Contents. Introduction to Student Records Management... 1. Retention Schedule Recommendations... 15



Similar documents
Rowan University Data Governance Policy

Applicability: All Employees Effective Date: December 6, 2005; revised January 27, 2009 Source(s):

RUTGERS POLICY. Approval Authority: Executive Vice President for Academic Affairs and Senior Vice President for Administration

West Chester University Records Management Policy

Governance Processes and Organizational Structures for Information Management

Developing a Records Retention Program

UNIVERSITY OF MASSACHUSETTS RECORD MANAGEMENT, RETENTION AND DISPOSITION POLICY

SOUTH EASTERN SCHOOL DISTRICT

One of the first steps in managing information in today s

Electronic Records Management Strategy

Basic Records Management Practices for Saskatchewan Government*

POLICY AND GUIDELINES FOR THE MANAGEMENT OF ELECTRONIC RECORDS INCLUDING ELECTRONIC MAIL ( ) SYSTEMS

Blocal government bulletin b

RETENTION OF UNIVERSITY RECORDS

Wheaton College Records and Information Management Policies and Procedures

9/12/2014. Part 3: Records Systems, Storage and Retrieval. Basic Concepts

Accelerating HIPAA Compliance with EMC Healthcare Solutions

Minnesota Association of County Administrators & Minnesota County Human Resources Management Association September 10, 2015

UMBC Interim Policy on Records Management. UMBC Policy # VI

1. Each employee is responsible for managing college records in a responsible and professional manner.

California State University, Sacramento INFORMATION SECURITY PROGRAM

Dartmouth College Records Management and Archives Access Policy

Institutional Data Governance Policy

Glossary of Records Management Terms

ELECTRONIC RECORDS MANAGEMENT

Records Management Self-Evaluation Guide

SECTION 5 RECORDED INFORMATION MANAGEMENT

UALR RECORD RETENTION SCHEDULE Academic Affairs. Operations and Personnel

Bowling Green State University GENERAL SCHEDULE OF RECORDS RETENTION Updated: October 2014

CHAPTER 9 RECORDS MANAGEMENT (Revised April 18, 2006)

Information Technology Services Guidelines

The Next Frontier. for Records Managers. Retention and Disposition of Structured Data:

Section 28.1 Purpose. Section 28.2 Background. DOT Order Records Management. CIOP Chapter RECORDS MANAGEMENT

Electronic Records Management Guidelines

UNIVERSITY OF NAIROBI POLICY ON RECORDS MANAGEMENT

Larry Patterson, City Manager

What We ll Cover. Defensible Disposal of Records and Information Litigation Holds Information Governance the future of records management programs

STUDENT RECORD POLICY, PROCEDURES AND DEFINITIONS

Records Management Manual of the University of Nevada Las Vegas Table of Contents

Corporate Governance - The Importance of a Compliant Record Retention Program. by Christopher N. Weiss 1

Record Custodian to Health Information Steward Best Practices in Record Retention, Storage, and Destruction

Guidance for managing your records effectively (1)

RETENTION BEST PRACTICE. Issue Date: April 20, Intent and Purpose:

Best Practices for Long-Term Retention & Preservation. Michael Peterson, Strategic Research Corp. Gary Zasman, Network Appliance

Information and records management. Purpose. Scope. Policy

SOUTHWEST VIRGINIA COMMUNITY COLLEGE RECORDS MANAGEMENT PROGRAM. Revised January 15, 2014

Montana Local Government Records Management Guidelines

The State Records Act and Electronic Records. Kris Stenson Electronic Records Archivist Illinois State Archives

Saskatchewan Records Management Guidelines

ADMINISTRATIVE DATA MANAGEMENT AND ACCESS POLICY

University of Wisconsin-Madison Policy and Procedure

Page 1 of 21 Records Retention Policy at Sarah Lawrence College

RECORDS MANAGEMENT MANUAL

Marist College. Information Security Policy

NIST Special Publication (SP) , Revision 2, Security Considerations in the System Development Life Cycle

NCI-Frederick Safety and Environmental Compliance Manual 03/2013

Title: Data Security Policy Code: Date: rev Approved: WPL INTRODUCTION

Index .700 FORMS - SAMPLE INCIDENT RESPONSE FORM.995 HISTORY

How To Preserve Records In Mississippi

State of Michigan Records Management Services. Frequently Asked Questions About E mail Retention

Records Management - Council Policy Version 2-28 April Council Policy. Records Management. Table of Contents. Table of Contents... 1 Policy...

