Electronic Document Management System.

Basic content services is an integrated suite of server capabilities that can improve team productivity by giving people access to the information they need, when they need it. Microsoft SharePoint is a family of software products developed by Microsoft for collaboration, file sharing, and web publishing. Using SharePoint, people can set up web sites to share information with others, manage documents from start to finish, and publish information to help everyone make better decisions

For organizations that need to extend beyond the functionality of basic content services, the Electronic Document Management System (EDMS) offers a comprehensive solution for managing the creation, capture, indexing, storage, retrieval, and disposition of records and information. The IBM FileNet P8 platform offers enterprise-level scalability and flexibility to handle the most demanding content challenges, the most complex business processes, and integration to your existing systems.

Each solution has its’ strengths and based on the agency’s needs, ITD can assist agencies in using the correct solution to meet their business requirements. At the end of the day, the most important thing is that the agency is managing its electronic records properly.

5. Using Electronic Information Systems

Legal Issues

Authentication

Agencies shall implement the following procedures to enhance the legal admissibility of electronic records:

Document that similar kinds of records generated and stored electronically are created by the same processes each time and have a standardized retrieval process.
Substantiate that security procedures prevent unauthorized additions, modifications, or deletions of records and ensure protection of the system against such problems as power interruptions.
Identify the electronic media on which records are stored throughout their life cycle, the maximum time span that records remain on each storage media, and the official retention requirements.

Admissibility

Electronic documents are legally admissible as evidence with proper documentation according to NDCC 54-46.1-02.1, NDCC 54-46.1-03, and NDCC 31-08-01.1.

Open Records Law

According to North Dakota Century Code 44-04-18 and the North Dakota Constitution, all records of public entity are public records, open and accessible for inspection during reasonable office hours, except as otherwise specifically provided by law.

Confidentiality

Identify confidential records maintained on the system.
Confidential or exempt information must be masked when it is necessary to deliver censored copies.
Access to confidential records will be restricted based on security level and defined in user security permissions.

Electronic/Digital Signatures

In response to North Dakota Century Code chapter 9-16, the state records administrator created Electronic Signature Guidelines, effective October 2004, for the use and acceptance of signatures in the state of North Dakota. These guidelines should be used as a best practice tool and provide basic information regarding electronic signatures.

System Documentation and Metadata

The metadata, or information about the information, defining the ‘context’ of the record is important in maximizing its evidentiary value and ensuring future access. The metadata must document when and how the record was created and used, ensure the inviolability of the record, and capture a history of subsequent transactions in which it is involved. Key attributes, such as author, title, and time and date created, should be reflected in the metadata in electronic systems. They should be an intrinsic part of the document and remain as the contextual information of that document throughout its life cycle.

Documentation for electronic information systems shall meet the following standards:

Each agency shall identify all inputs and outputs; contents; policies on access and use; purpose and function of the system; rules for adding, deleting, or changing information; and methods to ensure authorized disposition.
Each agency shall specify the location and media on which electronic records are maintained and maintain inventories of electronic information systems.
No agency shall enter into a contract with any person or entity which impairs the rights of the public to inspect or copy the agency's public records existing on-line, or stored on a device or media connected with a computer system or imaging system.
Before any agency acquires or modifies any computer or imaging system, it shall assure such proposed system adequately provides for the rights of the public to access public records throughout their approved retention period.

Migration

It must be possible to export records to other systems without the loss of information.

State and local government agencies should require vendor certification of compliance with AIIM TR31, “Legal Acceptance of Records Produced by Information Technology Systems.”

Selection of Electronic Records Storage Media

For storing public records throughout their life cycle, agencies shall select appropriate electronic records storage media and systems which meet the following requirements:

