Module 13
Digital Security & Transitions
17 min read
To train Local Secretaries in designing secure digital filing structures, maintaining statutory document retention schedules, executing smooth leadership handovers, and enforcing modern cybersecurity protocols that protect confidential union records from employer surveillance and data breaches.
- Know: Legally mandated retention periods for local files (minutes, grievances, bank records); the core elements of union-focused cybersecurity including 2FA and password-manager handovers.
- Feel/Understand: Highly protective of the local's historical archives; committed to maintaining organized, professional information architecture that survives officer turnover.
- Be Able To: Design an intuitive, standardized digital folder hierarchy; execute a secure, data-loss-free handover using the Officer Transition Checklist; refuse employer-controlled storage for union records.
Self-test at the end
This module includes a quiz after the reading. Use Jump to Quiz above when you are ready — a perfect score marks it complete.
Never shred minutes. Never leave accounts on personal passwords after an election.
How to use this module
Allow 40–50 minutes. Bring your local bylaws retention clause (if any), a sketch of your current digital folder tree, and the last Officer Transition Checklist your local used — or a blank template if elections are coming. Walk cybersecurity guardrails with your executive before moving grievance files or membership data to any new drive.
Sections move from information architecture through retention schedules, cybersecurity, and the Officer Transition Checklist. Pair with Module 11 (member lists and data privacy) and `/guide/membership-signup`. Module 11 owns list content and who may receive it (Rand, political/commercial bans); this module owns where all union records live, how long they are kept, and how officers hand them over — both forbid employer OneDrive/Teams, for different jobs. CLC secretary education and CUPE local administration materials reinforce retention discipline; Ontario locals should confirm seven-year financial rules with their national union and CRA guidance.
💭 Reflection
Reflection: A lost password is an inconvenience. A grievance file on employer OneDrive is a breach waiting to happen.
To train Local Secretaries in designing secure digital filing structures, maintaining statutory document retention schedules, executing smooth leadership handovers, and enforcing modern cybersecurity protocols that protect confidential union records from employer surveillance and data breaches.
- Know: Legally mandated retention periods for local files (minutes, grievances, bank records); the core elements of union-focused cybersecurity including 2FA and password-manager handovers.
- Feel/Understand: Highly protective of the local's historical archives; committed to maintaining organized, professional information architecture that survives officer turnover.
- Be Able To: Design an intuitive, standardized digital folder hierarchy; execute a secure, data-loss-free handover using the Officer Transition Checklist; refuse employer-controlled storage for union records.
1. Designing Local Information Architecture
An unorganized local is an ineffective local. The Local Secretary establishes a standardized digital folder structure on a secure, union-owned cloud drive that every officer uses — not personal Gmail, not employer Teams, not a steward's USB stick in a locker.
Recommended top-level folders
| Folder | Contents | Access notes |
|---|---|---|
| `01_Democratic_Governance/` | Approved GMM minutes, LEC minutes, current bylaws, election records | Read for executive; write for Secretary |
| `02_Financials_&_Audits/` | Approved budgets, monthly treasurer reports, trustee audits, bank reconciliations | Treasurer + Trustees; encrypted sub-folders for signing authorities |
| `03_Contract_Enforcement/` | Active grievances, settlements, arbitration files | Encrypted; steward access by case only |
| `04_Bargaining_&_Research/` | Membership surveys, proposal briefs, comparators | Bargaining committee + executive during rounds |
| `05_Communications_&_Orientation/` | Welcome kits, affinity program assets, newsletter drafts | Communications officer; no raw membership CSV exports |
| `06_Officer_Transitions/` | Checklists, credential inventories, handover sign-off sheets | Secretary + incoming/outgoing officers |
Name files with dates and status (`2026-03-12_GMM_Minutes_APPROVED.pdf`) so future officers are not guessing which draft is authoritative. Mirror the same tree on paper for charters and signed collective agreements that must live in a fire-safe cabinet.
