Compliance & Privacy

Date of Implementation: August 1996
Regulatory Authority: Health and Human Services Office of Civil Rights
Industries Affected: Health care and health care service organizations

Impact on an organization's records management practices:

Requires Covered Entities to make reasonable efforts to preserve Protected Health Information, while also limiting access to such information through appropriate administrative, technical and physical safeguards.

How Vanguard Archives helps you maintain compliance:

Vanguard a) provides you with a Business Associates Agreement and ensures that any subcontractors used by Vanguard are bound by the same terms, b) has appropriate measures in place to protect information against accidental loss or unauthorized destruction, c) has written operating procedures which strictly limit access to Protected Health Information through appropriate administrative, technical and physical safeguards, and d) has a written policy to notify you of any security incident of which it becomes aware.

(Public Company Accounting Reform and Investor Protection Act – Public Law 107-204)

Date of Implementation: July 30, 2002
Regulatory Authority: Securities and Exchange Commission, Public Company Accounting Oversight Board
Industries Affected: Publicly traded companies

Impact on an organization's records management practices:

Requires preservation of information related to transactions that affect an organization's financial statements.

How Vanguard Archives helps you maintain compliance:

Vanguard has appropriate measures in place to protect your information against accidental loss, including barcode scanning of items each time they are handled and regular inventory audits which would provide an early warning sign of any inventory irregularity. Vanguard also protects your information against unauthorized destruction by requiring itemized client sign-off and by checking client signatures against authorized user lists before items are destroyed.

(Public Company Accounting Reform and Investor Protection Act – Public Law 107-204)

Date of Implementation: November 12, 1999
Regulatory Authority: Various
Industries Affected: Financial institutions

Impact on an organization's records management practices:

Requires establishing appropriate administrative, technical and physical safeguards to prevent identity theft.

How Vanguard Archives helps you maintain compliance:

(Fair and Accurate Credit Transactions Act)

Date of Implementation:June 1, 2005
Regulatory Authority: Federal Trade Commission
Industries Affected: All

Impact on an organization's records management practices:

Requires proper disposal of any consumer information in order to prevent identity theft.

How Vanguard Archives helps you maintain compliance:

Vanguard provides certified shredding services to ensure proper confidential disposal of information assets containing consumer information.

(Payment Card Industry Data Security Standard)

Date of Implementation:October, 2008
Regulatory Authority: Payment Card Industry Council
Industries Affected: Organizations that process credit cards

Impact on an organization's records management practices:

Requires meeting certain standards in data protection policies and practices in order to prevent theft of credit card account numbers.

How Vanguard Archives helps you maintain compliance:

Vanguard a) employs appropriate security measures including recorded video monitoring of all facilities, b) has written operating procedures which strictly limit access to your information and requires the use of unique logins and passwords for digitally stored information, and c) provides certified shredding services to ensure proper confidential disposal of information assets containing credit card account numbers.

(Fair Credit Reporting Act)

Date of Implementation:December 31,2010
Regulatory Authority: Federal Trade Commission
Industries Affected: Organizations that provide financing

Impact on an organization's records management practices:

Requires written plan to detect and respond to data breach, and to identify and mitigate potential points of hazard where identity theft could occur within an organization.

How Vanguard Archives helps you maintain compliance:

Vanguard has its own written plan to detect and respond to data breach, and to identify and mitigate potential points of hazard where identity theft could occur while your information is in Vanguard's custody.

(Family Educational Rights and Privacy Act – 20 USC § 1232g and 34 CFR part 99)

Date of Implementation:August 21, 1974
Regulatory Authority: US Department of Education
Industries Affected:Educational organizations receiving federal funding

Impact on an organization's records management practices:

Requires strict controls over access to student records.

How Vanguard Archives helps you maintain compliance:

Vanguard has written operating procedures which strictly limit access to student information.