An information management apparatus includes: a registration unit, a condition storage, a determination unit, a transmission unit and a deletion unit. The registration unit registers electronic information in association with access right information representing whether a user has an access right. The condition storage stores a condition for prohibiting an access to the electronic information registered by the registration unit on the basis of an administrator's right for the apparatus. The determination unit determines whether the changed access right information satisfies the condition stored in the condition storage. The transmission unit transmits the electronic information to a transmission destination in a case where the determination unit determines that the access right information of the electronic information satisfies the condition. The deletion unit deletes the electronic information stored in a transmission source after the electronic information is transmitted by the transmission unit.