• Section 1 - Purpose and Scope
• Section 2 - Processes and Key Controls
• Section 3 - Key Requirements
• Testing Eligibility
• Physical Source Records after Digitisation
• Assessing Records
• Create Evidence of Destruction Process
• Destruction of Records
• Documenting the Destruction of Records
• Section 4 - Roles, Responsibilities and Accountabilities
• Vice-Chancellor and President
• Chief Information Officer
• Information Domain Custodian
• Information Stewards
• Senior Manager, Data Strategy and Management 
• Data Strategy and Governance (DS&G)
• Managers and Supervisors
• UQ Consumers
• Section 5 - Monitoring, Review and Assurance
• Section 6 - Recording and Reporting
• Section 7 - Appendix
• Criteria Matrix
• Resources
• Related Policies
• Related Legislation
• Definitions

Section 1 - Purpose and Scope

(1) The Purpose of this Procedure is to support effective management of records at The University of Queensland (UQ) by enabling the destruction of University records that satisfy certain conditions.

(2) A University record can be an object in any format that displays recorded information showing evidence of the University’s decisions and actions whilst performing its various operations. Records can be “born digital” e.g. email, electronic document, image, video, audio recording. They can also be “physical source records” which means that they have a physical presence such as paper, folder, photograph, microform, USB drive, Compact Disc, etc. A digital copy of physical source records can, in some cases be transitioned to becoming a Digitised Electronic Record (electronic format through scanning or other technologies).

(3) This Procedure covers all records of the University of Queensland and describes the appropriate destruction criteria and procedures for their destruction including the approved process for transitioning physical source records to a Digitised Electronic Record.

(4) This Procedure applies to consumers of UQ Information Technology Services (ITS) resources and anyone creating or accessing UQ’s information assets.

(5) Consumers that are connected to UQ networks, systems or services must comply with this Procedure, irrespective of location or device ownership e.g. consumers with personally-owned computers.

(6) Exceptions to this Procedure must be approved by the Chief Information Officer.

Section 2 - Processes and Key Controls

(7) The processes and key controls for determining the eligibility of records for destruction apply to both physical and digital records.

(8) The University is subject to the Queensland Government’s:

1. Public Records Act 2002; and
2. Records Governance Policy.

(9) Other key controls include the retention and disposal schedules authorised by Queensland State Archives:

1. Queensland State Archives - University Sector Retention and Disposal Schedule; and 
2. Queensland State Archives - General Retention and Disposal Schedule (GRDS).

(10) The key points of action from these controls are illustrated in the below workflow, and correspond with provisions under section 4.

Section 3 - Key Requirements

Testing Eligibility

(11) All records regardless of format must be managed in accordance with the minimum legal retention requirements stated in the authorised retention and disposal schedules listed in section 2.

(12) Only records that are classified as “temporary” and “expired” (past their legal minimum retention expiry date) will be eligible for destruction.

Exceptions

(13) It is important to recognise that certain types of records are not eligible for consideration for destruction.

(14) The following summarises these types of records that cannot be destroyed under any circumstances:

1. Permanent Records
   Records described as permanent retention value under a current retention and disposal schedule cannot be destroyed, even after digitisation.
2. Records of Intrinsic Value
   Are significant physical source records where any or all of the following qualities or characteristics apply:
   1. provides explicit evidence specific to UQ in its current format.
   2. are the surviving records of a significant event/disaster/incident which resulted in the destruction of records with special qualities and characteristics that could be lost or diminished if the original source record is digitised, converted or migrated into another medium; and
   3. are classified as permanent retention in the authorised retention and disposal schedules that apply to UQ;
   4. are of historical significance and of enduring value in their physical format;
   5. cannot be captured through digitisation;
3. Information under Right to Information (RTI) or Information Privacy Legislation Requests
   Records that are and/or have been requested as part of an application under Right to Information or Information Privacy legislation are not to be destroyed. Consultation with the UQ Right to Information team and/or the Data Strategy and Governance team is required. Further information can be found within the Queensland State Archives - General Retention and Disposal Schedule (GRDS).
4. Records required for Legal Purposes
   It is a breach of the Criminal Code Act 1899 to destroy records that are or could be reasonably expected to be required for a legal matter whether current or anticipated at time of destruction.
   The lead agency for Government recordkeeping, Queensland State Archives, can impose a records disposal freeze. Under a disposal freeze, it is unlawful to destroy physical or electronic records outlined in the freeze directive.

