Record protection, privacy, and retention
Set handling rules for sensitive information. Keep records for the required period and review removal.
Labels, access, and export limits
Some information needs tighter handling than the rest of a shared work record. Record protection sets handling rules for a record or file. DART can apply CUI labels. CUI means government information that needs special handling.
Protection rules limit who can read or export the data. Those rules also apply to reports and connected data. Dashboard access does not override them.
Control combinations of sensitive data
Separate pieces of information can reveal something sensitive when they are brought together. Combining records can reveal information that each record alone does not show. DART can block configured combinations and restrict exports.
The agency defines which combinations are prohibited. It also supplies its handling categories and sharing rules. The application checks the configured policy.
Schedules and holds
Records may need to stay available for a set period or an ongoing review. A retention schedule states how long a record should be kept. Authorized staff can set its retention date.
A hold stops disposal through the removal workflow. Staff can place or release a hold with a reason. The decision remains in history.
Review removal before applying it
Once a record reaches its disposal date, staff still need to check whether removal is allowed. Record removal starts with a request. A reviewer checks it before removal can be applied.
DART checks the retention conditions and any holds. Removal is not an unrestricted delete action.
Private files and release checks
A file needs both a known owner and a clear record of the checks it has passed. A file keeps its owner and access rules. Its hash helps verify that the contents have not changed. Scan and release results stay attached to the file.
Download checks the file again. The deployment supplies private storage and malware scanning. It also defines backups and key handling.