A records survey is a systematic exercise to locate and identify all the records held by a particular business area.



Similar documents
How to Manage and Organise Shared Drives. Guidance for Administrators

Life Cycle of Records

Evidence additional element appendix 47. Records Management Guidance for the management of s

Data Protection and Data security Policy

2. Scope 2.1 This policy covers all the activities and processes of the University that uses personal information in whatever format.

User Guide to Retention and Disposal Schedules Council of Europe Records Management Project

Personal data - Personal data identify an individual. For example, name, address, contact details, date of birth, NHS number.

CCG: IG06: Records Management Policy and Strategy

DATA PROTECTION POLICY

Merthyr Tydfil County Borough Council. Data Protection Policy

The guidance applies to all records, regardless of the medium in which they are held, including , spreadsheets, databases and paper files.

Service Instruction 0759: Destruction of Information Assets (Including Protectively Marked Information)

Research Governance Standard Operating Procedure

DATA PROTECTION POLICY

CORK INSTITUTE OF TECHNOLOGY

Information Governance Policy

DATA PROTECTION POLICY

The Manitowoc Company, Inc.

Student Records Management Review Issued by Caroline Dominey, Records Manager August 2012

HERTSMERE BOROUGH COUNCIL

WEST LOTHIAN COUNCIL RECORDS MANAGEMENT POLICY. Data Label: Public

DURHAM COUNTY COUNCIL CORPORATE RECORDS MANAGEMENT POLICY

DOCUMENT AND RECORDS CONTROL PROCEDURE

Freedom of Information & Records Management Group Standards for Creation and Storage of Physical & Electronic Files

Policy and Procedure for approving, monitoring and reviewing personal data processing agreements

How to prepare and transfer records for off-site storage (Guidance for departments)

Policy Document Control Page

BI-STATE DEVELOPMENT AGENCY D/B/A ELECTRONIC RECORDS MANAGEMENT PROCEDURES

OFFICIAL. NCC Records Management and Disposal Policy

ANU Electronic Records Management System (ERMS) Manual

Data Protection Policy June 2014

Vital records may be held in any format, including paper, audio tape, microfiche, and electronic formats.

West Midlands Police and Crime Commissioner Records Management Policy 1 Contents

Applicability: All Employees Effective Date: December 6, 2005; revised January 27, 2009 Source(s):

The Newcastle upon Tyne Hospitals NHS Foundation Trust. Occupational Health Records Management and Retention Operational Policy

RECORDS AND INFORMATION MANAGEMENT AND RETENTION

How To Protect Your Personal Information At A College

DATA PROTECTION AND DATA STORAGE POLICY

Scottish Rowing Data Protection Policy

Records Management - Department of Health

Going Home Staying Home

Information Management Advice 61 How to review your records holdings

Data Protection and Community Councils Briefing Note

Data Security and Extranet

How to Manage . Guidance for staff

FREEDOM OF INFORMATION (SCOTLAND) ACT 2002 CODE OF PRACTICE ON RECORDS MANAGEMENT

University of Limerick Data Protection Compliance Regulations June 2015

Scotland s Commissioner for Children and Young People Records Management Policy

Client Questionnaire

An Approach to Records Management Audit

Information Governance Policy

LGRF. Procurement Probity Plan. July 2012

Data Compliance. And. Your Obligations

Contents. Version 1.4 June PCS-Tender Supplier Response Guide

Human Resources Policy documents. Data Protection Policy

Records Management - Council Policy Version 2-28 April Council Policy. Records Management. Table of Contents. Table of Contents... 1 Policy...

Corporate Records Management Policy

1.2 Scope This policy and guidance applies to all University staff, students and others who use or process any personal information.

Developing Records Retention and Disposition Schedules

Research Data Storage Facility Terms of Use

SOUTHWEST VIRGINIA COMMUNITY COLLEGE RECORDS MANAGEMENT PROGRAM. Revised January 15, 2014

Developing a Records Retention Program

PERSONAL INJURIES ASSESSMENT BOARD DATA PROTECTION CODE OF PRACTICE

Ministry of Children and Family Development (MCFD) Contractor s Information Management Guidelines

Guidance for an inventory of electronic record collections: A toolkit

Records Management Policy.doc

RECORDS MANAGEMENT POLICY

RECORDS MANAGEMENT POLICY

So the security measures you put in place should seek to ensure that:

Policy Document RECORDS MANAGEMENT POLICY

Good Practice in Records Management and Information Security

Directory of Personal Information Banks. Collection Tool Instructions

RECORDS MANAGEMENT POLICY

Information Management Policy

A common sense guide to the Data Protection Act 1998 for volunteers

NHS SCOTLAND PERSONAL HEALTH RECORDS MANAGEMENT POLICY FOR NHS BOARDS

Access Control Policy

OxCORT Oxford Colleges On-line Reports for Tutorials

CODE OF PRACTICE ON THE MANAGEMENT OF POLICE INFORMATION

Records Management Policy

8/28/2015. How to Manage Records. Overview. Learning Objectives. Do you have? Does your office look like this?

