Business OS
Governance & ComplianceCompany Policies

Record Retention Policy

This document outlines the company's policy on retaining business records, ensuring compliance with legal obligations and operational needs. Use it to establish clear guidelines for record keeping and disposal.

Updated 15d ago
record retentiondata managementcompany policycomplianceinformation governanceSME

Company Letterhead

{{company_name}}

{{company_address}}

Phone: {{phone}}

Email: {{email}}

Website: {{website}}

1. Purpose

The purpose of this Record Retention Policy is to ensure that {{company_name}} complies with all applicable legal, regulatory, and operational requirements concerning the retention and destruction of business records. This policy aims to minimise risks associated with improper record disposal, maintain accessible information for business continuity, and protect sensitive data.

2. Scope

This policy applies to all employees, contractors, and third-party agents of {{company_name}}, regardless of their location or employment status. It covers all business records, whether in hard copy or electronic format, created or received in the course of business operations.

3. Definitions

**Business Records:** Any document or information, regardless of format, created or received by {{company_name}} in the transaction of business that is saved for future reference. This includes, but is not limited to, financial records, human resources records, legal documents, operational data, and communications.

**Retention Period:** The minimum length of time for which a record must be kept.

**Destruction:** The permanent disposal of records in a manner that ensures they cannot be reconstructed or retrieved.

4. Record Retention Schedule

The following schedule outlines the minimum retention periods for various categories of business records. These periods are based on legal, regulatory, and business requirements. Unless otherwise specified by law or regulation, all records should be destroyed after their retention period has expired.

**4.1. Financial Records:**

- Invoices (Accounts Payable & Receivable): {{retention_period_invoices}} years

- Bank Statements & Reconciliations: {{retention_period_bank_statements}} years

- Tax Returns & Supporting Documentation: {{retention_period_tax_returns}} years

- Payroll Records: {{retention_period_payroll_records}} years

**4.2. Human Resources Records:**

- Employee Personnel Files (active employees): {{retention_period_active_employee_files}} years after termination

- Applicant Records (non-hired): {{retention_period_applicant_records}} years

- Health & Safety Records: {{retention_period_health_safety_records}} years

**4.3. Legal & Corporate Records:**

- Incorporation Documents & Bylaws: Permanent

- Contracts & Agreements: {{retention_period_contracts}} years after expiration/termination

- Intellectual Property Records: Permanent, or {{retention_period_ip_records}} years after expiration

**4.4. Operational & Project Records:**

- Project Files & Documentation: {{retention_period_project_files}} years

- Customer Records: {{retention_period_customer_records}} years after last interaction

- General Correspondence: {{retention_period_general_correspondence}} years

5. Record Management Procedures

**5.1. Storage:** Records must be stored securely, whether physically or electronically, to prevent unauthorised access, modification, or destruction. Electronic records should be backed up regularly.

**5.2. Access:** Access to records should be limited to authorised personnel only, based on their job responsibilities.

**5.3. Retrieval:** Records must be organised in a manner that allows for efficient retrieval when needed for legal, audit, or business purposes.

**5.4. Legal Holds:** In the event of litigation, audit, or investigation, a legal hold (also known as a 'litigation hold') may be issued. All records pertinent to the legal hold must be preserved, regardless of their scheduled retention period, until the hold is officially lifted by the Legal Department or senior management.

6. Record Destruction

Upon the expiry of their retention period, records shall be disposed of securely.

**6.1. Hard Copy Records:** Shall be shredded, incinerated, or otherwise rendered unreadable.

**6.2. Electronic Records:** Shall be permanently deleted from all systems, including backups, using secure erasure methods that prevent reconstruction. A record of destruction should be maintained.

Departments are responsible for ensuring that their records are disposed of in accordance with this policy and the record retention schedule. Prior to any destruction, a final review must be conducted to ensure no legal holds are in effect.

7. Responsibilities

**Management:** Responsible for approving and enforcing this policy, and ensuring adequate resources for its implementation.

**Department Heads:** Responsible for ensuring their respective departments comply with this policy, including proper record keeping, storage, and timely destruction.

**All Employees:** Responsible for understanding and adhering to this policy in their daily activities.

8. Training and Awareness

All new employees will be inducted on this Record Retention Policy. Regular refresher training will be provided to ensure ongoing compliance and awareness of any updates to the policy or relevant regulations.

9. Policy Review

This policy will be reviewed periodically, at least every {{review_period_years}} years, or as necessitated by changes in legislation, technology, or business operations, by {{responsible_department_for_review}}.

10. Signature

_____________________________

{{authorised_signatory_name}}

{{authorised_signatory_title}}

Date: {{signature_date}}

Related templates