💡 Note
Note: If two officers maintain parallel folder systems, you do not have architecture — you have archaeology.
2. Statutory Document Retention Rules
Secretaries must not let paper pile up indefinitely, but they must never prematurely destroy files that carry legal or constitutional liability. When in doubt, ask your national union's records guidance before shredding.
Permanent vs. seven-year retention
| Record type | Retention | Why it matters |
|---|---|---|
| GMM and LEC minutes (approved) | Permanent | Legal history of democratic decisions |
| Local bylaws and charter documents | Permanent | Constitutional authority for every vote |
| Signed collective agreements | Permanent | Enforcement and precedent |
| Precedent-setting grievance summaries | Permanent (summary) | Seniority, re-employment, systemic settlements |
| Financial ledgers, bank reconciliations | 7 years | Tax audit compliance (CRA) |
| Cancelled cheques, expense vouchers, tax slips | 7 years | Audit trail for trustees |
| Closed grievance files (full file) | 7 years minimum after closure | Limitation periods and arbitration replay |
| Draft minutes, superseded bylaws | Shred after approval of final version | Reduce clutter only after final is filed |
Grievance files stay active until fully resolved. If a settlement adjusts seniority or creates a lasting precedent, archive a one-page summary in `03_Contract_Enforcement/Precedents/` even after the full file ages out.
❗ Warning
Warning: Shredding approved GMM minutes to "save space" is not housekeeping — it is destroying the local's legal memory.
3. Cybersecurity Guardrails
Union records compete with employer IT departments and external attackers for confidentiality. Never store union records on employer OneDrive, Teams, SharePoint, or work email. The employer can legally monitor, scan, and retrieve data on their networks — grievance strategy, draft minutes, and membership discussions are not safe there.
Floor rules every local should adopt
- Union-only cloud with admin ownership held by the local (not a personal account).
- Multi-factor authentication (2FA) on every union email, drive, and domain registrar account — no exceptions for "it's just the newsletter login."
- Password manager (e.g., Bitwarden, 1Password) for shared credentials — never text personal passwords officer-to-officer.
- No employer devices for union business: work laptops and phones can be keylogged, imaged, and searched under employer policies.
- Encrypted sub-folders for active grievances and membership databases; limit sharing to role-based need.
- Revoke access the day an officer leaves — shared links and stale calendar invites are common leak paths.
CUPE and Unifor local admin guides both stress independence from employer systems; OFL digital security workshops reinforce 2FA for small locals with no IT staff.
📝 Practice
Practice: List every place your local currently stores files. Circle any employer-controlled system and schedule a 30-day migration off it.
4. The Officer Transition Checklist
When a local election changes leadership, chaotic handovers lose files, strand domain ownership, and leave bank signing authorities on outgoing officers. The Officer Transition Checklist is a formal protocol — not a handshake in the parking lot.
Checklist essentials (execute within two weeks of installation)
- Bank: Update signing authorities immediately; confirm online banking tokens transferred.
- Digital drives: Transfer admin ownership of Google Workspace / union cloud to incoming Secretary or President.
- Domain & email: Registrar login, DNS, and mailing-list admin moved via password manager — not SMS.
- Password manager: Outgoing officer removes personal entries; shared vault re-keyed or rotated.
- Physical files: Charter, seal, minute books, and active grievance binders signed off on a handover sheet.
- Social & comms: Facebook page admin, website CMS, and newsletter tool access documented.
- National union portals: Servicing rep notified; national database access updated for new officers.
- Revocation: Outgoing officer access removed from drives, email aliases, and grievance folders.
Outgoing officers do not keep personal passwords on bank accounts "just in case." Incoming officers do not create parallel orphan accounts nobody monitors.
❗ Warning
Warning: Texting your login to the new Treasurer is not a handover — it is a liability with read receipts.
Worked scenario
Worked scenario
Worked file timeline
- D0
Day 0 — election result
New officers named. Freeze personal account sharing.
- D1
Day 1 — inventory
List drives, domains, mailing lists, and bank signers.