Agencies shall select appropriate media and systems for storing state records throughout their life cycle, which:
- Permit easy and accurate retrieval in a timely manner
- Retain the records in a usable format until their authorized disposition date
- Meet requirements for transferring historical records to the State Archives, when appropriate
The following factors shall be considered before selecting a storage medium or converting from one medium to another:
- Authorized retention of the records as determined on the retention schedule
- Maintenance necessary to retain the records
- Cost of storing and retrieving the records
- Access time to retrieve stored records
- Accessibility of records over time due to software and hardware requirements
- Portability of the medium - selecting a medium that will run on equipment offered by multiple manufacturers
- Ability to transfer the information from one medium to another
Agencies will not use removable data storage devices for the exclusive storage of long-term or permanent records.
Agencies shall ensure that all authorized users can identify and retrieve information stored on media external to the computer system by establishing and adopting procedures for labeling the contents of the storage devices. Identification should include the name of the organizational unit responsible for the data, descriptive title of the contents, identification of software and hardware in use at the time of creation, and security requirements or restrictions, if applicable.
The following information shall be maintained for each media used to store long-term or permanent electronic records:
- File title
- Dates of creation
- Dates of coverage
- Recording density
- Type of internal labels
- Volume serial number, if applicable
- Number of tracks
- Character code/software dependency
- Information about block size
- Sequence number, if the file is part of a multi-media set
Agencies will ensure that information is not lost due to changing technology or deterioration of storage media by converting storage media to provide compatibility with the agency's current hardware and software. Before conversion of information to a different media, agencies must determine that authorized disposition of the electronic records can be implemented after conversion.
Agencies will back up electronic records on a regular basis to safeguard against the loss of information due to equipment malfunctions or human error. Duplicate copies and appropriate indexes of long-term or permanent records will be maintained in storage areas located in buildings separate from the location of the records that have been copied.
Agencies will scan documents at a density of 200 dots per inch or higher.

6. Maintenance of Electronic Records

There is often the presumption that because information is stored in the computer, it is somehow automatically preserved for all time. This brief section is included to provide some basic preservation concerns. No electronic media is considered to be archival in terms of long-term storage.

Environmental Controls

Keep food and drink away from storage media as well as equipment.
Store disks and tapes in a vertical position in a dust-free environment.
Store disks and tapes at a constant temperature between 60 and 68 degrees Fahrenheit and a constant relative humidity from 35% - 45%. Frequent or extreme fluctuations in temperature and humidity can accelerate the deterioration of disks and tapes.

Media Controls

Avoid using removable data storage devices (CDs, thumb drives, flash drives) for the exclusive storage of long-term or permanent records.
Back up electronic records on a regular basis to protect against loss of information due to equipment malfunctions or human error.
Maintain duplicate copies in environmentally-controlled storage areas separate from their original location.
Annually test a statistical sample of magnetic computer tapes and disks to identify any loss of data and to discover and correct the causes of data loss.
Copy all long-term or permanent electronic records before the media are 10 years old to tested and verified new media. The test will verify that the media is free of permanent errors.
Keep disks and tape drives clean.
Keep disks and tapes away from strong electrical or magnetic fields, including telephones.
Do not allow unauthorized persons access to computers, tapes, disks, and documents.
Agencies shall issue written procedures for the care and handling of direct access storage media based on recommendations from the manufacturer.

7. Disposition of Electronic Records

Electronic records may be destroyed only in accordance with records retention schedules approved by the Records Management Task Force. Each agency shall ensure that:

Electronic records scheduled for destruction are disposed of in a manner that ensures protection of any confidential or closed information.
Magnetic recording media previously used for electronic records containing confidential or closed information are not reused if the previously recorded information can be compromised by reuse in any way.
All back-up copies of records scheduled for disposition must be destroyed.

The State Archives' Role in Preserving Electronic Records

The State Archives is responsible for the care, maintenance, and reference use of state records with enduring historical value, regardless of media. The fragile nature of electronic media makes it imperative that archival considerations be incorporated into the design of the information system during its development stage. The State Archivist will work with agencies in the identification of historical information.

The State Archives will accept electronic records identified as having historical value or will cooperate with agencies in preserving and accessing electronic records maintained in agency custody. Because of the variety of formats of electronic records, issues of proprietary software and specialized hardware, decisions need to be made, in consultation with State Archives staff, as to whether to transfer records or maintain them in the agency of origin. If a transfer decision is made, the method, frequency, and format of the transfer must be determined cooperatively by the agency and State Archives staff.

The timing of the actual physical transfer of electronic records should be determined through the records scheduling process. State Archives personnel need to be involved early in the process to ensure that archival requirements are met. Special preservation measures are often required to preserve electronic records.

