The retention of personal data is mainly governed by the requirements of the Data
Protection Act, and the associated Codes of Practice. Ensure that you have clear
guidelines and procedures for document retention to ensure compliance with these, and
that managers do not keep duplicate copies of documents in separate files.
Data Protection hit the news with the loss by the HMRC of
25 million child benefit records, followed by the loss of 3 million driving theory test
candidates' data, and then the loss of candidate information when a laptop was stolen
from a Royal Navy officer's car. Have you reviewed the security of information you
send externally or keep on laptops? Read our introduction to
document retention and then our legal overview
to decide what to keep and for how long.
It is proposed that the current financial penalties for breach of the DPA will be
increased to include custodial sentences of up to six months, or up to two years on
indictment. This is to be effected as soon as parliamentary time allows.