STELA Self-Paced Training for clients directly entering data into STELA

Complying with the Records Management Code: Evaluation Workbook and Methodology. Module 8: Performance measurement

AlixPartners, LLP. General Data Protection Statement

5.3. CQUniversity records and information will be captured and managed within one of the following corporate systems:

Policy Document Control Page

RECORDS MANAGEMENT POLICY

Information Management Advice 50 Developing a Records Management policy

ATMD Bird & Bird. Singapore Personal Data Protection Policy

Managing Policy. January 2013

1. Each employee is responsible for managing college records in a responsible and professional manner.

Records Management Toolkit for Schools Version 4 - May 2012

PARLIAMENTARY AND HEALTH SERVICE OMBUDSMAN. Records Management Policy. Version 4.0. Page 1 of 11 Policy PHSO Records Management Policy v4.

Derbyshire Constabulary STREET BAIL GUIDANCE POLICY REFERENCE 05/005. This guidance is suitable for Public Disclosure

Data Security Policy

Data Protection in the Charity & Voluntary Sector

Records Management Policy

Usage Analysis Tools in SharePoint Products and Technologies

Frequently Asked Questions

Corporate ICT & Data Management. Data Protection Policy

Transcription:

Conducting a records survey For whom is this guidance intended? This guidance is intended for University staff responsible for setting up records management systems in their part of the University. It gives detailed advice on how to do a survey to find out what records are currently held by a business unit. What is a records survey? A records survey is a systematic exercise to locate and identify all the records held by a particular business area. Why do we need a records survey? A survey helps us to gain control of existing records and bring them into a managed environment. It can be used to collect information for the records inventory or the information map, and can also inform the development of a retention schedule or a filing scheme. Who conducts the survey? It is the responsibility of each business unit to manage the records it holds, and this includes carrying out a records survey if necessary. The survey might be done by those responsible for carrying out the functions concerned, or by the nominated records officer for the business section. What sorts of survey are there? There are two main ways of collecting data for an information survey by physical observation or questionnaire. A physical survey is the most reliable form of survey, and should be used when it is important to obtain detailed, accurate information as to the records held by the area. A survey by questionnaire is a quick method of covering a wide area, but relies on individuals to complete the questionnaire in a timely and accurate manner. Although a well-constructed questionnaire with a high percentage response rate, can be a sound, cost-effective approach to gathering information, greater coverage will be achieved through physical observation. If not all the questionnaires are returned the survey results may be unreliable and make it necessary to undertake some physical observation. Before carrying out any survey a notice should be sent to all affected managers and staff, identifying the nature of the survey, its objectives, its impact on their work, and when it will begin. It may be useful to hold orientation sessions with key staff, and to give managers progress reports. You should also collect and study the following items (if they exist): maps and plans of buildings, showing furniture and equipment copies of contracts with commercial storage companies, microfilming bureaux, or other organizations which offer records-related services inventory of equipment, including computers and photocopiers 1

organisation charts that will give an understanding of the flow of information procedural manuals and forms copies of file lists or databases copies of previous studies How do I conduct a physical survey? To conduct a physical survey, you must visit operational areas and look into each item of records storage equipment, ask questions and complete a standard survey form for each record collection you identify. Annex A contains a Word template form that you can use. You should not examine every record; it is usually sufficient to sample a series or collection. A physical survey should be carefully planned to ensure the minimum of disruption to the work of the section. An initial investigation to establish the whereabouts, ownership, volume and condition of the records may make the plan more effective. When the plan and timetable have been drawn up the detailed survey can follow. Four main actions form the key to finding out information from the survey: find every storage place with records and information, including tops of cabinets, shared and personal drives, disks, CDs, commercial storage, under desks, in attics and basements look at all the records and information discovered ask questions until understanding is complete record the information acquired for future analysis How do I conduct a survey by questionnaire? Identify those individuals within the business area who create or manage records, and ask them to complete a survey questionnaire for each records series they hold. Annex B contains instructions which you can send out to the people you ask to complete the questionnaires. How do I analyse my survey results? You should analyse your survey results promptly, as otherwise they will quickly become obsolete. As well as enabling you to update your inventory, and assisting in the development of a filing scheme and retention schedule, information gathered in the survey will assist in the identification of the following: records which are valueless and should be destroyed immediately see questions 20, 21, and 26-29 of the survey inactive records which could be removed from expensive office accommodation to storage see question 21 of the survey filing equipment which could be emptied, removed or re-used question 30 of the survey may identify partially filled equipment in which records could be consolidated records or information which could be consolidated, including the elimination or reduction of duplication see questions 45-48 of the survey 2

