| Type of record | Statutory or Code of Practice reference | Retention period or recommendation |
| Records establishing customer’s identity | The Money Laundering Regulations 2007 | At least five years |
| Personal data - including financial information for billing purposes | The Data Protection Act 1998 | No longer than is necessary for the purpose for which the data was originally collected. |
| Records which can trace and identify the source, destination, date, time and duration of a communication (traffic data) | The Data Retention Directive, implemented in the UK by the Data Retention Regulations 2009 | 12 months (only where under a notice in writing to do so by the Secretary of State) |
| Sales records (consumer switching) | OFCOM General Condition of Entitlement 22 | At least six months |
| Record of Consent (consumer switching) | OFCOM General Condition of Entitlement 22 | At least twelve months |