The potential for unauthorized disclosure increases with the length of time you retain information. Keep information, in any form, only as long as it is required for business needs. Federal and state law and university practice determine retention requirements. Consult with the office responsible for the information for current retention requirements, and monitor the University Records Management Schedules.