{ "name": "How long business email must be kept, and who may see it", "title": "How long business email must be kept, and who may see it", "kind": "terms-board", "url": "https://sellemailarchivetoai.com/datasets/email-records-retention-law/", "csv": "https://sellemailarchivetoai.com/datasets/email-records-retention-law.csv", "markdown": "https://sellemailarchivetoai.com/datasets/email-records-retention-law/index.md", "computed_at": "2026-10-28", "license": "https://sellemailarchivetoai.com/terms", "headline": "12 of 25 US and UK rules we read set how long business records must be kept; the rest govern who may see or sell them, read 28 October 2026.", "quotes": [ "12 of 25 US and UK rules we read set how long business records must be kept; the rest govern who may see or sell them, read 28 October 2026.", "Which country's law, by rule: the United Kingdom 13 of 25, the United States 11 of 25, not stated 1 of 25 (25 rules, read 28 October 2026).", "What the rule settles for an email archive, by rule: how long records must be kept 12 of 25, the personal data in the records 5 of 25, selling a business's property in insolvency or bankruptcy 4 of 25, when stored communications may be disclosed or intercepted 3 of 25, not stated 1 of 25 (25 rules, read 28 October 2026).", "The period it sets, by rule: no period 14 of 25, six years 5 of 25, three to five years 4 of 25, seven years or more 1 of 25, under three years 1 of 25 (25 rules, read 28 October 2026).", "What the rule says, verbatim, by rule: stated 25 of 25 (25 rules, read 28 October 2026)." ], "citation": "\"How long business email must be kept, and who may see it\", updated 2026-10-28, https://sellemailarchivetoai.com/datasets/email-records-retention-law/.", "national": { "n": 25, "unit": "rules", "documents": 25, "published_sources": 25, "named_sources": 27 }, "board": { "type": "clauses", "noun": { "one": "rule", "many": "rules" }, "document": { "one": "page", "many": "pages" }, "fields": [ { "id": "jurisdiction", "label": "Which country's law", "counts": { "us": 11, "not-stated": 1, "gb": 13 }, "values": [ { "value": "us", "text": "the United States" }, { "value": "us-ca", "text": "California" }, { "value": "gb", "text": "the United Kingdom" } ] }, { "id": "governs", "label": "What the rule settles for an email archive", "counts": { "sale-of-property": 4, "keep-records": 12, "limits-disclosure": 3, "personal-data": 5, "not-stated": 1 }, "values": [ { "value": "keep-records", "text": "how long records must be kept" }, { "value": "limits-disclosure", "text": "when stored communications may be disclosed or intercepted" }, { "value": "personal-data", "text": "the personal data in the records" }, { "value": "sale-of-property", "text": "selling a business's property in insolvency or bankruptcy" } ] }, { "id": "period", "label": "The period it sets", "counts": { "no-period": 14, "seven-years-or-more": 1, "three-to-five-years": 4, "under-three-years": 1, "six-years": 5 }, "values": [ { "value": "under-three-years", "text": "under three years" }, { "value": "three-to-five-years", "text": "three to five years" }, { "value": "six-years", "text": "six years" }, { "value": "seven-years-or-more", "text": "seven years or more" }, { "value": "no-period", "text": "no period" } ] }, { "id": "rule", "label": "What the rule says, verbatim", "counts": { "stated": 25 }, "values": [ { "value": "stated", "text": "stated" } ], "clause": true } ], "lead": { "type": "share", "field": "governs", "value": "keep-records", "n": 12, "of": 25, "label": "Rules that set how long records are kept" }, "vendors": [ { "name": "11 U.S.C. 332", "answers": { "jurisdiction": { "value": "us", "text": "the United States", "documents": [ { "document": "11 U.S. Code § 332, consumer privacy ombudsman (Cornell LII)", "url": "https://www.law.cornell.edu/uscode/text/11/332", "value": "us", "quote": "the court shall order the United States trustee to appoint, not later than 7 days before the commencement of the hearing, 1 disinterested person" } ] }, "governs": { "value": "sale-of-property", "text": "selling a business's property in insolvency or bankruptcy", "documents": [ { "document": "11 U.S. Code § 332, consumer privacy ombudsman (Cornell LII)", "url": "https://www.law.cornell.edu/uscode/text/11/332", "value": "sale-of-property", "quote": "conditions of the proposed sale or lease of personally identifiable information under section 363(b)(1)(B)" } ] }, "period": { "value": "no-period", "text": "no period", "documents": [ { "document": "11 U.S. Code § 332, consumer privacy ombudsman (Cornell LII)", "url": "https://www.law.cornell.edu/uscode/text/11/332", "value": "no-period", "quote": "The consumer privacy ombudsman may appear and be heard at such hearing and shall provide to the court information to assist the court" } ] }, "rule": { "value": "stated", "text": "The consumer privacy ombudsman may appear and be heard at such hearing and shall provide…", "documents": [ { "document": "11 U.S. Code § 332, consumer privacy ombudsman (Cornell LII)", "url": "https://www.law.cornell.edu/uscode/text/11/332", "value": "stated", "quote": "The consumer privacy ombudsman may appear and be heard at such hearing and shall provide to the court information to assist the court in its consideration of the facts, circumstances, and conditions of the proposed sale or lease of personally identifiable information under section 363(b)(1)(B)." } ] } } }, { "name": "11 U.S.C. 363", "answers": { "jurisdiction": { "value": "us", "text": "the United States", "documents": [ { "document": "11 U.S. Code § 363, use, sale, or lease of property (Cornell LII)", "url": "https://www.law.cornell.edu/uscode/text/11/363", "value": "us", "quote": "The trustee, after notice and a hearing, may use, sell, or lease, other than in the ordinary course of business, property of the estate" } ] }, "governs": { "value": "sale-of-property", "text": "selling a business's property in insolvency or bankruptcy", "documents": [ { "document": "11 U.S. Code § 363, use, sale, or lease of property (Cornell LII)", "url": "https://www.law.cornell.edu/uscode/text/11/363", "value": "sale-of-property", "quote": "The trustee, after notice and a hearing, may use, sell, or lease, other than in the ordinary course of business, property of the estate" } ] }, "period": { "value": "no-period", "text": "no period", "documents": [ { "document": "11 U.S. Code § 363, use, sale, or lease of property (Cornell LII)", "url": "https://www.law.cornell.edu/uscode/text/11/363", "value": "no-period", "quote": "then the trustee may not sell or lease personally identifiable information to any person unless" } ] }, "rule": { "value": "stated", "text": "then the trustee may not sell or lease personally identifiable information to any person……", "documents": [ { "document": "11 U.S. Code § 363, use, sale, or lease of property (Cornell LII)", "url": "https://www.law.cornell.edu/uscode/text/11/363", "value": "stated", "quote": "then the trustee may not sell or lease personally identifiable information to any person unless— (A) such sale or such lease is consistent with such policy; or (B) after appointment of a consumer privacy ombudsman in accordance with section 332, and after notice and a hearing, the court approves such sale or such lease" } ] } } }, { "name": "17 CFR 210.2-06", "answers": { "jurisdiction": { "value": "us", "text": "the United States", "documents": [ { "document": "17 CFR 210.2-06, retention of audit and review records (eCFR)", "url": "https://www.ecfr.gov/current/title-17/section-210.2-06", "value": "us", "quote": "section 10A(a) of the Securities Exchange Act of 1934 (15 U.S.C. 78j-1(a))" } ] }, "governs": { "value": "keep-records", "text": "how long records must be kept", "documents": [ { "document": "17 CFR 210.2-06, retention of audit and review records (eCFR)", "url": "https://www.ecfr.gov/current/title-17/section-210.2-06", "value": "keep-records", "quote": "the accountant shall retain records relevant to the audit or review, including workpapers and other documents that form the basis of the audit or review, and memoranda, correspondence, communications, other documents, and records (including electronic records)" } ] }, "period": { "value": "seven-years-or-more", "text": "seven years or more", "documents": [ { "document": "17 CFR 210.2-06, retention of audit and review records (eCFR)", "url": "https://www.ecfr.gov/current/title-17/section-210.2-06", "value": "seven-years-or-more", "quote": "For a period of seven years after an accountant concludes an audit or review of an issuer's financial statements" } ] }, "rule": { "value": "stated", "text": "Memoranda, correspondence, communications, other documents, and records (including…", "documents": [ { "document": "17 CFR 210.2-06, retention of audit and review records (eCFR)", "url": "https://www.ecfr.gov/current/title-17/section-210.2-06", "value": "stated", "quote": "Memoranda, correspondence, communications, other documents, and records (including electronic records) described in paragraph (a) of this section shall be retained whether they support the auditor's final conclusions regarding the audit or review" } ] } } }, { "name": "17 CFR 240.17a-3", "answers": { "jurisdiction": { "value": "us", "text": "the United States", "documents": [ { "document": "17 CFR 240.17a-3, records to be made by brokers and dealers (eCFR)", "url": "https://www.ecfr.gov/current/title-17/section-240.17a-3", "value": "us", "quote": "registered pursuant to section 15 of the Act (15 U.S.C. 78o)" } ] }, "governs": { "value": "keep-records", "text": "how long records must be kept", "documents": [ { "document": "17 CFR 240.17a-3, records to be made by brokers and dealers (eCFR)", "url": "https://www.ecfr.gov/current/title-17/section-240.17a-3", "value": "keep-records", "quote": "must make and keep current the following books and records relating to its business" } ] }, "period": { "value": "no-period", "text": "no period", "documents": [ { "document": "17 CFR 240.17a-3, records to be made by brokers and dealers (eCFR)", "url": "https://www.ecfr.gov/current/title-17/section-240.17a-3", "value": "no-period", "quote": "must make and keep current the following books and records relating to its business" } ] }, "rule": { "value": "stated", "text": "every broker or dealer registered pursuant to section 15 of the Act (15 U.S.C. 78o) must…", "documents": [ { "document": "17 CFR 240.17a-3, records to be made by brokers and dealers (eCFR)", "url": "https://www.ecfr.gov/current/title-17/section-240.17a-3", "value": "stated", "quote": "every broker or dealer registered pursuant to section 15 of the Act (15 U.S.C. 78o) must make and keep current the following books and records relating to its business" } ] } } }, { "name": "17 CFR 240.17a-4", "answers": { "jurisdiction": { "value": "us", "text": "the United States", "documents": [ { "document": "17 CFR 240.17a-4, records to be preserved by brokers and dealers (eCFR)", "url": "https://www.ecfr.gov/current/title-17/section-240.17a-4", "value": "us", "quote": "registered pursuant to section 15 of the Act (15 U.S.C. 78o)" } ] }, "governs": { "value": "keep-records", "text": "how long records must be kept", "documents": [ { "document": "17 CFR 240.17a-4, records to be preserved by brokers and dealers (eCFR)", "url": "https://www.ecfr.gov/current/title-17/section-240.17a-4", "value": "keep-records", "quote": "Originals of all communications received and copies of all communications sent (and any approvals thereof) by the member, broker or dealer (including inter-office memoranda and communications) relating to its business as such" } ] }, "period": { "value": "three-to-five-years", "text": "three to five years", "documents": [ { "document": "17 CFR 240.17a-4, records to be preserved by brokers and dealers (eCFR)", "url": "https://www.ecfr.gov/current/title-17/section-240.17a-4", "value": "three-to-five-years", "quote": "Every member, broker or dealer subject to § 240.17a-3 must preserve for a period of not less than three years, the first two years in an easily accessible place" } ] }, "rule": { "value": "stated", "text": "Every member, broker or dealer subject to § 240.17a-3 must preserve for a period of not…", "documents": [ { "document": "17 CFR 240.17a-4, records to be preserved by brokers and dealers (eCFR)", "url": "https://www.ecfr.gov/current/title-17/section-240.17a-4", "value": "stated", "quote": "Every member, broker or dealer subject to § 240.17a-3 must preserve for a period of not less than three years, the first two years in an easily accessible place" } ] } } }, { "name": "17 CFR 275.204-2", "answers": { "jurisdiction": { "value": "us", "text": "the United States", "documents": [ { "document": "17 CFR 275.204-2, books and records of investment advisers (eCFR)", "url": "https://www.ecfr.gov/current/title-17/section-275.204-2", "value": "us", "quote": "required to be registered under section 203 of the Act (15 U.S.C. 80b-3)" } ] }, "governs": { "value": "keep-records", "text": "how long records must be kept", "documents": [ { "document": "17 CFR 275.204-2, books and records of investment advisers (eCFR)", "url": "https://www.ecfr.gov/current/title-17/section-275.204-2", "value": "keep-records", "quote": "Originals of all written communications received and copies of all written communications sent by such investment adviser relating to" } ] }, "period": { "value": "three-to-five-years", "text": "three