Records management (RM) is the discipline of controlling the information an organisation creates and receives so that the right records are available to the right people, are trustworthy, and are kept for exactly as long as they are needed - no longer, no shorter. It sits at the intersection of law, technology, governance and day-to-day work.

From filing clerks to information governance

The profession has shifted dramatically. Twenty years ago RM meant registries, file covers and strong-rooms. Today the same principles apply to email, collaboration platforms, line-of-business systems, cloud storage and messaging apps. The volume is larger, the formats are more varied, and the risks - data breaches, privacy penalties, e-discovery, disinformation - are higher. Modern RM is therefore usually framed as part of information governance: the coordination of records, data protection, security, and access.

Why organisations invest in RM

  • Compliance - meeting statutory retention, privacy and freedom-of-information obligations across every market you operate in.
  • Risk reduction - defensible disposal removes data you are no longer required to keep, shrinking breach and litigation exposure.
  • Efficiency - staff find authoritative information quickly instead of re-creating or duplicating it.
  • Evidence and accountability - records prove what was decided, by whom, and when.
  • Corporate memory and heritage - the small proportion of records with enduring value become the archive.

The standards that anchor the field

ISO 15489 is the international standard for records management and defines the characteristics of an authoritative record: authenticity, reliability, integrity and useability. The ISO 30300 series describes a management-system approach (Annex SL, like ISO 9001). Related frameworks include ISO 16175 (records in digital systems) and MoReq for electronic records requirements.

In practice. A records manager rarely files anything personally. Their job is to design the rules - the classification scheme, the retention schedule, the policies and the system settings - and then to make compliance the path of least resistance for everyone else.

Key takeaways

  • RM is about trustworthy information kept for the right length of time, in any format.
  • It is now part of broader information governance, working alongside privacy and security.
  • ISO 15489 gives you the vocabulary; the four record qualities are the test of a good record.

Check your understanding

Last modified: Saturday, 1 August 2026, 10:06 AM