What this is
What is a records retention schedule?
What is a records retention schedule?
It is a register that sets, for every class of record an organisation holds, how long that record must be kept, what triggers the retention clock, and how the record is disposed of once the period lapses. It exists because retention obligations are set by regulation, contract and certification scheme, and they vary by record type rather than following one blanket rule.
Why can't one retention period cover every record?
Because the legal and business reasons for keeping something differ by record type. A training certificate has a different limitation period than a health surveillance file, and an incident report tied to a claim may need to survive far longer than either. A single blanket period either destroys records too early or keeps low-value records indefinitely for no reason.
Who is accountable for the schedule once it is built?
The compliance lead owns it, but each record class carries its own named owner, because the person who understands why a class exists is the person best placed to judge when the legal basis for its period changes.
Scope
When is a records retention schedule required?
This register sets the rule; it does not execute the rule against any one document. Confusing the two produces a schedule nobody can trust and a register nobody can find the current version of.
Use this template when
- You are defining, for the first time, how long a class of record must be kept
- An existing retention period needs revising because the legal basis it relied on has changed
- A new record class has appeared in the organisation and has no entry yet
- You need to confirm whether a disposal action was authorised and logged correctly
- A legal hold needs recording against one or more record classes
Do not use it for
- Document Control Record, which records the issue, revision, approval and withdrawal of one controlled document, not how long any record type is kept.
- Document Review Record, which checks whether a document is still accurate, not how long it or its outputs must be retained.
- Legal and Other Requirements Register, which tracks the legal obligations themselves rather than the retention rule derived from them.
- Regulatory Change Record, which logs a change in the law, not the retention period that change forces you to update here.
- Anything outside KnowComply, such as an individual workspace's own archive settings, which should point back to this schedule rather than set its own rule
Compliance mapping
Which ISO 9001 cl.7.5 requirements does this satisfy?
The schedule sits under ISO 9001 clause 7.5, which treats retention and disposal as part of controlling documented information rather than an administrative afterthought.
| Clause | Requirement | Where it lands |
|---|---|---|
| ISO 9001 cl.7.5.1 | Documented information required by the management system, including records demonstrating conformity, must be identified and controlled — which includes knowing how long each type is kept. | Header |
| ISO 9001 cl.7.5.3.1 | Documented information must remain available, suitable for use, and adequately protected wherever it needs to be. | Record classes |
| ISO 9001 cl.7.5.3.2 | Distribution, storage, preservation, retrieval, retention and disposition of documented information must be controlled as defined activities, not left to habit. | Record classes |
| ISO 9001 cl.7.5.3.2 | Retention and disposition require a defined retention period and a defined, authorised disposal method for each record type. | Special cases |
| Data protection storage limitation principle | Personal and health data must not be kept for longer than the purpose it was collected for requires, which forces a distinct, usually shorter, retention justification. | Record classes |
| General legal hold duty | Once litigation, a regulatory investigation or an insurance claim becomes reasonably foreseeable, routine destruction of the records it touches must be suspended. | Special cases |
| ISO 9001 cl.7.5.1 | The schedule that governs a register must itself be traceable back to the register it governs. | Related records |
| ISO 9001 cl.9.1.3 | The organisation must analyse and evaluate the performance of its management system processes, which includes checking the retention schedule is actually being followed, not just that it exists. | Schedule health |
What it does not cover
- A retention period with no stated basis, which cannot be defended if a regulator or a court asks why that number and not another.
- An exposure or health surveillance record filed under the default period, which understates how long these classes are legally required to survive employment or exposure ending.
- A disposal marked complete with no authorisation on record, which which turns a routine deletion into an unexplained one the moment it is questioned.
- A legal hold that is understood informally but never logged, which fails the instant the person who remembered it leaves the organisation.
- A backup regime the schedule never mentions, which quietly keeps a live copy of a record long after the schedule says it was destroyed.
Global
Records Retention Schedule requirements by country
Retention obligations are set nationally, not by the standard, so the schedule has to reconcile the certification requirement with whichever jurisdiction's law actually governs the record.