to five years", "documents": [ { "document": "17 CFR 275.204-2, books and records of investment advisers (eCFR)", "url": "https://www.ecfr.gov/current/title-17/section-275.204-2", "value": "three-to-five-years", "quote": "shall be maintained and preserved in an easily accessible place for a period of not less than five years from the end of the fiscal year during which the last entry was made on such record" } ] }, "rule": { "value": "stated", "text": "shall be maintained and preserved in an easily accessible place for a period of not less…", "documents": [ { "document": "17 CFR 275.204-2, books and records of investment advisers (eCFR)", "url": "https://www.ecfr.gov/current/title-17/section-275.204-2", "value": "stated", "quote": "shall be maintained and preserved in an easily accessible place for a period of not less than five years from the end of the fiscal year during which the last entry was made on such record" } ] } } }, { "name": "18 U.S.C. 2511", "answers": { "jurisdiction": { "value": "us", "text": "the United States", "documents": [ { "document": "18 U.S. Code § 2511, interception and disclosure of communications (Cornell LII)", "url": "https://www.law.cornell.edu/uscode/text/18/2511", "value": "us", "quote": "in violation of the Constitution or laws of the United States or of any State" } ] }, "governs": { "value": "limits-disclosure", "text": "when stored communications may be disclosed or intercepted", "documents": [ { "document": "18 U.S. Code § 2511, interception and disclosure of communications (Cornell LII)", "url": "https://www.law.cornell.edu/uscode/text/18/2511", "value": "limits-disclosure", "quote": "intentionally intercepts, endeavors to intercept, or procures any other person to intercept or endeavor to intercept, any wire, oral, or electronic communication" } ] }, "period": { "value": "no-period", "text": "no period", "documents": [ { "document": "18 U.S. Code § 2511, interception and disclosure of communications (Cornell LII)", "url": "https://www.law.cornell.edu/uscode/text/18/2511", "value": "no-period", "quote": "intentionally intercepts, endeavors to intercept, or procures any other person to intercept or endeavor to intercept, any wire, oral, or electronic communication" } ] }, "rule": { "value": "stated", "text": "It shall not be unlawful under this chapter for a person not acting under color of law to…", "documents": [ { "document": "18 U.S. Code § 2511, interception and disclosure of communications (Cornell LII)", "url": "https://www.law.cornell.edu/uscode/text/18/2511", "value": "stated", "quote": "It shall not be unlawful under this chapter for a person not acting under color of law to intercept a wire, oral, or electronic communication where such person is a party to the communication or where one of the parties to the communication has given prior consent to such interception" } ] } } }, { "name": "18 U.S.C. 2702", "answers": { "jurisdiction": { "value": "us", "text": "the United States", "documents": [ { "document": "18 U.S. Code § 2702, voluntary disclosure of customer communications or records (Cornell LII)", "url": "https://www.law.cornell.edu/uscode/text/18/2702", "value": "us", "quote": "18 U.S. Code § 2702 - Voluntary disclosure of customer communications or records" } ] }, "governs": { "value": "limits-disclosure", "text": "when stored communications may be disclosed or intercepted", "documents": [ { "document": "18 U.S. Code § 2702, voluntary disclosure of customer communications or records (Cornell LII)", "url": "https://www.law.cornell.edu/uscode/text/18/2702", "value": "limits-disclosure", "quote": "a person or entity providing an electronic communication service to the public shall not knowingly divulge to any person or entity the contents of a communication while in electronic storage by that service" } ] }, "period": { "value": "no-period", "text": "no period", "documents": [ { "document": "18 U.S. Code § 2702, voluntary disclosure of customer communications or records (Cornell LII)", "url": "https://www.law.cornell.edu/uscode/text/18/2702", "value": "no-period", "quote": "a person or entity providing an electronic communication service to the public shall not knowingly divulge to any person or entity the contents of a communication while in electronic storage by that service" } ] }, "rule": { "value": "stated", "text": "with the lawful consent of the originator or an addressee or intended recipient of such…", "documents": [ { "document": "18 U.S. Code § 2702, voluntary disclosure of customer communications or records (Cornell LII)", "url": "https://www.law.cornell.edu/uscode/text/18/2702", "value": "stated", "quote": "with the lawful consent of the originator or an addressee or intended recipient of such communication, or the subscriber in the case of remote computing service" } ] } } }, { "name": "26 CFR 1.6001-1", "answers": { "jurisdiction": { "value": "us", "text": "the United States", "documents": [ { "document": "26 CFR 1.6001-1, records (eCFR)", "url": "https://www.ecfr.gov/current/title-26/section-1.6001-1", "value": "us", "quote": "shall be kept at all times available for inspection by authorized internal revenue officers or employees" } ] }, "governs": { "value": "keep-records", "text": "how long records must be kept", "documents": [ { "document": "26 CFR 1.6001-1, records (eCFR)", "url": "https://www.ecfr.gov/current/title-26/section-1.6001-1", "value": "keep-records", "quote": "shall keep such permanent books of account or records, including inventories, as are sufficient to establish the amount of gross income, deductions, credits, or other matters required to be shown by such person in any return of such tax or information." } ] }, "period": { "value": "no-period", "text": "no period", "documents": [ { "document": "26 CFR 1.6001-1, records (eCFR)", "url": "https://www.ecfr.gov/current/title-26/section-1.6001-1", "value": "no-period", "quote": "shall be retained so long as the contents thereof may become material in the administration of any internal revenue law." } ] }, "rule": { "value": "stated", "text": "The books or records required by this section shall be kept at all times available for…", "documents": [ { "document": "26 CFR 1.6001-1, records (eCFR)", "url": "https://www.ecfr.gov/current/title-26/section-1.6001-1", "value": "stated", "quote": "The books or records required by this section shall be kept at all times available for inspection by authorized internal revenue officers or employees, and shall be retained so long as the contents thereof may become material in the administration of any internal revenue law." } ] } } }, { "name": "29 CFR 1602.14", "answers": { "jurisdiction": { "value": "us", "text": "the United States", "documents": [ { "document": "29 CFR 1602.14, preservation of records made or kept (eCFR)", "url": "https://www.ecfr.gov/current/title-29/section-1602.14", "value": "us", "quote": "the statutory period within which the aggrieved person may bring an action in a U.S. District Court" } ] }, "governs": { "value": "keep-records", "text": "how long records must be kept", "documents": [ { "document": "29 CFR 1602.14, preservation of records made or kept (eCFR)", "url": "https://www.ecfr.gov/current/title-29/section-1602.14", "value": "keep-records", "quote": "shall be preserved by the employer for a period of one year from the date of the making of the record or the personnel action involved, whichever occurs later." } ] }, "period": { "value": "under-three-years", "text": "under three years", "documents": [ { "document": "29 CFR 1602.14, preservation of records made or kept (eCFR)", "url": "https://www.ecfr.gov/current/title-29/section-1602.14", "value": "under-three-years", "quote": "shall be preserved by the employer for a period of one year from the date of the making of the record or the personnel action involved, whichever occurs later." } ] }, "rule": { "value": "stated", "text": "Any personnel or employment record made or kept by an employer (including but not…", "documents": [ { "document": "29 CFR 1602.14, preservation of records made or kept (eCFR)", "url": "https://www.ecfr.gov/current/title-29/section-1602.14", "value": "stated", "quote": "Any personnel or employment record made or kept by an employer (including but not necessarily limited to requests for reasonable accommodation, application forms submitted by applicants and other records having to do with hiring, promotion, demotion, transfer, lay-off or termination, rates of pay or other terms of compensation, and selection for training or apprenticeship) shall be preserved by the employer for a period of one year from the date of the making of the record or the personnel action involved, whichever occurs later." } ] } } }, { "name": "45 CFR 164.316", "answers": { "jurisdiction": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "45 CFR 164.316, policies and procedures and documentation requirements (eCFR)", "url": "https://www.ecfr.gov/current/title-45/section-164.316", "value": "not-stated", "quote": "" } ] }, "governs": { "value": "keep-records", "text": "how long records must be kept", "documents": [ { "document": "45 CFR 164.316, policies and procedures and documentation requirements (eCFR)", "url": "https://www.ecfr.gov/current/title-45/section-164.316", "value": "keep-records", "quote": "Retain the documentation required by paragraph (b)(1) of this section for 6 years from the date of its creation or the date when it last was in effect, whichever is later." } ] }, "period": { "value": "six-years", "text": "six years", "documents": [ { "document": "45 CFR 164.316, policies and procedures and documentation requirements (eCFR)", "url": "https://www.ecfr.gov/current/title-45/section-164.316", "value": "six-years", "quote": "Retain the documentation required by paragraph (b)(1) of this section for 6 years from the date of its creation or the date when it last was in effect, whichever is later." } ] }, "rule": { "value": "stated", "text": "Retain the documentation required by paragraph (b)(1) of this section for 6 years from…", "documents": [ { "document": "45 CFR 164.316, policies and procedures and documentation requirements (eCFR)", "url": "https://www.ecfr.gov/current/title-45/section-164.316", "value": "stated", "quote": "Retain the documentation required by paragraph (b)(1) of this section for 6 years from the date of its creation or the date when it last was in effect, whichever is later." } ] } } }, { "name": "Companies Act 2006, s388", "answers": { "jurisdiction": { "value": "gb", "text": "the United Kingdom", "documents": [ { "document": "Companies Act 2006, section 388 (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/2006/46/section/388", "value": "gb", "quote": "must be sent to, and kept at, a place in the United Kingdom, and must at all times be open to such inspection" } ] }, "governs": { "value": "keep-records", "text": "how long records must be kept", "documents": [ { "document": "Companies Act 2006, section 388 (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/2006/46/section/388", "value": "keep-records", "quote": "Accounting records that a company is required by section 386 to keep must be preserved by it" } ] }, "period": { "value": "three-to-five-years", "text": "three to five years", "documents": [ { "document": "Companies Act 2006, section 388 (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/2006/46/section/388", "value": "three-to-five-years", "quote": "in the case of a private company, for three years from the date on which they are made" } ] }, "rule": { "value": "stated", "text": "Accounting records that a company is required by section 386 to keep must be preserved by……", "documents": [ { "document": "Companies Act 2006, section 388 (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/2006/46/section/388", "value": "stated", "quote": "Accounting records that a company is required by section 386 to keep must be preserved by it— (a) in the case of a private company, for three years from the date on which they are made; (b) in the case of a public company, for six years from the date on which they are made." } ] } } }, { "name": "Data Protection Act 2018, s170", "answers": { "jurisdiction": { "value": "gb", "text": "the United Kingdom", "documents": [ { "document": "Data Protection Act 2018, section 170, unlawful obtaining of personal data (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/170", "value": "gb", "quote": "Data Protection Act 2018 You are here: UK Public General Acts 2018 c. 12" } ] }, "governs": { "value": "personal-data", "text": "the personal data in the records", "documents": [ { "document": "Data Protection Act 2018, section 170, unlawful obtaining of personal data (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/170", "value": "personal-data", "quote": "to obtain or disclose personal data without the consent of the controller" } ] }, "period": { "value": "no-period", "text": "no period", "documents": [ { "document": "Data Protection Act 2018, section 170, unlawful obtaining of personal data (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/170", "value": "no-period", "quote": "It is an offence for a person knowingly or recklessly— (a) to obtain or disclose personal data without the consent of the controller" } ] }, "rule": { "value": "stated", "text": "It is an offence for a person knowingly or recklessly…", "documents": [ { "document": "Data Protection Act 2018, section 