Records Management. Policy and Practice. Manual



Similar documents
RECORDS MANAGEMENT POLICY

Records Management Policy.doc

Scotland s Commissioner for Children and Young People Records Management Policy

Temporary Records Procedure

COUNCIL POLICY R180 RECORDS MANAGEMENT

COMPLIANCE WITH THIS DOCUMENT IS MANDATORY

State Records Office Guideline. Management of Digital Records

Territory Records (Records Disposal Schedule Disaster Recovery (Human Services) Records) Approval 2005 (No 1)

State Records Guidelines No 23. Certification for Places of Deposit of State archives

Security of Archives in the Custody of the NT Archives Service

9. GOVERNANCE. Policy 9.8 RECORDS MANAGEMENT POLICY. Version 4

Records Management Policy

Records Management - Department of Health

Management of Official Records in a Business System

LORD CHANCELLOR S CODE OF PRACTICE ON THE MANAGEMENT OF RECORDS UNDER

RECORDS MANAGEMENT POLICY

How To Manage Records And Information Management In Alberta

Information and records management. Purpose. Scope. Policy

Life Cycle of Records

Policy Document RECORDS MANAGEMENT POLICY

FREEDOM OF INFORMATION (SCOTLAND) ACT 2002 CODE OF PRACTICE ON RECORDS MANAGEMENT

State Records Guideline No 15. Recordkeeping Strategies for Websites and Web pages

Cloud Computing and Records Management

Records Disposal Schedule Anti-Discrimination Services Northern Territory Anti-Discrimination Commission

RECORDS AND INFORMATION MANAGEMENT AND RETENTION

West Midlands Police and Crime Commissioner Records Management Policy 1 Contents

RECORDKEEPING MATURITY MODEL

September Tsawwassen First Nation Policy for Records and Information Management

Records Disposal Schedule. NT Fleet Management. Department of Corporate and Information Services. Disposal Schedule No. 2004/2

Records Management. 1. Introduction. 2. Strategic Plan Desired Outcomes

INSTITUTE OF TECHNOLOGY TALLAGHT RECORD MANAGEMENT & RETENTION POLICY

Information Security Policy September 2009 Newman University IT Services. Information Security Policy

What NHS staff need to know

UNIVERSITY OF NAIROBI POLICY ON RECORDS MANAGEMENT

Guideline for the Implementation of Retention and Disposal Schedules

TERRITORY RECORDS OFFICE BUSINESS SYSTEMS AND DIGITAL RECORDKEEPING FUNCTIONALITY ASSESSMENT TOOL

Queensland recordkeeping metadata standard and guideline

Corporate Records Management Policy

State Records Guideline No 13. Certification for secondary storage providers

University of Liverpool

Records and Information Management. General Manager Corporate Services

Information and Compliance Management Information Management Policy

Records Management Policy

Non-Profit Records Management Tool Kit

Information Management Advice 50 Developing a Records Management policy

Records Management Policy

Implementing an Electronic Document and Records Management System. Key Considerations

Records Management Policy

RECORDS MANAGEMENT POLICY

5.3. CQUniversity records and information will be captured and managed within one of the following corporate systems:

Management: A Guide For Harvard Administrators

RECORD KEEPING CODE OF PRACTICE FOR THE MANAGEMENT OF CONTRACT RECORDS*

Council Policy. Records & Information Management

How To Use A Court Record Electronically In Idaho

Digitisation of official records and management of source documents

Lord Chancellor s Code of Practice on the management of records issued under section 46 of the Freedom of Information Act 2000

NCI-Frederick Safety and Environmental Compliance Manual 03/2013

User Guide to Retention and Disposal Schedules Council of Europe Records Management Project

POLICY AND GUIDELINES FOR THE MANAGEMENT OF ELECTRONIC RECORDS INCLUDING ELECTRONIC MAIL ( ) SYSTEMS

4.01. Archives of Ontario and Information Storage and Retrieval Services. Chapter 4 Section. Background

TOWN OF COTTESLOE POLICY MANAGEMENT

Polices and Procedures

SOUTHWEST VIRGINIA COMMUNITY COLLEGE RECORDS MANAGEMENT PROGRAM. Revised January 15, 2014

SRC Standard 7. Storage of State Archives retained by State Organizations through an approved Recordkeeping Plan

CCG: IG06: Records Management Policy and Strategy

RECORDS MANAGEMENT POLICY

How To Protect Decd Information From Harm

Using Keyword AAA: A thesaurus of common administrative terms

Information Security Policies. Version 6.1

DELAWARE PUBLIC ARCHIVES POLICY STATEMENT AND GUIDELINES ELECTRONIC MAIL

Records Management Plan. April 2015

Section 12 Setting up a Mission Records Storage Facility

Management of Records

District Council of Yankalilla

RECORDS MANAGEMENT POLICY MANUAL

Basic Records Management Practices for Saskatchewan Government*

Records Management - Council Policy Version 2-28 April Council Policy. Records Management. Table of Contents. Table of Contents... 1 Policy...

