GRCLibrary.ai

Standard

Records Retention and Destruction Standard

This standard establishes controls, retention schedules, destruction methods, and documentation requirements for managing information and records throughout their lifecycle. It ensures that records, both physical and digital, are retained, secured, and disposed of in compliance with legal, regulatory, contractual, and operational requirements, including those governing privacy, AI governance, supply-chain trade compliance (BASC), and data protection.

Type
Standard
Version
1.8.0
Date
2026-10-15
Owner
Chief Information Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Governance
Review frequency
Annual or as required by regulatory or framework changes
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • 1. Purpose
  • 2. Scope
  • 3. Governance and accountability
  • 4. Records classification
  • 5. Records retention schedule
  • 6. Secure storage and access
  • 7. Retention hold and litigation freeze
  • 8. Secure destruction
  • 9. AI dataset and model record retention
  • 10. Sector-specific retention overlays
  • 11. Monitoring and compliance
  • 12. Framework alignment

Frameworks it maps to

Related documents