Sequestration and Retention of Records – Standard Operating Procedures

ERIK, Office of Research Compliance, Revised 02/04/2026

I. Regulatory and Policy Authority and Requirement

The PHS Policies on Research Misconduct (42 C.F.R. Part 93) require an institution to identify, sequester, and protect evidence pertinent to the review of an allegation of Research Misconduct in a timely manner. The federal regulation 42 C.F.R. §93.305 states:

General conduct of research misconduct proceedings.

(a) Sequestration of research records and other evidence. An institution must promptly take all reasonable and practical steps to obtain all research records and other evidence, which may include copies of the data or other evidence so long as those copies are substantially equivalent in evidentiary value, needed to conduct the research misconduct proceeding; inventory the research records and other evidence; and sequester them in a secure manner. Where the research records or other evidence are located on or encompass scientific instruments shared by multiple users, institutions may obtain copies of the data or other evidence from such instruments, so long as those copies are substantially equivalent in evidentiary value to the instruments. Whenever possible, the institution must obtain the research records or other evidence:

1. Before or at the time the institution notifies the respondent of the allegation(s); and
2. Whenever additional items become known or relevant to the inquiry or investigation.

(b) Access to research records. Where appropriate, an institution must give the respondent copies of, or reasonable supervised access to, the research records that are sequestered in accordance with paragraph (a) of this section.

(c) Maintenance of sequestered research records and other evidence. An institution must maintain the sequestered research records and other evidence as required by §93.318.

The federal regulation states that for an institutional inquiry, 42 C.F.R. §93.307(3)(d), that the institution must obtain all research records and other evidence needed to conduct the research misconduct proceeding, consistent with §93.305(a).

Under Research Misconduct policy (the “Policy”), Policy Details III.C.1, and Procedures I.H., II.E, and III.B, the Research Integrity Officer (RIO) has the responsibility and authority to sequester any relevant evidence at the earliest opportunity in a research misconduct proceeding; the RIO shall take immediate action to sequester all data or other materials relevant to the complaint, on or before the date on which the Respondent(s) is notified of the allegation(s), and shall obtain custody of, and sequester in a secure manner, all research records that have become known and are relevant to the investigation.

Under the Policy, Research Record is defined as:

Basic assumptions and core principles when preparing for sequestration of research records are:

• In the absence of information identifying the specific Respondent(s), the corresponding author of any questioned manuscript or publication is considered the putative Respondent. The first author is also typically considered a putative Respondent.
• For grant proposals, the PI, as defined on the ePA-005 and/or designated in the grant proposal is considered the putative Respondent.
• A primary goal in the meeting to notify a putative Respondent(s) about the allegation(s) is to determine the responsibility of the Respondent(s) for each specific allegation.
• Sequestration should encompass all email, electronic and physical records relevant to the allegation(s).
• The practice of the Office of Research Compliance (ORC) is that when there is doubt, sequester broadly. Any sequestered data that is subsequently determined to be unrelated to the allegation(s) may be returned to the Respondent(s).
• Should new allegations or identification of additional Respondents necessitate the sequestration of additional materials, email accounts, etc., steps will be taken to do so as soon as possible, according to the procedures in this SOP.

II. Sequestration

Email Sequestration

Sequestration of email is handled separately from sequestration of other types of electronic research records. University E-Mail Services and/or Medical Center Information Technology (IT) control email services and the contents of the sequestered email account(s) are transferred to ORC, under specific conditions listed below.

Prior to Respondent’s notification of allegations:

• When a Respondent(s) is identified, the RIO will send a notification email to the Senior Associate General Counsel, Office of Legal Affairs, and the Assistant Vice President for Compliance Operations and Investigations, OUCI. The email will state that the university received an allegation of possible research misconduct and will request that a litigation hold be put on one or more email accounts for each Respondent. The request will state that the hold be done without notification to the Respondent.
• In the absence of specific information naming a Respondent, litigation holds will be placed as broadly as needed (e.g., all University authors listed on a questioned manuscript or publication). The litigation holds are done in the background and have no impact on individuals. When specific Respondents are identified, unnecessary holds can be lifted.

Subsequent to the Respondent’s notification of allegations:

• If during an Inquiry or an Investigation a need arises for specific emails, the RIO will make the request through the Office of Legal Affairs/OUCI for the specific email that the Committee requires, usually by time frame, and will provide potential search terms and a justification for what is being requested. Searches will be approved by Legal Affairs/OUCI and will be conducted by University Email Services/Medical Center IT.
• If emails contain protected health information (PHI) or other HIPAA protected information they will be screened for PHI by the Medical Center Privacy officer prior to release to the committee.