Table of Contents. Chapter No. 1. Introduction Objective Use Compliance Definitions Roles and Responsibilities 2

SOUTHWEST VIRGINIA COMMUNITY COLLEGE RECORDS MANAGEMENT POLICY

REGIONAL COUNCIL OF GOYDER. Records Management

Gatekeeper PKI Framework. February Registration Authority Operations Manual Review Criteria

Chapter RECORDS MANAGEMENT Sections:

Records Management - Risk Assessment Tool

CORPORATE RECORDS MANAGEMENT POLICY

Information Management Advice 54 Records Management toolkit for Local Government

HOW TO CREATE A VITAL RECORDS PROTECTION PLAN. New York State Unified Court System Division of Court Operations Office of Records Management

Information Management Policy for The Treasury Department

ADRI. Advice on managing the recordkeeping risks associated with cloud computing. ADRI v1.0

Records Management plan

Records Management Checklist. preservation. accountability. information. security. peoplep. A tool to improve records management

Information Circular

Specification. State Archives POD Storage. Public Record Office Victoria PROS 11/01 Storage. Version Number: 1.0. Issue Date: 25/01/2011

Records Management Standards. Records Management Standards for Public Sector Organisations in the Northern Territory

Disposal Authorisation for Information and Technology Management Records. Administrative Schedule No. 4

Saskatchewan Records Management Guidelines

General Disposal Authority. For encrypted records created in online security processes

RECORDS MANAGEMENT MANUAL

Newcastle University Information Security Procedures Version 3

Transcription:

Records Management Policy and Practice Manual State Records 1996 GPO Box 1072 ADELAIDE SA 5001 Telephone (08) 8226 7750 Facsimile (08) 8204 8777 & 8204 8778

TABLE OF CONTENTS Acknowledgments... 3 Introduction... 3 Rationale... 4 Implementation... 4 Updates... 5 Definition... 6 Section 1 Creation & Control... 8 Section 2 Storage... 14 Appendix -1 Records Storage Conditions... 22 Section 3 Disposal... 22 Section 4 Electronic Record Keeping... 28 Section 5 Disaster Recovery... 33 Section 6 Ownership... 40 Index... 44 State Records The contents of this Manual are copyright to State Records. The contents may be reproduced for reference purposes by South Australian State and Local Government Authorities without further reference to State Records. The contents of the Manual cannot be reproduced by other organisations or used by any organisation for commercial purposes without permission in writing from the Manager, State Records. Introduction Page 2

ACKNOWLEDGMENTS State Records would like to acknowledge the contribution of everyone who provided invaluable advice and assistance in the preparation of this manual. The manual was prepared by Bernadette Bean (Archivist, State Records) in consultation with Peter Acres (Project Director, Whole of Government Records Management Project, State Records), Andrew Boucher (Senior Archivist, State Records), Steve Childs (Project Officer, Desktop Systems Information Management Division, South Australian Health Commission), Jelena Comelli (RecFind Agency Administrator, Department of Transport), Jill Coombe (Business Manager, Department for Family and Community Services), Jo Duldig (Records Manager, Department for Education and Childrens Services), Alison Foley (Records Manager, Department of Premier and Cabinet), Madelaine Fulcher (Archivist, WorkCover Corporation), Ute Hart (Acting Client Services Officer, Department for Technical and Further Education), Phill Heitmann (Records Management Officer, Department of Environment and Natural Resources), Michael Hodder (Manager, State Records), Sue Myburgh (Senior Lecturer, Information Management, University of South Australia), Spiros Sarris (Senior Project Officer, Records Management, SA Water), Anna Varga (Coordinator Medical Records, Royal Adelaide Hospital), Estelle Vincent (Records Management Project Officer, Department for Correctional Services). INTRODUCTION Each government agency has a responsibility to...ensure that the official records in its custody are maintained in good order and condition (State Records Bill 1996, Section 13). The policies and practices in this manual have been written to assist agencies to meet this obligation. This manual is issued under Section 14(j) of the Libraries Act 1982. The policies and practices are applicable to all public instrumentalities as defined in Section 5 of the Libraries Act 1982. State Records endorses Australian Standard: Records Management (AS 4390-1996) as an industry code of best practice and encourages agencies to do the same. The policies and practices described in this manual are consistent with the standard and, if implemented, will enable agencies to comply with that standard. Note: This Manual was written under the assumption that the State Records Act would have been promulgated by the time the manual was due for release. As this has not occurred the Manual is being released under the Libraries Act 1982. However, references to the State Records Bill remain in the text to provide a guide to agencies of the obligations and responsibilities they will have regarding recordkeeping practices once the State Records Bill has been promulgated. Introduction Page 3

RATIONALE The value of records to an organisation is that they provide evidence of transactions and decisions. The records enable the organisation to keep track of business transactions, be accountable for decisions made and money spent, meet service delivery and community requirements for information and provide a historical record of the organisation s operations and activities. The Government s vision for the future of the public sector is one which will require excellent recordkeeping practices. The South Australian public sector will be required to: offer a one stop service to customers where agencies appear boundaryless because customers will not need to know which agency performs a particular function in order to get information deliver faster turn around times for decision making enable personnel to work from anywhere including their homes, at clients offices and their normal place of work To ensure this vision becomes reality agencies will need to develop recordkeeping regimes which ensure that full and accurate records are created and maintained, that authorised access to those records is timely and secure and that records which are no longer required for administrative purposes are identified quickly. It is therefore essential that agencies develop a systematic approach to recordkeeping and that this approach is incorporated into the strategic programmes established to support agency services and functions. Implementing good records management practices is not an option or merely desirable, it is a fundamental prerequisite for the efficient running of the organisation. The international quality systems standards (ISO 9000 series) demand that organisations have a level of good recordkeeping before accreditation can be obtained. IMPLEMENTATION This manual contains policy statements on a variety of records management related issues. They are divided into broad subject categories but many overlap. Policy statements are the minimum standard which an agency must meet to fulfil its obligations under the State Records Act 1996. Each policy statement is followed by practice guidelines which include steps and strategies to assist agencies in meeting the particular policy requirement. The guidelines are as broad as possible while taking into account mandatory minimum standards of best practice. Typically a strategy is suggested which will enable the agency to meet its obligations while allowing for the individual differences (in terms of size, resources and requirements) between agencies. The guidelines do not normally specify a particular product or system (such as file numbering system). The obvious exception to this rule is the RecFind records management software that has been mandated for use across all State Government agencies. The guidelines occasionally refer to specific functions of the RecFind product in order to demonstrate a particular strategy. Local Government authorities and State Government authorities with an exemption Introduction Page 4

