Document retention policy creation
With your data audit complete, you can intelligently create rules for the future.
Start with legal requirements. Different laws require you to retain certain documents for specified time periods. Here’s a quick overview for U.S. businesses:
- Tax documentation (seven years)
- Export documentation (five years)
- Retirement plans (four years)
- Background checks (five years)
- Employee payment records (three years)
- Contracts (seven years from expiration)
- Corporate records (permanent)
International jurisdictions also vary and you should always consult local rules and experts for specifics.
Do you hold on to important documents forever, because it seems like the right thing to do? Do you have twenty-year-old tax returns? Any employee files from the 90s?
Although these documents are important, holding them for too long can expose your business to unnecessary risk.
For instance, you are only required to retain export-related records for five years from the date of export. However, if the Commerce Department investigates your business’ export practices, it will review records as far back as you retain them and can apply penalties as far back as your records show noncompliance.
It’s necessary to retain documents for their legally required time periods, but it’s also important to purge documents that you are no longer required to keep on file.
In addition to standard legal requirements, you need “litigation hold” policies as exceptions to your standard document retention policy.
A litigation hold applies when your business becomes part of a legal claim or you have reason to believe that it may become part of a legal claim. At that point, you must retain all documents that could be evidence to the claim.
Consider an example.
If a recently terminated employee files a lawsuit against your business for wrongful termination, anything related to the former employee’s employment—including any related policies—needs to be retained.
You must retain handbooks, the employee’s file, manager’s notes, employee’s email, and related data, without limitation, until the legal matter is resolved. If your standard policy is to delete former employees’ email mailboxes ten days after termination, you will need to exempt this former employee’s email from that policy for litigation hold purposes.
Your policy should also help achieve your own organizational and cost goals.
For instance, there is no retention period specifically tied to email. But companies take different approaches to email retention depending on the nature of their business, employee roles, and cost.
A common approach is to clear out employee email boxes every ninety days. Many companies grant exceptions for certain departments and executives, but the goal is to keep employees saving what’s important in shared long-term folders while deleting what is unnecessary.
This saves storage space and keeps employees responsible for maintaining an organized business memory.