- D2
Day 2 — bank + 2FA
Update signing cards. Enforce MFA on union accounts.
- D3
Day 3 — password manager
Reset shared vault. Revoke outgoing officer access.
Update bank authorities immediately. Transfer admin ownership — never text passwords.
The OneDrive trap. A new Secretary finds fifteen years of mixed records in boxes and a President who wants to "just use work OneDrive because it's free." Active grievance PDFs and a membership reconciliation spreadsheet already sit in a shared employer folder.
Apply: Stop new uploads immediately. Migrate grievance and membership files to union-only encrypted storage (Sections 1 and 3). Build the folder IA before bulk scanning paper. Run retention triage: permanent minutes and bylaws to `01_Democratic_Governance/`; shred meal receipts older than seven years after trustee sign-off (Section 2). Schedule an executive vote rejecting employer storage and adopt 2FA plus a password manager before the next LEC.
Don't apply: Do not shred GMM minutes to clear space. Do not password-protect a folder on OneDrive and call it secure. Do not delay bank signing authority updates until "after the holidays."
Second beat — election handover. The outgoing Treasurer texts banking passwords to the successor and stays on the account "for a year in case we need them."
Apply: Execute the Officer Transition Checklist (Section 4): bank branch update, password-manager transfer, revoke outgoing access same week. Document handover on a signed sheet stored in `06_Officer_Transitions/`.
Don't apply: Do not leave dual signing authority undocumented. Do not create a new bank account without closing the old signing loop.
Practice drill
📝 Practice
Round 1 — Folder IA. On one page, draw your local's six top-level folders and name three files that belong in each. Mark which folders require encryption. Identify one record currently in the wrong place.
Round 2 — Retention tabletop. Given a box of 2012 meal receipts, 2008 approved GMM minutes, and 2015 closed grievance files: sort into shred now, keep seven years, keep permanent. Write one sentence defending each decision.
Round 3 — Transition role-play. Pair outgoing and incoming Secretary. Walk the checklist through bank, drive admin, and password manager — no passwords spoken aloud. Debrief: What would have failed if the outgoing officer resigned suddenly?
💭 Reflection
Reflection: If you disappeared tomorrow, could your replacement find this year's approved budget and the active grievance list without calling you?
Floor checklist
Floor checklist
0 of 14 checked
Checks stay on this device so you can tick items during a real file.
Common pitfalls
- Employer "free" storage — OneDrive/Teams feels convenient; employer IT can read it.
- Password texts — Fast handovers that cannot be audited or revoked.
- Shredding minutes — Confusing seven-year financial rules with permanent governance records.
- Parallel folder systems — Each officer invents their own tree; nothing is findable.
- Delayed bank updates — Outgoing Treasurer still signs cheques months after election.
- Grievance files in email — Searchable employer mail archives are not case files.
Further learning
- Canadian Labour Congress — local secretary and records education - CUPE — local administration and financial record-keeping guides - Unifor — local executive transition and governance materials - Canada Revenue Agency — business record retention (seven-year baseline) - Ontario Federation of Labour — digital security workshops for small locals - UnionOps: Module 11 (member lists & data privacy), `/guide/membership-signup`
Self-test
Module quiz
0 of 6 answered
Further reading from Canadian labour federations, multi-union steward handbooks, and public human rights guidance — not tied to one national. Confirm every rule against your own collective agreement and statute.
Sources & references
- CUPE Steward Handbook
Public CUPE steward handbook — grievance basics, human rights, and accommodation. Useful comparative education for any local; confirm against your own CA and national.
- Canadian Labour Congress — labour education catalogue
National CLC steward and leadership courses (Level 1/2 grievance handling). Cite for multi-union education; confirm live offerings with your labour council.
- Ontario Federation of Labour
Provincial labour federation — solidarity and movement education; cite, do not mirror.
- Canadian Labour Congress
National labour congress — solidarity links on local sites; cite, do not mirror.