Record protection—11​.10 (c)

"(c) Protection of records to enable their accurate and ready retrieval throughout the records retention period."

The following procedural actions should be performed to protect and enable record retrieval:

• Define procedures for providing records to internal and external parties

• Specify retention requirements - specifically the retention period

• Define backup, recovery, archival, and retrieval processes for electronic records

This is another area where enforcement discretion will be applied but this discretion is specifically limited to generating copies of records. Electronic records should be available at a company's facility using that company's defined tools and methods or the records should be made available as copies in some common format (e.g. PDF, XML).