Stay organized and secure with electronic records management

The perils of paper-based systems

With pandemic restrictions easing and the entire staff heading back to the office, Laura’s boss decided the time was right to reorganize her workspace. He assigned Laura the task and told her to go through several drawers.

Her instructions were to make folders, organize papers of current worth, box up other documents, as somebody might need them down the line, and toss insignificant and old material.

Laura did not think this task sounded too difficult, but by the second drawer, she changed her mind. Many gray areas existed regarding what was “important” or “old.” Afraid of making a mistake, she erred heavily on the side of caution.

This hesitancy created an abundance of random “stuff” destined to sit in the basement until some brave soul went on a hunt for something he needed, or flooding from a storm damaged the cardboard boxes and rendered the papers inside unreadable.

Upon finishing the project, Laura expressed relief to her friend Jan at lunch. She told Jan how hard it was to figure out a good way to organize timely papers since they often fit multiple categories.

She also explained that the only items she tossed were some electronic mail printouts from last year that were initially sent to the account of a person no longer with the company.

Jan asked about the nature of these messages. Laura said that she did not read them in detail but that they seemed to be rather mean-spirited. Jan bit her lip and hoped that Laura had not accidentally tossed evidence the legal department might need in a harassment lawsuit.

ERM: A solution for modern workplaces

Like many other workplaces, Laura’s office could benefit considerably from implementing electronic records management (ERM). Such a management system utilizes information technology to organize and store records electronically. Electronic information management eliminates guesswork by providing systematic storage, maintenance, and disposition of records.

Electronic documents are available. They are also retrievable. People can access them when they need them. Furthermore, electronic information past its usefulness gets deleted. This deletion happens in a purposeful manner. Finally, it occurs in an orderly way.

The benefits of electronic recordkeeping systems

Organizations need to keep various records as proof of business processes and activities. These documents act as official records that certain events took place or that proper procedures were followed. Many serve as supporting evidence when the company files taxes or gives reports to other federal agencies.

Some need to be easily retrievable should a government agency such as the Department of Labor (DOL) want to check employment verification or the Occupational Safety and Health Administration (OSHA) need to investigate an environmental concern.

Internally, anyone from a manager looking for details of past dealings with a specific client to lawyers building a defense for an improper termination lawsuit benefits from the ability to quickly and easily find what they need.

An ERM system enables people to find the correct information when they need it. Capturing document metadata facilitates content management and improves identification, categorization, and retrieval.

The seeker need not go on a scavenger hunt to multiple places or worry that additional information exists elsewhere. A properly maintained electronic records management system serves as an efficient one-stop shop.

Other pros to employing an electronic format include:

• Saving space. Paper records can take up a good deal of physical room.

• Safety. Fires, floods, and even spilled cups of coffee can render physical copies of documents unreadable.

• Access from outside the building. Many businesses operate out of more than one location. Electronic files allow approved people to get what they need regardless of where they are at.

• Reducing manual workload. A records management program requiring physical filing and retrieving requires more staff effort and introduces more significant potential for human error. Similarly, disposal of physical documents past their life cycle means needing to destroy and haul away mounds of paper.

• Avoiding productivity loss. By keeping valuable content organized and discoverable, an audit or compliance request does not create a frenzy that necessitates pulling people away from their regular work to search for relevant material.

The need for company policies

Effective management of electronic records requires an organization to develop specific policies. These policies act as an instruction manual for those involved in managing electronic records. This information also serves as institutional memory.

Down the line, people may wonder about the rationale behind the recordkeeping decisions they inherited. You should know how the records retention schedule for a document was determined.

Also, you should know how individual records management practices came into being. This knowledge clarifies the foundation. Consequently, it assists with future decisions.

Defining what information your organization must keep as a record, the procedures for managing those records, their retention period, and their disposal schedule also gives your organization credibility in the eyes of outsiders.

Courts and government agencies frown upon selective deletion by individual employees because such action raises concerns about cover-ups.You can show a thoughtful, organized policy to a relevant third party.

This third party might be a lawyer or an auditor. When you do this, it backs up your decisions. It demonstrates that the business follows a standardized system. Therefore, the business is not keeping or deleting information willy-nilly.

As Laura’s situation earlier illustrated, problems can arise when employees are left to their own devices when handling records. They may keep everything because they fear inadvertently destroying something that should be retained.

Or, they may be too quick to dispose of something that looks old or unnecessary to the untrained eye. The first scenario creates a cumbersome mess where finding what you want proves challenging. The second action opens up the company to potential legal and regulatory problems.

Do not expect employees to know what stays and what goes inherently. A good company records policy must define what your organization considers a business record.

Basically, the term refers to evidence of business-related activities, such as events, transactions, discussions, and communications. Some types of business records, such as tax forms and legal documents, are relatively easy to spot.

Others, such as emails and social media posts, are not so obvious. Ensure employees know your organization’s precise definition of a business record and the various forms such records may take.

Figuring out what to keep and for how long

Examining legal and regulatory guidelines provides a good foundation for establishing what types of electronic records you need to keep and for how long.

Research rather than assume. Requirements such as certain employee medical records that OSHA wants to be retained for 30 years may prove surprising.