from RecFind should not be deterred from implementing the guidelines which specify RecFind functions as the information given would be equally applicable to other records management systems. A number of the polices in this manual recommend the survey of record holdings for a variety of reasons. Agencies should investigate the possibility of conducting a single survey which meets all of their requirements including the identification of vital records, the assessment of disposal schedule needs, the evaluation of storage requirements etc. In addition to this manual, agencies can contact State Records for advice regarding the implementation of a particular policy or strategy or the method which would be most suitable for that agency. UPDATES From time to time State Records will issue updates to this manual either in the form of completely new policies or amendments or additions to existing polices. A register of recipients is maintained by State Records and all registered recipients will receive copies of the updates on disk. All disks have a date and version number on the label and each section has an issue date and version number. Please ensure that you keep your manual up to date by replacing old versions as soon as you receive the updated versions. Introduction Page 5

DEFINITIONS For the purposes of this manual, the definitions from Australian Standard - Records Management 4390.1 apply except where otherwise identified Accountability The principle that individuals, organisations and the community are required to account to others for their actions, organisations and their employees must be able to account to appropriate regulatory authorities, to shareholders or members and to the public to meet statutory obligations, audit requirements relevant standards and codes of practice and community expectations. Appraisal The process of evaluating business activities to determine which records need to be captured and how long the records need to be kept, to meet business needs, the requirements of organisational accountability and community expectations. Archives Those records that are appraised as having continuing (or permanent) value. Business Activity Umbrella term covering all the functions, processes, activities and transactions of an organisation and its employees. Includes public administration as well as commercial business. Classification The process of devising and applying schemes based on the business activities which generate records, whereby they are categorised in systematic and consistent ways to facilitate their capture, retrieval, maintenance and disposal. Classification includes determining document or file naming conventions, user permissions and security restrictions on records. Disposal A range of processes associated with implementing appraisal decisions. These include the retention, deletion or destruction of records in or from recordkeeping systems. They may also include the migration or transmission of records between recordkeeping systems, and the transfer of custody or ownership of records. Disposal Authority (Schedule) A formal instrument that defines the retention periods and consequent disposal actions authorised for classes of records which are described in it. Introduction Page 6

Documents Structured units of recorded information, published or unpublished, in hard copy or electronic form, and managed as discrete units in information systems. Electronic Records Records communicated and maintained by means of electronic equipment. Function The largest unit of business activity in an organisation or jurisdiction. Metadata Data describing data and data systems, that is the structure of databases, their characteristics, location, usage and the like ( Metadata and the Archival Management of Electronic Records, David Wallace in Archivaria 36;1993). Recordkeeping Making and maintaining complete, accurate and reliable evidence of business transactions in the form of recorded information. Recordkeeping Systems Information systems which capture, maintain and provide access to records over time. Records Recorded information, in any form, including data in computer systems, created or received and maintained by an organisation or person in the transaction of business or the conduct of affairs and kept as evidence of such activity. Records Management The discipline and organisational function of managing records to meet operational business needs, accountability requirements and community expectations. Registration The act of giving a record a unique identity in a recordkeeping system. Thesaurus A keyword thesaurus provides control and consistency over the vocabulary used for titling and indexing records (Keyword AAA: A Thesaurus of General Terms, Records Management Office of New South Wales, 1995). Introduction Page 7

Section 1: Creation and Control Policy Status: Approved Version: 1 Date of Issue: September 23, 1996 Introduction Records are created to provide evidence of the business activities carried out in our organisations. They help fulfil the requirement of government to be accountable for the decisions it makes and the resources it uses. Records provide a means of tracking business transactions, increasing the efficiency of those transactions and allow the chronicling of the corporate memory. Essentially, records are an important and valuable asset for any organisation and their creation and control should be managed accordingly. Records control procedures should be established and strictly adhered to and they must encompass the creation and control of all records including electronic records, financial records and human resources records as well as traditional paper based correspondence and subject files. All staff within an agency should be made aware of these procedures and any responsibilities they may have to ensure they are adhered to. This Section addresses the situations in which records should be created, the way records should be classified and tracked and the management of incoming mail. 1.1 Policy Records must be created in all instances where there is a need for an agency or individual to be accountable for, and/or provide evidence of, decisions made and actions taken. 1.1.1 Records should be created in the following situations: where evidence of an agency s functions, activities and transactions is required where a requirement may exist (or develop) to prove that proper decision making processes have been followed where there is the possibility that members of the public or other parties will have a requirement to know what activities have taken place, what decisions have been made, the order and time in which events occurred and the people involved where there is a need to protect the rights or interests of the organisation, its employees, its clients or the general public where their absence could cause the inability of the Government, the Minister or employees to defend themselves against legal action or accusations of impropriety or fraud where their absence might result in political embarrassment where there is a specific legislative requirement for a record to be maintained Section 1: Creation and Control Page 8