Electronic records may require conversion to a medium and format suitable to ensure long-term access and readability. All appropriate system documentation must accompany the transfer of electronic records. A computer database without minimum documentation is useless because the contents cannot be read or interpreted.

Electronic records containing confidential information will, like other records containing confidential information, be under the same restrictions in the State Archives as they are in the agency of origin. Transfer to the State Archives does not affect statutory restrictions on access to confidential information.

8. Establishing a Records Management Program

Electronic information is included in the statutory definition of “records.” Therefore, the records must be included on an approved record retention schedule prior to the disposal of the information. Apart from fulfilling statutory records retention requirements, there are other benefits to the state agency. Approved retention schedules offer a mechanism for:

Routine recycling of storage media.
Ensuring accessibility and utility of specific electronic data for appropriate periods of time.
Preventing unauthorized disposition of data.
Limit the liability associated with retaining records beyond their approved retention requirements.
Assisting agencies in establishing policies for ensuring that routine data is erased promptly.
Protecting data of long-term or permanent value.

Inventory

The purpose of a records inventory is to gather information about the characteristics of an organization’s electronic records. Electronic records are inventoried by identifying and analyzing the information systems with which they are associated.

Systems Approach

The systems approach addresses records issues in relationship to each other and tracks information flow within an agency. A systems approach to scheduling electronic records ensures that all parts of an information system are considered during the analysis and appraisal process.

ITD Records Management personnel will work with each agency to develop an inventory of information systems for retention scheduling purposes.

Retention of Electronic Records

The appraisal of the value of the record is developed through a partnership with the state agency and the Records Management Task Force. It involves the appraisal of the function that the records document from the agency perspective, and the potential legal, fiscal, and historical value.

The appraisal should be completed at an early stage when systems are being developed. For records identified as having continuing or long-term value it must be possible to ensure that their content, structure, and context will be preserved and be retrievable over time. It is also necessary to identify the retention periods of more temporary records in the system design specifications to enable records to be automatically deleted when no longer required.

Agencies shall establish policies and procedures to ensure that electronic records and their documentation are retained as long as needed for administrative, legal, fiscal, and historical purposes. These retention procedures shall include provisions for:

Scheduling the retention and disposition of all electronic records, as well as related access documentation and indexes.
If specified as having historical value, working with the State Archives to determine the appropriate method of transferring electronic records and indexes.
Establishing procedures for regular copying, reformatting, and other necessary maintenance to ensure the retention and usability of the electronic records throughout their authorized life cycle.
Disposition of records on the electronic mail system. The agency should take the necessary steps to preserve electronic mail messages with ongoing value in a recordkeeping system along with all appropriate transmission data. Disposition of electronic mail records that have been transferred to an appropriate recordkeeping system is governed by the records retention schedule that control the records in that system. Examples of a recordkeeping system include storing the record on the electronic mail system, storing the record to a separate drive/subdirectory on the computer or an electronic content/document management system, or printing and filing the record in a paper system.

9. Security of Electronic Records

Electronic records must be protected from accidental or intentional damage or destruction and from any modification.

Access

System administrators must set access privileges to protect records from unauthorized users.

Validation

Validation involves ensuring the data is accurate, authentic, and captured as part of the normal course of business activity.

Electronic records must be:

Accurate, in that there is a quality control check to ensure correct data
Understandable, in that the relationship between the information is represented in a way that supports their meaning
Meaningful, in that the contextual linkages of records must carry information that support a correct understanding of the transactions they support

10. Conclusion

State and local government agencies should follow these guidelines in the management of their electronic records.

Maintain electronic records that are accessible, accurate, authentic, reliable, legible, and readable throughout their life cycle.
Document policies, assign responsibilities, and develop formal procedures for creating and maintaining electronic records.
Maintain confidentiality or restricted access to records maintained in electronic format.
Utilize information systems that accurately reproduce the records they create and maintain.
Design and maintain new information systems so they can provide an official record copy for those business functions completed or processed by the system.
Utilize information systems that can delete electronic records according to approved records retention schedules.

Drafted By

ITD Records Management

ITD Records Management can be contacted by calling 701-328-3585.