| Spring 2006 |
Nonprofit Advisor
|
 |
Record Retention: Know What to Hold, When to Fold
A firestorm erupted last year when it was reported that the ACLU
had improperly shredded documents. The controversy eventually
resulted in the resignation of the ACLU's chief archivist. The
controversy was sparked when the ACLU moved from centralized
document shredding to placing shredders throughout its offices
several years ago. To be fair, some of the shredding appears to have
been motivated by concern over Social Security numbers, salary
information, and other personal information falling into the wrong
hands. But the controversy does serve to illustrate the problems
facing all non-profits when it comes to record-retention policies:
Which records do you keep - and for how long?
Imposing Order
There's no doubt: A solid document retention policy (DRP) offers real
benefits.
- Among other things, such a policy can impose order and force you to clean
up what can literally be rooms full of documents. You can free up storage
space and perhaps reduce storage costs.
- Electronically, a DRP can help your organization preserve storage space on
the network and on users' desktops, optimizing network performance.
- Proper document retention and storage procedures can also lessen the
chance of having documents used for identity theft - a major consumer concern
these days.
One Size Does Not Fit All
Be forewarned: There is no one-size-fits-all document retention policy.
However, the basics are fairly straightforward:
- If you are governed by federal/state laws or regulations, follow them. If
federal and state requirements conflict, follow the more stringent
requirements.
- Next, abide by internal bylaws, other mandatory procedures or industry
standards.
- If you are on your own after following rules 1 and 2, assume all documents
in your possession - paper and electronic - will be needed somewhere down the
line and act accordingly.
Epic Novel or Short Story?
DRPs don't have to be epic novels. They can be just a few paragraphs, as long
as they address these fundamentals:
- Define how long, how and where to store both paper and electronic records
(don't forget information received and stored in facsimile machines,
computers, e-mail and telephones). Specify retention periods for specific
categories of records.
- Make sure you have considered all forms of electronic data in all devices
and media (don't forget digital printers/copiers and voicemail).
- Specify how records are to be destroyed when their retention period has
expired. Is it automated or are users responsible?
- Specify the individuals responsible for enforcing, monitoring and updating
the policy.
- Detail the circumstances under which the policy should be suspended, such
as when a lawsuit is anticipated or in progress, a subpoena has been served or
an investigation is known to be underway.
- Finally, if you are going to have a DRP, enforce it. And be sure to
enforce it in a consistent fashion.
Know What to Hold
Document retention regulations vary widely from state to state, so be sure to
have your legal counsel review the guidelines your organization uses to ensure
compliance. Also, be aware of any additional legal and/or grant agreements that
may impact the records you must maintain.
Our knowledgeable professionals in conjunction with your legal counsel can
provide guidance and help your nonprofit draft a solid document retention policy
that protects your interests as well as those of your donors.
Editor's Note: Bober, Markey, Fedorovich
& Company frequently works with clients on matters such as
this. Please call your partner / manager contact if you would like assistance in this area.
The Nonprofit Advisor is produced quarterly by Bober, Markey, Fedorovich
& Company's Nonprofit Services Team. If you would like additional information about the services that we can provide to nonprofit organizations, please call or email our team leader, Lori A. Sheets, CPA at 330.762.9785 or
lsheets@bobermarkey.com.
|