1.1.2 The creation of specific records is not prescribed by the State Records Bill but other legislation will often mandate the creation and maintenance of certain records. It is each agency s responsibility to ensure that relative legislation is monitored and that appropriate changes are made to record creation and maintenance practices. 1.1.3 Agencies are encouraged to identify instances where new record types will be required (eg. new legislation or regulations, taking on a new function etc.) as early as possible and to alert State Records so that preparation of new disposal schedules can be planned. 1.2 Policy Records should be uniquely identified and registered on the corporate records management system as soon as they are received/created and no other records management processes affecting the record should take place until registration is complete. 1.2.1 Registration of records should link the record to descriptive information about the context of the record and to related records and should consequently include the following information: unique identifying label such as name or number (or both) creating agency and/or individual whom the record was intended for (recipient) the date the record was created and/or received the level of security or sensitivity that has been accorded to the content Registration of electronic records must include additional contextual information which is discussed in greater detail in Section 4 Electronic Recordkeeping. 1.2.2 Many of the above details can be made mandatory fields in electronic records management packages such as RecFind. It is the responsibility of the Agency Administrator to select the most appropriate file and document registration number formats, file title structure and file type codes for the agency s use. This policy does not mandate the use of any particular format, structure or codes. 1.3 Policy Records must be classified by a hierarchical thesaurus which meets the conventions of ISO 2788. 1.3.1 Agencies should use a combination of the general administrative thesaurus and an agency specific thesaurus to help consistently classify records. Their use may be automated through the use of records management software systems such as RecFind. Section 1: Creation and Control Page 9

1.4 Policy Record security requirements should be established at creation/registration and should include identification restrictions relating to their availability for access, use or alteration. 1.4.1 The electronic records management system used by the agency should prompt for the security classification of the record during registration. For example in RecFind the Add File and Add Document screens contain security prompts, completion of which should be made mandatory. 1.4.2 Each organisation will have unique security requirements for various records and it is the Agency Administrator s role to ensure that these are identified and used. Some considerations in regard to the sensitivity of particular groups of records include: whether or not the records contain personal information concerning individuals whether or not the records contain information which is considered commercial in confidence whether or not the records contain information which needs to be restricted to senior management 1.4.3 Access rights and restrictions affected by Freedom of Information legislation or the Information Privacy Principles should be determined and reflected in the security designation of records. Specific restrictions or access rights established under specific legislation should also be reflected in the security designation. 1.5 Policy The physical movement of records should be documented sufficiently to ensure that physical items can be located as required. 1.5.1 All transactions relating to an individual record should be recorded in the recordkeeping system. Such transactions include registration and classification, modification, physical movements, and ultimate disposal. Section 1: Creation and Control Page 10

1.5.2 A log of record movements should be kept, although it is the Agency Administrator s role to determine the number of movements to be retained (RecFind allows between 5 and 99 movements to be kept for each record). Wherever possible the recording of record movements should be automated. Electronic records management systems offer several options for recording movements. The most comprehensive is the barcode facility which allows a large quantity of movements to be processed in a short space of time. All barcode systems should comply with standard 3 of 9. If an automated system is not used, reliable manual means of recording the movement of records should be maintained. For example manual updating via the File Movement module in RecFind when a record is moved could be made mandatory. In this instance all officers should be made aware of their responsibilities and trained in the use of RecFind so that they can adequately complete this task. 1.5.3 Regardless of whether the agency s hardcopy records are barcoded or not, regular location audits should take place. The physical location of all files, loose documents and other physical items should be audited and the database/movement record updated accordingly. Naturally, it is much easier and speedier to audit barcoded records, especially by using portable barcode readers. Wherever possible, location audits should include checks to ensure that records are in areas or with people consistent with their security requirements. 1.6 Policy The system used to manage records must be able to be monitored and should be monitored regularly to ensure that the identification and retrieval of information remains consistent. 1.6.1 It is the Agency Administrator s role to perform both regular and random checks of the data added to the data base. This can be done through the Audit Trail facility offered by most software packages. 1.7 Policy Mail handling procedures should ensure that mail is dealt with in a timely manner and that the flow of correspondence within individual agencies and throughout the government is as efficient as possible. Suitable resources must be devoted to this process. 1.7.1 Each agency must develop mail management procedures for both traditional paper-based correspondence and electronic mail (refer also to Section 4). Such procedures should be endorsed by the Chief Executive Officer and be widely promulgated within the agency so that all officers are aware of their responsibilities in this regard. While each agency will have varying requirements with regard to mail management the points listed below must be included and/or addressed: Section 1: Creation and Control Page 11

