As for an authoritative source for best practices.....

They've already been cited, but are standards... not regulations and
statutes.  The ISO Records Management Standard 15489.  

Douglas P. Allen, CRM, CDIA+

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance