Ask These Questions to Gauge Your Records Management Compliance

Many business look to secure document shredding to stay compliant with current records laws and regulations. While document destruction is necessary, records management compliance involves more than just making sure your business records are properly destroyed.

In fact, there are helpful questions to ask yourself to ensure your records management system is fully compliant. As you go through the list, be sure to answer the questions as accurately as possible to keep your business on the right track.

Once you determine your current compliance status, your business is in a great position to determine how much time and effort a qualified records management company can save you, or whether your current records management company is handling information correctly for you.

Records Management Compliance Questions

1. Is your company responsible to comply with laws regarding records management?
   1. HIPAA – governing medical records
   2. FERPA – governing educational records
   3. GBLA – governing financial records
   4. FACTA – governing private information maintained by any business
2. Do you and all your employees fully understand compliance requirements for any and all laws that apply?
3. Do you have a system in place including policies and procedures to ensure compliance?
4. Do you currently store sensitive records in hard copy on your premises?
   1. What security measures do you have in place to prevent a break in? 
   2. What controls are in place to determine who has access to sensitive information?
   3. Are you appropriately insured in case of these occurrences or in case of a natural disaster?
5. Do you currently store sensitive records digitally on your premises?
   1. Are your servers/workstations secure from cyber-attack?
   2. What protocols are in place to address accessing and/or sharing digital files?
6. Do you currently store sensitive records offsite?
   1. Is the storage facility or records management company fully compliant with all the laws you are responsible to uphold?
   2. Is the facility properly insured against loss of records in case of a break in?
7. Do you have access to sensitive data for as long as necessary?
8. Do you have a plan in place for secure destruction of hard copy and digital records once they are no longer needed?

As addressed in the questions above, it's important to note that not only your company's records management policies be fully compliant, but also any third party that handles your records. If you’re currently working with a records management company to handle document storage, secure shredding services, retention scheduling, or any other service that involves sensitive records, make sure they qualified and can guarantee they are compliant with all these laws.

If you have any questions about records management compliance, or you want to find out if a records management company is right for your business, read our free guide, Is Your Small Business in Danger?