Council Policy. Records & Information Management



Similar documents
Records Management Policy

COUNCIL POLICY R180 RECORDS MANAGEMENT

RECORDS MANAGEMENT POLICY

Scotland s Commissioner for Children and Young People Records Management Policy

Records and Information Management. General Manager Corporate Services

WEST LOTHIAN COUNCIL RECORDS MANAGEMENT POLICY. Data Label: Public

RECORDS MANAGEMENT POLICY

Records Management Policy

West Midlands Police and Crime Commissioner Records Management Policy 1 Contents

Records Management. 1. Introduction. 2. Strategic Plan Desired Outcomes

Information Governance Framework. June 2015

Information Management Policy for The Treasury Department

OFFICIAL. NCC Records Management and Disposal Policy

2. Scope 2.1 This policy covers all the activities and processes of the University that uses personal information in whatever format.

CCG: IG06: Records Management Policy and Strategy

Information and Compliance Management Information Management Policy

Cloud Computing and Records Management

Records Management Policy

INFORMATION GOVERNANCE POLICY

Records Management Policy

RECORDS MANAGEMENT POLICY

RECORD AND INFORMATION MANAGEMENT FRAMEWORK FOR ONTARIO SCHOOL BOARDS/AUTHORITIES

Information Circular

HORIZON OIL LIMITED (ABN: )

Information Management Policy for The Cayman Islands Department of Tourism

OPERATIONAL DIRECTIVE. Data Stewardship and Custodianship Policy. Superseded By:

Corporate Records Management Policy

Approved by: Vice President, Human Resources & Corporate Resources and Vice President, Treasury & Compliance Date: October 14, 2009

PARLIAMENTARY AND HEALTH SERVICE OMBUDSMAN. Records Management Policy. Version 4.0. Page 1 of 11 Policy PHSO Records Management Policy v4.

Data Governance. Policy FINAL (Approved)

Information Management Advice 50 Developing a Records Management policy

Information Management Policy CCG Policy Reference: IG 2 v4.1

KEELE UNIVERSITY IT INFORMATION SECURITY POLICY

3. Ensure the management of information is compliant with legislative requirements to maximise the benefits and minimise risks;

Data Protection Policy

INFORMATION SECURITY POLICY

Administrative Procedures Memorandum A2005

LORD CHANCELLOR S CODE OF PRACTICE ON THE MANAGEMENT OF RECORDS UNDER

Records Management Policy.doc

Life Cycle of Records

Information Governance Policy

Management of Official Records in a Business System

Highland Council Information Security Policy

Information Security Policy September 2009 Newman University IT Services. Information Security Policy

FREEDOM OF INFORMATION (SCOTLAND) ACT 2002 CODE OF PRACTICE ON RECORDS MANAGEMENT

Protection. Code of Practice. of Personal Data RPC001147_EN_WB_L_1

What NHS staff need to know

Information Governance Strategy & Policy

STATE RECORDS COMMISSION. SRC Standard 6 OUTSOURCING. A Recordkeeping Standard for State Organizations

CORPORATE RECORDS MANAGEMENT POLICY

Information Governance Policy

Records Management Policy

CODE OF PRACTICE ON THE MANAGEMENT OF POLICE INFORMATION

The Manitowoc Company, Inc.

INSTITUTE OF TECHNOLOGY TALLAGHT RECORD MANAGEMENT & RETENTION POLICY

University of Liverpool

Records Management Policy

Government records findings--recognition of public policy.

How To Manage Records And Information Management In Alberta

DATA PROTECTION AND DATA STORAGE POLICY

INFORMATION GOVERNANCE POLICY

Chapter RECORDS MANAGEMENT Sections:

Information Management and Security Policy

Information and records management. Purpose. Scope. Policy

Records Management - Department of Health

Corporate Information Security Policy

NHS LANARKSHIRE HEALTH RECORDS POLICY Management and Maintenance, Security, Storage, Distribution and Retention of Health Records

Data Protection Policy

Information Governance Policy

Information Governance Strategy

Information Governance Policy

RECORDS MANAGEMENT POLICY

Digital Continuity Plan

INFORMATION GOVERNANCE STRATEGY NO.CG02

Scope and Explanation

HERTSMERE BOROUGH COUNCIL

Corporate ICT & Data Management. Data Protection Policy

Information Management Policy

An Approach to Records Management Audit

4.10 Information Management Policy

Greater London Authority Records Management Policy

Public Records (Scotland) Act Healthcare Improvement Scotland and Scottish Health Council Assessment Report

Protection. Code of Practice. of Personal Data RPC001147_EN_D_19

ROYAL AUSTRALASIAN COLLEGE OF SURGEONS

INFORMATION SECURITY MANAGEMENT POLICY

Records Management Plan. April 2015

QUEENSLAND COUNTRY HEALTH FUND. privacy policy. Queensland Country Health Fund Ltd ABN better health cover shouldn t hurt