170, unlawful obtaining of personal data (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/170", "value": "stated", "quote": "It is an offence for a person knowingly or recklessly— (a) to obtain or disclose personal data without the consent of the controller, (b) to procure the disclosure of personal data to another person without the consent of the controller, or (c) after obtaining personal data, to retain it without the consent of the person who was the controller in relation to the personal data when it was obtained." } ] } } }, { "name": "FCA SYSC 9.1", "answers": { "jurisdiction": { "value": "gb", "text": "the United Kingdom", "documents": [ { "document": "FCA Handbook, SYSC 9.1 general rules on record-keeping", "url": "https://www.handbook.fca.org.uk/handbook/SYSC/9/1.html", "value": "gb", "quote": "which must be sufficient to enable the FCA to monitor the firm's compliance with the requirements under the regulatory system" } ] }, "governs": { "value": "keep-records", "text": "how long records must be kept", "documents": [ { "document": "FCA Handbook, SYSC 9.1 general rules on record-keeping", "url": "https://www.handbook.fca.org.uk/handbook/SYSC/9/1.html", "value": "keep-records", "quote": "must arrange for orderly records to be kept of its business and internal organisation, including all services and transactions undertaken by it" } ] }, "period": { "value": "three-to-five-years", "text": "three to five years", "documents": [ { "document": "FCA Handbook, SYSC 9.1 general rules on record-keeping", "url": "https://www.handbook.fca.org.uk/handbook/SYSC/9/1.html", "value": "three-to-five-years", "quote": "A common platform firm must retain all records kept by it under this chapter in relation to its MiFID business for a period of at least five years." } ] }, "rule": { "value": "stated", "text": "A common platform firm must retain all records kept by it under this chapter in relation…", "documents": [ { "document": "FCA Handbook, SYSC 9.1 general rules on record-keeping", "url": "https://www.handbook.fca.org.uk/handbook/SYSC/9/1.html", "value": "stated", "quote": "A common platform firm must retain all records kept by it under this chapter in relation to its MiFID business for a period of at least five years." } ] } } }, { "name": "FINRA Rule 4511", "answers": { "jurisdiction": { "value": "us", "text": "the United States", "documents": [ { "document": "FINRA Rule 4511, general requirements", "url": "https://www.finra.org/rules-guidance/rulebooks/finra-rules/4511", "value": "us", "quote": "Members shall make and preserve books and records as required under the FINRA rules, the Exchange Act and the applicable Exchange Act rules." } ] }, "governs": { "value": "keep-records", "text": "how long records must be kept", "documents": [ { "document": "FINRA Rule 4511, general requirements", "url": "https://www.finra.org/rules-guidance/rulebooks/finra-rules/4511", "value": "keep-records", "quote": "Members shall make and preserve books and records as required under the FINRA rules, the Exchange Act and the applicable Exchange Act rules." } ] }, "period": { "value": "six-years", "text": "six years", "documents": [ { "document": "FINRA Rule 4511, general requirements", "url": "https://www.finra.org/rules-guidance/rulebooks/finra-rules/4511", "value": "six-years", "quote": "Members shall preserve for a period of at least six years those FINRA books and records for which there is no specified period under the FINRA rules or applicable Exchange Act rules." } ] }, "rule": { "value": "stated", "text": "Members shall preserve for a period of at least six years those FINRA books and records…", "documents": [ { "document": "FINRA Rule 4511, general requirements", "url": "https://www.finra.org/rules-guidance/rulebooks/finra-rules/4511", "value": "stated", "quote": "Members shall preserve for a period of at least six years those FINRA books and records for which there is no specified period under the FINRA rules or applicable Exchange Act rules." } ] } } }, { "name": "HMRC company records guidance (GOV.UK)", "answers": { "jurisdiction": { "value": "gb", "text": "the United Kingdom", "documents": [ { "document": "GOV.UK, Running a limited company: company and accounting records", "url": "https://www.gov.uk/running-a-limited-company/company-and-accounting-records", "value": "gb", "quote": "HM Revenue and Customs (HMRC) may check your records with a compliance check to make sure you’re paying the right amount of tax." } ] }, "governs": { "value": "keep-records", "text": "how long records must be kept", "documents": [ { "document": "GOV.UK, Running a limited company: company and accounting records", "url": "https://www.gov.uk/running-a-limited-company/company-and-accounting-records", "value": "keep-records", "quote": "You must keep records for 6 years from the end of the last company financial year they relate to" } ] }, "period": { "value": "six-years", "text": "six years", "documents": [ { "document": "GOV.UK, Running a limited company: company and accounting records", "url": "https://www.gov.uk/running-a-limited-company/company-and-accounting-records", "value": "six-years", "quote": "You must keep records for 6 years from the end of the last company financial year they relate to" } ] }, "rule": { "value": "stated", "text": "This includes records of: all money spent by the company, for example receipts, petty…", "documents": [ { "document": "GOV.UK, Running a limited company: company and accounting records", "url": "https://www.gov.uk/running-a-limited-company/company-and-accounting-records", "value": "stated", "quote": "This includes records of: all money spent by the company, for example receipts, petty cash books, orders and delivery notes all money received by the company, for example invoices, contracts, sales books and till rolls any other relevant documents, for example bank statements and correspondence" } ] } } }, { "name": "HMRC VAT Notice 700/21", "answers": { "jurisdiction": { "value": "gb", "text": "the United Kingdom", "documents": [ { "document": "HMRC, VAT Notice 700/21: record keeping", "url": "https://www.gov.uk/guidance/record-keeping-for-vat-notice-70021", "value": "gb", "quote": "This notice gives guidance on the records you must keep if" } ] }, "governs": { "value": "keep-records", "text": "how long records must be kept", "documents": [ { "document": "HMRC, VAT Notice 700/21: record keeping", "url": "https://www.gov.uk/guidance/record-keeping-for-vat-notice-70021", "value": "keep-records", "quote": "Generally, you must keep all your business records for VAT purposes for at least 6 years." } ] }, "period": { "value": "six-years", "text": "six years", "documents": [ { "document": "HMRC, VAT Notice 700/21: record keeping", "url": "https://www.gov.uk/guidance/record-keeping-for-vat-notice-70021", "value": "six-years", "quote": "Generally, you must keep all your business records for VAT purposes for at least 6 years." } ] }, "rule": { "value": "stated", "text": "Generally, you must keep all your business records for VAT purposes for at least 6 years.…", "documents": [ { "document": "HMRC, VAT Notice 700/21: record keeping", "url": "https://www.gov.uk/guidance/record-keeping-for-vat-notice-70021", "value": "stated", "quote": "Generally, you must keep all your business records for VAT purposes for at least 6 years. Records that you use for other tax purposes may need to be kept for longer periods." } ] } } }, { "name": "ICO guide to lawful basis", "answers": { "jurisdiction": { "value": "gb", "text": "the United Kingdom", "documents": [ { "document": "ICO, A guide to lawful basis", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/a-guide-to-lawful-basis/", "value": "gb", "quote": "The lawful bases are set out in article 6 of the UK GDPR." } ] }, "governs": { "value": "personal-data", "text": "the personal data in the records", "documents": [ { "document": "ICO, A guide to lawful basis", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/a-guide-to-lawful-basis/", "value": "personal-data", "quote": "You must have a valid lawful basis to handle personal information." } ] }, "period": { "value": "no-period", "text": "no period", "documents": [ { "document": "ICO, A guide to lawful basis", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/a-guide-to-lawful-basis/", "value": "no-period", "quote": "You must determine your lawful basis before you start using the personal information and you must document it." } ] }, "rule": { "value": "stated", "text": "You must determine your lawful basis before you start using the personal information and…", "documents": [ { "document": "ICO, A guide to lawful basis", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/a-guide-to-lawful-basis/", "value": "stated", "quote": "You must determine your lawful basis before you start using the personal information and you must document it." } ] } } }, { "name": "Insolvency Act 1986, Sch 1", "answers": { "jurisdiction": { "value": "gb", "text": "the United Kingdom", "documents": [ { "document": "Insolvency Act 1986, Schedule 1, powers of administrator or administrative receiver (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/1", "value": "gb", "quote": "Insolvency Act 1986 You are here: UK Public General Acts 1986 c. 45" } ] }, "governs": { "value": "sale-of-property", "text": "selling a business's property in insolvency or bankruptcy", "documents": [ { "document": "Insolvency Act 1986, Schedule 1, powers of administrator or administrative receiver (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/1", "value": "sale-of-property", "quote": "Power to sell or otherwise dispose of the property of the company by public auction or private contract" } ] }, "period": { "value": "no-period", "text": "no period", "documents": [ { "document": "Insolvency Act 1986, Schedule 1, powers of administrator or administrative receiver (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/1", "value": "no-period", "quote": "Power to sell or otherwise dispose of the property of the company by public auction or private contract" } ] }, "rule": { "value": "stated", "text": "Power to sell or otherwise dispose of the property of the company by public auction or…", "documents": [ { "document": "Insolvency Act 1986, Schedule 1, powers of administrator or administrative receiver (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/1", "value": "stated", "quote": "Power to sell or otherwise dispose of the property of the company by public auction or private contract" } ] } } }, { "name": "Insolvency Act 1986, Sch B1 para 60", "answers": { "jurisdiction": { "value": "gb", "text": "the United Kingdom", "documents": [ { "document": "Insolvency Act 1986, Schedule B1, paragraph 60 (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/B1/paragraph/60", "value": "gb", "quote": "Insolvency Act 1986 You are here: UK Public General Acts1986 c. 45" } ] }, "governs": { "value": "sale-of-property", "text": "selling a business's property in insolvency or bankruptcy", "documents": [ { "document": "Insolvency Act 1986, Schedule B1, paragraph 60 (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/B1/paragraph/60", "value": "sale-of-property", "quote": "But the power to sell, hire out or otherwise dispose of property is subject to any regulations that may be made under paragraph 60A." } ] }, "period": { "value": "no-period", "text": "no period", "documents": [ { "document": "Insolvency Act 1986, Schedule B1, paragraph 60 (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/B1/paragraph/60", "value": "no-period", "quote": "The administrator of a company has the powers specified in Schedule 1 to this Act." } ] }, "rule": { "value": "stated", "text": "The administrator of a company has the powers specified in Schedule 1 to this Act.", "documents": [ { "document": "Insolvency Act 1986, Schedule B1, paragraph 60 (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/B1/paragraph/60", "value": "stated", "quote": "The administrator of a company has the powers specified in Schedule 1 to this Act." } ] } } }, { "name": "Investigatory Powers Act 2016, s3", "answers": { "jurisdiction": { "value": "gb", "text": "the United Kingdom", "documents": [ { "document": "Investigatory Powers Act 2016, section 3, offence of unlawful interception (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/2016/25/section/3", "value": "gb", "quote": "the interception is carried out in the United Kingdom" } ] }, "governs": { "value": "limits-disclosure", "text": "when stored communications may be disclosed or intercepted", "documents": [ { "document": "Investigatory Powers Act 2016, section 3, offence of unlawful interception (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/2016/25/section/3", "value": "limits-disclosure", "quote": "the person intentionally intercepts a communication in the course of its transmission by means of" } ] }, "period": { "value": "no-period", "text": "no period", "documents": [ { "document": "Investigatory Powers Act 2016, section 3, offence of unlawful interception (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/2016/25/section/3", "value": "no-period", "quote": "the person intentionally intercepts a communication in the course of its transmission by means of" } ] }, "rule": { "value": "stated", "text": "But it is not an offence under subsection (1) for a person to intercept a communication……", "documents": [ { "document": "Investigatory