Since many records pertain to tax issues, people involved in records administration may seek guidance from the Internal Revenue Service’s website, IRS.gov.

The web page entitled “What kind of records should I keep?” provides small businesses and the self-employed with guidance about recordkeeping of supporting business documents such as gross receipts, purchases, expenses, and assets.

Another web page entitled “How long should I keep records?” looks at recordkeeping regarding the period of limitations (the period of time in which you can amend a tax return to claim a credit or refund or the IRS can assess additional tax). “Employment tax recordkeeping” details what records regarding employment taxes a company should keep for at least four years after filing a return.

Another place to check out is USCIS.gov. This website for U.S. Citizenship and Immigration Services provides detailed information regarding retention rules for I-9 forms, the document used to verify the identity and legal authorization to work of all paid employees in the United States.

Other common types of records to address regarding retention and deletion schedules include:

• Records about time off under the Family and Medical Leave Act (FMLA)

• Accommodation requests

• OSHA forms

• Hiring records (including information on candidates not chosen)

• Employee records

• Payroll information

• Job evaluations

• Termination and layoff documentation

Coming up with an electronic records retention and deletion policy is a large and complex procedure. Creators must know which regulations apply to the organization and address them in the policy.

This involves reviewing company and HR requirements, state law, federal law, industry regulations, government regulations, and insurance needs before developing record retention policy and procedures.

Assembling a team that approaches the process from different angles and spheres of expertise can prove valuable. Gather input from senior management, human resources, IT, records management, and legal/compliance.

Legal consult proves especially helpful in matters involving the organization’s litigation hold policy. Their advice places a destruction hold on electronic documents that should not be deleted because of potential future use.

This forward-thinking measure may, for instance, preserve records pertaining to an employee who has expressed concern about harassment in case he or she later takes the matter to court.

Dealing with permanent records

As discussed in the previous section, every record has a life cycle — a specific amount of time that it needs to be kept. Holding on to records beyond their retention period results in an ever-increasing need for storage space and lowers retrieval efficiency.

Archives are records that possess an infinite life cycle, meaning they never get deleted. The most well-known place in the U.S. for this type of information is the National Archives and Records Administration (NARA), which holds various government records.

Archivists there follow strict protocols to ensure the maintenance and safety of these important public records. Interestingly, of all the documents and materials created in the course of business conducted by the United States federal government.

Only 1%-3% are so important for legal or historical reasons that they are kept forever. State archives serve a similar function at the state level.

While perhaps not as extensive, businesses also typically have permanent records and benefit from creating archives. Items have legal value. They also have fiscal value.

Additionally, they possess administrative or historical value. You should transfer these items. People must still retrieve them as necessary. However, people do not encounter them regularly. This transfer lowers the chance of accidental deletion.

Electronic records with a limited life cycle do not get archived. Instead, they require thought-out, spelled-out placement in your system. Their retention and deletion follow guidelines adhered to by everyone at the company.

Security

Keeping records safe has always been a concern. This concern includes protection from internal theft. It also includes protection from external theft. Furthermore, it covers protection from unauthorized changes. This remains true for electronic documents.

While using an ERM system eliminates some issues, it introduces others. For example, worrying about someone stashing physical copies in his briefcase is no longer the issue. However, computer breaches are equally problematic.

Companies must take measures to prevent outsiders from gaining access to electronic files. Software applications such as encryption tools help by making a document intercepted over an open network inaccessible or unreadable.

Businesses also must vehemently control access by their employees. Only relevant parties should be set up with login permission and the information on how to get in – with strict warnings against unauthorized sharing.

Since viruses also can wreak havoc on electronic files, IT personnel should install effective security software and keep it up to date. Companies commonly make backup copies of files in the event a problem occurs.

If using cloud-based storage, do research before selecting a provider. Choose a reputable provider that can tell you the security measures it takes.

In addition to implementing various technical measures against theft or tampering, smart organizations also know the importance of monitoring. They run reports that track every action taken on each document throughout its life cycle, who performed it, and when it occurred. Appropriate leaders and gatekeepers can look at these reports for questionable or suspicious activity.

Physical copies

With its many benefits, electronic records management certainly seems like the wave of the future. This begs the question, “Are there any documents to keep in physical form?” Opinions vary, but experts often recommend hard copies of:

• Annual reports

• Insurance documents

• Employer identification numbers (EIN)

• Contracts

• IRS and government correspondence

• Tax returns

• Articles of incorporation

• Documents with raised seals

• Business licenses and other documents required by law to be displayed

• International financial documents (some countries have specific requirements about electronic vs. paper copies)

• Mortgages

• Leases

You may choose to keep some papers in physical form. If so, make sure to store them in a fire-resistant container. Alternatively, you can use a fire-resistant cabinet. Place this container or cabinet in a dry area.

Also, the area should be temperature-controlled. Laura’s cardboard box in a leaky basement is not a good relocation choice!

More resources:
ADA compliant substance abuse policy
What electronic record-keeping software best fits your needs?
Who should not have access to employee medical records?

Want more insights like these? Visit Beth Braccio-Hering’s author page to explore her other articles and expertise in business management.