Records Management plan

Information Governance Policy

Transcription:

Council Policy Records & Information Management

COUNCIL POLICY RECORDS AND INFORMATION MANAGEMENT Policy Number: GOV-13 Responsible Department(s): Information Systems Relevant Delegations: None Other Relevant Policies: Code of Conduct for Council Employees Council Member Conduct Policy Relevant Procedure(s): Relevant Legislation: Policies and Procedures Superseded by this policy on its Adoption: Internet and email procedure Internet and email usage agreement State Records Act 1997 Freedom of Information Act 1991 Local Government Act 1999 None Adoption Authority: Council Date of Adoption: 25 August 2015 Effective From: 1 September 2015 Minute Reference for Adoption: Item 14.5, 109 Next Review: August 2016 or as required by legislation

Records & Information Management Policy Page 2 RECORDS & INFORMATION MANAGEMENT POLICY 1. INTRODUCTION The Records and Information Management Policy provides Council ( Council Members and Employees) with principles and guidelines for the management of corporate information and records. The policy will assist Council to comply with legislation relating to the capture and storage of records and information. In addition, the Policy assists in the establishment of an effective and efficient record keeping and information management environment. The hallmarks of such an environment include the standardisation of information keeping, the protection of such information and the ability to easily locate and retrieve information. An effective record and information management environment enhances customer service delivery, maintains the history of the transactions and business processes of local government and is vital for the efficient provision of Council s ongoing business activities. The development of this policy has taken into account requirements of the Local Government Act 1999 and other relevant legislation. 2. OBJECTIVES The objectives of this policy are to set out Council s commitment to: 2.1 an information and records management environment that fulfils Adelaide Hills Council s legislative obligations; and 2.2 the preservation of the Council s corporate memory through sound and consistent record keeping practices and the comprehensive and accurate capture of information to meet legal, evidential and accountability requirements. The policy also: 2.3 articulates the records and information management responsibilities of employees, Council Members and other relevant individuals working with one of Council s key assets its information. 3. SCOPE This policy applies to all Council Members, employees, volunteers, work experience placements, contractors and sub-contractors working on behalf of Council. All records and information, of any format, generated or received in the conduct of Council business are within the scope of this policy.

Records & Information Management Policy Page 3 4. LEGISLATIVE FRAMEWORK The State Records Act 1997 ("the Act") governs the obligations and responsibilities of councils in relation to the management of official records. Under this Act, Council has an obligation to maintain official records in its custody in good order and condition. This obligation applies to the capture, storage, maintenance and disposal of records regardless of format (physical or electronic). In addition to its record management obligations under the Act, Council is obliged to keep adequate records in order to fulfil its responsibilities under other Acts such as the Freedom of Information Act 1991, to fulfil legal processes, such as discovery and subpoenas, and to meet any requirements by Royal Commissions, ICAC, the Ombudsman, the Courts, auditors and other bodies. 5. DEFINITIONS Council Business encompasses the exercise, performance or discharge of powers, functions and duties under the Local Government Act or other Acts. This includes the provision of services, delivery of programs, development of policies, making of decisions by (or on behalf of) Council, discharging statutory roles and powers, performance of Council functions and communicating with rate payers and stakeholders. Information Management is the way in which an organisation plans, identifies, creates, receives, collects, organises, governs, secures, uses, disseminates, preserves and disposes of its information. It is also the means through which the organisation ensures that the value of that information is identified and exploited. The primary aim of information management is to ensure that the right information is available to the right person, in the correct format and medium, at the right time. Records Management is the way an organisation controls, and manages the creation, capture, maintenance, disposal and use of its records as dictated by legislation. The primary aim of records management is to ensure that information is captured, classified and made available to the right person, in the correct format and medium, at the right time whilst complying with relevant legislation. Record Information created, received and maintained by Council in the conduct of its business which provides evidence of a business transaction. It is a record if it meets any of the following criteria: 5.1 Forms part of a business transaction / relates to Council s business 5.2 Adds value to an existing record 5.3 Shows a transaction or how the transaction was dealt with 5.4 Shows a decision and how it was reached 5.5 Provides evidence of an event (e.g. when and where it happened) 5.6 Indicates advice given and who provided it 5.7 Requires someone to action it 5.8 Relates to a formal draft of a document, an agreement or legal document 5.9 Demonstrates compliance with statutory or other regulations

