As the Web has matured over the past two decades, it has increasingly become embedded in the conduct of the daily activities of organizations and businesses. Once used primarily as a marketing tool, companies are increasingly using it as a means of promulgating other information, including policies and procedures, and terms and conditions of engagement, and as a means of conducting business transactions. Often overlooked is the fact that Web-based records are subject to the same legal and fiscal requirements as their more traditional counterparts, and that unlike other records, those on the web are both universally available and persistent. This session will look at this particular aspect of web governance, considering the risks posed by web-based records and the actions needed for organizations to manage them.