Some elements of this ruling have been superseded by ATF Ruling 2022-01

In the ATF ruling 2016-1, the ATF authorizes an alternate method or procedure to the paper bound firearms acquisition and disposition recordkeeping requirements.Specifically, the ATF authorizes licensed importers, licensed manufacturers, licensed dealers, and licensed collectors to maintain their firearms acquisition and disposition records electronically, provided all of the following conditions are met: 

1. The licensee records in the computer system all of the acquisition and disposition information required by 27 CFR 478.121, 478.122, 478.123, 478.125(e), 478.125(f), and 27 CFR 479.131, as applicable. Required information includes a record of both the manufacturer and the importer (if any). Additional columns can be utilized to capture certain additional information (e.g., inventory number, new/used, etc.), so long as the additional information is separate from the required information and the required information is readily apparent. An ATF Form 4473 serial number may be used instead of the address for recording the transfer of a firearm to a non-licensee if such forms are filed numerically. 

2. The electronic acquisition and disposition bound book software must track corrections and changes utilizing one of the following methods of tracking changes: a. The system must retain any correction as an entirely new entry, without deleting or modifying the original entry. When the software generates the bound book, the system must be able to quickly and easily change views of the bound book as follows: 1. Only view the original entries; 2. Only view the corrected entries; and 3. View both the original and corrected entries in the same bound book. OR b. The system must be able to print the corrections as a separate report containing the same parameters as are required for a paper bound book, including the firearm information, acquisition details, and disposition details. The format of the correction report may follow the traditional bound book format, or may be presented in any column format as long as the necessary information outlined above exists in the report (which may include a notes column). OR c. If a spreadsheet program (e.g., excel) is being utilized, the system must be able to track any edits/corrections/amendments in a “notes” column. Any edits/corrections/amendments may overwrite the original entry so long as the “notes” column explains any edits/corrections/amendments and/or tracked changes (i.e., what was changed, who made the change, and why the change was needed).

3. The system cannot rely upon invoices or other paper/manual systems to provide any of the required information. Also, if a licensee chooses to use an electronic recordkeeping system for any of its required acquisition and disposition records, then all acquisition and disposition records, regardless of type (e.g., gunsmithing, sales, NFA), must also be in the electronic format as prescribed by this ruling.

4. The system must allow queries by firearm serial number, acquisition date, name of the manufacturer or importer, name of the purchaser, address of purchaser or other transferee, and ATF Form 4473 transferor’s transaction serial number (if any).

5. The licensee must download all records from the system to a physical storage device (e.g. hard drive, Compact Disc (CD), Digital Versatile Disc (DVD), or Universal Serial Bus (USB) Flash Drive) at the licensee’s business premises, or print and maintain them at the licensee’s business premises: 
   1. a. at least semiannually; however, if the records are downloaded, from a host facility (e.g., remote server or cloud storage provider) contracted/leased by the licensee as provided in condition #9, they must be downloaded at least daily. In all cases, the records must be downloaded in a format that is unencrypted with the required information readily apparent; 
   2. b. upon request of an ATF officer (must be provided within 24 hours); 
   3. c. prior to discontinuance or change of: the software (program); the database system, whether or not maintained by a host facility (e.g., remote server or cloud storage provider); and/or the host facility (if applicable); and 
   4. d. prior to discontinuance of the licensee’s firearms business. The downloads/printouts must include all firearms in inventory, as well as all firearms transferred during the period covered, sequentially by date of acquisition, and must be limited to display only the information required by the applicable regulations. The downloads/printouts may contain additional columns capturing certain additional information, provided that the required information is readily apparent.
6. If a licensee downloads the records onto a physical storage device (e.g., hard drive, CD, DVD, or USB Flash Drive), the download must be retained on the physical storage device until the next download is prepared. Additionally, the licensee must be able to present the most current version of the requested records in a printed format at ATF’s request.
7. If the licensee prints out the records, the printout must be retained until the next printout is prepared. 
8. Downloads/printouts may include antique firearms, but cannot include other merchandise. However, antique firearms must be identified as such in the “firearm type” column.
9. Electronic firearms acquisition and disposition records may be stored on a computer server or device owned and operated by the licensee, or contracted/leased by the licensee through a host facility (e.g., remote server or cloud storage provider), provided that: a. The firearms acquisition and disposition records are readily accessible through a computer or device located at the licensed premises during regular business hours; and b. The licensee’s server is located within the United States or its territories, or if a host facility is used, that facility must have a business premises within the United States or its territories, and must be subject to U.S. legal process. Licensees are strongly encouraged to ensure that there are proper and robust security protection measures in place (e.g., encryption) to ensure all data is protected.
10. If the licensee contracts with, leases from, or changes a host facility (e.g., remote server or cloud storage provider), the licensee must, within 30 days, notify his/her respective ATF Area Office of the name and address of the host facility.
11. 11. Each licensee must maintain its firearms acquisition and disposition records on a separate/partitioned database that cannot be intermingled with the records associated with another license.
12. 12. The storage system must back-up the firearms acquisition and disposition records on at least a daily basis to protect the data from accidental deletion or system failure.
13. 13. Licensees must retain all records in accordance with 27 CFR 478.129, ATF Rul. 2010-8, Consolidation of Required Records for Manufacturers, and ATF Rul. 2011-1, Consolidation of Required Records for Importers (as applicable). It is strongly recommended that upon reaching 20 years, those electronic firearms acquisition and disposition records be either permanently maintained by the licensee or forwarded to the ATF Out-of-Business Records Center for preservation.
14. 14. Upon discontinuance of business, the licensee must send required records to the ATF Out-of-Business Center in accordance with 27 CFR 478.127. The licensee must print out the required records or download them to a physical storage device (as defined in paragraph 5) or, at the discretion of the licensee, both. The complete printout or download must provide an American Standard Code for Information Interchange (ASCII) text file (in conformity with industry standards) containing all acquisition and disposition records, and a file description. The complete printout or downloaded ASCII text file (and file description) must contain all information prescribed by regulation. The NTC converts these files into image files not searchable by name.

All laws, regulations, rulings, procedures, and policies applicable to the paper form of the firearms acquisition and disposition records also apply to electronic versions. Licensees are not required to use an electronic acquisition and disposition record, and may continue to use a paper record in the format prescribed by regulation. Licensees are reminded of their responsibility to ensure accuracy and completeness of all of their required records. Held further, if the licensee fails to abide by the conditions of this ruling, uses any procedure that hinders the effective administration of the Federal firearms laws or regulations, or any legal or administrative difficulties arise due to the use of an electronic acquisition and disposition record, the licensee is no longer authorized to maintain acquisition and disposition records electronically under this ruling until all conditions of this ruling are met. Held further, this ruling supersedes all previous rulings regarding alternate methods or procedures for electronically maintaining firearms acquisition and disposition records, including ATF Rul. 2013-5, Requirements to Keep Firearms Acquisition and Disposition Records Electronically, approved December 17, 2013. Any reference to ATF Rul. 2008-2, Records Required for Firearms Licensees, approved August 25, 2008, in ATF Rul. 2010-8, Consolidation of Required Records for Manufacturers, approved December 6, 2010, and ATF Rul. 2011-1, Consolidation of Required Records for Importers, approved January 26, 2011, are hereby replaced to reference this ruling. Date approved: April 29, 2016 Thomas E. Brandon Deputy Director

https://www.atf.gov/firearms/docs/ruling/2016-1-requirements-keep-firearms-records-electronically