SOUTHERN ILLINOIS UNIVERSITY EDWARDSVILLE RECORDS MANAGEMENT MANUAL

Scanning and Tossing. Requirements for Scanning and the Destruction of Paper Based Records

UNIVERSITY OF MANITOBA PROCEDURE

Electronic Records Management in the City of Philadelphia

Chapter WAC PRESERVATION OF ELECTRONIC PUBLIC RECORDS

Retention and Archiving

CORK INSTITUTE OF TECHNOLOGY

SPOTLIGHT ON. Advisors Recordkeeping Obligations

How To Use A Court Record Electronically In Idaho

GREATER TEXAS FEDERAL CREDIT UNION RECORDS PRESERVATION PROGRAM

Greater London Authority Records Management Policy

FINAL May Guideline on Security Systems for Safeguarding Customer Information

State of Florida RECORDS MANAGEMENT SELF-EVALUATION GUIDE. Published September Division of Library and Information Services

Records Management Policy

Transcription:

Contents Acknowledgments... i Introduction...iii CHAPTER 1 Introduction to Student Records Management... 1 Definition of a Student Record in the United States...2 Elements of Student Records Management...2 Principles Governing Records Retention and Disposition...2 Overall Recommendations for the Content of a Records Schedule and Records Management Practice...3 Compliant...3 Easy to Manage...4 Eliminate Redundancy...5 Holistic Alignment of Practice and Policy...5 Retention Period...5 Format...6 CHAPTER 2 Developing a Records Management Policy and Program... 7 Identification of Need...8 Inventory of Records...9 Appraisal and Categorization of Records...9 Creation and Implementation of a Retention and Disposition Schedule...11 Publication, Dissemination, and Training on Records Management...12 Review and Modification of Program: The Role of a Records Policy Committee...12 Institutional Closing...13 CHAPTER 3 Retention Schedule Recommendations... 15 Records Maintained by Agents of the Institution...16 Records Management Policy...16 Comprehensive Student Records Retention Schedules...16 Admissions Records for Applicants Who Do Not Enroll...16 Admissions Records for Applicants Who Enroll...18 Student Academic Records...18 Student Record Electronic Data...18 Publications, Statistical Data, and Institutional Reports...18 Family Educational Rights and Privacy Act (FERPA) Records...18 Federal Disclosure Records...18 Federal Student Financial Aid (SFA) Record Retention Requirements...20 CHAPTER 4 Methods of Storage... 31 General Considerations...32 Campus-wide Storage...32 Technology Changes and Security...32 Email Records...33 Off-site and Cloud Storage...33 Purging Records...34 Electronic Records...34

Overview...34 Advantages...35 Policies and Procedures...35 Storage and Maintenance...36 Document Management Systems...36 Overview...36 Advantages and Concerns...36 Policies and Procedures...38 Storage and Maintenance...38 Paper Records...38 Micrographics...39 CHAPTER 5 Security of Student Records... 41 Importance of Security...42 Records Protection...42 Outsourcing and Software as a Service (SaaS) Models...43 Methods of Records Authentication...43 Staff and Faculty Responsibilities...44 Technology and Security of Student Records...45 Phases of Security Planning for Any System...45 Prepare for secure student records systems...45 Evaluate or establish safeguards for systems...46 Comprehensive Security Review...46 Security of Paper Records...47 Recommendations for Staff...47 CHAPTER 6 Case Study: Developing a Records Policy for Academic Departments... 49 Where to begin?...50 Why implement a records retention policy for academic departments?...50 Challenges Faced by the Committee...51 What should an academic records retention policy address?...51 Complications and Considerations...51 FERPA...51 Statute of Limitations...51 Shred or Keep?...52 Give Departments a Choice...52 APPENDICES Appendix A: Sample Records Inventory Forms... 53 Appendix B: Sample Charge to Records Retention and Disposition Committee... 59 Appendix C: Sample Retention Schedules... 61 Appendix D: Pertinent Federal Regulations References... 67 Appendix E: State Policies Covering Disposition of Academic Records of Closed Schools... 69 Appendix F: State Records Management/ Archive Resources... 75 Appendix G: Examples of University-Wide Records Management Policies... 79 Appendix H: AACRAO Best Practices for PDF Transcript Exchange... 81 Useful References...89

Acknowledgments Prepared by: The Committee on Student Records Management: Retention, Disposal, and Archive of Student Records Committee Members Member Susan Nelson (chair) Registrar, Biomedical and Health Sciences Member Position/Organization Rutgers, The State University of New Jersey Julie Ferguson Martha Henebry Wendy Kilgore Assistant Dean for Student Affairs and Director, Registrar s Office Director of Operations, Membership and Publications Director of Research and Managing Consultant Rutgers, The State University of New Jersey New Jersey Medical School AACRAO AACRAO Nora McLaughlin Registrar Reed College Jerry Montag University Registrar Northern Illinois University Jessica Montgomery Associate Director of Membership and Publications AACRAO Robert Morley Associate Registrar University of Southern California i Susan Van Voorhis Associate Vice Provost and University Registrar University of Minnesota

