# US 10,372,832 B2 · Deletion workflow that preserves data integrity of a records management system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,372,832 B2 - Document ID: US10372832B2 - Status: Granted - Kind: B2 - Application number: 14/310,983 - Filed: 2014-06-20 - Published: 2015-12-24 - Granted: 2019-08-06 - Earliest claimed: 2014-06-20 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: Li Zhou - Web page: https://patentgrep.com/patent/US10372832B2 ## CPC - G06F 16/955: using information identifiers, e.g. uniform resource locators [URL] - G06F 16/2365: {Ensuring data consistency and integrity} - G06Q 10/06: Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract Embodiments presented herein provide techniques for preserving data integrity of a records management deletion workflow. According to one embodiment, a records management system identifies a set of records subject to a document retention policy. The set of records includes electronic records and physical records. The records management system generates a disposal report listing the records and information associated with the records. The disposal report is associated with an identifier. The records management system performs a deletion workflow to remove the records listed in the report. After the records are removed, physical media corresponding to the deleted physical records are destroyed. ## Claims ### Claim 1 A system for managing a record deletion workflow identifying both electronic records and physical media items, the system comprising: one or more computer processors; and a memory storing a program which, when executed by the one or more computer processors, performs an operation comprising: identifying, from an electronic depository and in a disposal report having a report globally unique identifier (GUID), records subject to deletion based on a document retention policy, wherein each record has a respective record GUID, wherein at least one of the records references a corresponding physical media item subject to the document retention policy; deleting the at least one identified record by passing the report GUID to the record deletion workflow without passing any record GUID; and responsive to deleting the at least one identified record, generating an approval to cause destruction of the corresponding physical media item referenced by the at least one identified record, wherein the corresponding physical media item referenced by the at least one identified record is at least partially destroyed based on the approval. ### Claim 2 (depends on 1) The system of claim 1, wherein the operation further comprises: receiving a confirmation to delete a set of electronic records selected from the identified records; and deleting the set of electronic records. ### Claim 3 (depends on 2) The system of claim 2, wherein the operation further comprises: generating the disposal report listing the identified records; sending the disposal report to a reviewer; receiving, from the reviewer, the confirmation to delete the set of electronic records. ### Claim 4 (depends on 2) The system of claim 2, wherein the operation further comprises: upon receiving an indication that the at least one identified record has been deleted, initiating a deletion process for the corresponding physical media item subject to the document retention policy referenced by the at least one identified record. ### Claim 5 (depends on 1) The system of claim 1, wherein the operation further comprises: generating the disposal report listing the identified records. ### Claim 6 (depends on 1) The system of claim 1, wherein the operation further comprises: generating the disposal report listing the identified records, wherein the disposal report includes one or more of a filename, a location, and a description of the identified records, wherein the disposal report specifies which of the identified records reference physical media items. ### Claim 7 (depends on 1) The system of claim 1, wherein the system comprises a records management system, wherein the records are subject to deletion after a date specified by the document retention policy, wherein the corresponding physical media item referenced by the at least one identified record is destroyed after the approval, wherein each record comprises an electric record, wherein the operation further comprises: generating the disposal report listing the identified records, wherein the at least one identified record is deleted after the disposal report is generated; prior to deleting the at least one identified record, receiving a confirmation specifying to delete the at least one identified record; and after receiving the confirmation, receiving a request to place the at least one identified record on hold in order to avoid deletion of the at least one identified record, wherein the at least one identified record is not deleted as long as the at least one identified record is on hold, wherein the corresponding physical media item is not deleted as long as the at least one identified record is on hold. ### Claim 8 (depends on 7) The system of claim 7, wherein the operation further comprises: determining that the hold on the at least one identified record is subsequently lifted, wherein the at least one identified record is only thereafter deleted; wherein the approval to cause destruction of the corresponding physical media item is generated only after deleting the at least one identified record, in order to maintain integrity of the records management system by avoiding a scenario in which the corresponding physical media item is destroyed while the at least one identified record still exists. ### Claim 9 (depends on 8) The system of claim 8, wherein the operation further comprises: initiating the record deletion workflow in order to delete the identified records listed in the disposal report from the electronic depository, wherein the record deletion workflow specifies to delete the at least one identified record listed in the disposal report. ### Claim 10 (depends on 9) The system of claim 9, wherein the operation further comprises: generating a result report identifying a set of records that were deleted and that have corresponding physical media items that have yet to be deleted, wherein the result report and the disposal report are separate reports, wherein the set of records includes the at least one identified record, wherein only the physical media items corresponding to the set of records is destroyed, wherein any physical media item not in any result report is not destroyed. ### Claim 11 (depends on 10) The system of claim 10, wherein the program comprises an application having a plurality of components including: a retrieval component configured to identify the records subject to deletion following the date specified by the document retention policy; a generation component configured to generate the disposal report and the result report; and a deletion component configured to initiate the record deletion workflow. ### Claim 12 (depends on 11) The system of claim 11, wherein the disposal report includes a filename, a location, and a description of the identified records, wherein the disposal report specifies which of the identified records reference physical media items. ### Claim 13 (depends on 12) The system of claim 12, wherein the electronic depository comprises a records database, wherein each of the disposal report and the results report has a respective report GUID, wherein the report GUID of the disposal report is passed to the record deletion workflow in lieu of passing a data structure of individual record GUIDs, in order to permit a greater number of records to be processed in a single instance of the record deletion workflow than permitted by a specified maximum field size of the data structure that is supported by the records database, thereby improving scalability of the record deletion workflow, wherein the data structure comprises a string array. ### Claim 14 A computer program product for managing a record deletion workflow identifying both electronic records and physical media items, the computer program product comprising: a non-transitory computer-readable medium having computer-readable program code embodied therewith, the computer-readable program code executable by one or more computer processors to perform an operation comprising: identifying, from an electronic depository and in a disposal report having a report globally unique identifier (GUID), records subject to deletion based on a document retention policy, wherein each record has a respective record GUID, wherein at least one of the records references a corresponding physical media item subject to the document retention policy; deleting the at least one identified record by passing the report GUID to the record deletion workflow without passing any record GUID; and responsive to deleting the at least one identified record, generating an approval to cause destruction of the corresponding physical media item referenced by the at least one identified record, wherein the corresponding physical media item referenced by the at least one identified record is at least partially destroyed based on the approval. ### Claim 15 (depends on 14) The computer program product of claim 14, wherein the operation further comprises: receiving a confirmation to delete a set of electronic records selected from the identified records; and deleting the set of electronic records. ### Claim 16 (depends on 15) The computer program product of claim 15, wherein the operation further comprises: generating the disposal report listing the identified records; sending the disposal report to a reviewer; receiving, from the reviewer, the confirmation to delete the set of electronic records. ### Claim 17 (depends on 15) The computer program product of claim 15, wherein the operation further comprises: upon receiving an indication that the at least one identified record has been deleted, initiating a deletion process for the corresponding physical media item subject to the document retention policy referenced by the at least one identified record. ### Claim 18 (depends on 14) The computer program product of claim 14, wherein each identified electronic record is associated with a globally unique identifier. ### Claim 19 (depends on 14) The computer program product of claim 14, wherein the operation further comprises: generating the disposal report listing the identified records. ### Claim 20 (depends on 14) The computer program product of claim 14, wherein the operation further comprises: generating the disposal report listing the identified records, wherein the disposal report includes one or more of a filename, a location, and a description of the identified records, wherein the disposal report specifies which of the identified records reference physical media items.