Niagara Catholic District School Board
RECORDS AND INFORMATION MANAGEMENT POLICY ADMINISTRATIVE OPERATIONAL PROCEDURES | |
600 – Business Services
| Policy No 600.2
|
Adopted Date: March 31, 1998
| Latest Reviewed/Revised Date: December 20, 2022
|
To initiate a request for a new record to be added to the Schedule, the requestor must contact the office of the Privacy and Risk Advisor.
3. Access Control: All information under the Board’s control will be readily available and accessible for as long as it is required, with access restricted to board employees (or authorized individuals) that require it to perform job duties. All information is managed to protect privacy and confidentiality.
Instances of access to records may need to be recorded, depending on the records requirements identified for the organizational activity and the risk associated with the activity. Examples include; signing out OSRs and other hard copy student files.
4. Records Storage: Records, regardless of format or media, should be stored in a way that protects them from unauthorized access, change, loss or destruction, including theft and disaster. This means that the following measures should be strongly considered:
a) Physical records (active and inactive):
· should be stored in a clean, dry area, and avoiding areas where conditions are damp and or humid and may be prone to infestation;
· should be covered at all times (stored in file cabinets or boxes);
· if in file cabinets, the cabinets should be lockable in areas with controlled access;
· that are deemed extra sensitive or highly confidential should be stored in fire-proof cabinets in areas with controlled access.
b) Digital records: Measures are already implemented; however, they serve as a reminder of good digital security practices such as user authentication, computer time-outs, firewalls, anti-virus software.
5. Use and Reuse: Records should be useable and readable for as long as they are retained. Measures for ensuring continued usability may include the following:
a) Where necessary, creating additional copies of records or converting them into alternative formats;
b) Preparing a plan to ensure continued access and usability of records in the event of a disaster affecting records systems or storage areas;
c) Establishing routine monitoring of storage conditions.
6. Disposal and Destruction: Disposal and destruction of record must follow these steps:
i. staff must refer to the Records and Information Management Classification System & Retention Schedule for minimum retention periods for each type of record.
ii. once a record is timed for destruction as per the schedule, the department/school/Board site must submit a Records Disposition Authorization Form for the Destruction/Transfer to Storage/Archival Storage of Records (Appendix A), to the Coordinator of Information Management/Privacy and Freedom of Information for approval that the documents have met the minimum retention period.
iii. the approval will be communicated to the department/school/Board site that the record can be destroyed. A certificate of destruction must be received from the service provider and retained;
iv. Appendix A, and the certificate of destruction will be retained permanently by the Coordinator of Information Management/ Privacy and Freedom of Information.
v. for the annual review of Ontario Student Records (OSR), the completion of Appendix A is not required by schools.
In the event of a school closure/consolidation, the principal will work with the Coordinator of
Information Management/Privacy and Freedom of Information to complete residual record‐
keeping requirements for student, administrative and archival records.
Records Maintained in Electronic Format
Records maintained in electronic format include the following:
· email messages;
· file/storage management systems (Google Drive);
· document management systems (DocuShare);
· student information systems (Edsembli);
· payroll and human resources systems (IPPS); and
· financial systems (Microsoft Dynamics NAV).
These are considered to be official records of the Board and have the same legal standing as if they were paper. These records are to be retained per the Records and Information Management Classification System & Retention Schedule .
ROLES AND RESPONSIBILITIES
· All employees, trustees, and third party contractors or agents who collect and use records and information on behalf of the Board, must comply with these administrative operational procedures and any related statutory requirements.
· The Board Privacy and Risk Advisor has the overall responsibility for the Records and Information Management program.
· The principal/supervisor is responsible for overseeing records management and destruction and may appoint a designate for this process.
Adopted Date:
Revision History: | March 31, 1998
May 24, 2011 February 27, 2018 December 20, 2022 |
Employee Name: | School Name: | ||||
Department: | Email Address: | ||||
Phone Number: | Date: | ||||
Destruction Authorized By:
(Principal, Manager or Supervisory Officer) | Signature of Authorizing Principal, Manager or Supervisory Officer: |
Record Series/File Title
(Do not include personal information) | Records Year Range
| Retention Period
| # of Boxes
or Files | Request Type | Manner of Disposal
| Destruction Date | ||
Destruction
Storage Archives |
Shredding
Electronic Deletion | |||||||
Destruction
Storage Archives |
Shredding
Electronic Deletion | |||||||
Destruction
Storage Archives |
Shredding
Electronic Deletion | |||||||
Destruction
Storage Archives | Shredding
Electronic | |||||||
Destruction
Storage Archives |
Shredding
Electronic Deletion | |||||||
TOTAL NUMBER OF BOXES OR FILES | Page _____ of _____ | |||||||
Authorization and Signature of Coordinator of Information Management/Privacy and Freedom of Information
________________________________________________________________________________________________________________ | Date: __________________________________________________ |