49 CFR §237.155

1. (a)Electronic recordkeeping; general. For purposes of compliance with the recordkeeping requirements of this part, a track owner may create and maintain any of the records required by this part through electronic transmission, storage, and retrieval provided that all of the following conditions are met:
   1. (1)The system used to generate the electronic record meets all requirements of this subpart;
   2. (2)The electronically generated record contains the information required by this part;
   3. (3)The track owner monitors its electronic records database through sufficient number of monitoring indicators to ensure a high degree of accuracy of these records;
   4. (4)The track owner shall train its employees who use the system on the proper use of the electronic recordkeeping system; and
   5. (5)The track owner maintains an information technology security program adequate to ensure the integrity of the system, including the prevention of unauthorized access to the program logic or individual records.
2. (b)System security. The integrity of the bridge inspection records must be protected by a security system that incorporates a user identity and password, or a comparable method, to establish appropriate levels of program and record data access meeting all of the following standards:
   1. (1)No two individuals have the same electronic identity;
   2. (2)A record cannot be deleted or altered by any individual after the record is certified by the employee who created the record;
   3. (3)Any amendment to a record is either—
      1. (i)Electronically stored apart from the record that it amends; or
      2. (ii)Electronically attached to the record as information without changing the original record;
   4. (4)Each amendment to a record uniquely identifies the person making the amendment; and
   5. (5)The electronic system provides for the maintenance of inspection records as originally submitted without corruption or loss of data.