Powers Act 2016, section 3, offence of unlawful interception (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/2016/25/section/3", "value": "stated", "quote": "But it is not an offence under subsection (1) for a person to intercept a communication in the course of its transmission by means of a private telecommunication system if the person— (a) is a person with a right to control the operation or use of the system, or (b) has the express or implied consent of such a person to carry out the interception." } ] } } }, { "name": "Limitation Act 1980, s5", "answers": { "jurisdiction": { "value": "gb", "text": "the United Kingdom", "documents": [ { "document": "Limitation Act 1980, section 5 (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/1980/58/section/5", "value": "gb", "quote": "Limitation Act 1980 You are here: UK Public General Acts 1980 c. 58" } ] }, "governs": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "Limitation Act 1980, section 5 (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/1980/58/section/5", "value": "not-stated", "quote": "" } ] }, "period": { "value": "six-years", "text": "six years", "documents": [ { "document": "Limitation Act 1980, section 5 (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/1980/58/section/5", "value": "six-years", "quote": "An action founded on simple contract shall not be brought after the expiration of six years from the date on which the cause of action accrued." } ] }, "rule": { "value": "stated", "text": "An action founded on simple contract shall not be brought after the expiration of six…", "documents": [ { "document": "Limitation Act 1980, section 5 (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/ukpga/1980/58/section/5", "value": "stated", "quote": "An action founded on simple contract shall not be brought after the expiration of six years from the date on which the cause of action accrued." } ] } } }, { "name": "UK GDPR, art. 14", "answers": { "jurisdiction": { "value": "gb", "text": "the United Kingdom", "documents": [ { "document": "UK GDPR, Article 14, information where data not obtained from the data subject (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/eur/2016/679/article/14", "value": "gb", "quote": "There are currently no known outstanding effects by UK legislation for Regulation (EU) 2016/679 of the European Parliament and of the Council, Article 14." } ] }, "governs": { "value": "personal-data", "text": "the personal data in the records", "documents": [ { "document": "UK GDPR, Article 14, information where data not obtained from the data subject (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/eur/2016/679/article/14", "value": "personal-data", "quote": "Where personal data have not been obtained from the data subject, the controller shall provide the data subject with the following information" } ] }, "period": { "value": "no-period", "text": "no period", "documents": [ { "document": "UK GDPR, Article 14, information where data not obtained from the data subject (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/eur/2016/679/article/14", "value": "no-period", "quote": "Where personal data have not been obtained from the data subject, the controller shall provide the data subject with the following information" } ] }, "rule": { "value": "stated", "text": "within a reasonable period after obtaining the personal data, but at the latest within…", "documents": [ { "document": "UK GDPR, Article 14, information where data not obtained from the data subject (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/eur/2016/679/article/14", "value": "stated", "quote": "within a reasonable period after obtaining the personal data, but at the latest within one month, having regard to the specific circumstances in which the personal data are processed" } ] } } }, { "name": "UK GDPR, art. 5", "answers": { "jurisdiction": { "value": "gb", "text": "the United Kingdom", "documents": [ { "document": "UK GDPR, Article 5, principles relating to processing of personal data (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/eur/2016/679/article/5", "value": "gb", "quote": "There are currently no known outstanding effects by UK legislation for Regulation (EU) 2016/679 of the European Parliament and of the Council, Article 5." } ] }, "governs": { "value": "personal-data", "text": "the personal data in the records", "documents": [ { "document": "UK GDPR, Article 5, principles relating to processing of personal data (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/eur/2016/679/article/5", "value": "personal-data", "quote": "kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed" } ] }, "period": { "value": "no-period", "text": "no period", "documents": [ { "document": "UK GDPR, Article 5, principles relating to processing of personal data (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/eur/2016/679/article/5", "value": "no-period", "quote": "kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed" } ] }, "rule": { "value": "stated", "text": "kept in a form which permits identification of data subjects for no longer than is…", "documents": [ { "document": "UK GDPR, Article 5, principles relating to processing of personal data (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/eur/2016/679/article/5", "value": "stated", "quote": "kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes" } ] } } }, { "name": "UK GDPR, art. 6", "answers": { "jurisdiction": { "value": "gb", "text": "the United Kingdom", "documents": [ { "document": "UK GDPR, Article 6, lawfulness of processing (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/eur/2016/679/article/6", "value": "gb", "quote": "There are currently no known outstanding effects by UK legislation for Regulation (EU) 2016/679 of the European Parliament and of the Council, Article 6." } ] }, "governs": { "value": "personal-data", "text": "the personal data in the records", "documents": [ { "document": "UK GDPR, Article 6, lawfulness of processing (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/eur/2016/679/article/6", "value": "personal-data", "quote": "Processing shall be lawful only if and to the extent that at least one of the following applies" } ] }, "period": { "value": "no-period", "text": "no period", "documents": [ { "document": "UK GDPR, Article 6, lawfulness of processing (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/eur/2016/679/article/6", "value": "no-period", "quote": "Processing shall be lawful only if and to the extent that at least one of the following applies" } ] }, "rule": { "value": "stated", "text": "Processing shall be lawful only if and to the extent that at least one of the following…", "documents": [ { "document": "UK GDPR, Article 6, lawfulness of processing (legislation.gov.uk)", "url": "https://www.legislation.gov.uk/eur/2016/679/article/6", "value": "stated", "quote": "Processing shall be lawful only if and to the extent that at least one of the following applies: (a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes" } ] } } } ] }, "subject_kind": "rule", "rows": [ { "subject": "11 U.S.C. 332", "url": "https://www.law.cornell.edu/uscode/text/11/332", "document": "11 U.S. Code § 332, consumer privacy ombudsman (Cornell LII)", "question": "jurisdiction", "answer": "us", "answer_text": "the United States", "status": "stated", "retrieved_at": "2026-10-08", "quote": "the court shall order the United States trustee to appoint, not later than 7 days before the commencement of the hearing, 1 disinterested person", "text_sha256": "1bb3a91530d97ef6bb3f891292c15c195d66dc3e718430baa91bf2481938d6b8" }, { "subject": "11 U.S.C. 332", "url": "https://www.law.cornell.edu/uscode/text/11/332", "document": "11 U.S. Code § 332, consumer privacy ombudsman (Cornell LII)", "question": "governs", "answer": "sale-of-property", "answer_text": "selling a business's property in insolvency or bankruptcy", "status": "stated", "retrieved_at": "2026-10-08", "quote": "conditions of the proposed sale or lease of personally identifiable information under section 363(b)(1)(B)", "text_sha256": "1bb3a91530d97ef6bb3f891292c15c195d66dc3e718430baa91bf2481938d6b8" }, { "subject": "11 U.S.C. 332", "url": "https://www.law.cornell.edu/uscode/text/11/332", "document": "11 U.S. Code § 332, consumer privacy ombudsman (Cornell LII)", "question": "period", "answer": "no-period", "answer_text": "no period", "status": "stated", "retrieved_at": "2026-10-08", "quote": "The consumer privacy ombudsman may appear and be heard at such hearing and shall provide to the court information to assist the court", "text_sha256": "1bb3a91530d97ef6bb3f891292c15c195d66dc3e718430baa91bf2481938d6b8" }, { "subject": "11 U.S.C. 332", "url": "https://www.law.cornell.edu/uscode/text/11/332", "document": "11 U.S. Code § 332, consumer privacy ombudsman (Cornell LII)", "question": "rule", "answer": "stated", "answer_text": "The consumer privacy ombudsman may appear and be heard at such hearing and shall provide…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "The consumer privacy ombudsman may appear and be heard at such hearing and shall provide to the court information to assist the court in its consideration of the facts, circumstances, and conditions of the proposed sale or lease of personally identifiable information under section 363(b)(1)(B).", "text_sha256": "1bb3a91530d97ef6bb3f891292c15c195d66dc3e718430baa91bf2481938d6b8" }, { "subject": "11 U.S.C. 363", "url": "https://www.law.cornell.edu/uscode/text/11/363", "document": "11 U.S. Code § 363, use, sale, or lease of property (Cornell LII)", "question": "jurisdiction", "answer": "us", "answer_text": "the United States", "status": "stated", "retrieved_at": "2026-10-08", "quote": "The trustee, after notice and a hearing, may use, sell, or lease, other than in the ordinary course of business, property of the estate", "text_sha256": "f3a43b14cba78eb9942855de6148ad677a67ef14fb154add1c957c39a846cc08" }, { "subject": "11 U.S.C. 363", "url": "https://www.law.cornell.edu/uscode/text/11/363", "document": "11 U.S. Code § 363, use, sale, or lease of property (Cornell LII)", "question": "governs", "answer": "sale-of-property", "answer_text": "selling a business's property in insolvency or bankruptcy", "status": "stated", "retrieved_at": "2026-10-08", "quote": "The trustee, after notice and a hearing, may use, sell, or lease, other than in the ordinary course of business, property of the estate", "text_sha256": "f3a43b14cba78eb9942855de6148ad677a67ef14fb154add1c957c39a846cc08" }, { "subject": "11 U.S.C. 363", "url": "https://www.law.cornell.edu/uscode/text/11/363", "document": "11 U.S. Code § 363, use, sale, or lease of property (Cornell LII)", "question": "period", "answer": "no-period", "answer_text": "no period", "status": "stated", "retrieved_at": "2026-10-08", "quote": "then the trustee may not sell or lease personally identifiable information to any person unless", "text_sha256": "f3a43b14cba78eb9942855de6148ad677a67ef14fb154add1c957c39a846cc08" }, { "subject": "11 U.S.C. 363", "url": "https://www.law.cornell.edu/uscode/text/11/363", "document": "11 U.S. Code § 363, use, sale, or lease of property (Cornell LII)", "question": "rule", "answer": "stated", "answer_text": "then the trustee may not sell or lease personally identifiable information to any person……", "status": "stated", "retrieved_at": "2026-10-08", "quote": "then the trustee may not sell or lease personally identifiable information to any person unless— (A) such sale or such lease is consistent with such policy; or (B) after appointment of a consumer privacy ombudsman in accordance with section 332, and after notice and a hearing, the court approves such sale or such lease", "text_sha256": "f3a43b14cba78eb9942855de6148ad677a67ef14fb154add1c957c39a846cc08" }, { "subject": "17 CFR 210.2-06", "url": "https://www.ecfr.gov/current/title-17/section-210.2-06", "document": "17 CFR 210.2-06, retention of audit and review records (eCFR)", "question": "jurisdiction", "answer": "us", "answer_text": "the United States", "status": "stated", "retrieved_at": "2026-10-28", "quote": "section 10A(a) of the Securities Exchange Act of 1934 (15 U.S.C. 78j-1(a))", "text_sha256": "586f771ed98be87305902a197e13cb9a70656255fda2172afdeade04f8194199" }, { "subject": "17 CFR 210.2-06", "url": "https://www.ecfr.gov/current/title-17/section-210.2-06", "document": "17 CFR 210.2-06, retention of audit and review records (eCFR)", "question": "governs", "answer": "keep-records", "answer_text": "how long records must be kept", "status": "stated", "retrieved_at": "2026-10-28", "quote": "the accountant shall retain records relevant to the audit or review, including workpapers and other documents that form the basis of the audit or review, and memoranda, correspondence, communications, other documents, and records (including electronic records)", "text_sha256": "586f771ed98be87305902a197e13cb9a70656255fda2172afdeade04f8194199" }, { "subject": "17 CFR 210.2-06", "url": "https://www.ecfr.gov/current/title-17/section-210.2-06", "document": "17 CFR 210.2-06, retention of audit and review records (eCFR)", "question": "period", "answer": "seven-years-or-more", "answer_text": "seven years or more", "status": "stated", "retrieved_at": "2026-10-28", "quote": "For a period of seven years after an accountant concludes an audit or review of an issuer's financial