Physical Source Records after Digitisation

(15) Physical source records that have been digitised only qualify for early destruction if the original is classified as temporary value, and if the digitised version is held for the required retention period for that class of records.

(16) Digitisation must follow a documented and auditable process that includes quality assurance measures. These include:

1. scan or convert the physical source record to create an electronic copy in an approved digital format (e.g. .PDF,.JPG, mp3, mp4);
2. confirm that the digital record is clearly legible and/or audible and fit-for-purpose;
3. store the digital copy of the record in an approved record keeping system that includes the appropriate metadata. The Data Strategy and Governance team provide organisational units with advice on record keeping metadata requirements;
4. store the original physical copy after digitisation, in an ordered and secure state until a compliant digital record has been obtained; and
5. follow the process outlined in the ‘Assessing Records’, ‘Create Evidence of Destruction Process’ and ‘Destruction of Records’ provisions below until approval of their final destruction.

Assessing Records

(17) Organisational units need to determine and document records that are eligible for destruction.

(18) To assist with determining the eligibility of University records for destruction a ‘Criteria Matrix’ resource is appended (see ‘Criteria Matrix’ in section 7).

(19) The ‘Criteria Matrix’ summarises the conditions referenced in the approved retention and disposal schedules to:

1. determine whether the records are categorised as temporary records; and
2. understand the retention trigger conditions in order to calculate and confirm that the minimum retention requirements have been served.

(20) Data Strategy and Governance provides advice and support to organisational units to assist with the correct translation of the requirements stated in the approved retention and disposal schedules.

Create Evidence of Destruction Process

(21) Regardless of the format the time expired records are in, under legislation it is mandatory to keep a record (log) of destruction activities.

1. Organisational units must document the records eligible for destruction and receive local organisational unit endorsement and delegated manager approval prior to carrying out destruction. Liaison with the Data Strategy and Governance team is also required and templates to assist are available in the ‘Resources’ provisions in section 7.
2. The destruction logs, and their associated approvals, must always be kept and captured within UQ’s enterprise document and records governance system, that is Micro Focus Content Manager (also known as TRIM).

Destruction of Records

Carrying out the Destruction of Physical Source Records

(22) The destruction of physical source records must be carried out using a secure process unless the record had a security classification approved as ‘public’.

(23) The Data Strategy and Governance team provide advice to organisational units on preferred confidential destruction services. These include:

1. For small volumes of paper records, local shredding equipment can be used.
2. For sizeable volumes of paper records or records on small portable recording devices such as USBs or compact disks, there are third-party providers for:
   1. medium volumes – supply and removal of in-office confidential destruction bins; and
   2. large volumes – through an on-site mobile destruction service or via an off-site destruction plant.

Destruction of Digital Records

(24) As is the case for physical source records (refer to relevant provisions above), the destruction of digital records must also be carried out using a documented, authorised and secure process. Organisational units can contact Data Strategy and Governance if they require assistance.

Documenting the Destruction of Records

University's Enterprise Document and Records Management System

(25) The University’s enterprise document and records management system (Micro Focus Content Manager, also known as TRIM) is designed with functionality that supports compliant destruction practices. It caters for the capture of electronic records, it facilitates the registration of the existence of physical records, and captures audit trails associated with records. The features include:

1. Inbuilt functionality to facilitate the application of the legal retention requirements, their assessment for eligibility and to enact secure destruction after approval.
2. When a physical record has been registered into ‘Micro Focus Content Manager’, the destruction also involves the process described in the ‘Destruction of Records’ provisions above, as well as the digital destruction process within this database.
3. The system automatically retains evidence via metadata of destruction activities, plus audit trails and these histories are permanently captured.
4. Only authorised Data Strategy and Governance staff are able to activate final destruction functionality.

Other Electronic Systems of Records

(26) The University has many other systems of records. However, the destruction of records captured within these systems is not straight-forward.

(27) Prior to destroying digital records that are not within Micro Focus Content Manager, UQ consumers are required to consult with the Data Strategy and Governance team for advice.

Section 4 - Roles, Responsibilities and Accountabilities

(28) The roles and responsibilities outlined below are in addition to those defined in the Information Management Policy.

Vice-Chancellor and President

(29) The Vice-Chancellor and President is responsible for ensuring that UQ complies with the Public Records Act 2002, including the principles and standards established by the Queensland State Archives.