Records & Information Management Policy Page 4 A record can be in various formats ( e.g. letter, file note, calendar entry, social media post, sound recording, video file, legal titles, contracts or an email) and is determined by the content, not the format. Where more than one copy of a record exists, the official record is the one used by the council as part of their work activity and retained for the length of the retention period. The official record should contain all annotations made to the document. 6. PRINCIPLES The security of all Council records is crucial, as records provide evidence of business transactions, support management decisions and ensure public accountability requirements are met. Records in all formats should be stored securely to prevent unauthorised access, destruction, alteration or removal. Information obtained by Employees or Council Members in the course of their duties and functions is respected and used in a careful and prudent manner. All intellectual Property Rights in any document, matter or thing prepared or written in the bounds of one s employment will vest with the Council. Employees, Council Members and all relevant individuals will be scrupulous in the use of official information and should not use their position in Council for personal gain or for non-authorised purposes. Accurately created and maintained records serve as a history of the transactions and business processes of local government. They are a fundamental tool that provides evidence of public sector accountability and responsibility. It is for these reasons that legislation exists to ensure that official records are properly maintained and preserved for future generations. 7. POLICY STATEMENT The Council recognises the value of information and records to its operations and performance, and considers it a valuable asset that needs to be actively managed and maintained across the organisation. The Council is committed to: 7.1 accurately creating and maintaining records to provide a history of the transactions and business processes of Council, thereby ensuring public sector accountability and transparency; and the responsible stewardship of the community s information. 7.2 treating information and records as a business asset to be managed consistently across the business, throughout its lifecycle. 7.3 providing visible support at an organisational level for information and records management processes, people and systems to promote consistent practice. 7.4 ensuring consistent, quality information and records management across the organisation is a priority with all information including digital and paper-based records and documents managed responsibly, ethically and to the highest standard of integrity, security and privacy.

Records & Information Management Policy Page 5 7.5 the creation and management of authentic, high-integrity, reliable and useable records that are capable of supporting business functions and activities into the future. 7.6 ensuring that the management of information and records is performed in accordance with all applicable legislative requirements and relevant internal policies and procedures. 7.7 utilising security classifications and measures to protect its information assets in all systems from loss, unauthorised access, disclosure, damage or destruction whilst retaining maximum accessibility and transparency across the organisation. 7.8 preserving Council s corporate memory through sound record keeping practices and the accurate capture of information to meet legal, evidential and accountability requirements 7.9 a culture that protects privacy and endeavours to protect the personal information it collects, stores, discloses and uses The Council will demonstrate this commitment by: 7.10 capturing full and accurate information and records in organisationally approved corporate systems in order to meet current and future needs. 7.11 providing the required financial and technological resources for effective and efficient management of information, records and corporate knowledge. 7.12 regularly auditing information to ensure organisational needs are met and use of information is appropriate. 7.13 providing required information to Council Employees, Council Members and the community as required by legislation. 7.14 providing suitable education and training to ensure staff, Council Members and other relevant individuals are able to meet their information and records management responsibilities and understand their legislative requirements. 7.15 supporting and fostering a culture which actively seeks and embraces continual improvement in information and records management methodologies and systems and that meets our accountability, compliance, ethical practice and active risk management obligations. 7.16 creating systems and processes to improve information retrieval through the reduction of information duplication, effective search tools, linkages between core line-of-business systems and high level Information planning. 8. RESPONSIBILITIES All individuals identified in the Scope need to be aware of and comply with Council s information and records management requirements against all activities they undertake in performance of their duties and functions. Their responsibilities include: 8.1 creating, capturing, maintaining and retrieving all Council records in authorised corporate systems to support the conduct of their business activities; 8.2 ensuring records are created in all appropriate circumstances immediately, or as soon as practical, after an event, decision, agreement or business action. 8.3 learning how and where records and information are kept within Council; 8.4 not destroying or amending Council records without authority from the Council Records Team;

Records & Information Management Policy Page 6 8.5 being aware of and complying with Council s information and records management procedures. Council employees, Council Members and all relevant individuals who do not comply with this Policy may be subject to disciplinary action under the relevant Code of Conduct, and/or subject to criminal or civil proceedings. Section 17 of the State Records Act provides for a maximum fine of $10,000 or imprisonment for two years. Council Employees and Council Members should report breaches of this Policy to the Chief Executive Officer. 9. DELEGATIONS The Chief Executive Officer has the delegation to approve, amend and review any procedures that shall be consistent with this Policy. 10. POLICY REVIEW This Policy will be reviewed on a 3 year basis to ensure it is current and reflects changes to legislation, systems, processes, technology and standards. The Policy will be reviewed whenever there is a change to Legislation or State Records requirements. 11. AVAILABILITY OF THE POLICY The public may inspect a copy of this policy, without charge, at the offices of council during office hours, and may obtain a copy for a fee as per Council s Fees & Charges Register. The policy is also available on Council's website www.ahc.sa.gov.au.