OSHA 29 CFR 1910.1020
Employee exposure and medical records must generally be retained for the duration of employment plus thirty years.
This is the regulatory anchor behind the schedule's forty-year exposure-record provision, and it overrides any shorter business-need period a site might otherwise default to.
Companies Act 2006, s.388, and HMRC record-keeping requirements
Accounting and tax-relevant records generally require a minimum retention of six years from the end of the relevant financial period.
Financial record classes on the schedule need a six-year floor even where no certification scheme or contract asks for one specifically.
GDPR / UK GDPR, Article 5(1)(e) — storage limitation
Personal data may only be kept in identifiable form for as long as necessary for the purpose it was collected for.
Any record class marked as containing personal data needs a period justified by purpose, not by convenience, and the schedule's own personal-data flag exists to force that check.
How to complete it
How to complete a records retention schedule, step by step
Filling in the fields is mechanical. The defensibility of the schedule turns on four judgement calls that a checkbox cannot make for you.
A record can sit under a legal minimum, a certification scheme and a customer contract at once, and they rarely agree. The defensible answer is the longest period that genuinely applies, recorded as the strongest "Basis For Period", with the others noted so a later reviewer sees why the number is what it is.
The schedule flags carcinogen and asbestos exposure for extended retention by default, but borderline categories — a chemical handled briefly, a one-off inspection — need a real judgement about whether exposure occurred, not an automatic answer either way.
"Reasonably foreseeable" litigation is a judgement, not an event with a start date. Waiting for a formal notice before suspending disposal is usually too late; the process has to work for people who are not lawyers.
A period set against the live system means nothing if a backup or paper archive holds an uncontrolled copy for longer. Answering "Backups Covered By Schedule" honestly is what separates a schedule that governs reality from one that only governs the primary system.
What auditors find
Most common records retention schedule findings
These are the failure patterns that show up once a schedule has been running for a year rather than at the moment it was written.
| Finding | Clause | What fixes it |
|---|---|---|
| Records Held Beyond Period is non-zero and has been for more than one review cycle. | ISO 9001 cl.7.5.3.2 | Run a disposal pass against the affected class immediately, log the authorisation, and check whether the retention trigger itself was misapplied. |
| Records Destroyed Early appears against a class that also shows an open or recent legal hold. | General legal hold duty | Treat as a potential spoliation issue, notify the compliance lead directly, and review whether the hold communication reached the people who actually carry out disposal. |
| A record class has no named owner in Owner. | ISO 9001 cl.7.5.1 | Assign an owner before the next review; an unowned class is the one nobody notices has drifted out of date. |
| Basis For Period is recorded as business need for a class that plainly involves personal or health data. | Data protection storage limitation principle | Re-justify the period against the actual purpose the data was collected for, and shorten it if business need cannot support the current length. |
| Backups Covered By Schedule is answered Partly or No. | ISO 9001 cl.7.5.3.1 | Extend the schedule's scope to the backup and archive systems, or document explicitly why they fall outside it. |
| Legal Hold Process Defined is answered Informal. | General legal hold duty | Write the hold process down as a defined step with a named authority to invoke it, rather than relying on institutional memory. |
Case in point
Case in point: the exposure record nobody could produce
A manufacturing site closed a legacy production line and, eighteen months later, archived its maintenance and exposure records under a generic five-year period because nobody re-checked which class they belonged to. A former operator raised an occupational health claim over solvent exposure on that line four years after closure.
The site could produce training records but not the exposure monitoring data, because it had been filed as a maintenance record and destroyed on the shorter schedule. The schedule existed and was signed off annually, and still failed — the class assigned at filing was wrong, and nothing caught the mismatch before disposal.
The template
The template, field by field
The form exactly as it installs. Every field, option, score and conditional rule is editable, and the links to other templates come with it.