(30) Responsibilities within this Act may be delegated, and authority is given to the Senior Manager, Data Strategy and Management for endorsement and approval of the final destruction activities of University records.

Chief Information Officer

(31) The Chief Information Officer is responsible for:

1. ensuring this Procedure is reviewed every three years; and
2. ensuring Data Strategy and Governance is resourced to support this Procedure.

Information Domain Custodian

(32) Information Domain Custodians (Information Custodian) are responsible for ensuring that records under their domain are destroyed in accordance with this Procedure.

(33) This includes:

1. the delegation of responsibilities to Information Stewards as per the following provision; 
2. assurance that measures are in place to support compliance; and
3. record keeping compliance as defined in this Procedure.

Information Stewards

(34) Information Stewards are responsible for:

1. providing assurance of the quality of digitised physical records; and
2. keeping destruction logs that includes destruction approvals.
3. engaging with Data Strategy and Governance for:
   1. interpreting the retention requirements listed in the Queensland State Archives’ authorised retention and disposal schedules that apply to UQ;
   2. digitisation and metadata advice; and
   3. records within University systems of records.

Senior Manager, Data Strategy and Management 

(35) The Senior Manager, Data Strategy and Management is responsible for authorising the destruction of UQ records as the delegate of the Vice-Chancellor and President.

Data Strategy and Governance (DS&G)

(36) Data Strategy and Governance staff are responsible for:

1. supporting the destruction of UQ records under the supervision of the Senior Manager, Data Strategy and Management;
2. assisting UQ Consumers with the processes documented in this Procedure;
3. advising UQ Consumers on best practices relating to Data Strategy and Governance;
4. communicating to Information Stewards when a disposal freeze is issued or changes are made to the retention and disposal schedules;
5. maintaining the disposal log and authorisation within an approved record keeping system as per the ‘Create Evidence of Destruction Process’ provisions; and
6. providing records management training programs to staff.

Managers and Supervisors

(37) UQ Managers and Supervisors are responsible for ensuring their staff are disposing of records in accordance with this Procedure.

UQ Consumers

(38) All UQ Consumers are responsible for complying with this Procedure, ensuring records are kept for as long as they are legally required.

Section 5 - Monitoring, Review and Assurance

(39) The Chief Information Officer (CIO) will ensure this Procedure is reviewed every three years.

(40) Information Stewards will ensure documented quality assurance processes to satisfy legibility, audibility, readability and completeness prior to the destruction of physical records or digital records.

(41) Areas under the responsibility of the Information Stewards will be subject to quality assurance checks and record keeping compliance audits. These checks and audits will be carried out in partnership with the authorised officer delegated by the Information Steward and the authorised Data Strategy and Governance delegate.

Section 6 - Recording and Reporting

(42) An annual status report summarising records destruction activities, will be provided to the Information Technology Governance Committee (ITGC) by the Senior Manager, Data Strategy and Management.

Section 7 - Appendix

Criteria Matrix

(43) The linked criteria matrix can be used for assessing the eligibility of records for destruction.

1. For further guidance on:
   1. What information can be a “record”, go to the advice provided by the lead agency for Queensland Government record keeping, Queensland State Archives, on recordkeeping and retention, disposal and destruction of records.
   2. Preferred digital record formats, go to the advice provided by the Queensland State Archives on digital records, storage media and systems.
2. For specific UQ advice, contact Data Strategy and Governance via UQCentralRecords@uq.edu.au.

Resources

(44) Relevant resources include:

1. Authorised retention and disposal schedules for UQ use, used to determine status of records and the minimum legal requirements for their retention:
   1. Queensland State Archives - University Sector Retention and Disposal Schedule, read in- onjunction with:
   2. Queensland State Archives - General Retention and Disposal Schedule (GRDS).
      
      Source latest version from: Search for a Retention and Disposal Schedule
2. Form – Records Disposal Application Form.
3. Records Management website.

Related Policies

(45) Related policies include:

1. Information Management Policy
2. Information Governance and Management Framework
3. Queensland State Archives - Records Governance Policy.

Related Legislation

(46) Related legislation includes:

1. Public Records Act 2002
2. Criminal Code Act 1899 (s.129)
3. Evidence Act 1995 (Cth)
4. Information Privacy Act 2009.

Definitions