Type of record |
Statutory or Code of Practice reference |
Retention period or recommendation |
Records establishing customer’s identity |
The Money Laundering Regulations 2007 |
At least five years |
Personal data - including financial information for billing purposes |
The Data Protection Act 1998 |
No longer than is necessary for the purpose for which the data was originally collected. |
Records which can trace and identify the source, destination, date, time and duration of a communication (traffic data) |
The Data Retention Directive, implemented in
the UK by the Data Retention Regulations 2009 |
12 months (only where under a notice in writing to do so by the Secretary of State) |
Sales records (consumer switching) |
OFCOM General Condition of Entitlement 22 |
At least six months |
Record of Consent (consumer switching) |
OFCOM General Condition of Entitlement 22 |
At least twelve months |