1.7.1 (a) Incoming correspondence (including that received through Australia Post, Courier Services (eg AusDoc), e-mail facilities, facsimile or by personal delivery) should be opened and registered on the records management system at the earliest opportunity. In some cases this will happen in a central registry, in others it may happen at a branch or section level, and in others by an authorised action officer. No correspondence should be forwarded for action before it has been registered. 1.7.1 (b) Although some mail is of a confidential nature (eg job applications, counselling reports etc.) it still requires registration. Therefore mail that is specifically marked personal or confidential can be opened directly by the identified person only if that person ensures that appropriate mail is registered. Non-registry officers who are likely to receive a large quantity of confidential mail (such as personnel managers) could be targeted to receive training in the registration and classification of mail. A record of unopened mail sent to any person should be kept and the addressee should be required to assert that the record has been properly registered where applicable. Alternatively such mail should be opened by a senior person (within registry if applicable) who has adequate security clearance. If this strategy is adopted all personnel should be informed that mail marked personal or confidential will be opened by other staff. 1.7.1 (c) Mail should be registered as soon as possible after it is received and certainly before it is forwarded to the relevant action officer. 1.7.1 (d) Unsolicited junk mail should not normally be registered or filed. 1.7.1 (e) The opening and registering of particular categories of documents, such as tender documents or cheques, must be carried out according to relevant central agency circulars or instructions (Refer to Treasury Instruction 112.01 - Remittances by Post Mail Opening ). 1.7.1 (f) The internal distribution and collection of mail should be well planned and regular so that there is confidence in the system. This should avoid people by-passing the system, or maintaining separate (and sometimes duplicate) systems, which reduce the operating efficiency of the agency. 1.7.1 (g) Outgoing mail should be collected and despatched rapidly so that customers develop a favourable image of the organisation. All mail should be despatched within 24 hours of the date written on the correspondence. Section 1: Creation and Control Page 12

1.7.1 (h) In order to present a professional image and reduce queries from recipients, all officers preparing outgoing correspondence should be trained to comply with outgoing mail procedures. Such procedures should include ensuring correspondence is appropriately registered, ensuring that letters are signed, adding file reference numbers, ensuring attachments or enclosures are included, producing file copies or transferring electronic mail messages to the corporate system (refer Section 4: Electronic Recordkeeping). 1.7.1 (i) Mail management procedures should be monitored to ensure efficiency remains high and to identify potential for improvement. Monitoring can include customer feedback and random test letters which can be followed through the distribution process to check how long each step takes. Please note that points 1.7.1(a)-(i) were adapted from Public Records Policy 5: Policies and Standards Manual: Records Management, Public Records Office of Western Australia. Acknowledgments and Referenced Documents: A Report on the Development of a Documentation Standard for Commonwealth Agencies - Proposed Theoretical Basis, Australian Archives, September 1995 Australian Standard: Records Management (AS 4390), Standards Australia, 1996 International Standard: Documentation - Guidelines for the establishment and development of monolingual thesauri (ISO 2788), International Standards Organisation, 1986 Policies and Standards Manual: Records Management, Public Records Office of Western Australia, 1992 Section 1: Creation and Control Page 13

Section 2: Storage Policy Status: Approved Version: 1 Date of Issue: September 23, 1996 Introduction Storage facilities should be designed to ensure the most efficient use of space, time, human resources and money and must provide appropriate levels of protection for records. The design and placement of the most suitable storage arrangements will vary according to a number of factors including the physical characteristics of the records, the expected access rate of the records, the level of security applicable to the records, the length of time for which the records need to be retained and the resources available to the agency. It is essential that these factors be considered and incorporated into an agency s ongoing storage arrangements. It is likely that an agency will have a variety of storage areas and arrangements for different records. 2.1 Policy Records must be stored in conditions which ensure that they are accessible and retrievable in appropriate timeliness for the length of time they are retained. 2.1.1 There are basic requirements which need to be met for the storage of all records whether they are stored in working-office areas or in a secondary or archival store: 2.1.1 (a) The physical environment should be clean and free from dust. Storage areas should be swept and/or vacuumed regularly and should be kept clean and tidy 2.1.1 (b) The records should never be exposed to direct sunlight and should be kept away from other sources of light and heat as much as is practical. Storage areas should not have outside windows. If the area does have outside windows cover them from the inside and seal the edges. Ultra-Violet (UV) filtered lighting should be used. If the records require airconditioned storage (refer to table in Appendix 1) separate air-conditioning should be available in order to maintain a constant temperature and relative humidity (the optimum temperature and relative humidity for record storage depends on the media being stored). 2.1.1 (c) The physical environment should be free of insects and rodents. Options for regular fumigation of storage areas should be investigated. Food should never be stored or consumed in a records storage area. Section 2: Storage Page 14

2.1.1 (d) There should be minimal risk of damage from natural disaster such as fire, water and mould. Ensure that storage areas are adequately protected in the event of a fire or similar disaster (refer Section 5: Disaster Recovery). Also ensure areas are well ventilated to avoid the growth of mould. There must be a policy of no smoking in all records storage areas 2.1.1 (e) It should be possible to retrieve records accurately and in a time period appropriate to the urgency of the retrieval request. Itemised indexes, registers or lists of records which include location details should be maintained and accessible to all people requiring access to records to ensure both accurate and timely retrieval. A computerised records management system (such as RecFind) is the easiest and most comprehensive way to provide this access. 2.2 Policy Records which are no longer required for day-to-day access which have been identified as having a specified temporary retention period (via a records disposal schedule) should be removed from working office areas. 2.2.1 In most cases removal to an off-site storage facility is the most costeffective option for the storage of inactive, temporary value paper records. The following storage conditions should apply in addition to the basic conditions outlined in point 2.1.1 (a)- (e) above: 2.2.1 (a) Records should be stored in boxes or similar packaging to protect them from light and dust. The boxes must be strong enough to withstand handling and the weight of the records they contain. Boxes should be designed to suit the particular records they will contain (ie there should be boxes suitable for files, A3 computer printouts, cards etc.). It is possible to simply bundle records together (to save time and boxes) although the inability to adequately label the bundles causes retrieval difficulties. 2.2.2 (b) The facility should provide pallet storage, shelving or cabinets which are appropriate for the record formats being stored. There should be shelving appropriate for the storage of different size boxes, maps and plans (vertical, hanging storage is preferred), large volumes, reel-toreel backup tapes etc. 2.2.2 (c) The facility may need to have air-conditioning and environmental controls to adequately protect the records. This will vary according to the format of the records and the length of time they need to be retained. Refer to Appendix 1 for further details. Section 2: Storage Page 15

