Industry Regulations & Compliance Flashcards

Under HIPAA, what is the minimum retention period for medical records of adults in the absence of a more stringent state law?

Answer: 6 years from creation or last effective date

HIPAA requires covered entities to retain documentation of their privacy policies and procedures for 6 years from creation or last effective date.

Which federal act establishes the framework for managing records of the U.S. federal government, including disposition schedules?

Answer: Federal Records Act

The Federal Records Act (44 U.S.C. Chapters 29, 31, 33) establishes the framework for creating, maintaining, and disposing of federal government records.

The Sarbanes-Oxley Act Section 802 imposes criminal penalties for destroying records related to what type of proceeding?

Answer: Federal investigations or bankruptcy proceedings

SOX Section 802 criminalizes knowingly altering, destroying, or falsifying records in connection with federal investigations or bankruptcy proceedings.

What does the Uniform Disposition of Public Records Act primarily address?

Answer: State-level authority to schedule and destroy public records

The Uniform Disposition of Public Records Act provides a model framework granting state agencies authority to establish schedules for retaining and destroying public records.

Under the Family Educational Rights and Privacy Act (FERPA), how long must schools retain education records after a student's enrollment ends?

Answer: FERPA does not specify a minimum retention period

FERPA grants access and privacy rights but does not mandate a specific retention period; retention is governed by state law and institutional policy.

Which concept in archives law allows a government to transfer physical custody of records to an archives while retaining legal ownership?

Answer: Deposit

Deposit allows a government body to place records in an archival repository for safekeeping while the originating agency retains legal title.

The General Records Schedules (GRS) issued by NARA apply to which category of records?

Answer: Common administrative records found across all federal agencies

NARA's General Records Schedules authorize disposal or transfer of common administrative records—such as routine correspondence and HR files—found in virtually all federal agencies.