Introduction by Susan Nelson, Registrar, Biomedical and Health Sciences Rutgers, The State University of New Jersey AACRAO s Student Records Management: Retention, Disposal, and Archive of Student Records was first published in 1960 as Retention of Records. A Guide for Retention and Disposal of Student Records. The Guide has been updated periodically as records management practices and requirements have changed and evolved. The first update (the 1979 edition) included recommended guidelines for the retention and disposition of specific hard copy documents, which provided invaluable information for records managers faced with sorting through a myriad of documents and deciding which to keep and which to discard. The 1987 edition addressed issues related to the retention of records stored on microfilm and microfiche; on such computer media as tapes, disks, and diskettes; and optical disks. It was clear during this timeframe that an increasing number of institutions relied on such media for record security and storage, thus introducing a new level of complexity for records managers. Managers of student records needed to be aware of the issues involved and insist on policies and procedures that ensured both the usefulness and the security of data stored in machine-readable form. In addition, it became clear that the records were important to genealogists, statisticians, historians, and for posterity long after the students left the institution. This remains true today, and iii

INTRODUCTION iv records managers have an ongoing responsibility to researchers and archivists. The 1987 Guide also provided reasonable standards to assist student records managers in making record retention decisions. This version represented the collective efforts of the American Association of Collegiate Registrars and Admissions Officers (AACRAO) Records Retention Task Force, the records management committees, and a representative sample of AACRAO members who responded to a questionnaire. The 1998 edition acknowledged the technological advances that have created new options for records managers, especially electronic storage of records. It focused on updating financial aid and international student record requirements and state policies for records storage for schools that have closed. The 2000 edition had three primary objectives: to ensure that institutional records managers were aware of and compliant with new federal requirements for records administration, to promote consistency in retention practices and policies used across institutions, and to provide guidelines on how to address technological changes. The 2010 edition provided numerous updates throughout the guide. Chapter 3 was expanded to provide additional information regarding recommendations for record retention schedules, including differentiated retention periods for four-year schools and community and technical colleges. A case study was added which outlined one institution s experience with developing a recommended policy for academic department offices on records retention and disposition. In addition, Chapter 4 contained practice and policy considerations for various storage media. Today, the use of electronic records as the primary record creation and storage medium presents a new set of challenges for the records and registration professional. Most institutions are using electronically generated records, many without a plan for destruction, retention, and recovery. Since information is so easily accessible and storage is seemingly limitless, it is hard to think of destroying or purging any of it. However, not all information needs to be preserved and traditionally has not been. Many transactional records that would have been destroyed on paper are not purged from the database. Therefore, databases can become bogged down with information which can affect operational run times. With a heightening national concern regarding privacy and identity theft, it is critical that institutions destroy or purge information according to a set retention schedule based on institutional policy and federal and state law. Most institutions are beginning to think of electronic information in three categories: WWOnline information that is used daily; WWNear-line information that needs to be accessible, but is not often accessed; and WWOff-line information that is rarely accessed, but must be preserved. It is the storage of near-line and off-line information that must be addressed most cautiously by records managers. It is equally important to ensure that off-line information can be brought back online and accessed

when needed. Institutions need to ensure that their off-line and online technologies and systems are compatible. The 2014 edition picks up where the 2010 Guide left off to continue the discussion of electronic records. Many of the same issues exist in records offices, including document imaging software, email archiving, webbased data warehouses, cloud-computing resources, enterprise-wide data systems, and mainframe systems. Additionally, institutions may be struggling with outdated microfilm or microfiche records that can no longer be read easily, as well as having to determine the appropriate redundant method of storage for records that have been scanned or digitized. Many are even questioning whether a redundant record is necessary. The 2014 edition has been updated to answer many of these questions and to provide guidance from records professionals wherever possible. Emphasis is placed on the need for institutions to be responsive to their respective state archives offices and to their respective discipline-specific records management obligations. Additionally, the chapter editors were each tasked with considering any legal implications that might be relevant to the topic discussed. When the 2010 version of the Guide has been presented during various professional development meetings, attendees often discussed the possible negative consequences of retaining records for periods longer than is required. Institutions that are involved in litigation with students can find themselves compromised by the information contained in documents or records that remain part of a student s file long after their usefulness or need. It is the editors expectation that readers find advice and guidance rather than a directive in this edition. Given the diverse institutions represented by AACRAO members, we acknowledge that there is not one simple answer for all records managers. We encourage readers to see this edition as a resource for creating a records management practice that fits their specific institution. How to Use this Guide This guide is designed to provide you with a comprehensive set of best practice recommendations to develop and modify your student records management policy, practice, and the application of technology. Chapter 1 provides an overview of the complex issues facing student records managers today. Chapter 2 shares recommendations on how to develop or modify your own records reten tion and disposition schedule. Chapter 3 provides some examples from specific insti tutions by type, state guidelines, accrediting body guidelines, and other samples for spe cial categories of records. It is important to remember that samples are provided not as a set of absolutes on establishing a records re tention and disposition schedule, but simply as samples from which to build and modify your own unique policy. Chapter 4 ad dresses the historical and evolving methods of records storage and practice consider ations for each. Chapter 5 reflects on the myriad of security considerations around stu dent records management. Finally, Chapter 6 shares a case study. INTRODUCTION v