| Information type | Keep for | Keep from | Legislation or business reason |
|---|---|---|---|
| Subject access request complaints | 6 years | Case closure | |
| Information governance management reports/discussion papers | 6 years | Creation | Local decision |
| Information governance team policies and procedures | Permanent | Creation | Local decision |
| Information governance agendas, minutes, action logs | 6 years | Creation | Local decision |
| Traded service correspondence | 2 years | Creation | Local decision |
| Traded service transactions | 3 years | Current year | Local decsion |
| Information governance general enquiries – public | 180 days | Creation | Local decision |
| Information governance general enquiries – staff | 1 year | Creation | Local decision |
| Data Protection Impact Assessments | Permanent | Creation | Best practice |
| Information governance audit reports | 6 years | Creation | Local decision |
| Information governance audit correspondence | 2 years | Creation | Local decision |
| Information security training correspondence & attendance logs | 6 years | Creation | Local decision |
| Information security training material | Permanent (updated when required) | Creation | Local decision |
| Information security incident reports | 6 years | Creation | |
| Security exception reports | 5 years | Creation | Local decision |
| Information security incident correspondence | 6 years | Completion of investigation | Statute of Limitations |
| Contractor security questionnaire | 1 year | Cessation of contract | Local decision |
| Contractor data processing agreements | 6 years | Creation | |
| Criminal proceedings correspondence and disclosures | 6 years | Case closure | Local decision |
| Crown prosecution disclosures | 6 years | Case closure | Local decision |
| Crown prosecution service correspondence | 6 years | Case closure | Local decision |
| Data Protection Act 2018 Schedule 2 Requests | Six years | Case closure | Ministry of Justice guidance |
| Court order disclosures | Three years | Creation | National Archive guidance |
| Court order requests and correspondence | Three years | Creation | National Archive guidance |
| Environmental information regulation complaints and responses | 6 years | Case closure | Local decision |
| Subject access request correspondence | 6 years | Case closure | Statute of Limitations |
| Freedom of information correspondence | 6 years | Case closure | Statute of Limitations |
| Environmental information regulations correspondence | 6 years | Case closure | Local decision |
| Subject access disclosures | 6 years | Case closure | Local decision |
| Subject access requests | 6 years | Case closure | Local decision |
| Information asset registration | 5 years | Creation | |
| Freedom of information (FOI) disclosures | 6 years | Case closure | Local decision |
| Freedom of information (FOI) requests | 6 years | Case closure | Local decision |
| Environmental information regulations disclosures | 6 years | Case closure | Local decision |
| Customer service transactions – enquiries, requests and complaints | 180 days | Creation | Local decision |
| Customer service transactions – logged emails, phone calls, faxes and SMS | 180 days | Creation | Local decision |
| Environmental information regulations requests | 6 years | Case closure | Local decision |