Part 9 – (h) Access

  • Organizations should have formal guidelines regulating who is permitted access to records and in what circumstances
  • The regulatory environment, in which the organization operates, establishes broad principles on access rights, conditions or restrictions that should be incorporated into the operation of records systems
  • The need to place restrictions on accessibility can change with the passing of time
  • Ensuring appropriate access controls is done by assigning access status to both records and individuals
  • The monitoring and mapping of user permissions and functional job responsibilities is a continuing process which occurs in all records systems, regardless of format