Infor Lawson Data Retention — Jurisdiction-by-Jurisdiction

US hospital Lawson estates carry overlapping retention obligations across jurisdictions. HIPAA: 6 years minimum for PHI-containing records (HRPER, dependents, EMDEDMASTR benefits, patient revenue cycle linkage) — some states extend (CA, NY, others) to 7–10 years. CMS: revenue cycle records for the regulatory minimum (typically 7 years post-discharge) plus Medicare Conditions of Participation evidence. State payroll: varies — CA 4 yr, NY 6 yr, IL 5 yr, others variable. State medical licensure: typically 7–10 yr. Joint Commission accreditation evidence: minimum 3 yr beyond survey cycle. 340B drug attribution: HRSA requires retention through audit (often 5–7 yr). The infor lawson data retention strategy has to layer all these obligations to determine the longest applicable retention period per data domain.

Higher-ed Lawson estates carry different retention obligations. FERPA: student education records retained per institutional policy (typically 5–7 yr post-graduation, longer for transcripts). FFATA: federal grant attribution records retained 3 years post-grant closeout. NIH and NSF grant compliance: typically 7 yr retention requirements per sponsor. F&A indirect cost recovery: A-21/A-110 compliance evidence retained per federal cost principle (typically 3 yr post-grant closeout). Sponsored research compliance: time-and-effort certifications retained per institutional policy and per sponsor (typically 7 yr). State payroll for student employment: per state. Endowment fund accounting: indefinite for active endowments. The infor lawson data retention strategy for higher ed layers FERPA, federal grant retention, sponsored research compliance, and state-specific payroll requirements.

SOX (Sarbanes-Oxley) applies to public hospital companies and public university systems (and to many non-profit hospitals with public bond debt). SOX retention is structured: financial records (GLMASTER journal postings, APINVOICE invoice history, ARCUST receivables history, cash management) retained 7 years; internal controls testing evidence retained 7 years; audit workpapers retained 7 years; management certifications retained 7 years. Beyond minimum retention, SOX also requires verifiable lineage — every financial record must trace to source document with audit-grade evidence chain. Syntra ETL's infor lawson data retention strategy preserves the SOX-relevant lineage end-to-end: every Fusion GL line traces to the originating Lawson GLMASTER entry (or to the migrated Lawson archive equivalent) with hash-signed evidence.

The retention strategy is built into the migration design. (1) During migration, every Lawson record is hash-signed at extraction and preserved through the load with lineage to its Fusion equivalent. (2) Records that don't migrate to Fusion (typically deep historical records older than current FY + prior 2 FY) are routed to Syntra cloud archive with full HIPAA / SOX / FERPA / CMS evidence preservation. (3) Post-migration, the Syntra cloud archive provides queryable access to legacy data for the full retention period without keeping Lawson running. (4) Read-access logs (HIPAA Access Log, SOX access control evidence) preserved per query. (5) Periodic retention review confirms data within retention is preserved and data past retention is purged per policy.

ELC (Employee Lifecycle) and COBRA (Consolidated Omnibus Budget Reconciliation Act) require effective-dated benefits deduction evidence for the lifetime of the employee's eligibility plus continuation periods. EMDEDMASTR records held in Lawson with full effective-dated history (deduction start, deduction end, plan change, dependent change, beneficiary change) are migrated to Fusion HCM Element Entries with all effective dates preserved exactly. COBRA-relevant termination events (qualifying event, election period, continuation period start, continuation period end) flagged with full audit trail in Fusion. The retention strategy ensures every ELC and COBRA evidence record is preserved for the regulatory required period (typically 6 yr COBRA continuation evidence, longer for plan documentation).

340B drug pricing programme compliance requires hospital networks to retain drug attribution evidence for HRSA audit. Lawson Supply Management tracks 340B-eligible drug acquisitions per item, per facility, per dispensing context. The retention strategy preserves: (1) 340B drug attribution at item level (Fusion Inventory DFF or VBCS extension), (2) acquisition cost vs 340B-discount-eligible cost per acquisition, (3) dispensing attribution per encounter (when integrated with patient accounting), (4) HRSA audit log entries for each 340B attribution decision. Typical retention: HRSA requires through audit completion plus look-back period — often 5–7 years post-acquisition. The Syntra cloud archive preserves the 340B evidence trail in queryable form throughout the retention window.

Yes — and this is the most common pattern. Lawson productlines move to read-only at cutover, full historical extraction completes during the migration project, historical data is migrated to Syntra cloud archive with full HIPAA / SOX / FERPA / CMS / FFATA evidence preservation, and Lawson infrastructure (database, application servers, IPA engine, Mongoose runtime) is shut down. The Syntra cloud archive provides queryable access for the full retention period (typically 7–10 years post-migration depending on jurisdiction overlay). Lawson licenses are cancelled, Lawson infrastructure costs are eliminated, and retention obligations are fully met through the cloud archive. Hospital networks typically save $500K–$2M+/yr in Lawson licensing and infrastructure costs while improving retention evidence quality.

Three evidence artifacts maintained throughout the retention period. (1) Lineage evidence: every retained record traces from its current location (Fusion, Syntra archive, or Lawson archive in hybrid scenarios) back to source Lawson record with hash-signed chain. (2) Access log: every read-access to retained records logged with timestamp, user identity and purpose — meets HIPAA Access Log, SOX access control, FERPA access control, FFATA grant access requirements. (3) Reconciliation pack: signed, timestamped reconciliation showing original record count = current preserved record count per jurisdiction overlay; demonstrates no silent data loss through retention period. When auditors arrive (CMS RAC audit, HIPAA OCR investigation, HRSA 340B audit, SOX walkthrough, FFATA grant audit), the three evidence artifacts are produced on demand without reconstruction.