Learn about records management in Microsoft 365
Organizations of all types require a records-management solution to manage regulatory, legal, and business-critical records across their corporate data. Records management in Microsoft 365 helps an organization manage their legal obligations, provides the ability to demonstrate compliance with regulations, and increases efficiency with regular disposition of items that are no longer required to be retained, no longer of value, or no longer required for business purposes.
Use the following capabilities to support your records management solution in Microsoft 365:
Label content as a record. Create and configure retention labels to mark content as a record that can then be applied by users or automatically applied by identifying sensitive information, keywords, or content types.
Migrate and manage your retention requirements with file plan. By using a file plan, you can bring in an existing retention plan to Microsoft 365, or build a new one for enhanced management capabilities.
Configure retention and deletion settings with retention labels. Configure retention labels with the retention periods and actions based on various factors that include the date last modified or created.
Start different retention periods when an event occurs with event-based retention.
Export information about all disposed items with the export option.
Set specific permissions for records manager functions in your organization to have the right access.
Using these capabilities, you can incorporate your organization's retention schedules and requirements into a records management solution that manages retention, records declaration, and disposition, to support the full lifecycle of your content.
When content is declared a record:
Restrictions are placed on the items in terms of what actions are allowed or blocked.
Additional activities about the item are logged.
You have proof of disposition when the items are deleted at the end of their retention period.
You use retention labels to mark content as a record, or a regulatory record. The difference between these two are explained in the next section. You can either publish those labels so that users and administrators can manually apply them to content, or auto-apply those labels to content that you want to mark as a record or a regulatory record.
By using retention labels to declare records, you can implement a single and consistent strategy for managing records across your Microsoft 365 environment.
Compare restrictions for what actions are allowed or blocked
Use the following table to identify what restrictions are placed on content as a result of applying a standard retention label, and retention labels that mark content as a record or regulatory record.
A standard retention label has retention settings and actions but doesn't mark content as a record or a regulatory record.
For completeness, the table includes columns for a locked and unlocked record, which is applicable to SharePoint and OneDrive, but not Exchange. The ability to lock and unlock a record uses record versioning that isn't supported for Exchange items. So for all Exchange items that are marked as a record, the behavior maps to the Record - locked column, and the Record - unlocked column is not relevant.
|Action||Retention label||Record - locked||Record - unlocked||Regulatory record|
|Edit properties, including rename||Allowed||Allowed||Allowed||Blocked|
|Move within container 2||Allowed||Allowed||Allowed||Allowed|
|Move across containers 2||Allowed||Allowed if never unlocked||Allowed||Blocked|
|Change label||Allowed||Allowed - container admin only||Allowed - container admin only||Blocked|
|Remove label||Allowed||Allowed - container admin only||Allowed - container admin only||Blocked|
1 Supported by OneDrive and Exchange by retaining a copy in a secured location, but blocked by SharePoint.
Message a user sees if they try to delete a labeled document in SharePoint:
2 Containers include SharePoint document libraries and Exchange mailboxes.
The most important difference for a regulatory record is that after it is applied to content, nobody, not even a global administrator, can remove the label.
In addition, retention labels configured for regulatory records have the following admin restrictions:
- The retention period can't be made shorter after the label is saved, only extended.
- These labels aren't supported by auto-labeling policies, and must be applied by using retention label policies.
Because of these irreversible actions, make sure you really do need to use regulatory records before you select this option for your retention labels. To help prevent accidental configuration, this option is not available by default but must first be enabled by using PowerShell. Instructions are included in Declare records by using retention labels.
To mark content as a record, see Declare records by using retention labels.