from the use of it for research or 
business purposes. Regardless of the legislative framework, the creator and the preserver 
should be able to demonstrate that archival processing of records containing personal 
information does not put such information at risk of unauthorized access. 
Preservers should also insist that responsibility for processing records containing personal 
data for preservation purposes must reside with the records creator and its legitimate 
successors. Although the practice of outs