2.2.2 (d) The facility must have fire alarm, detection and suppressant systems. There must be a policy of no smoking in all records storage areas. 2.2.2 (e) If possible the facility should be a dedicated building or area of a building used solely for the storage of records. This aids the maintenance of optimum lighting and environmental conditions and reduces the risk of unauthorised access. 2.2.2 (f) Access to storage areas should be restricted to personnel with appropriate authority. Security measures such as alarms, patrols and staff security checks should be appropriate to the content of the records. Depending on the security level of the records and the number of people accessing the records there may be a requirement to maintain a record of persons entering the building or area. 2.2.2 (g) A pest and vermin control programme should be implemented. 2.2.2 (h) To facilitate retrieval, an itemised record of the contents of the boxes should be prepared (State Records refers to these lists as consignment lists). If records are to be stored with a commercial service provider ensure, before you begin work, that the boxes and consignment lists you use comply with the provider s requirements. 2.2.2 (i) Ensure that the location of the facility and the retrieval service offered is compatible with the agency s requirements for retrieval turn-around. 2.3 Policy To ensure their longevity records which have been identified as having permanent or continuing value should be stored in conditions which satisfy minimum standards for permanent records. 2.3.1 Under the State Records Bill 1996 (section 19) records identified as having permanent value must be transferred to State Records no later than 15 years after the year in which they were created unless alternative storage arrangements are approved by the Manager, State Records. Notwithstanding the 15 year rule, agencies are encouraged to transfer permanent value records as soon as administrative use ceases. For the purposes of this policy the environmental conditions and safety standards for the storage of permanent records given in Appendix C of Australian Standard - Records Management 4390.6 must be adhered to before such approval will be given. Section 2: Storage Page 16

2.3.2 In the case of records in electronic format which are identified as having permanent value it may not be necessary or desirable to transfer to State Records. Agencies must choose between the following options: 2.3.2 (a) Maintaining the records through migration - This option is particularly suitable in cases where transferring records to hard copy would render the records useless (eg electronic data bases where the value of the records is enhanced by searching and reporting facilities). It is the agency s responsibility to maintain both the records and the machinery needed to access them. This will mean that the data and the metadata required to make sense of the records will need to be migrated to new hardware and operating platforms as part of the upgrading process. The agency s corporate planning (including IT policies) will need to incorporate this requirement. 2.3.2 (b) Transferring records to hard copy (paper or microform) - In some instances constant migration of records may not be cost effective or practical. Records can be transferred to hard copy (paper or computer output microform) and transferred to archival storage in the normal manner. 2.4 Policy Records should be stored in conditions which take into account their physical characteristics, sensitivity, retention period and expected access rate. 2.4.1 There are basic requirements which need to be met for all records storage areas. These are outlined in points 2.1.1(a)-(e). However, the factors listed here will determine any additional or special storage requirements and must be considered when establishing storage arrangements. In general, a combination of these factors will determine the ultimate storage conditions for particular records. 2.4.2 Physical Characteristics: Records may be in a variety of formats and media including files (typically paper), loose papers, bound volumes, maps and plans, cards, photographic prints, negatives and slides, film, microform, magnetic and optical media, audio recordings and other physical objects (eg core samples). Each format or media requires protective packaging and environmental conditions that are suited to the composition and design of the records. State Records can provide advice regarding these issues or, alternatively, agencies may consult an organisation which specialises in conservation or the suppliers of the media being stored. Section 2: Storage Page 17

2.4.3 Sensitivity or Security: All official records should be stored in such a way as to minimise the potential for unauthorised access. However, records which have added sensitivity, for example those recording commercial interests or those relating to personal privacy, will require additional security arrangements. Once such records are identified they should be stored separately from less sensitive material. Security options include: 2.4.3 (a) In the office area use lockable cabinets or compactus units and keep a register of persons given keys and/or authority to access the records. It may also be necessary to keep a record of who has accessed the records and when that access has taken place. 2.4.3 (b) Store the records off-site either in another building belonging to the agency or with a commercial service provider. Again, keep a record of the persons with authority to access the material and, if necessary, a record of who does access the records and when that access takes place. Commercial service providers should be willing to put into place any measures you require to restrict access to the records. 2.4.3 (c) In the case of sensitive electronic records ensure that South Australian Government Information Technology Security Standards are adhered to. The conduct of regular record audits and the use of the electronic access log to detect breaches will help maximise security efforts. 2.4.4 Retention period: One of the reasons it is so important to have all records covered by a records disposal schedule (refer to Section 3: Disposal) is to help identify storage requirements for various records. Considerations include: 2.4.4 (a) If records are only required to be kept for a short time (anything less than about two years) it may not be cost effective to transfer the records to off-site storage prior to destruction. 2.4.4 (b) Again, if records only need to be kept for a short period, and the physical characteristics are known to last for that time period, specialised storage arrangements may not be required. 2.4.4 (c) In the case of hard copy records which are required to be kept for more than two years it is normally cost-effective to transfer them offsite as soon as day-to-day administrative use has ceased. 2.4.4 (d) Electronic records that form part of other format types (eg an electronic copy of an image or document that is part of a paper format file) will be subject to the same disposal requirements that apply to the paper record. Section 2: Storage Page 18