statements", "text_sha256": "586f771ed98be87305902a197e13cb9a70656255fda2172afdeade04f8194199" }, { "subject": "17 CFR 210.2-06", "url": "https://www.ecfr.gov/current/title-17/section-210.2-06", "document": "17 CFR 210.2-06, retention of audit and review records (eCFR)", "question": "rule", "answer": "stated", "answer_text": "Memoranda, correspondence, communications, other documents, and records (including…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Memoranda, correspondence, communications, other documents, and records (including electronic records) described in paragraph (a) of this section shall be retained whether they support the auditor's final conclusions regarding the audit or review", "text_sha256": "586f771ed98be87305902a197e13cb9a70656255fda2172afdeade04f8194199" }, { "subject": "17 CFR 240.17a-3", "url": "https://www.ecfr.gov/current/title-17/section-240.17a-3", "document": "17 CFR 240.17a-3, records to be made by brokers and dealers (eCFR)", "question": "jurisdiction", "answer": "us", "answer_text": "the United States", "status": "stated", "retrieved_at": "2026-10-28", "quote": "registered pursuant to section 15 of the Act (15 U.S.C. 78o)", "text_sha256": "b52ca3657694bd80641f97222f41993f9ea041ed3cba21958b1be33781018ffd" }, { "subject": "17 CFR 240.17a-3", "url": "https://www.ecfr.gov/current/title-17/section-240.17a-3", "document": "17 CFR 240.17a-3, records to be made by brokers and dealers (eCFR)", "question": "governs", "answer": "keep-records", "answer_text": "how long records must be kept", "status": "stated", "retrieved_at": "2026-10-28", "quote": "must make and keep current the following books and records relating to its business", "text_sha256": "b52ca3657694bd80641f97222f41993f9ea041ed3cba21958b1be33781018ffd" }, { "subject": "17 CFR 240.17a-3", "url": "https://www.ecfr.gov/current/title-17/section-240.17a-3", "document": "17 CFR 240.17a-3, records to be made by brokers and dealers (eCFR)", "question": "period", "answer": "no-period", "answer_text": "no period", "status": "stated", "retrieved_at": "2026-10-28", "quote": "must make and keep current the following books and records relating to its business", "text_sha256": "b52ca3657694bd80641f97222f41993f9ea041ed3cba21958b1be33781018ffd" }, { "subject": "17 CFR 240.17a-3", "url": "https://www.ecfr.gov/current/title-17/section-240.17a-3", "document": "17 CFR 240.17a-3, records to be made by brokers and dealers (eCFR)", "question": "rule", "answer": "stated", "answer_text": "every broker or dealer registered pursuant to section 15 of the Act (15 U.S.C. 78o) must…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "every broker or dealer registered pursuant to section 15 of the Act (15 U.S.C. 78o) must make and keep current the following books and records relating to its business", "text_sha256": "b52ca3657694bd80641f97222f41993f9ea041ed3cba21958b1be33781018ffd" }, { "subject": "17 CFR 240.17a-4", "url": "https://www.ecfr.gov/current/title-17/section-240.17a-4", "document": "17 CFR 240.17a-4, records to be preserved by brokers and dealers (eCFR)", "question": "jurisdiction", "answer": "us", "answer_text": "the United States", "status": "stated", "retrieved_at": "2026-10-28", "quote": "registered pursuant to section 15 of the Act (15 U.S.C. 78o)", "text_sha256": "0adf96b0b1646fa35012ac6c736d6828f5e0ce0599c8860f53a728d635bb3cfb" }, { "subject": "17 CFR 240.17a-4", "url": "https://www.ecfr.gov/current/title-17/section-240.17a-4", "document": "17 CFR 240.17a-4, records to be preserved by brokers and dealers (eCFR)", "question": "governs", "answer": "keep-records", "answer_text": "how long records must be kept", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Originals of all communications received and copies of all communications sent (and any approvals thereof) by the member, broker or dealer (including inter-office memoranda and communications) relating to its business as such", "text_sha256": "0adf96b0b1646fa35012ac6c736d6828f5e0ce0599c8860f53a728d635bb3cfb" }, { "subject": "17 CFR 240.17a-4", "url": "https://www.ecfr.gov/current/title-17/section-240.17a-4", "document": "17 CFR 240.17a-4, records to be preserved by brokers and dealers (eCFR)", "question": "period", "answer": "three-to-five-years", "answer_text": "three to five years", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Every member, broker or dealer subject to § 240.17a-3 must preserve for a period of not less than three years, the first two years in an easily accessible place", "text_sha256": "0adf96b0b1646fa35012ac6c736d6828f5e0ce0599c8860f53a728d635bb3cfb" }, { "subject": "17 CFR 240.17a-4", "url": "https://www.ecfr.gov/current/title-17/section-240.17a-4", "document": "17 CFR 240.17a-4, records to be preserved by brokers and dealers (eCFR)", "question": "rule", "answer": "stated", "answer_text": "Every member, broker or dealer subject to § 240.17a-3 must preserve for a period of not…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Every member, broker or dealer subject to § 240.17a-3 must preserve for a period of not less than three years, the first two years in an easily accessible place", "text_sha256": "0adf96b0b1646fa35012ac6c736d6828f5e0ce0599c8860f53a728d635bb3cfb" }, { "subject": "17 CFR 275.204-2", "url": "https://www.ecfr.gov/current/title-17/section-275.204-2", "document": "17 CFR 275.204-2, books and records of investment advisers (eCFR)", "question": "jurisdiction", "answer": "us", "answer_text": "the United States", "status": "stated", "retrieved_at": "2026-10-28", "quote": "required to be registered under section 203 of the Act (15 U.S.C. 80b-3)", "text_sha256": "83fd67e876765d0238f90e2d369665e1a3c90fb2e534f435f9f873d77b52a354" }, { "subject": "17 CFR 275.204-2", "url": "https://www.ecfr.gov/current/title-17/section-275.204-2", "document": "17 CFR 275.204-2, books and records of investment advisers (eCFR)", "question": "governs", "answer": "keep-records", "answer_text": "how long records must be kept", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Originals of all written communications received and copies of all written communications sent by such investment adviser relating to", "text_sha256": "83fd67e876765d0238f90e2d369665e1a3c90fb2e534f435f9f873d77b52a354" }, { "subject": "17 CFR 275.204-2", "url": "https://www.ecfr.gov/current/title-17/section-275.204-2", "document": "17 CFR 275.204-2, books and records of investment advisers (eCFR)", "question": "period", "answer": "three-to-five-years", "answer_text": "three to five years", "status": "stated", "retrieved_at": "2026-10-28", "quote": "shall be maintained and preserved in an easily accessible place for a period of not less than five years from the end of the fiscal year during which the last entry was made on such record", "text_sha256": "83fd67e876765d0238f90e2d369665e1a3c90fb2e534f435f9f873d77b52a354" }, { "subject": "17 CFR 275.204-2", "url": "https://www.ecfr.gov/current/title-17/section-275.204-2", "document": "17 CFR 275.204-2, books and records of investment advisers (eCFR)", "question": "rule", "answer": "stated", "answer_text": "shall be maintained and preserved in an easily accessible place for a period of not less…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "shall be maintained and preserved in an easily accessible place for a period of not less than five years from the end of the fiscal year during which the last entry was made on such record", "text_sha256": "83fd67e876765d0238f90e2d369665e1a3c90fb2e534f435f9f873d77b52a354" }, { "subject": "18 U.S.C. 2511", "url": "https://www.law.cornell.edu/uscode/text/18/2511", "document": "18 U.S. Code § 2511, interception and disclosure of communications (Cornell LII)", "question": "jurisdiction", "answer": "us", "answer_text": "the United States", "status": "stated", "retrieved_at": "2026-10-24", "quote": "in violation of the Constitution or laws of the United States or of any State", "text_sha256": "0e5bba577f01f153ebd44da971afbb5222e906378537006d77d0f5abab6f3d50" }, { "subject": "18 U.S.C. 2511", "url": "https://www.law.cornell.edu/uscode/text/18/2511", "document": "18 U.S. Code § 2511, interception and disclosure of communications (Cornell LII)", "question": "governs", "answer": "limits-disclosure", "answer_text": "when stored communications may be disclosed or intercepted", "status": "stated", "retrieved_at": "2026-10-24", "quote": "intentionally intercepts, endeavors to intercept, or procures any other person to intercept or endeavor to intercept, any wire, oral, or electronic communication", "text_sha256": "0e5bba577f01f153ebd44da971afbb5222e906378537006d77d0f5abab6f3d50" }, { "subject": "18 U.S.C. 2511", "url": "https://www.law.cornell.edu/uscode/text/18/2511", "document": "18 U.S. Code § 2511, interception and disclosure of communications (Cornell LII)", "question": "period", "answer": "no-period", "answer_text": "no period", "status": "stated", "retrieved_at": "2026-10-24", "quote": "intentionally intercepts, endeavors to intercept, or procures any other person to intercept or endeavor to intercept, any wire, oral, or electronic communication", "text_sha256": "0e5bba577f01f153ebd44da971afbb5222e906378537006d77d0f5abab6f3d50" }, { "subject": "18 U.S.C. 2511", "url": "https://www.law.cornell.edu/uscode/text/18/2511", "document": "18 U.S. Code § 2511, interception and disclosure of communications (Cornell LII)", "question": "rule", "answer": "stated", "answer_text": "It shall not be unlawful under this chapter for a person not acting under color of law to…", "status": "stated", "retrieved_at": "2026-10-24", "quote": "It shall not be unlawful under this chapter for a person not acting under color of law to intercept a wire, oral, or electronic communication where such person is a party to the communication or where one of the parties to the communication has given prior consent to such interception", "text_sha256": "0e5bba577f01f153ebd44da971afbb5222e906378537006d77d0f5abab6f3d50" }, { "subject": "18 U.S.C. 2702", "url": "https://www.law.cornell.edu/uscode/text/18/2702", "document": "18 U.S. Code § 2702, voluntary disclosure of customer communications or records (Cornell LII)", "question": "jurisdiction", "answer": "us", "answer_text": "the United States", "status": "stated", "retrieved_at": "2026-10-28", "quote": "18 U.S. Code § 2702 - Voluntary disclosure of customer communications or records", "text_sha256": "32b007813cac121b05dc3ae5e7566e8ee033e0c634c3662d4f3b5ac98a53b78f" }, { "subject": "18 U.S.C. 2702", "url": "https://www.law.cornell.edu/uscode/text/18/2702", "document": "18 U.S. Code § 2702, voluntary disclosure of customer communications or records (Cornell LII)", "question": "governs", "answer": "limits-disclosure", "answer_text": "when stored communications may be disclosed or intercepted", "status": "stated", "retrieved_at": "2026-10-28", "quote": "a person or entity providing an electronic communication service to the public shall not knowingly divulge to any person or entity the contents of a communication while in electronic storage by that service", "text_sha256": "32b007813cac121b05dc3ae5e7566e8ee033e0c634c3662d4f3b5ac98a53b78f" }, { "subject": "18 U.S.C. 2702", "url": "https://www.law.cornell.edu/uscode/text/18/2702", "document": "18 U.S. Code § 2702, voluntary disclosure of customer communications or records (Cornell LII)", "question": "period", "answer": "no-period", "answer_text": "no period", "status": "stated", "retrieved_at": "2026-10-28", "quote": "a person or entity providing an electronic communication service to the public shall not knowingly divulge to any person or entity the contents of a communication while in electronic storage by that service", "text_sha256": "32b007813cac121b05dc3ae5e7566e8ee033e0c634c3662d4f3b5ac98a53b78f" }, { "subject": "18 U.S.C. 2702", "url": "https://www.law.cornell.edu/uscode/text/18/2702", "document": "18 U.S. Code § 2702, voluntary disclosure of customer communications or records (Cornell LII)", "question": "rule", "answer": "stated", "answer_text": "with the lawful consent of the originator or an addressee or intended recipient of such…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "with the lawful consent of the originator or an addressee or intended recipient of such communication, or the subscriber in the case of remote computing service", "text_sha256": "32b007813cac121b05dc3ae5e7566e8ee033e0c634c3662d4f3b5ac98a53b78f" }, { "subject": "26 CFR 1.6001-1", "url": "https://www.ecfr.gov/current/title-26/section-1.6001-1", "document": "26 CFR 1.6001-1, records (eCFR)", "question": "jurisdiction", "answer": "us", "answer_text": "the United States", "status": "stated", "retrieved_at": "2026-10-28", "quote": "shall be kept at all times available for inspection by authorized internal revenue officers or employees", "text_sha256": "85f157d1bacfbeef8e1c466942c7cf864326a7f1db682410dff7c8e7191f45ca" }, { "subject": "26 CFR 1.6001-1", "url": "https://www.ecfr.gov/current/title-26/section-1.6001-1", "document": "26 CFR 1.6001-1, records (eCFR)", "question": "governs", "answer": "keep-records", "answer_text": "how long records must be kept", "status": "stated", "retrieved_at": "2026-10-28", "quote": "shall keep such permanent books of account or records, including inventories, as are sufficient to establish the amount of gross income, deductions, credits, or other matters required to be shown by such person in any return of such tax or information.", "text_sha256": "85f157d1bacfbeef8e1c466942c7cf864326a7f1db682410dff7c8e7191f45ca" }, { "subject": "26 