Data retention: How long is long enough?
No need to re-write history - just document it. iForem is a new tool in the system to help a small business survive in a compliance drive world. Read why here:
Data retention requirements depend on the type of data and the purposes for which it is used. Unfortunately, there are thousands of possible requirements that can apply given those two factors.
Type and purpose condition the "external" constraints deriving from federal and state legal-regulatory requirements, from the standards of private certificatory bodies (e.g., JCAHO), and from contractual obligations to other parties with which/whom the organization has agreements.
Fiscal factors, such as tax laws and general auditing requirements, also condition data retention. (This is particularly true for publicly-traded companies subject to Sarb-Ox.) Public and private grantor agencies may set retention requirements for data related to projects they fund.
Last but by no means least, operational and other purely "internal" information needs of the organization affect retention requirements. All the risks or benefits considered relevant by the organization's stakeholders go into defining these internal standards.
In other words, it's complex, and this page can only summarize. If you have questions about the particular data retention requirements that apply to information under your control, contact your organization's designated legal counsel. If you're not sure whom to approach at UM, contact the Office of the General Counsel.
Link to web site:
Data retention requirements depend on the type of data and the purposes for which it is used. Unfortunately, there are thousands of possible requirements that can apply given those two factors.
Type and purpose condition the "external" constraints deriving from federal and state legal-regulatory requirements, from the standards of private certificatory bodies (e.g., JCAHO), and from contractual obligations to other parties with which/whom the organization has agreements.
Fiscal factors, such as tax laws and general auditing requirements, also condition data retention. (This is particularly true for publicly-traded companies subject to Sarb-Ox.) Public and private grantor agencies may set retention requirements for data related to projects they fund.
Last but by no means least, operational and other purely "internal" information needs of the organization affect retention requirements. All the risks or benefits considered relevant by the organization's stakeholders go into defining these internal standards.
In other words, it's complex, and this page can only summarize. If you have questions about the particular data retention requirements that apply to information under your control, contact your organization's designated legal counsel. If you're not sure whom to approach at UM, contact the Office of the General Counsel.
Link to web site:
Categories
Compliance , Education0 TrackBacks
Listed below are links to blogs that reference this entry: Data retention: How long is long enough?.
TrackBack URL for this entry: http://blog.iforem.com/blog/mt-tb.cgi/32
Leave a comment