2.4.4 (e) Electronic records which have been identified as having a long retention period will require the appropriate environmental conditions for their storage. It will also be necessary to ensure that the appropriate hardware and software are maintained for the length of the retention period. 2.4.4 (f) Records identified for permanent retention as state archives will need to be treated with the highest standards of physical and environmental storage from the time they are created to ensure their longevity. Such records should be transferred to an appropriate archival storage facility as soon as practicable. NB: Agencies are referred to Australian Standard - Records Management AS 4390.6 Appendix C for storage conditions applicable to long term temporary and permanent records and to the Supplies and Materials Policy which appears in this manual for guidelines on the paper and folders which should be used for records identified as having permanent value. 2.4.5 Expected access rate: The optimum time to transfer records off-site will vary between agencies according to the nature of the records they use. In general, records should be transferred to secondary storage as soon as is practicable after active use ceases. That is, when immediate access for reference or additions is not critical. The key issue is managing the risk of not having the record available for immediate access should access be required. In some cases it will be of minimal importance while in others it will be critical. Agencies should bear in mind that many off-site storage providers offer extremely fast urgent retrieval options, although there will obviously be costs associated with these services. 2.4.5 (a) Example of access rate evaluation: A court record relating to a traffic offence is unlikely to be accessed once any fines have been paid and the appeal period has lapsed. It may therefore be reasonable to transfer the record to off-site storage after just two months. Even if there were to be an inquiry regarding the record, any delay accessing the record from off-site storage would be considered reasonable. Section 2: Storage Page 19

2.5 Policy In cases where records are stored with a commercial service provider a records storage services contract should be prepared. 2.5.1 A service provider contract should state the responsibilities and obligations of both the provider and the agency which owns the records. It should also clearly describe the service or services to be offered and the charges for each of these. Agencies are reminded to consider carefully any clauses of a contract which deal with the removal of records before the contract period expires. Agencies are referred to Australian Standard - Records Management AS 4390.6 Appendix D for a full list of the issues which should be covered by a records storage services contract. 2.6 Policy All records storage facilities used by an agency (including those provided by a commercial service provider) must comply with occupational health, safety and welfare requirements for manual handling and lighting. 2.6.1 Agencies should not select commercial service providers unless their occupational health, safety and welfare standards meet those outlined here. 2.6.2 Storage containers such as boxes should not be uncomfortably heavy if they are to be lifted without the aid of mechanical lifting devices. Eight (8) kilograms is an acceptable weight for boxes filled with paper. 2.6.3 Unless mechanical lifting and carrying devices (such as cherry pickers) are available shelving should not be so high as to make retrieval of items dangerous. Strongly constructed ladders with wide steps and platforms on which to rest items should be provided. 2.6.4 Personnel should be trained and encouraged to use correct lifting practices and the necessary equipment for them to do so (eg ladders, trolleys etc.) should be provided. 2.6.5 Boxes and other storage containers should be constructed of appropriately strong material. Boxes which require sticky tape or other fasteners should never be used (ie. only use boxes which are folded). 2.6.6 Shelving should be of a suitable gauge to hold the weight expected to be stored and should never be loaded beyond this weight capacity. 2.6.7 Storage containers should not be over-packed. Approximately 2-3 centimetres of space should be left to allow easy manoeuvring and to reduce the risk of contents spilling out when removed from the shelf. Section 2: Storage Page 20

2.6.8 Heavy items (over 4 kg) should never be placed above waist height on shelves if they are to be lifted without the aid of mechanical lifting devices. 2.6.9 Ensure lighting in corridors and walkways is sufficient to enable visibility. Use UV-filtered lighting that travels in the opposite direction to the shelving. 2.6.10 Lighting in storage areas should cause minimal damage to records and is therefore unlikely to prove suitable for long periods of reading. Ensure separate, well lit working areas (including sorting and processing areas) are provided. 2.6.11 Do not use time controlled lighting in storage areas. Acknowledgments and Referenced Documents: Australian Standard - Records Management (As 4390), Standards Australia, 1996 Policies and Standards Manual - Records Management, Public Record Office of Western Australia, 1992 South Australian Government Information Technology Security Standards - In An Outsourced Environment, Version 1.0, Office of Information Technology, 1994 (now available through the successor agency - the Department of Information Industries) Section 2: Storage Page 21

Short Term (0-10yrs) Paper and microform media Short Term (0-10yrs) Magnetic media APPENDIX 1: RECORDS STORAGE CONDITIONS Atmosphere Lighting Packaging Maintenance Avoid direct light where possible Avoid severe fluctuations in temperature and relative humidity Refer to storage information supplied by distributor Use boxes or other appropriate packaging for records which are no longer in active use Keep all areas clean and free from dust Food should not be stored or consumed in records storage areas Medium (10-30yrs) Paper and microform media Medium (10-30yrs) Magnetic media Maintain constant temperature and relative humidity (optimum conditions: 20-22 C, RH 50-60%) Ensure air condition filters out sulphur dioxide from incoming air Ensure there is ventilation or air flow to Refer to storage information supplied by distributor Avoid direct light Use UV filters on fluorescent lamps Outside windows should be blocked up or covered Use boxes or other appropriate packaging for records which are no longer in active use Ensure areas are cleaned regularly and free from dust Food should not be stored or consumed in records storage areas Fumigate regularly Long Term and Permanent (30 yrs + ) All media Refer to Australian Standard - Records Management AS 4390.6 Appendix C Section 2: Storage Page 22

