The person in the organization designated as the organization’s records manager should draft a records-sharing policy that is approved by the organization’s top management for sharing records with those outside the organization.