5 sections
- Reference
- CMP-024
- Archetype
- Register
- Record ID
- RRS-2026-000
- Scoring
- Not scored
- Direction
- n/a
- Singleton
- No
- Basis
- ISO 9001 cl.7.5, regulatory requirements
- Links
- Links Document Register
- Tags
- Governance, Records
- Sections
- 5
- Fields
- 44
- Follow up fields
- 3
- Repeating sections
- 1
- Links out
- 3
Header
8 fieldsSchedule ID*
Auto sequence. Format RRS-2026-000.
The record's own ID. Other templates point at this value.
Status*
Drives who this goes to next.
- Planned2 pts
- In progress2 pts
- Complete3 pts
- Deferred0 pts
- Open0 pts
- Closed3 pts
- Overdue0 pts
Site*
Site ID*
Format SITE-000.
Links to FDN-001 Site ID
Last Reviewed*
Reviewed By*
Next Review Due*
Keeping Everything Is Also A Risk
Records held beyond their purpose create discovery exposure and privacy obligations. Records destroyed too early leave you unable to defend a claim. Both directions matter.
Record classes
Repeats15 fieldsRecord Class*
Examples
Owner*
Retention Period*
Basis For Period*
Legal requirement, limitation period, certification scheme, customer contract or business need.
- Legal requirement4 pts
- Limitation period3 pts
- Certification scheme3 pts
- Customer contract2 pts
- Business need1 pt
Legal Reference
Retention Starts From*
Creation, end of employment, end of exposure, or product shelf life plus a margin.
Format*
- Digital3 pts
- Paper1 pt
- Both2 pts
Storage Location*
Contains Personal Data*
- No3 pts
- Yes1 pt
Contains Health Data*
Health records carry the longest retention and the strictest access controls at the same time.
- No3 pts
- Yes1 pt
Access Restricted*
- Yes3 pts
- Partly1 pt
- No0 pts
Disposal Method*
- Secure shredding3 pts
- Secure digital deletion3 pts
- General waste0 pts
Disposal Authorised By
Disposal Logged*
- Yes3 pts
- No0 pts
Special cases
6 fieldsExposure Records Long Retention Applied*
Carcinogen and asbestos exposure records commonly require forty years.
- Yes3 pts
- Not applicable3 pts
- No0 pts
Health Surveillance Retention Applied*
- Yes3 pts
- Not applicable3 pts
- No0 pts
Traceability Records Retention Applied*
- Yes3 pts
- No0 pts
Legal Hold Process Defined*
Once litigation or an investigation is foreseeable, normal destruction must stop immediately.
- Yes3 pts
- Informal1 pt
- No0 pts
Any Records Under Legal Hold
Hold Communicated
- Yes3 pts
- No0 pts
Related records
1 fieldDocument Register ID
The register whose retention periods this schedule sets.
Links to FDN-008 Document ID
Schedule health
14 fieldsRecord Classes Covered*
Classes With An Owner*
Classes With A Legal Basis*
Records Held Beyond Period*
Records Destroyed Early*
Backups Covered By Schedule*
Deleting the live record while a backup holds it for seven years achieves nothing.
- Yes3 pts
- Partly1 pt
- No0 pts
Action Required*
Raise the action record, then enter its reference here.
- No2 pts
- Yes0 pts
Priority
- High0 pts
- Medium1 pt
- Low3 pts
CAPA ID
Format CAPA-2026-00000.
Links to FDN-014 CAPA ID
Action Owner
Compliance Lead*
Signature*
Site Manager*
Second Signature*
CMP-024 · record IDs look like RRS-2026-000 · Links Document Register
Open in KnowellaRun it with agents
From a document you fill in to a programme that runs itself
Writing the schedule once is straightforward. Catching the record that was filed under the wrong class, or the backup nobody accounted for, is the part that needs a system watching continuously rather than a form filled in once a year.
Holds the retention schedule against the document register it governs, flags classes with no owner or no stated basis, and keeps the disposal log tied to an actual authorisation.
Feeds exposure and incident record classes back into the schedule so the forty-year retention rule is applied to the records that actually involve exposure, not just the ones labelled that way at the point of filing.
