(a) Written policies and procedures govern record management and include but are not limited to:

1. (1) The establishment, utilization, content, privacy, security, and preservation of records; and
2. (2) A schedule for the retirement or destruction of inactive case records.