| Information type | Keep for | Keep from | Legislation or business reason |
|---|---|---|---|
| Subject access – requests, disclosures, correspondence, complaints | Three years | Creation | Business need – local decision |
| Freedom of information – requests, disclosures, correspondence, complaints | Three years | Creation | Business need – local decision |
| Environmental information – requests, disclosures, correspondence, complaints | Three years | Creation | Business need – local decision |
| information governance management reports/discussion papers | 6 years | creation | local decision |
| information governance team policies and procedures | permanent | creation | local decision |
| information governance agendas, minutes, action logs | 6 years | creation | local decision |
| traded service correspondence | 2 years | creation | local decision |
| traded service transactions | 3 years | current year | local decsion |
| information governance general enquiries – public | 180 days | creation | local decision |
| information governance general enquiries – staff | 1 year | creation | local decision |
| privacy impact assessments | permanent | creation | best practice |
| information governance audit reports | 6 years | creation | local decision |
| information governance audit correspondence | 2 years | creation | local decision |
| Information security training correspondence & attendance logs | 6 years | creation | local decision |
| information security training material | permanent (updated when required) | creation | lcoal decision |
| information security incident reports | 6 years | creation | Limitation Act 1980 |
| security exception reports | 5 years | creation | local decision |
| information security incident correspondence | 2 years | completion of investigation | local decision |
| contractor security questionnaire | 1 year | cessation of contract | local decision |
| contractor data processing agreements | 6 years | creation | Limitation Act 1980 |
| criminal proceedings correspondence and disclosures | 3 years | creation | local decision |
| crown prosecution disclosures | 5 years | creation | local decision |
| crown prosecution service correspondence | 5 years | creation | local decision |
| section 29(3) requests and correspondence | last action plus 1 year | ministry of justice guidance |
|
| court order disclosures | three years | creation | national archive guidance |
| court order requests and correspondence | three years | creation | national archive guidance |
| environmental information regulation complaints and responses | 3 years | creation | local decision |
| subject access request correspondence | 2 years | creation | local decision |
| freedom of information correspondence | 2 years | creation | local decision |
| environmental information regulations correspondence | 2 years | creation | local decision |
| subject access disclosures | 2 years | creation | local decision |
| subject access requests | 2 years | creation | local decision |
| information asset registration | 5 years | creation | |
| freedom of information (FOI) disclosures | 5 years | creation | local decision |
| freedom of information (FOI) requests | 2 years | creation | local decision |
| environmental information regulations disclosures | 2 years | creation | local decision |
| customer service transactions – enquires, requests and complaints | 180 days | creation | local decision |
| customer service transactions – logged emails, phone calls, fax and SMS | 180 days | creation | local decision |
| environmental information regulations requests | 2 years | creation | local decision |