Federal Agency Records Programs Under 36 CFR

Every executive branch agency in the United States is legally obligated to create and preserve records that document its organization, functions, policies, decisions, procedures, and essential transactions. The framework that turns this statutory duty into concrete operational requirements lives in Title 36 of the Code of Federal Regulations (36 CFR), Chapter XII, Subchapter B, the body of regulations promulgated by the National Archives and Records Administration (NARA). These rules translate the broad mandates of the Federal Records Act and related statutes into specific, auditable obligations that govern how agencies create, maintain, use, and ultimately dispose of or transfer their records.

A federal agency records program is the organized set of policies, people, systems, and procedures an agency stands up to meet those obligations. It is not a single office or a single piece of software; it is a lifecycle discipline that begins when a record is created and ends only when the record is destroyed under an approved authority or accessioned into the National Archives as part of the permanent historical record of the United States.

The Regulatory and Statutory Foundation

The 36 CFR records management rules do not stand alone. They implement and elaborate on the statutory chapters of Title 44 of the U.S. Code, most notably the Federal Records Act, which establishes the responsibilities of agency heads and the Archivist of the United States. The regulations operationalize statutory concepts such as the definition of a federal record, the requirement to make and preserve adequate documentation, and the prohibition against unauthorized destruction.

Agencies should treat the statute and the regulation as a layered system. The U.S. Code sets the obligations and the penalties; 36 CFR specifies the methods, standards, and reporting that demonstrate compliance. NARA also issues bulletins, guidance, and frequently asked questions that interpret the regulations and announce new expectations, particularly as recordkeeping shifts from paper to fully electronic environments.

Core Agency Responsibilities

Under the regulations, every agency must establish and maintain an active, continuing records management program. Key obligations typically include:

• Designating a senior agency official for records management and an agency records officer who are accountable for the program.
• Issuing internal directives and training so that staff understand what constitutes a record and how to manage it.
• Identifying and inventorying records across all media and formats, including email, messaging, social media, and other electronic content.
• Scheduling all records so that every series has an approved retention period and a lawful disposition.
• Protecting records against unauthorized or accidental loss, alteration, or destruction, and ensuring continued access for as long as the record is retained.

Agencies are also expected to integrate records management into broader information governance, information security, privacy, and freedom-of-information functions rather than treating it as an isolated clerical activity.

Scheduling and Disposition

Disposition is the heart of a compliant program. No federal record may be destroyed without authority, and that authority comes from an approved records schedule. Agencies develop agency-specific schedules for records unique to their missions, submitting them to NARA for appraisal and approval. For records common across government, agencies apply the General Records Schedules (GRS), which NARA issues to cover administrative functions such as human resources, budget, and facilities.

Each schedule item assigns a record series either a temporary disposition, with a defined retention period after which it is destroyed, or a permanent disposition, meaning the records will eventually transfer to the National Archives. Applying schedules consistently, documenting destruction, and transferring permanent records on time are recurring compliance points that NARA examines through reporting and inspections.

Managing Electronic Records and System Requirements

The most significant evolution in federal recordkeeping has been the move to managing records electronically by default. The regulations and accompanying NARA guidance require agencies to maintain electronic records in usable, retrievable, and authentic form for their full retention period, with adequate metadata to preserve context and meaning.

For many years, agencies looked to the Department of Defense electronic records management standard, commonly known as DoD 5015.2, as the benchmark for recordkeeping system functionality, and NARA formally endorsed it. In 2022, NARA ended that endorsement and shifted toward the Universal Electronic Records Management (ERM) Requirements developed through the Federal Electronic Records Modernization Initiative (FERMI). The Universal ERM Requirements express recordkeeping needs in functional, technology-neutral terms intended to be incorporated into acquisitions and service offerings, reflecting a broader policy direction toward fully electronic, born-digital records management and away from a single certification standard. Agencies evaluating systems today should reference current NARA functional requirements rather than the retired DoD endorsement.

NARA Oversight, Reporting, and Accountability

A records program is not self-certifying. NARA exercises oversight through annual reporting instruments, self-assessments, and the authority to inspect agency records management practices. These mechanisms surface risks such as unscheduled records, backlogs of permanent records awaiting transfer, and gaps in electronic recordkeeping. When unauthorized destruction or loss occurs, agencies are required to report it to NARA, which can recommend corrective action.

Accountability ultimately rests with the agency head, who is statutorily responsible for the program, supported by the designated senior official and records officer. A mature program documents its policies, demonstrates that schedules are applied, and shows that electronic systems meet current functional requirements. For a broader orientation to how these obligations connect across agencies, see the federal records topic hub.

Building a Defensible Program

In practice, a defensible federal records program rests on a few durable principles: know what records you hold, ensure every record is covered by an approved schedule, manage records in systems that preserve authenticity and accessibility, and maintain evidence of compliance that can withstand audit, litigation, and public scrutiny. Because the regulatory landscape continues to shift toward electronic-by-default recordkeeping, agencies should monitor NARA policy updates and treat their records program as a living discipline rather than a static checklist. Done well, the program protects the public’s right of access, supports accountability, and preserves the documentary record of the federal government for future generations.