5.4 Record Keeping, Chain of Custody & Document Retention

5.4 Record Keeping, Chain of Custody & Document Retention

Systematic record keeping and rigorous administrative protocols form the backbone of a defensible radon measurement practice. For the Radon Measurement Professional (RMP), maintaining comprehensive records is not merely good business practice—it is a mandatory requirement imposed by certification bodies (such as the National Radon Proficiency Program [NRPP]) and state regulatory licensing agencies.

The Chain of Custody (CoC) Process

When utilizing passive measurement devices (such as activated charcoal canisters, liquid scintillation vials, or alpha track detectors) that rely on external analytical laboratories, establishing a legally valid Chain of Custody (CoC) is paramount. A CoC document creates an unbroken, verifiable audit trail tracing the custody, transfer, and disposition of test devices from field deployment to lab analysis.

Essential Components of a CoC Form

1. Detector Tracking Identifiers: Unique serial numbers and batch/lot numbers matching the physical devices deployed.
2. Deployment and Retrieval Logs: Exact dates, clock times, and signatures of the RMP or field technician deploying and retrieving the detectors.
3. Field Site Details: Property address, specific room location, foundation type, and closed-building compliance observations.
4. Transfer and Courier Records: Dates and times of transfer to shipping carriers (e.g., FedEx, UPS, USPS tracking numbers) and laboratory receiving timestamps.
5. Laboratory Receipt and Condition Notes: Documentation by lab personnel verifying package integrity, tamper seal condition, and transit time upon arrival.

Mandatory Record Retention Periods

Under NRPP policies and major state radon licensing regulations, RMPs must retain all measurement-related records for a minimum of 5 years. Certain state jurisdictions or commercial contracts may mandate longer retention windows (e.g., 7 to 10 years).

Comprehensive List of Retained Documents

To satisfy NRPP audit standards, an RMP's archiving system must preserve the following document categories for every measurement event:

• Final Client Measurement Reports: Copies of all issued reports including cover letters, numerical results, and recommendations.
• Field Inspection Notes and Logs: Original field sheets detailing device placement, distance from walls/floor, building conditions, and occupant statements.
• Raw CRM Download Data: Unedited digital files exported directly from Continuous Radon Monitors, including hourly concentrations, tilt sensor alerts, power interruptions, and temperature/humidity logs.
• Chain of Custody Documents: Signed CoC forms for all passive devices submitted to external laboratories.
• Quality Assurance / Quality Control (QA/QC) Records: Results of duplicate measurements, field blanks, lab blanks, and spiked detector measurements, along with calculated Relative Percent Difference (RPD) control charts.
• Equipment Calibration Certificates: Annual calibration certificates for CRMs, EIC electret readers, and secondary standards, demonstrating calibration validity on the date of testing.
• Standard Operating Procedures (SOPs): Historical copies of the firm's Quality Assurance Plan (QAP) and field procedures active at the time of testing.

Electronic Record Security and Backup Protocols

Modern radon practices rely heavily on cloud software, digital CRM downloads, and electronic report distribution. RMPs must implement robust cybersecurity and data backup protocols to protect stored records against corruption, ransomware, hardware failure, or unauthorized access.

• Redundant Backup: Implementation of the 3-2-1 backup strategy (3 copies of data, across 2 different media types, with 1 copy stored securely offsite or in encrypted cloud storage).
• Data Integrity: Raw data files generated by CRMs should be stored in tamper-proof or read-only formats (such as encrypted PDFs or binary vendor log files) to prevent accusations of post-test data manipulation.
• Access Control: Password-protected access and role-based permissions to safeguard sensitive client file repositories.

Client Confidentiality vs. Regulatory Reporting Duties

RMPs owe a professional duty of confidentiality to their clients. Measurement data, test reports, and property conditions should not be shared with unauthorized third parties (such as real estate agents, buyers, sellers, or neighbors) without explicit written authorization from the contracting client.

Exceptions: Mandatory State Health Department Reporting

Several states with active radon regulatory programs (e.g., New Jersey, Pennsylvania, Florida, Illinois, Minnesota) mandate that certified professionals submit monthly or quarterly measurement activity reports to state health agencies.

• Required Reporting Data: Typically includes property address, test dates, device type, and measured pCi/L concentration.
• Legal Precedence: Statutory state reporting requirements supersede client confidentiality agreements. RMPs must include a disclosure in their client agreements informing property owners of mandatory state data submission rules where applicable.

Record Keeping Compliance and Audit Summary