records which are subject to the Data Protection Act 1998 see questions 41-44 of the survey measures required to protect the records from loss, damage, etc see questions 16-21, 26-29, and 36-38 of the survey. What help is available? The University Records Management Section provides advice, guidance and training on data protection, records management and freedom of information issues. Although we cannot conduct and analyse your survey for you, we can provide training on developing an information map, facilitate workshops to help you develop your information map, give you detailed advice on work in progress and serve as expert advisers on records management project boards. Susan Graham May 2003 3

Annex A Records Survey Form Use the tab key to move between questions. Press F1 for guidance on answering a question. Who is filling in this form? 1. Name 2. Job title 3. Section/school/subject 4. Date Description of the record collection 5. Record collection title 6. Alternative title or reference code 7. What information is in the collection? 8. Earliest date (year only). 9. Latest date (year only). 10. What format are the records? (Select all that apply. Some collections may contain both paper and electronic information) Paper: Electronic: Loose papers Word Loose papers in folder Excel Cardboard files PowerPoint Ring binders Access database Lever arch files HTML Bound volumes PDF E-mails Other (please specify) Other (please specify) 11. Approximately how many individual files are there? 12. For paper records, how many linear metres of shelving do the records occupy? 13. For electronic records, how many megabytes of storage do the records occupy? 14. How is the collection organised? 15. Do you have a list or index of the Yes records in the collection. Information about the use of the collection 16. What function gives rise to the records? 17. Who creates the records? 18. Who uses the records? 19. What are the records used for? 20. How long are the records needed for each of these purposes? 21. How often are the records consulted? 4

Information about the management of the collection 22. Who is responsible for the collection? 23. Does someone know how to use/maintain the records? 24. Is the collection still accruing? Yes 25. If yes, what is the rate of accrual? 26. How long do you keep the records? 27. Why? 28. Does legislation require you to keep Yes the records? 29. If yes, please give further details? 30. Where are the records stored? 31. For paper records, do you have Yes systems for tracking who has a particular file? 32. If yes, please describe the system. Access and security 33. Who should have access to the records? 34. Is the information in the records Yes disclosed to anyone outside the University? 35. If yes, to whom is the information disclosed? 36. Are these records vital records? Yes 37. If the records are vital records, what arrangements have you made for their protection? 38. What measures are taken to keep the records securely? 39. Do the records contain sensitive or Yes confidential information? 40. What sensitive or confidential information do they contain? 41. Do the records contain personal Yes information? 42. If the records contain personal information, what kind of people is the information about? (select all that apply) Students Staff Customers and clients Suppliers Applicants Research subjects Other (please specify) 43. If the records contain personal information, what personal details are included? (select all that apply) Name Contact details Date of birth/age Nationality Financial details Physical or mental health or condition 5

Racial or ethnic origin Sexual life References Education and training details Employment details Gender Goods or services provided Offences (including alleged offences) Criminal proceedings, outcomes or Other (please specify) sentences 44. If the records contain personal information, who provides that information? (Select all that apply) Data subject Staff UCAS Other (please specify) Relationship with other records 45. Are these records direct copies of records Yes held elsewhere? 46. If yes, please give further details? 47. Do these records duplicate information held Yes elsewhere in the University? 48. If yes, please give further details. 49. Do these records relate to other records? Yes 50. If yes, please give further details. 6

Annex B Completing a records survey questionnaire Timing 51. The survey should begin immediately and is due to be completed by [insert date]. 52. If you have any queries about completing the forms, please contact [insert name]. Why do we need an information survey? 53. Records and information are corporate resources. In support of our business we create, receive and maintain records which document our functions, activities and transactions. These records are the basis for organisational accountability, compliance with legislative requirements and the development of the corporate memory. 54. The ability to identify and locate the information contained in our records is critical for our operation. We also need to ensure that we do not spend resources on keeping unnecessary records. To help us with this, we are creating an information inventory. The information we collect from this survey will form the basis of our inventory. 55. We will use our information inventory for the following purposes: a. To establish control over our information assets, including quantitative information about our holdings. b. To facilitate information sharing throughout the organisation. c. To draw up policies on what information we should keep and for how long. d. To comply with the Data Protection Act 1998. e. To comply with the Freedom of Information (Scotland) Act 2002. Notes on completing the form 56. Complete one form for each collection of records you hold. 57. A collection of records is a group of records with similar characteristics that can be managed together as a group. This means making decisions for the group as a whole on filing, indexing and retention requirements. Exactly what is a sensible group will vary between different areas of work and between paper and electronic technologies, but examples of collections might include: A set of minutes and papers for a particular committee A set of case files An individual s personal filing system (including folders in Outlook), if this is used to keep unique records A folder on a shared or personal drive A database 7

