Controls & evidence

Record retention

Keeping required records for set periods in a retrievable, unaltered form, and disposing of them when allowed.

Overview

Retention rules differ by regime and record type, from five years for many AML records to longer periods for some financial and safety records. Privacy laws also require deletion when data is no longer needed.

It connects most directly to Audit trail, Evidence package and Bank Secrecy Act.

Check the official sources below for legal scope, applicable dates and exceptions. This entry is an explanatory reference, not legal advice.

Why it matters

Missing records at examination time are treated as missing compliance.

Who it affects

All regulated organisations.

Where it sits

Ten linked steps connect where you operate to the proof that you complied.

  1. 01Jurisdiction
  2. 02Industry
  3. 03Activity
  4. 04Authority
  5. 05Regulation
  6. 06Requirement
  7. 07Guidance
  8. 08Control
  9. 09Evidence
  10. 10Enforcement

Connections

The terms most closely tied to Record retention. Select one to open it.

This term

What to do about it

  1. 1Define the owner, frequency, data and pass condition.
  2. 2Automate the test on source data where you can.
  3. 3Capture evidence on every run, including exceptions.
  4. 4Review exceptions and failures and record the decision.
In Regulation Layer

From requirement to evidence.

Evidence on your private chain is retained and retrievable for the periods each regime requires.

Request early access →

Related terms

Request early access →