Similarly, records management requirements should be incorporated into the agency’s IT policies; for instance, if the agency has an e-mail policy, it should alert users that e-mails as well as other forms of electronic communication relating to agency business are public records and are subject to all public records access, duplication, retention, and legal discovery requirements. An example of how this can be done is shown in the Department of State’s internal e-mail policy in Appendix A.
