At 01:46 PM 3/30/2005 -0600, you wrote:
>The ARMA draft checklist  for Physical Records Storage talks about
>employee's being bonded.  What kind of bonding is required as there are
>many kinds and degree.

There are a wide variety of "bonds" that can be issued on individuals... in
a sense, a bond is a type of insurance.  Most  employers look for a
"Fidelity Bond" to be placed on their employees.

Some insights on bonding can be found here:

http://www.bonds4jobs.com/bondingneed.html

http://www.toolkit.cch.com/text/P04_8265.asp


You may also want to contact PRISM www.prismintl.org and ask them about the
practices regarding bonded employees used in the storage industry.

One area where this has become increasingly important is related to the
requirements placed on commercial service providers based on the "Business
Associates" agreements required for 3rd party service providers based on
HIPAA and GLBA over the past 3-4 years.  Because the individuals employed
by these firms are required to handle information protected by privacy laws
and financial transaction data on a routine basis, there is a need to
ensure they will not divulge the information they handle.  There are also
specific requirements in Section 314.4 of the FTC Safeguard Rule requiring
bonded employees in the handling of certain electronic financial
transactional data AND the backup tapes including the same data.

Other concerns relate to divulging personal information inappropriately
that employees may simply "stumble across".  The records of well-known
individuals may be stored in alphabetical, numerical or chronological
sequence with those of the rest of us, and someone coming across these
records may see the potential for making money by providing inappropriate
access to certain organizations.  This is one of the reasons for
considering bonding employees, and one of the issues the bond may be
directly related to.

Larry

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance