o Where the disposal action is to ‘Archive’: The Information Asset Owner or delegated representative must arrange for the Archivist to review the record. o Where the disposal action is to ‘Destroy’: The records must be destroyed. Any destruction must be done securely and follow Council’s Information Security Policy and staff guidance on confidential waste destruction. o Where the disposal action is to ‘Review’: The Information Asset Owner should consider if there is an operational / business need to retain the records for a further period. Advice must be sought from the Records Manager. o Where the disposal action is “External Transfer”: The Information Asset Owner must arrange for the external transfer to the organisation as per the instructions in the Corporate Retention Schedules and in accordance with the agreements with the third party organisation on whose behalf the Council is managing the records. 5) Recording the Disposal The disposal action must be recorded in a Disposal Log. 5.8 Exceptions to the Disposal Authority Process (Automated Destruction) The only exception to the Disposal Authority Process is where it has been agreed by the Information Asset Owner and the Information & Records Manager that an automated process may be used to destroy electronic records. Automated destruction of records shall only be approved where there are technical controls available to place a hold on the record or group of records to prevent the automated destruction of these records. Where automated destruction of electronic records is in place the Information Asset Owner must ensure they have processes in place to instigate a hold on records to prevent destruction when the council becomes aware that a request has been received for records that may be automatically destroyed or where the council requires the records as per stage 1 to 3 of the Disposal Authority Process. 6. Records Retention and Disposal Governance Page 10 of 14