A set of information published on the website or intranet A collection of loose papers or a set of documents on a drive Define a collection at the highest possible level eg if you have several sets of minutes for different committees, define the collection as committee minutes and list the names of the different committees in the description of the record contents. 58. Before starting to fill out the forms, liaise with the sections in your directorate to organise their paper and electronic information into meaningful collections. Identify all the record collections in the directorate and their owner. You should include any records stored outside the office, on the web or on shared drives. 59. Ask the owner of each record collection to complete a form for that record collection. There is no need to complete a form for information held in Outlook or on personal drives unless these are being used to store unique information or master versions. 60. The form is a Word template document. Please open it and save it under a new name before starting to type into it. 61. Use the tab key to move from one field to the next. 62. To obtain guidance on answering a particular question, press F1 when you are in the answer field of the question concerned. Notes for answering each question on the form Information about the person completing form 3 Please select your directorate. 4 Please give today s date in the format dd/mm/yyyy. Description of the record collection 5 Please say what this collection of records is usually called. 6 Please give any other names or reference codes that are used to refer to this collection. 7 Please give a brief description of the type of information in the file eg case papers, committee minutes and papers, policy development. 8 Please give the date of the earliest paper in the collection. 9 Please give the date of the latest paper in the collection; if the collection is still accruing then say, Date. 11. For electronic information, please give the number of objects in each top-level folder. You can get this information from Windows NT Explorer; click on the folder 8

concerned and the number of objects is displayed at the bottom left hand side of the screen. 12 Please give a rough estimate. 13. You can obtain this information from Windows NT Explorer. Click on the folder concerned and the size will be displayed at the bottom of the screen in the middle. 14 Please describe how the collection is structured. The following are examples of possible structures: Organised into folders and subfolders on a shared drive (give details of the folders or subfolders) Members of staff have personal folders for their areas of work Organised according to a hierarchical list of headings and file titles Organised alphabetically by surname Organised by date order. Information about the use of the collection 16 Please say which activity produces these records. For example, bidding for research funding, student admissions, or planning and strategy. 17 Please give the section and, if appropriate, the job titles of the people within the section who create the records and files that make up this collection. 18 Please list all the sections and, if appropriate, the job titles of the people within the section who use the records. 19. Please list all the purposes for which the records are used. For example, records might be created to admit a student, but used later for research. 20. For each of the uses you have listed at question 19, please say for how many years after the creation of the file it is needed for this purpose. 21. This might change over time, for example, continually for the first six months, once a week for the period six months to two years after creation, and once a month thereafter. Information about the management of the collection 22. Please say which section is responsible for the collection. If a nominated individual within the section is responsible for keeping the records, please also give their name and job title. 23. Does someone in the relevant section know how to add, amend, delete and find information in the collection? 24. Are people still adding new files to the collection, or new records to the files already in the collection? 9

25. Please say how quickly the collection is growing, for example, 400 new case files a month, no new files being created but two or three papers are added to existing files each week. 26. For how many years after their creation do you keep records in this collection? For example, you might keep them for seven years for tax purposes and then destroy them. 27. Please explain why you keep the records for this long, for example, for audit purposes, or no procedures to identify records that should be destroyed. 29. Please give the name and year of the legislation concerned, and say how long it requires you to keep the records. 30. Please list everywhere that records of this type are kept. For example, you might keep some paper files in a particular filing area, and others in an electronic format on a shared drive. Access and security 32. Please give the job titles of all the people who need to have access to the records to do their job. For example, director of studies. 35. These might include use of locked cupboards or passwords for electronic information. 36. A vital record is one that is essential for the conduct of the business in the aftermath of a disaster such as a fire or flood. 37. Say what arrangements you have made to ensure that the records will still be available to the business in the event of a disaster. 41. Personal information is any information about an identifiable individual, including any expression of opinion about, or indication of our intention towards, that individual. Relationship with other records 46. Please say which records this collection duplicates and which set is the master set. 47. Do the records contain the same information as is held in other records, even if it is in a different format? 48. Please say which other collections of records hold the same information and how they resemble/differ from each other. For example, a senior officer may have a set of day files but copies of the correspondence are also filed on the relevant subject file. 10

49. For example, are the records used in conjunction with another set of records or is the collection a successor or a predecessor to another collection? 50. Please say what the other collections of records are, and what their relationship is with this one. For example, you may hold more information about students than is held by the central Registry. Susan Graham May 2003 11