Step 1: Get Everybody’s Attention
One of the key reasons why creating a retention policy
takes a long time, is because organizations don’t
make it a high enough priority. So the responsibility gets
handed to some newbie as a sort of hazing exercise. This
newbie now has to corral people from all corners of the
organization gathering information from people who would
rather be getting their teeth pulled at the dentist than
talking to this freshman about policy.
It shouldn’t work this way. As with any policy, record
retention policy should be a primary target, and of prime
interest to any company’s board and the executive
management that services it. It’s very easy to create,
and without one you can forget about surviving any sort
of litigation. The documents you don’t have on hand
will make you look guilty, the documents you do have on
hand will incriminate you, and the mere fact that you don’t
have a record retention policy will announce to the courts
that you’re irresponsible. Let’s see you try
to win that case.
So, to get everybody’s attention start with the board
and executive management. Once you have their attention,
you’ll have everybody else’s attention.
Step 2: Get Clear on What the Policy Will Look
Like
Let me give you my best piece of advice when understanding
what the final policy will look like—keep it very
simple and easy to modify. Your policy shouldn’t be
more than some introductory language and a table. Your table
is a summary of all the different types of documents you
have, and what their retention length should be. In addition,
you may want to include some notes and reference information
(i.e. what regulation or guideline drives the retention
policy).
Make sure your policy system is flexible enough to make
changes at will with little or no pain. You will need a
good change management system in place that can document
changes as your policy evolves over time. Instead of obsessing
over getting everything perfect the first time, just make
sure it’s good enough and easily adjustable as you
find ways to make improvements. I suggest you involve your
IT department to help setup a policy management database.
Step 3: Go Away For the Day
Get all the key people together, and go away for the day.
You will need representation from legal, finance, IT, the
business units, and most importantly executive management.
Once executive management is involved, all the right people
will want to be there. Don’t settle for middle managers
that just want to brown-nose. Get the right people, no matter
where they are in the organization. The right people are
the people that know the regulations, standards, and how
the business runs.
Organize a one-day offsite that will be fun for everyone.
There’s work to do, but that doesn’t mean it
needs to be arduous. Have it in a nice place with great
food and scenery. Here’s how the schedule will look.
The schedule for the day can be light. The actual work
to be done won’t take a full 8 or 10 hours. Start
the day with a light breakfast combined with a vision session.
Explain to everybody what needs to be accomplished, and
why it’s important to the company. Take a short break,
then open things up for an uninhibited brainstorm / data
dump. Have several recorders on hand, and just let everybody
fire away with what’s in their head. Focus the session
purely on different types of documents that are produced.
Consider not only typed documents, but email, instant messages,
anything that could be considered a record. Don’t
try to solve or adjust anything, and don’t try to
create systems at this point, just let the information flow
freely from people’s heads to the board (I prefer
using large sticky-pads). The brainstorming session should
go a good 2-3 hours with one or two breaks in between. After
that, take a long and enjoyable lunch break.
After lunch, bring everybody together to assemble the information.
All this data needs to be organized into document types.
Don’t worry about retention guidelines at this point,
just try to logically organize all the different documents
into groups. A company typically has a lot of different
documents, so this exercise may take a while. Once a first
pass at organization is complete, make a second pass with
the retention lens on. Think about how long each document
group needs to be retained at different stages of its retention
period (e.g. readily available, onsite, archived offsite,
destroyed). When considering retention periods, consider
regulations, standards, guidelines, and also availability
for good business operation. The key is not to over-think
this, just get it most of the way there. Remember, you can
always come back to adjust it when you need to. Take another
break, we’re almost done.
Back from break, we just need to have a short agreement
session. There will undoubtedly be some disagreement between
groups of document types and retention periods. That’s
very normal; however, the outcome of this session is a consensus
on the contents of the policy. It’s good if everybody
agrees, but if they don’t that’s okay also.
We just need everybody to concede that this is a policy
that’s good enough for now. The hard work is done,
enjoy the rest of the day.
Step 4: Create the Policy
As a final last step, just record the policy that everyone
has agreed to and publish it as record. Do not entertain
adjustments in any way, shape or form. You may have a stroke
of brilliance after the offsite, or you may have people
still trying to sell their point privately after consensus
was reached. Forget it, you’ll just go backwards.
Create the policy and publish it—that’s it.
Creating policy is easy and can be fun when you take the
right approach. If you don’t have a record retention
policy in place, start planning a fun offsite today. You’ll
be surprised how quickly things will come together.