Electronic File Sequestration (Non-Email Based)

Prior to Respondent’s notification of allegation(s):

• Based on the allegation(s), the RIO and ORC staff will assess the specific electronic data to sequester, the likely format of the data, and how it will be stored.
• The RIO and ORC staff will contact the local college or department IT to determine how many and what types of computer systems, file servers, networked laboratory machines, etc., the Respondent(s) uses.
• The RIO and ORC staff, in conjunction with local IT, will:
  • determine what electronic files can be forensically imaged in the background prior to notifying the Respondent(s) of the allegation(s);
  • establish and initiate a plan to capture all available electronic images prior to Respondent’s notification — if it can be done silently in the background;
  • determine if any cloud-based services may hold relevant data and whether it is possible to access relevant files (university hosted versus external vendor).
• The Office of Research Information Systems (ORIS) will assist in the process of obtaining electronic data for offices that do not have expertise in forensic imaging.

Coincident with or immediately after Respondent’s notification of allegations:

• As appropriate, the RIO will arrange for local IT and ORIS to assist with electronic records capture subsequent to meeting with the Respondent.
• The local IT and ORIS will do the following:
  • Make forensic images of any computer system that could not be remotely imaged before meeting with the Respondent. This may include laptops, stand-alone analytical machines, or other systems not connected to the network;
  • Pull hard drives for imaging — note location, machine #, serial number, equipment tag #, take a photo of system in situ;
  • When necessary, sequester entire system (e.g., laptops, Macs) — note location, machine #, serial number, equipment tag #;
  • Have IT support capture data from lab machines where drives cannot be removed (e.g., those running lab instruments);
  • Determine encryption status on all systems, may need users to provide decryption keys.
• Forensic images should be taken using Encase or equivalent programs. If forensic copies cannot be made by the local IT, the hard drive will be removed and a forensic copy will be made by ORIS.
• For personally owned computer systems containing university data:
  • Those owned by students need a consent form signed for imaging their personal computer (see Consent to Image or Access Research Records).
  • For those owned by Faculty no consent form is needed prior to imaging.
• For sequestration of research records for students, the RIO must obtain a signed FERPA release form and/or the student must allow the records to be sequestered.
• ORIS will make a cloned image of each hard drive image in addition to Forensic Image for use by RIO/Committee during inquiry/investigation.
  • Evidence/Chain of Custody tags attached to the cloned image drives are signed and dated to document the sequence of custody following the initial generation of cloned images.
  • As needed, a Custody Form may be completed when the use of the cloned image is required (see Custody/Data Transfer Form).

Physical File/Materials Sequestration

Prior to Respondent’s notification of allegations:

• The RIO(s) will determine what physical evidence needs to be sequestered and any special storage requirements that might be needed (e.g., freezer, refrigerator, protected from light, biohazardous, radioactive, strong odor).
• Identify and acquire appropriate secure storage based on any special needs.
• Determine the different locations where evidence may be found (e.g., office spaces, lab spaces, core facilities). If multiple sites are involved, plan for parallel or sequential sequestration processes and coordinate with the College for assistance.
• If possible, try to arrange sequestration during a time that minimizes the presence of extraneous people.

Coincident with or immediately following Respondent’s notification of allegations:

• The RIO(s) will go with Respondent directly to all locations identified as having physical evidence. There should be at least two people present during all phases of sequestration and copying of evidence (ORC, IT, other administrative personnel).
• The Respondent will be asked to identify all physical evidence (lab notebooks, documents, any kind of physical record, slides, x-ray films, blots, etc.) related to the allegations.
• Good practices for the RIO(s) identifying and collecting physical files are, if possible, to:
  • take a picture of the materials in situ;
  • log what the item is with brief description;
  • log where the item was located (e.g., lab room #, bay #, desk of X, top shelf);
  • try to keep materials for each Respondent or possible witnesses separate from each other.
• If a general sequestration sheet is generated while the RIO(s) is with the Respondent, the Respondent signs the sheet. Once initial sequestration is complete, the RIO creates a detailed data sequestration log (see Data Sequestration Sheet) listing all the materials sequestered; this is usually performed in ORC offices. The RIO sends an email with a copy of the catalogued Data Sequestration log to the Respondent(s) as a receipt of their records.
• Items/Equipment needed to support sequestration activities:
  • Chain of custody forms
  • Hard drives/Thumb drives
  • Boxes
  • Evidence bags
  • Digital camera
  • Audio recorder
  • Anti-static bags for electronics
  • Notebook for logging intake
• ORC will make high quality copies of any materials required by the Respondent to continue their work. Copies are usually provided within 24 hours but large requests require more time.

III. Retention

Article ID: 115
Created: August 28, 2025
Last Updated: February 19, 2026

Online URL: https://ohiostateresearch.knowledgebase.co/article/sequestration-and-retention-of-records-standard-operating-procedures-115.html