CFR 1.6001-1", "url": "https://www.ecfr.gov/current/title-26/section-1.6001-1", "document": "26 CFR 1.6001-1, records (eCFR)", "question": "period", "answer": "no-period", "answer_text": "no period", "status": "stated", "retrieved_at": "2026-10-28", "quote": "shall be retained so long as the contents thereof may become material in the administration of any internal revenue law.", "text_sha256": "85f157d1bacfbeef8e1c466942c7cf864326a7f1db682410dff7c8e7191f45ca" }, { "subject": "26 CFR 1.6001-1", "url": "https://www.ecfr.gov/current/title-26/section-1.6001-1", "document": "26 CFR 1.6001-1, records (eCFR)", "question": "rule", "answer": "stated", "answer_text": "The books or records required by this section shall be kept at all times available for…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "The books or records required by this section shall be kept at all times available for inspection by authorized internal revenue officers or employees, and shall be retained so long as the contents thereof may become material in the administration of any internal revenue law.", "text_sha256": "85f157d1bacfbeef8e1c466942c7cf864326a7f1db682410dff7c8e7191f45ca" }, { "subject": "29 CFR 1602.14", "url": "https://www.ecfr.gov/current/title-29/section-1602.14", "document": "29 CFR 1602.14, preservation of records made or kept (eCFR)", "question": "jurisdiction", "answer": "us", "answer_text": "the United States", "status": "stated", "retrieved_at": "2026-10-28", "quote": "the statutory period within which the aggrieved person may bring an action in a U.S. District Court", "text_sha256": "ce453c5640fb316b4eec398147d3838297a21674779a20c8a447534261d284ca" }, { "subject": "29 CFR 1602.14", "url": "https://www.ecfr.gov/current/title-29/section-1602.14", "document": "29 CFR 1602.14, preservation of records made or kept (eCFR)", "question": "governs", "answer": "keep-records", "answer_text": "how long records must be kept", "status": "stated", "retrieved_at": "2026-10-28", "quote": "shall be preserved by the employer for a period of one year from the date of the making of the record or the personnel action involved, whichever occurs later.", "text_sha256": "ce453c5640fb316b4eec398147d3838297a21674779a20c8a447534261d284ca" }, { "subject": "29 CFR 1602.14", "url": "https://www.ecfr.gov/current/title-29/section-1602.14", "document": "29 CFR 1602.14, preservation of records made or kept (eCFR)", "question": "period", "answer": "under-three-years", "answer_text": "under three years", "status": "stated", "retrieved_at": "2026-10-28", "quote": "shall be preserved by the employer for a period of one year from the date of the making of the record or the personnel action involved, whichever occurs later.", "text_sha256": "ce453c5640fb316b4eec398147d3838297a21674779a20c8a447534261d284ca" }, { "subject": "29 CFR 1602.14", "url": "https://www.ecfr.gov/current/title-29/section-1602.14", "document": "29 CFR 1602.14, preservation of records made or kept (eCFR)", "question": "rule", "answer": "stated", "answer_text": "Any personnel or employment record made or kept by an employer (including but not…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Any personnel or employment record made or kept by an employer (including but not necessarily limited to requests for reasonable accommodation, application forms submitted by applicants and other records having to do with hiring, promotion, demotion, transfer, lay-off or termination, rates of pay or other terms of compensation, and selection for training or apprenticeship) shall be preserved by the employer for a period of one year from the date of the making of the record or the personnel action involved, whichever occurs later.", "text_sha256": "ce453c5640fb316b4eec398147d3838297a21674779a20c8a447534261d284ca" }, { "subject": "45 CFR 164.316", "url": "https://www.ecfr.gov/current/title-45/section-164.316", "document": "45 CFR 164.316, policies and procedures and documentation requirements (eCFR)", "question": "jurisdiction", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-22", "quote": "No answer on the page, which ran to 2,928 characters when read on 2026-10-22.", "text_sha256": "cd62c6dc5cabf6db057790c75565eb25df86a04ac1f78610b78b9914af9348bc" }, { "subject": "45 CFR 164.316", "url": "https://www.ecfr.gov/current/title-45/section-164.316", "document": "45 CFR 164.316, policies and procedures and documentation requirements (eCFR)", "question": "governs", "answer": "keep-records", "answer_text": "how long records must be kept", "status": "stated", "retrieved_at": "2026-10-22", "quote": "Retain the documentation required by paragraph (b)(1) of this section for 6 years from the date of its creation or the date when it last was in effect, whichever is later.", "text_sha256": "cd62c6dc5cabf6db057790c75565eb25df86a04ac1f78610b78b9914af9348bc" }, { "subject": "45 CFR 164.316", "url": "https://www.ecfr.gov/current/title-45/section-164.316", "document": "45 CFR 164.316, policies and procedures and documentation requirements (eCFR)", "question": "period", "answer": "six-years", "answer_text": "six years", "status": "stated", "retrieved_at": "2026-10-22", "quote": "Retain the documentation required by paragraph (b)(1) of this section for 6 years from the date of its creation or the date when it last was in effect, whichever is later.", "text_sha256": "cd62c6dc5cabf6db057790c75565eb25df86a04ac1f78610b78b9914af9348bc" }, { "subject": "45 CFR 164.316", "url": "https://www.ecfr.gov/current/title-45/section-164.316", "document": "45 CFR 164.316, policies and procedures and documentation requirements (eCFR)", "question": "rule", "answer": "stated", "answer_text": "Retain the documentation required by paragraph (b)(1) of this section for 6 years from…", "status": "stated", "retrieved_at": "2026-10-22", "quote": "Retain the documentation required by paragraph (b)(1) of this section for 6 years from the date of its creation or the date when it last was in effect, whichever is later.", "text_sha256": "cd62c6dc5cabf6db057790c75565eb25df86a04ac1f78610b78b9914af9348bc" }, { "subject": "Companies Act 2006, s388", "url": "https://www.legislation.gov.uk/ukpga/2006/46/section/388", "document": "Companies Act 2006, section 388 (legislation.gov.uk)", "question": "jurisdiction", "answer": "gb", "answer_text": "the United Kingdom", "status": "stated", "retrieved_at": "2026-10-12", "quote": "must be sent to, and kept at, a place in the United Kingdom, and must at all times be open to such inspection", "text_sha256": "665f074f155072d20837601f2fdfdcf2941c9afccf39d54d98848ad1bf1aa23b" }, { "subject": "Companies Act 2006, s388", "url": "https://www.legislation.gov.uk/ukpga/2006/46/section/388", "document": "Companies Act 2006, section 388 (legislation.gov.uk)", "question": "governs", "answer": "keep-records", "answer_text": "how long records must be kept", "status": "stated", "retrieved_at": "2026-10-12", "quote": "Accounting records that a company is required by section 386 to keep must be preserved by it", "text_sha256": "665f074f155072d20837601f2fdfdcf2941c9afccf39d54d98848ad1bf1aa23b" }, { "subject": "Companies Act 2006, s388", "url": "https://www.legislation.gov.uk/ukpga/2006/46/section/388", "document": "Companies Act 2006, section 388 (legislation.gov.uk)", "question": "period", "answer": "three-to-five-years", "answer_text": "three to five years", "status": "stated", "retrieved_at": "2026-10-12", "quote": "in the case of a private company, for three years from the date on which they are made", "text_sha256": "665f074f155072d20837601f2fdfdcf2941c9afccf39d54d98848ad1bf1aa23b" }, { "subject": "Companies Act 2006, s388", "url": "https://www.legislation.gov.uk/ukpga/2006/46/section/388", "document": "Companies Act 2006, section 388 (legislation.gov.uk)", "question": "rule", "answer": "stated", "answer_text": "Accounting records that a company is required by section 386 to keep must be preserved by……", "status": "stated", "retrieved_at": "2026-10-12", "quote": "Accounting records that a company is required by section 386 to keep must be preserved by it— (a) in the case of a private company, for three years from the date on which they are made; (b) in the case of a public company, for six years from the date on which they are made.", "text_sha256": "665f074f155072d20837601f2fdfdcf2941c9afccf39d54d98848ad1bf1aa23b" }, { "subject": "Data Protection Act 2018, s170", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/170", "document": "Data Protection Act 2018, section 170, unlawful obtaining of personal data (legislation.gov.uk)", "question": "jurisdiction", "answer": "gb", "answer_text": "the United Kingdom", "status": "stated", "retrieved_at": "2026-10-08", "quote": "Data Protection Act 2018 You are here: UK Public General Acts 2018 c. 12", "text_sha256": "45651c453d0912ade536a172dcf6802da437a3edee01857b9c38f0f9ca9a60ce" }, { "subject": "Data Protection Act 2018, s170", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/170", "document": "Data Protection Act 2018, section 170, unlawful obtaining of personal data (legislation.gov.uk)", "question": "governs", "answer": "personal-data", "answer_text": "the personal data in the records", "status": "stated", "retrieved_at": "2026-10-08", "quote": "to obtain or disclose personal data without the consent of the controller", "text_sha256": "45651c453d0912ade536a172dcf6802da437a3edee01857b9c38f0f9ca9a60ce" }, { "subject": "Data Protection Act 2018, s170", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/170", "document": "Data Protection Act 2018, section 170, unlawful obtaining of personal data (legislation.gov.uk)", "question": "period", "answer": "no-period", "answer_text": "no period", "status": "stated", "retrieved_at": "2026-10-08", "quote": "It is an offence for a person knowingly or recklessly— (a) to obtain or disclose personal data without the consent of the controller", "text_sha256": "45651c453d0912ade536a172dcf6802da437a3edee01857b9c38f0f9ca9a60ce" }, { "subject": "Data Protection Act 2018, s170", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/170", "document": "Data Protection Act 2018, section 170, unlawful obtaining of personal data (legislation.gov.uk)", "question": "rule", "answer": "stated", "answer_text": "It is an offence for a person knowingly or recklessly…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "It is an offence for a person knowingly or recklessly— (a) to obtain or disclose personal data without the consent of the controller, (b) to procure the disclosure of personal data to another person without the consent of the controller, or (c) after obtaining personal data, to retain it without the consent of the person who was the controller in relation to the personal data when it was obtained.", "text_sha256": "45651c453d0912ade536a172dcf6802da437a3edee01857b9c38f0f9ca9a60ce" }, { "subject": "FCA SYSC 9.1", "url": "https://www.handbook.fca.org.uk/handbook/SYSC/9/1.html", "document": "FCA Handbook, SYSC 9.1 general rules on record-keeping", "question": "jurisdiction", "answer": "gb", "answer_text": "the United Kingdom", "status": "stated", "retrieved_at": "2026-10-08", "quote": "which must be sufficient to enable the FCA to monitor the firm's compliance with the requirements under the regulatory system", "text_sha256": "19c100f438ea81d45094a2ff12f50570dea504028a1d10e56640a22555645b48" }, { "subject": "FCA SYSC 9.1", "url": "https://www.handbook.fca.org.uk/handbook/SYSC/9/1.html", "document": "FCA Handbook, SYSC 9.1 general rules on record-keeping", "question": "governs", "answer": "keep-records", "answer_text": "how long records must be kept", "status": "stated", "retrieved_at": "2026-10-08", "quote": "must arrange for orderly records to be kept of its business and internal organisation, including all services and transactions undertaken by it", "text_sha256": "19c100f438ea81d45094a2ff12f50570dea504028a1d10e56640a22555645b48" }, { "subject": "FCA SYSC 9.1", "url": "https://www.handbook.fca.org.uk/handbook/SYSC/9/1.html", "document": "FCA Handbook, SYSC 9.1 general rules on record-keeping", "question": "period", "answer": "three-to-five-years", "answer_text": "three to five years", "status": "stated", "retrieved_at": "2026-10-08", "quote": "A common platform firm must retain all records kept by it under this chapter in relation to its MiFID business for a period of at least five years.", "text_sha256": "19c100f438ea81d45094a2ff12f50570dea504028a1d10e56640a22555645b48" }, { "subject": "FCA SYSC 9.1", "url": "https://www.handbook.fca.org.uk/handbook/SYSC/9/1.html", "document": "FCA Handbook, SYSC 9.1 general rules on record-keeping", "question": "rule", "answer": "stated", "answer_text": "A common platform firm must retain all records kept by it under this chapter in relation…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "A common platform firm must retain all records kept by it under this chapter in relation to its MiFID business for a period of at least five years.", "text_sha256": "19c100f438ea81d45094a2ff12f50570dea504028a1d10e56640a22555645b48" }, { "subject": "FINRA Rule 4511", "url": "https://www.finra.org/rules-guidance/rulebooks/finra-rules/4511", "document": "FINRA Rule 4511, general requirements", "question": "jurisdiction", "answer": "us", "answer_text": "the United States", "status": "stated", "retrieved_at": "2026-10-08", "quote": "Members shall make and preserve books and records