Module 13
Digital Security & Transitions
30 min read
Not legal advice. Examples use Ontario law.Read the full note
Education for the floor — not legal advice. Examples use Ontario law. Confirm every deadline, remedy, and procedure against your own collective agreement and the law where you work.
What this module covers
Records should stay easy to find after you leave office. This module helps you build a secure filing structure, set realistic retention periods, and prepare a handover the next team can follow. Keep confidential files off employer-controlled storage.
- Know: Suggested retention periods for local files (minutes, grievances, bank records) and where the real rule comes from; the core elements of union-focused cybersecurity including 2FA and password-manager handovers.
- Feel/Understand: Highly protective of the local's historical archives; committed to maintaining organized, professional information architecture that survives officer turnover.
- Be Able To: Design an intuitive, standardized digital folder hierarchy; execute a secure, data-loss-free handover using the Officer Transition Checklist; refuse employer-controlled storage for union records.
Never shred minutes. Never leave accounts on personal passwords after an election.
See the diagram
Never shred minutes. Never leave accounts on personal passwords after an election.
How to use this module
Allow 30 minutes for the reading and self-test. Bring your local bylaws retention clause (if any), a sketch of your current digital folder tree, and the last Officer Transition Checklist your local used — or a blank template if elections are coming. Walk cybersecurity guardrails with your executive before moving grievance files or membership data to any new drive.
Start with where a record belongs, decide how long the local needs it, and leave the next officer a handover they can follow. Module 11 covers member-list contents and access; this module covers the local's records and transition plan. Keep confidential files off employer-controlled storage. CLC and CUPE secretary materials offer more on local administration; confirm financial retention rules with your national union and CRA guidance.
💭 Reflection
A lost password is an inconvenience. A grievance file on employer OneDrive is a breach waiting to happen.
1. Designing Local Information Architecture
An unorganized local is an ineffective local. The Local Secretary establishes a standardized digital folder structure on a secure, union-owned cloud drive that every officer uses — not personal Gmail, not employer Teams, not a steward's USB stick in a locker.
Recommended top-level folders
| Folder | Contents | Access notes |
|---|---|---|
01_Democratic_Governance/ | Approved GMM minutes, local executive committee (LEC) minutes, current bylaws, election records | Read for executive; write for Secretary |
02_Financials_&_Audits/ | Approved budgets, monthly treasurer reports, trustee audits, bank reconciliations | Treasurer + Trustees; encrypted sub-folders for signing authorities |
03_Contract_Enforcement/ | Active grievances, settlements, arbitration files | Encrypted; steward access by case only |
04_Bargaining_&_Research/ | Membership surveys, proposal briefs, comparators | Bargaining committee + executive during rounds |
05_Communications_&_Orientation/ | Welcome kits, affinity program assets, newsletter drafts | Communications officer; no raw membership CSV exports |
06_Officer_Transitions/ | Checklists, credential inventories, handover sign-off sheets | Secretary + incoming/outgoing officers |
Name files with dates and status (2026-03-12_GMM_Minutes_APPROVED.pdf) so future officers are not guessing which draft is authoritative. Mirror the same tree on paper for charters and signed collective agreements that must live in a fire-safe cabinet.
💡 Note
If two officers maintain parallel folder systems, you do not have architecture — you have archaeology.
2. Suggested document retention periods
Secretaries must not let paper pile up indefinitely, but they must never prematurely destroy files that carry legal or constitutional liability. The periods below are common practice, not statute. The one firm rule sits underneath the financial rows: the Canada Revenue Agency generally requires books and records to be kept for six years from the end of the last tax year they relate to, and seven years is a common safety margin. Confirm with your national union and, for financial records, the Canada Revenue Agency. When in doubt, ask your national union's records guidance before shredding.
Permanent vs. seven-year retention
| Record type | Retention | Why it matters |
|---|---|---|
| GMM and LEC minutes (approved) | Permanent | Legal history of democratic decisions |
| Local bylaws and charter documents | Permanent | Constitutional authority for every vote |
| Signed collective agreements | Permanent | Enforcement and precedent |
| Precedent-setting grievance summaries | Permanent (summary) | Seniority, re-employment, systemic settlements |
| Financial ledgers, bank reconciliations | 7 years | Covers the CRA six-year rule with a margin |
| Cancelled cheques, expense vouchers, tax slips | 7 years | Audit trail for trustees |
| Closed grievance files (full file) | About 7 years after closure | Common practice; confirm with your national union |
| Draft minutes, superseded bylaws | Shred after approval of final version | Reduce clutter only after final is filed |
Grievance files stay active until fully resolved. If a settlement adjusts seniority or creates a lasting precedent, archive a one-page summary in 03_Contract_Enforcement/Precedents/ even after the full file ages out.
❗ Warning
Shredding approved GMM minutes to "save space" is not housekeeping — it is destroying the local's legal memory.
3. Cybersecurity Guardrails
Union records compete with employer IT departments and external attackers for confidentiality. Never store union records on employer OneDrive, Teams, SharePoint, or work email. Employers can usually monitor, scan, and retrieve data on their own networks, so grievance strategy, draft minutes, and membership discussions are not safe there.
Floor rules every local should adopt
- Union-only cloud with admin ownership held by the local (not a personal account).
- Multi-factor authentication (2FA) on every union email, drive, and domain registrar account — no exceptions for "it's just the newsletter login."
- Password manager (e.g., Bitwarden, 1Password) for shared credentials — never text personal passwords officer-to-officer.
- No employer devices for union business: work laptops and phones can be keylogged, imaged, and searched under employer policies.
- Encrypted sub-folders for active grievances and membership databases; limit sharing to role-based need.