Section 3: Disposal Policy Status: Approved Version: 1 Date of Issue: September 23 1996 Introduction Disposal programmes involve the appraisal, sentencing, transfer to secondary storage and ultimate disposition (where the records are either transferred to archives or destroyed) of records, and should be included in the normal business operations of the agency. The programmed disposal of records in accordance with approved disposal schedules should be as routine as the payment of invoices or the preparation of annual budgets. 3.1 Policy Disposal of official public records can only be authorised by the Manager, State Records after approval has been sought from the State Records Advisory Council (State Records Bill 1996, Section 23(1)). Authorisation is given in the form of a disposal schedule. 3.1.1 General Disposal Schedules are approved from time to time and cover many of the records commonly created by government agencies. Agencies should make use of the General Disposal Schedules (GDS) available for their particular level of government (state or local) to dispose of common administrative records. 3.1.2 For records that are unique to a particular agency an operational or functional records disposal schedule (RDS) must be prepared and approved before records can be disposed of.. The schedule should encompass all of the agency s functional records. The development of such a schedule should involve the following steps: Step 1. A survey of record holdings (include electronic records) to determine the number of record categories, the types of information contained in each category, the use or need (including potential) for this information and the links between the various categories Step 2. The appraisal or evaluation of each category according to established archival criteria to determine the length of time each category of record must be retained. NB: Broadly speaking the appraisal criteria are the relative legal, financial, administrative, evidential and historical or cultural values of the records. A more detailed description of the appraisal process which should be followed is available in Australian Standard AS 4390.5 Step 3. The preparation of a schedule (or list) describing each category of record, giving the retention sentence and providing a recommendation regarding the most appropriate storage site for the records at each stage of the continuum. The tasks identified in step 1 above can be carried out by suitably trained agency personnel. The tasks in steps 2 and 3 should only be carried out by archivists or in consultation with archivists. Section 3: Disposal Page 23

3.1.3 Disposal schedules should be reviewed regularly to ensure that they remain relevant and that all records created by an agency are covered. This should be done every five years or earlier if major changes, such as restructuring, technology changes or alterations to relevant legislation, occur within the agency. 3.2 Policy Agencies shall take all reasonable steps to reduce the cost of storing records through the implementation of appropriate disposal programmes. The disposal programme should include regular culling, transfer to secondary storage and/or archives and physical destruction of appropriate records in accordance with approved disposal schedules. 3.2.1 The disposal of records should take place on a regular basis so that storage spaces do not become overcrowded and to allow forward planning in terms of space, equipment and materials. Whether this happens monthly, annually or in some other set period will depend on a number of variables such as the size of the agency, the on-site space available, the format of the records and available resources. State Records can provide advice to agencies wishing to establish regular disposal routines. 3.2.2 Records identified for permanent retention must be transferred to State Records no later than 15 years after the year in which they were created unless the agency has made other arrangements which are suitable to the Manager, State Records (State Records Bill, 1996 Section 19). 3.2.3 To enable maximum operating efficiency the only records which should be stored in working office areas are those which are required for frequent administrative use. Records which are accessed infrequently or those which are required to be kept for a specified period, normally called semi-active records, should be removed away from office areas as soon as immediate access is no longer critical. In high cost CBD offices the records would be transferred to more economic and spatially efficient off-site storage, while in regional and rural areas they may simply be moved away from working areas. (refer to Section 2: Storage for further information). 3.2.4 Some consideration should be given to the format in which the records are retained, particularly where there is a large volume of records, access to off-site storage is limited or there is likely to be a high access rate. It may be more economical to transfer (or indeed create) such records to microform or implement an imaging programme. (Refer to Section 4: Electronic Recordkeeping for more information regarding maintenance of permanent records in electronic format) Section 3: Disposal Page 24

3.2.5 Agencies should utilise their records management software to its fullest potential which includes loading the general disposal schedule and all operational schedules into the software and adding the retention sentences to all records managed by the software. This is preferably done when the records are created. The software should provide options for listing records which have been inactive for a specified period or those which are due to be destroyed, archived or sent to secondary storage and this facility should be used regularly. The software should also have the capacity to keep track of records which have been destroyed and those which have been transferred off-site or to State Records. This function will enable agencies to comply with policy item 3.5 below. 3.2.6 Although it is recommended above that records be sentenced at creation it is important, particularly in the case of correspondence or subject files, to monitor the subject matter of records to ensure that it does not alter after the first folio is added and the file is sentenced accurately. Another reason records may need to be checked prior to disposal is that many disposal schedules require correspondence or subject files of significance (eg matters causing significant public interest), to be retained permanently and it is often not possible to determine which subjects will be significant at the time of creation. It is normal practice to review such records at the time of disposition to double check that the correct sentence is being used to dispose of the record. Such close monitoring and double checking is not normally necessary in the case of large categories of similar records such as financial batches or personnel records. 3.2.7 It is often cost effective to sort records being transferred from active work areas directly into appropriate boxes with records having similar sentences. For example, records of temporary value that are to be destroyed in 2 years should be in separate boxes to records with a 20 year retention sentence. Records of permanent and temporary value should never be transferred in the same box. 3.3 Policy All agency personnel who have dealings with records must be aware of their legal responsibilities relating to the disposition of agency records. 3.3.1 The establishment and implementation of a disposal programme within an agency should be the responsibility of the Corporate Records Manager. Section 3: Disposal Page 25