What recordkeeping requirements do FERC and NERC impose on electric utilities for compliance evidence?

Electric utilities operate under two overlapping federal recordkeeping regimes. The Federal Energy Regulatory Commission (FERC) regulates wholesale electricity markets, transmission, and rates, while the North American Electric Reliability Corporation (NERC)—the FERC-designated Electric Reliability Organization—develops and enforces mandatory reliability standards. Both expect utilities not merely to comply, but to keep records that prove compliance.

What “Compliance Evidence” Means

Under NERC’s enforcement model, the burden is on the registered entity to demonstrate compliance. NERC reliability standards typically include explicit “Evidence Retention” sections specifying how long an entity must keep documentation supporting each requirement. Auditors review this evidence during scheduled audits, spot checks, self-certifications, and investigations following events. If the record does not exist or cannot be produced, the activity is generally treated as non-compliant—an “absence of evidence” problem.

Typical compliance evidence includes:

• Operating logs, dispatch records, and system data
• Maintenance and testing records for facilities and protection systems
• Training and personnel certification records
• Policies, procedures, and dated revision histories
• Communications and event reports

Retention Periods

Retention is requirement-specific rather than a single universal period. Many NERC standards call for retaining evidence since the last audit or for a defined number of years, whichever is longer, so utilities can show a continuous compliance history across audit cycles. FERC’s own market and accounting rules impose separate retention obligations on rates, transactions, and financial records. Because periods vary by standard and rule, utilities should map each obligation to a documented retention schedule rather than assume one timeframe.

Recordkeeping Practices That Hold Up

Sound information governance is what makes compliance defensible:

• Authenticity and integrity — records should be trustworthy, tamper-evident, and tied to the date of the underlying activity.
• Findability — evidence must be retrievable quickly when auditors request it.
• Defensible disposition — destroy records only under an approved schedule, with legal holds suspending disposition during investigations or litigation.
• Consistency — apply the same controls across operating units.

These align with broadly recognized records-management principles for reliability and retrievability. For related federal recordkeeping concepts, see the federal records topic hub.