Keeps health surveillance records aligned with their own longer retention rule and access restrictions, separate from the general personal-data classes on the same schedule.
Watches for records held past their period or destroyed early, surfaces both to the compliance lead in one view, and holds every disposal or hold action for approval before it touches a record.
This template lives in KnowComply — audit and governance. Audit programmes, legal register, management review, risk and certification.
Meet KnowComply→Glossary
Records Retention Schedule definitions and key terms
- Retention period
- The length of time a defined class of record must be kept before it becomes eligible for disposal.
- Legal hold
- A suspension of routine record disposal, triggered by foreseeable or actual litigation, investigation or claim, that overrides the normal retention schedule for the affected records.
- Basis for period
- The stated reason a retention period was set at its current length — legal requirement, limitation period, certification scheme, customer contract or business need — used to defend the period if it is ever questioned.
- Storage limitation
- The data protection principle that personal data should be kept in identifiable form only for as long as the purpose it was collected for requires.
- Record class
- A defined category of record, such as training records or exposure records, that shares a common retention period, basis and disposal method on the schedule.
FAQ
Frequently asked questions about records retention schedule
What is the records retention schedule template based on?+
It is built against ISO 9001 clause 7.5 on control of documented information, alongside the regulatory requirements that set specific periods for particular record classes, such as occupational exposure or financial records.
What sections does the records retention schedule contain?+
There are five sections: header, record classes, special cases, related records and schedule health. Together they hold 44 fields, 34 of which are required, with the record classes section repeating for every class the organisation defines.
How often is the schedule updated?+
It is built once at set up and reviewed at least yearly, but any new record class, any change to a legal basis, or any legal hold being opened or closed should trigger an update outside that annual cycle.
Which programme does the records retention schedule belong to?+
It sits inside Management System Governance, alongside document control and document review, so that one owner is accountable for the full lifecycle of a controlled record rather than three separate owners each holding a piece.
Does a legal hold cancel the retention schedule?+
No, it suspends it for the affected records only. The schedule keeps applying to every unaffected class, and the hold itself needs to be logged and eventually lifted so normal disposal can resume.
Can the template be adapted to a single site's regulatory environment?+
Yes. Every retention period, basis, format and disposal option is editable, and most organisations start from the template's defaults, run one review cycle, and then tighten the periods that their specific jurisdiction requires.
Keep going
Related templates and programmes
Industries this is written for
Programmes this belongs to
Used together in Management System Governance
Legal and Other Requirements Register
Lists every law, regulation, permit and commitment that applies to your operation
Compliance Obligation Assessment
Assesses how each legal requirement applies to you and what you do to meet it
Compliance Evaluation Record
Records the periodic evaluation of whether you actually comply with each obligation
Regulatory Change Record
Records a change in law or regulation and what it means for you
Regulatory Inspection Record
Records a visit by a regulator, including what was inspected, what was said and any orders issued
Management Review Record
Records the periodic review of the management system by senior leadership, covering performance, risks, resources and improvement
Written and reviewed by
Siddarth Singh
Founder & Chief Executive Officer, Knowella
Certified Safety Professional and industrial and systems engineer with more than a decade inside food supply chain, freight and manufacturing operations. This page was written against the current text of the standards it cites, not against secondary summaries of them.
- Certified Safety Professional (CSP), Board of Certified Safety Professionals
- MBA, University of Chicago Booth School of Business
- MS and BS, The Ohio State University, Industrial and Systems Engineering
- Six Sigma Black Belt
Sources and last review. Reviewed 16 August 2026 against:
- ISO 9001:2015 cl.7.5 — Documented information
- OSHA 29 CFR 1910.1020 — Access to Employee Exposure and Medical Records
- UK GDPR / GDPR Article 5(1)(e) — Storage limitation
- Companies Act 2006, s.388 — Duty to keep accounting records
This page is general guidance, not legal advice. Confirm requirements with your jurisdiction’s regulator.