Marine Transportation Security Regulations — 312
312 (1) A marine facility security officer shall keep (a) records of security training, including the date, the duration and description and the names of the participants; (b) records of security drills and exercises, including the date and description, the names of the participants and any best practices or lessons learned that might improve the marine facility security plan; (c) records of security threats, security breaches and security incidents, including the date, time, location and description, the response to them and the person to whom they were reported; (d) records of changes in the MARSEC level, including the date, the time that notification was received and the time of compliance with the requirements of the new level; (e) records of maintenance, calibration and testing of equipment used for security, including the date and time of the activity and the equipment involved; (f) declarations of security in respect of the marine facility; (g) internal audits and reviews of security activities; (h) security assessment information; (i) the marine facility security assessment and each periodic review of the assessment, including the date on which the review was conducted and its findings; (j) the marine facility security plan and each periodic review of the plan, including the date on which the review was conducted, its findings and any recommended amendments to the plan; (k) each amendment to the marine facility security plan, including the date of its approval and implementation; (l) records of inspections and patrols; (m) a list, by name or position, of the persons who have security responsibilities; (n) an up-to-date list containing the names of screening officers; and (o) an up-to-date list, by name and position, of the holders of transportation security clearances, except in a case where a port administration keeps the list. (2) If records respecting equipment that is not used exclusively for security are kept separately from records respecting equipment that is used exclusively for security, the marine facility security officer shall (a) document, in written or electronic form, their existence, location and the name or position of the person responsible for keeping them; and (b) ensure that the records are accessible. (3) The marine facility security officer shall ensure that the records or documents listed in subsection (1) are kept for at least two years after the day on which they are made and shall make them available to the Minister on request, but shall ensure that the marine facility security plan, and the assessment on which it was based, are kept for at least two years after the day on which the plan expires. (4) The marine facility security officer shall ensure that the records are protected from unauthorized access or disclosure. (5) The marine facility security officer shall ensure that any records kept in electronic format are protected from deletion, destruction and revision. (6) No person shall disclose security information contained in the records, unless the disclosure is for the purpose of complying with these Regulations. SOR/2006-269, s. 8; SOR/2006-270, s. 6; SOR/2014-162, ss. 100, 101(E)