as required under the FINRA rules, the Exchange Act and the applicable Exchange Act rules.", "text_sha256": "00507a870c4de7bb7de5ef383c38f2f24bb5979e67509c503ae7e28a0a9622f8" }, { "subject": "FINRA Rule 4511", "url": "https://www.finra.org/rules-guidance/rulebooks/finra-rules/4511", "document": "FINRA Rule 4511, general requirements", "question": "governs", "answer": "keep-records", "answer_text": "how long records must be kept", "status": "stated", "retrieved_at": "2026-10-08", "quote": "Members shall make and preserve books and records as required under the FINRA rules, the Exchange Act and the applicable Exchange Act rules.", "text_sha256": "00507a870c4de7bb7de5ef383c38f2f24bb5979e67509c503ae7e28a0a9622f8" }, { "subject": "FINRA Rule 4511", "url": "https://www.finra.org/rules-guidance/rulebooks/finra-rules/4511", "document": "FINRA Rule 4511, general requirements", "question": "period", "answer": "six-years", "answer_text": "six years", "status": "stated", "retrieved_at": "2026-10-08", "quote": "Members shall preserve for a period of at least six years those FINRA books and records for which there is no specified period under the FINRA rules or applicable Exchange Act rules.", "text_sha256": "00507a870c4de7bb7de5ef383c38f2f24bb5979e67509c503ae7e28a0a9622f8" }, { "subject": "FINRA Rule 4511", "url": "https://www.finra.org/rules-guidance/rulebooks/finra-rules/4511", "document": "FINRA Rule 4511, general requirements", "question": "rule", "answer": "stated", "answer_text": "Members shall preserve for a period of at least six years those FINRA books and records…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "Members shall preserve for a period of at least six years those FINRA books and records for which there is no specified period under the FINRA rules or applicable Exchange Act rules.", "text_sha256": "00507a870c4de7bb7de5ef383c38f2f24bb5979e67509c503ae7e28a0a9622f8" }, { "subject": "HMRC company records guidance (GOV.UK)", "url": "https://www.gov.uk/running-a-limited-company/company-and-accounting-records", "document": "GOV.UK, Running a limited company: company and accounting records", "question": "jurisdiction", "answer": "gb", "answer_text": "the United Kingdom", "status": "stated", "retrieved_at": "2026-10-23", "quote": "HM Revenue and Customs (HMRC) may check your records with a compliance check to make sure you’re paying the right amount of tax.", "text_sha256": "018f4e317ac16ed5cc934cff84dea18b5696d6f60555804b28b90d2cf3f1c2e2" }, { "subject": "HMRC company records guidance (GOV.UK)", "url": "https://www.gov.uk/running-a-limited-company/company-and-accounting-records", "document": "GOV.UK, Running a limited company: company and accounting records", "question": "governs", "answer": "keep-records", "answer_text": "how long records must be kept", "status": "stated", "retrieved_at": "2026-10-23", "quote": "You must keep records for 6 years from the end of the last company financial year they relate to", "text_sha256": "018f4e317ac16ed5cc934cff84dea18b5696d6f60555804b28b90d2cf3f1c2e2" }, { "subject": "HMRC company records guidance (GOV.UK)", "url": "https://www.gov.uk/running-a-limited-company/company-and-accounting-records", "document": "GOV.UK, Running a limited company: company and accounting records", "question": "period", "answer": "six-years", "answer_text": "six years", "status": "stated", "retrieved_at": "2026-10-23", "quote": "You must keep records for 6 years from the end of the last company financial year they relate to", "text_sha256": "018f4e317ac16ed5cc934cff84dea18b5696d6f60555804b28b90d2cf3f1c2e2" }, { "subject": "HMRC company records guidance (GOV.UK)", "url": "https://www.gov.uk/running-a-limited-company/company-and-accounting-records", "document": "GOV.UK, Running a limited company: company and accounting records", "question": "rule", "answer": "stated", "answer_text": "This includes records of: all money spent by the company, for example receipts, petty…", "status": "stated", "retrieved_at": "2026-10-23", "quote": "This includes records of: all money spent by the company, for example receipts, petty cash books, orders and delivery notes all money received by the company, for example invoices, contracts, sales books and till rolls any other relevant documents, for example bank statements and correspondence", "text_sha256": "018f4e317ac16ed5cc934cff84dea18b5696d6f60555804b28b90d2cf3f1c2e2" }, { "subject": "HMRC VAT Notice 700/21", "url": "https://www.gov.uk/guidance/record-keeping-for-vat-notice-70021", "document": "HMRC, VAT Notice 700/21: record keeping", "question": "jurisdiction", "answer": "gb", "answer_text": "the United Kingdom", "status": "stated", "retrieved_at": "2026-10-23", "quote": "This notice gives guidance on the records you must keep if", "text_sha256": "d6b8a75fa45eb2ee8326766bb10d5c626665d09f9514b00ec165e34400bd694b" }, { "subject": "HMRC VAT Notice 700/21", "url": "https://www.gov.uk/guidance/record-keeping-for-vat-notice-70021", "document": "HMRC, VAT Notice 700/21: record keeping", "question": "governs", "answer": "keep-records", "answer_text": "how long records must be kept", "status": "stated", "retrieved_at": "2026-10-23", "quote": "Generally, you must keep all your business records for VAT purposes for at least 6 years.", "text_sha256": "d6b8a75fa45eb2ee8326766bb10d5c626665d09f9514b00ec165e34400bd694b" }, { "subject": "HMRC VAT Notice 700/21", "url": "https://www.gov.uk/guidance/record-keeping-for-vat-notice-70021", "document": "HMRC, VAT Notice 700/21: record keeping", "question": "period", "answer": "six-years", "answer_text": "six years", "status": "stated", "retrieved_at": "2026-10-23", "quote": "Generally, you must keep all your business records for VAT purposes for at least 6 years.", "text_sha256": "d6b8a75fa45eb2ee8326766bb10d5c626665d09f9514b00ec165e34400bd694b" }, { "subject": "HMRC VAT Notice 700/21", "url": "https://www.gov.uk/guidance/record-keeping-for-vat-notice-70021", "document": "HMRC, VAT Notice 700/21: record keeping", "question": "rule", "answer": "stated", "answer_text": "Generally, you must keep all your business records for VAT purposes for at least 6 years.…", "status": "stated", "retrieved_at": "2026-10-23", "quote": "Generally, you must keep all your business records for VAT purposes for at least 6 years. Records that you use for other tax purposes may need to be kept for longer periods.", "text_sha256": "d6b8a75fa45eb2ee8326766bb10d5c626665d09f9514b00ec165e34400bd694b" }, { "subject": "ICO guide to lawful basis", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/a-guide-to-lawful-basis/", "document": "ICO, A guide to lawful basis", "question": "jurisdiction", "answer": "gb", "answer_text": "the United Kingdom", "status": "stated", "retrieved_at": "2026-10-24", "quote": "The lawful bases are set out in article 6 of the UK GDPR.", "text_sha256": "02b30c7807a215d54cfd05705fafc675460e07453517df735bc94092a0dc036a" }, { "subject": "ICO guide to lawful basis", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/a-guide-to-lawful-basis/", "document": "ICO, A guide to lawful basis", "question": "governs", "answer": "personal-data", "answer_text": "the personal data in the records", "status": "stated", "retrieved_at": "2026-10-24", "quote": "You must have a valid lawful basis to handle personal information.", "text_sha256": "02b30c7807a215d54cfd05705fafc675460e07453517df735bc94092a0dc036a" }, { "subject": "ICO guide to lawful basis", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/a-guide-to-lawful-basis/", "document": "ICO, A guide to lawful basis", "question": "period", "answer": "no-period", "answer_text": "no period", "status": "stated", "retrieved_at": "2026-10-24", "quote": "You must determine your lawful basis before you start using the personal information and you must document it.", "text_sha256": "02b30c7807a215d54cfd05705fafc675460e07453517df735bc94092a0dc036a" }, { "subject": "ICO guide to lawful basis", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/a-guide-to-lawful-basis/", "document": "ICO, A guide to lawful basis", "question": "rule", "answer": "stated", "answer_text": "You must determine your lawful basis before you start using the personal information and…", "status": "stated", "retrieved_at": "2026-10-24", "quote": "You must determine your lawful basis before you start using the personal information and you must document it.", "text_sha256": "02b30c7807a215d54cfd05705fafc675460e07453517df735bc94092a0dc036a" }, { "subject": "Insolvency Act 1986, Sch 1", "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/1", "document": "Insolvency Act 1986, Schedule 1, powers of administrator or administrative receiver (legislation.gov.uk)", "question": "jurisdiction", "answer": "gb", "answer_text": "the United Kingdom", "status": "stated", "retrieved_at": "2026-10-08", "quote": "Insolvency Act 1986 You are here: UK Public General Acts 1986 c. 45", "text_sha256": "de343654bff505cdf871c2814efde29c883f35532a9bad535868ec42e796c299" }, { "subject": "Insolvency Act 1986, Sch 1", "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/1", "document": "Insolvency Act 1986, Schedule 1, powers of administrator or administrative receiver (legislation.gov.uk)", "question": "governs", "answer": "sale-of-property", "answer_text": "selling a business's property in insolvency or bankruptcy", "status": "stated", "retrieved_at": "2026-10-08", "quote": "Power to sell or otherwise dispose of the property of the company by public auction or private contract", "text_sha256": "de343654bff505cdf871c2814efde29c883f35532a9bad535868ec42e796c299" }, { "subject": "Insolvency Act 1986, Sch 1", "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/1", "document": "Insolvency Act 1986, Schedule 1, powers of administrator or administrative receiver (legislation.gov.uk)", "question": "period", "answer": "no-period", "answer_text": "no period", "status": "stated", "retrieved_at": "2026-10-08", "quote": "Power to sell or otherwise dispose of the property of the company by public auction or private contract", "text_sha256": "de343654bff505cdf871c2814efde29c883f35532a9bad535868ec42e796c299" }, { "subject": "Insolvency Act 1986, Sch 1", "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/1", "document": "Insolvency Act 1986, Schedule 1, powers of administrator or administrative receiver (legislation.gov.uk)", "question": "rule", "answer": "stated", "answer_text": "Power to sell or otherwise dispose of the property of the company by public auction or…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "Power to sell or otherwise dispose of the property of the company by public auction or private contract", "text_sha256": "de343654bff505cdf871c2814efde29c883f35532a9bad535868ec42e796c299" }, { "subject": "Insolvency Act 1986, Sch B1 para 60", "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/B1/paragraph/60", "document": "Insolvency Act 1986, Schedule B1, paragraph 60 (legislation.gov.uk)", "question": "jurisdiction", "answer": "gb", "answer_text": "the United Kingdom", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Insolvency Act 1986 You are here: UK Public General Acts1986 c. 45", "text_sha256": "649f9aad0167e39d352d44672243abfbc49612dada0a1f3581199d13cfdea2e6" }, { "subject": "Insolvency Act 1986, Sch B1 para 60", "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/B1/paragraph/60", "document": "Insolvency Act 1986, Schedule B1, paragraph 60 (legislation.gov.uk)", "question": "governs", "answer": "sale-of-property", "answer_text": "selling a business's property in insolvency or bankruptcy", "status": "stated", "retrieved_at": "2026-10-28", "quote": "But the power to sell, hire out or otherwise dispose of property is subject to any regulations that may be made under paragraph 60A.", "text_sha256": "649f9aad0167e39d352d44672243abfbc49612dada0a1f3581199d13cfdea2e6" }, { "subject": "Insolvency Act 1986, Sch B1 para 60", "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/B1/paragraph/60", "document": "Insolvency Act 1986, Schedule B1, paragraph 60 (legislation.gov.uk)", "question": "period", "answer": "no-period", "answer_text": "no period", "status": "stated", "retrieved_at": "2026-10-28", "quote": "The administrator of a company has the powers specified in Schedule 1 to this Act.", "text_sha256": "649f9aad0167e39d352d44672243abfbc49612dada0a1f3581199d13cfdea2e6" }, { "subject": "Insolvency Act 1986, Sch B1 para 60", "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/B1/paragraph/60", "document": "Insolvency Act 1986, Schedule B1, paragraph 60 (legislation.gov.uk)", "question": "rule", "answer": "stated", "answer_text": "The administrator of a company has the powers specified in Schedule 1 to this Act.", "status": "stated", "retrieved_at": "2026-10-28", "quote": "The administrator of a company has the powers specified in Schedule 1 to this Act.", "text_sha256": "649f9aad0167e39d352d44672243abfbc49612dada0a1f3581199d13cfdea2e6" }, { "subject": "Investigatory Powers Act 2016, s3", "url": "https://www.legislation.gov.uk/ukpga/2016/25/section/3", "document": "Investigatory Powers Act 2016, section 3, offence of unlawful interception (legislation.gov.uk)", "question": "jurisdiction", "answer": "gb", "answer_text": "the United Kingdom", "status": "stated", "retrieved_at": "2026-10-24", "quote": "the interception is carried out in the United Kingdom", "text_sha256": "5b89b84d95791ef6f9d402d86a4e385964fed5a7e90a88c1c442b443b45364d3" }, { "subject": "Investigatory