- Revoke access the day an officer leaves — shared links and stale calendar invites are common leak paths.
Most union training makes the same point: keep union records independent of employer systems, and use 2FA even in a small local with no IT staff.
📝 Practice
List every place your local currently stores files. Circle any employer-controlled system and schedule a 30-day migration off it.
4. The Officer Transition Checklist
When a local election changes leadership, chaotic handovers lose files, strand domain ownership, and leave bank signing authorities on outgoing officers. The Officer Transition Checklist is a formal protocol — not a handshake in the parking lot.
Checklist essentials (execute within two weeks of taking office)
- Bank: Update signing authorities immediately; confirm online banking tokens transferred.
- Digital drives: Transfer admin ownership of Google Workspace / union cloud to incoming Secretary or President.
- Domain & email: Registrar login, DNS, and mailing-list admin moved via password manager — not SMS.
- Password manager: Outgoing officer removes personal entries; shared vault re-keyed or rotated.
- Physical files: Charter, seal, minute books, and active grievance binders signed off on a handover sheet.
- Social & comms: Facebook page admin, website CMS, and newsletter tool access documented.
- National union portals: Servicing rep notified; national database access updated for new officers.
- Revocation: Outgoing officer access removed from drives, email aliases, and grievance folders.
Outgoing officers do not keep personal passwords on bank accounts "just in case." Incoming officers do not create parallel orphan accounts nobody monitors.
❗ Warning
Texting your login to the new Treasurer is not a handover — it is a liability with read receipts.
Worked scenario
Worked file timeline
- D0
Day 0 — election result
New officers named. Freeze personal account sharing.
- D1
Day 1 — inventory
List drives, domains, mailing lists, and bank signers.
- D2
Day 2 — bank + 2FA
Update signing cards. Enforce MFA on union accounts.
- D3
Day 3 — password manager
Reset shared vault. Revoke outgoing officer access.
Update bank authorities immediately. Transfer admin ownership — never text passwords.
The OneDrive trap. A new Secretary finds fifteen years of mixed records in boxes and a President who wants to "just use work OneDrive because it's free." Active grievance PDFs and a membership reconciliation spreadsheet already sit in a shared employer folder.
Apply: Stop new uploads immediately. Migrate grievance and membership files to union-only encrypted storage (Sections 1 and 3). Build the folder structure before bulk scanning paper. Run retention triage: permanent minutes and bylaws to 01_Democratic_Governance/; shred meal receipts older than seven years after trustee sign-off (Section 2). Schedule an executive vote rejecting employer storage and adopt 2FA plus a password manager before the next LEC.
Don't apply: Do not shred GMM minutes to clear space. Do not password-protect a folder on OneDrive and call it secure. Do not delay bank signing authority updates until "after the holidays."
Second beat — election handover. The outgoing Treasurer texts banking passwords to the successor and stays on the account "for a year in case we need them."
Apply: Execute the Officer Transition Checklist (Section 4): bank branch update, password-manager transfer, revoke outgoing access same week. Document handover on a signed sheet stored in 06_Officer_Transitions/.
Don't apply: Do not leave dual signing authority undocumented. Do not create a new bank account without closing the old signing loop.
Practice drill
📝 Practice
Round 1 — Folder structure. On one page, draw your local's six top-level folders and name three files that belong in each. Mark which folders require encryption. Identify one record currently in the wrong place.
Round 2 — Retention tabletop. Given a box of 2012 meal receipts, 2008 approved GMM minutes, and 2015 closed grievance files: sort into shred now, keep seven years, keep permanent. Write one sentence defending each decision.
Round 3 — Transition role-play. Pair outgoing and incoming Secretary. Walk the checklist through bank, drive admin, and password manager — no passwords spoken aloud. Debrief: What would have failed if the outgoing officer resigned suddenly?
💭 Reflection
If you disappeared tomorrow, could your replacement find this year's approved budget and the active grievance list without calling you?
Floor checklist
Floor checklist
0 of 14 checked
Checks stay on this device so you can tick items during a real file.
Common pitfalls
- Orphaned admin account: The only owner leaves after an election, and nobody can reset the domain or drive credentials.
- Password texts: Fast handovers that cannot be audited or revoked.
- Shredding minutes: Confusing the seven-year financial practice with permanent governance records.
- Parallel folder systems: Each officer invents their own tree; nothing is findable.
- Delayed bank updates: Outgoing Treasurer still signs cheques months after election.
- Untested handover: The successor discovers that the promised archive is incomplete only when a member asks for a record.
Further learning
- Canadian Labour Congress — local secretary and records education
- CUPE — local administration and financial record-keeping guides
- Unifor — local executive transition and governance materials
- Canada Revenue Agency — record retention (six years from the end of the tax year; seven is a common margin)
- Ontario Federation of Labour — digital security workshops for small locals
Self-test at the end
This module includes a quiz after the reading. Use Jump to Quiz above when you are ready — a perfect score marks it complete.
Self-test
Module quiz
0 of 6 answered
Further reading from Canadian labour federations, multi-union steward handbooks, and public human rights guidance — not tied to one national. Confirm every rule against your own collective agreement and statute.
Sources & references
- CUPE Steward Handbook
Public CUPE steward handbook — grievance basics, human rights, and accommodation. Useful comparative education for any local; confirm against your own CA and national.
- Canadian Labour Congress — labour education catalogue
National CLC steward and leadership courses (Level 1/2 grievance handling). Cite for multi-union education; confirm live offerings with your labour council.
- Ontario Federation of Labour
Provincial labour federation — solidarity and movement education; cite, do not mirror.
- Canadian Labour Congress
National labour congress — solidarity links on local sites; cite, do not mirror.