Powers Act 2016, s3", "url": "https://www.legislation.gov.uk/ukpga/2016/25/section/3", "document": "Investigatory Powers Act 2016, section 3, offence of unlawful interception (legislation.gov.uk)", "question": "governs", "answer": "limits-disclosure", "answer_text": "when stored communications may be disclosed or intercepted", "status": "stated", "retrieved_at": "2026-10-24", "quote": "the person intentionally intercepts a communication in the course of its transmission by means of", "text_sha256": "5b89b84d95791ef6f9d402d86a4e385964fed5a7e90a88c1c442b443b45364d3" }, { "subject": "Investigatory Powers Act 2016, s3", "url": "https://www.legislation.gov.uk/ukpga/2016/25/section/3", "document": "Investigatory Powers Act 2016, section 3, offence of unlawful interception (legislation.gov.uk)", "question": "period", "answer": "no-period", "answer_text": "no period", "status": "stated", "retrieved_at": "2026-10-24", "quote": "the person intentionally intercepts a communication in the course of its transmission by means of", "text_sha256": "5b89b84d95791ef6f9d402d86a4e385964fed5a7e90a88c1c442b443b45364d3" }, { "subject": "Investigatory Powers Act 2016, s3", "url": "https://www.legislation.gov.uk/ukpga/2016/25/section/3", "document": "Investigatory Powers Act 2016, section 3, offence of unlawful interception (legislation.gov.uk)", "question": "rule", "answer": "stated", "answer_text": "But it is not an offence under subsection (1) for a person to intercept a communication……", "status": "stated", "retrieved_at": "2026-10-24", "quote": "But it is not an offence under subsection (1) for a person to intercept a communication in the course of its transmission by means of a private telecommunication system if the person— (a) is a person with a right to control the operation or use of the system, or (b) has the express or implied consent of such a person to carry out the interception.", "text_sha256": "5b89b84d95791ef6f9d402d86a4e385964fed5a7e90a88c1c442b443b45364d3" }, { "subject": "Limitation Act 1980, s5", "url": "https://www.legislation.gov.uk/ukpga/1980/58/section/5", "document": "Limitation Act 1980, section 5 (legislation.gov.uk)", "question": "jurisdiction", "answer": "gb", "answer_text": "the United Kingdom", "status": "stated", "retrieved_at": "2026-09-12", "quote": "Limitation Act 1980 You are here: UK Public General Acts 1980 c. 58", "text_sha256": "7f48fe16e5a09d001a06762d4e6ff31f21c43d7e2c1df9c7a6fa297e7c8840cc" }, { "subject": "Limitation Act 1980, s5", "url": "https://www.legislation.gov.uk/ukpga/1980/58/section/5", "document": "Limitation Act 1980, section 5 (legislation.gov.uk)", "question": "governs", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-09-12", "quote": "No answer on the page, which ran to 9,979 characters when read on 2026-09-12.", "text_sha256": "7f48fe16e5a09d001a06762d4e6ff31f21c43d7e2c1df9c7a6fa297e7c8840cc" }, { "subject": "Limitation Act 1980, s5", "url": "https://www.legislation.gov.uk/ukpga/1980/58/section/5", "document": "Limitation Act 1980, section 5 (legislation.gov.uk)", "question": "period", "answer": "six-years", "answer_text": "six years", "status": "stated", "retrieved_at": "2026-09-12", "quote": "An action founded on simple contract shall not be brought after the expiration of six years from the date on which the cause of action accrued.", "text_sha256": "7f48fe16e5a09d001a06762d4e6ff31f21c43d7e2c1df9c7a6fa297e7c8840cc" }, { "subject": "Limitation Act 1980, s5", "url": "https://www.legislation.gov.uk/ukpga/1980/58/section/5", "document": "Limitation Act 1980, section 5 (legislation.gov.uk)", "question": "rule", "answer": "stated", "answer_text": "An action founded on simple contract shall not be brought after the expiration of six…", "status": "stated", "retrieved_at": "2026-09-12", "quote": "An action founded on simple contract shall not be brought after the expiration of six years from the date on which the cause of action accrued.", "text_sha256": "7f48fe16e5a09d001a06762d4e6ff31f21c43d7e2c1df9c7a6fa297e7c8840cc" }, { "subject": "UK GDPR, art. 14", "url": "https://www.legislation.gov.uk/eur/2016/679/article/14", "document": "UK GDPR, Article 14, information where data not obtained from the data subject (legislation.gov.uk)", "question": "jurisdiction", "answer": "gb", "answer_text": "the United Kingdom", "status": "stated", "retrieved_at": "2026-10-08", "quote": "There are currently no known outstanding effects by UK legislation for Regulation (EU) 2016/679 of the European Parliament and of the Council, Article 14.", "text_sha256": "e2f02d432344356f4f1f55703ee05b567ed31dba311de5645fe0b94f9703de7c" }, { "subject": "UK GDPR, art. 14", "url": "https://www.legislation.gov.uk/eur/2016/679/article/14", "document": "UK GDPR, Article 14, information where data not obtained from the data subject (legislation.gov.uk)", "question": "governs", "answer": "personal-data", "answer_text": "the personal data in the records", "status": "stated", "retrieved_at": "2026-10-08", "quote": "Where personal data have not been obtained from the data subject, the controller shall provide the data subject with the following information", "text_sha256": "e2f02d432344356f4f1f55703ee05b567ed31dba311de5645fe0b94f9703de7c" }, { "subject": "UK GDPR, art. 14", "url": "https://www.legislation.gov.uk/eur/2016/679/article/14", "document": "UK GDPR, Article 14, information where data not obtained from the data subject (legislation.gov.uk)", "question": "period", "answer": "no-period", "answer_text": "no period", "status": "stated", "retrieved_at": "2026-10-08", "quote": "Where personal data have not been obtained from the data subject, the controller shall provide the data subject with the following information", "text_sha256": "e2f02d432344356f4f1f55703ee05b567ed31dba311de5645fe0b94f9703de7c" }, { "subject": "UK GDPR, art. 14", "url": "https://www.legislation.gov.uk/eur/2016/679/article/14", "document": "UK GDPR, Article 14, information where data not obtained from the data subject (legislation.gov.uk)", "question": "rule", "answer": "stated", "answer_text": "within a reasonable period after obtaining the personal data, but at the latest within…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "within a reasonable period after obtaining the personal data, but at the latest within one month, having regard to the specific circumstances in which the personal data are processed", "text_sha256": "e2f02d432344356f4f1f55703ee05b567ed31dba311de5645fe0b94f9703de7c" }, { "subject": "UK GDPR, art. 5", "url": "https://www.legislation.gov.uk/eur/2016/679/article/5", "document": "UK GDPR, Article 5, principles relating to processing of personal data (legislation.gov.uk)", "question": "jurisdiction", "answer": "gb", "answer_text": "the United Kingdom", "status": "stated", "retrieved_at": "2026-10-08", "quote": "There are currently no known outstanding effects by UK legislation for Regulation (EU) 2016/679 of the European Parliament and of the Council, Article 5.", "text_sha256": "25a9d8f8009872e0433d4cd45121ffc8d2d4756f39c0dd3d6e332be90376bd04" }, { "subject": "UK GDPR, art. 5", "url": "https://www.legislation.gov.uk/eur/2016/679/article/5", "document": "UK GDPR, Article 5, principles relating to processing of personal data (legislation.gov.uk)", "question": "governs", "answer": "personal-data", "answer_text": "the personal data in the records", "status": "stated", "retrieved_at": "2026-10-08", "quote": "kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed", "text_sha256": "25a9d8f8009872e0433d4cd45121ffc8d2d4756f39c0dd3d6e332be90376bd04" }, { "subject": "UK GDPR, art. 5", "url": "https://www.legislation.gov.uk/eur/2016/679/article/5", "document": "UK GDPR, Article 5, principles relating to processing of personal data (legislation.gov.uk)", "question": "period", "answer": "no-period", "answer_text": "no period", "status": "stated", "retrieved_at": "2026-10-08", "quote": "kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed", "text_sha256": "25a9d8f8009872e0433d4cd45121ffc8d2d4756f39c0dd3d6e332be90376bd04" }, { "subject": "UK GDPR, art. 5", "url": "https://www.legislation.gov.uk/eur/2016/679/article/5", "document": "UK GDPR, Article 5, principles relating to processing of personal data (legislation.gov.uk)", "question": "rule", "answer": "stated", "answer_text": "kept in a form which permits identification of data subjects for no longer than is…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes", "text_sha256": "25a9d8f8009872e0433d4cd45121ffc8d2d4756f39c0dd3d6e332be90376bd04" }, { "subject": "UK GDPR, art. 6", "url": "https://www.legislation.gov.uk/eur/2016/679/article/6", "document": "UK GDPR, Article 6, lawfulness of processing (legislation.gov.uk)", "question": "jurisdiction", "answer": "gb", "answer_text": "the United Kingdom", "status": "stated", "retrieved_at": "2026-10-08", "quote": "There are currently no known outstanding effects by UK legislation for Regulation (EU) 2016/679 of the European Parliament and of the Council, Article 6.", "text_sha256": "7a5a6f24fb31d9243763b59989fd13d94b3c2be38ee902535f7781e7fa9a121d" }, { "subject": "UK GDPR, art. 6", "url": "https://www.legislation.gov.uk/eur/2016/679/article/6", "document": "UK GDPR, Article 6, lawfulness of processing (legislation.gov.uk)", "question": "governs", "answer": "personal-data", "answer_text": "the personal data in the records", "status": "stated", "retrieved_at": "2026-10-08", "quote": "Processing shall be lawful only if and to the extent that at least one of the following applies", "text_sha256": "7a5a6f24fb31d9243763b59989fd13d94b3c2be38ee902535f7781e7fa9a121d" }, { "subject": "UK GDPR, art. 6", "url": "https://www.legislation.gov.uk/eur/2016/679/article/6", "document": "UK GDPR, Article 6, lawfulness of processing (legislation.gov.uk)", "question": "period", "answer": "no-period", "answer_text": "no period", "status": "stated", "retrieved_at": "2026-10-08", "quote": "Processing shall be lawful only if and to the extent that at least one of the following applies", "text_sha256": "7a5a6f24fb31d9243763b59989fd13d94b3c2be38ee902535f7781e7fa9a121d" }, { "subject": "UK GDPR, art. 6", "url": "https://www.legislation.gov.uk/eur/2016/679/article/6", "document": "UK GDPR, Article 6, lawfulness of processing (legislation.gov.uk)", "question": "rule", "answer": "stated", "answer_text": "Processing shall be lawful only if and to the extent that at least one of the following…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "Processing shall be lawful only if and to the extent that at least one of the following applies: (a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes", "text_sha256": "7a5a6f24fb31d9243763b59989fd13d94b3c2be38ee902535f7781e7fa9a121d" } ], "sources": [ { "url": "https://www.ecfr.gov/current/title-17/section-240.17a-4", "label": "17 CFR 240.17a-4, records to be preserved by brokers and dealers", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.ecfr.gov/current/title-17/section-240.17a-3", "label": "17 CFR 240.17a-3, records to be made by brokers and dealers", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.ecfr.gov/current/title-17/section-275.204-2", "label": "17 CFR 275.204-2, books and records of investment advisers", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.ecfr.gov/current/title-17/section-210.2-06", "label": "17 CFR 210.2-06, retention of audit and review records (seven years)", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.ecfr.gov/current/title-26/section-1.6001-1", "label": "26 CFR 1.6001-1, records (IRS)", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.ecfr.gov/current/title-29/section-1602.14", "label": "29 CFR 1602.14, preservation of employment records (EEOC)", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.ecfr.gov/current/title-45/section-164.316", "label": "45 CFR 164.316, HIPAA documentation retained six years", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.finra.org/rules-guidance/rulebooks/finra-rules/4511", "label": "FINRA Rule 4511, general requirements (six years)", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "first-party-index", "status": "read" }, { "url": "https://www.law.cornell.edu/uscode/text/18/2702", "label": "18 U.S.C. 2702, voluntary disclosure of customer communications or records (Cornell LII)", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "secondary", "status": "read" }, { "url": "https://www.law.cornell.edu/uscode/text/18/2511", "label": "18 U.S.C. 2511, interception and disclosure of communications (Cornell LII)", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "secondary", "status": "read" }, { "url": "https://www.law.cornell.edu/uscode/text/11/363", "label": "11 U.S.C. 363, use, sale or lease of property (Cornell LII)", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "secondary", "status": "read" }, { "url": "https://www.law.cornell.edu/uscode/text/11/332", "label": "11 U.S.C. 332, consumer privacy ombudsman (Cornell LII)", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "secondary", "status": "read" }, { "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.100", "label": "California Civil Code 1798.100 (CCPA)", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "not-terms", "why": "the box holds no readable read of the California Civil Code 1798.100 page; nothing to read" }, { "url": "https://www.legislation.gov.uk/ukpga/2006/46/section/388", "label": "Companies Act 2006, s388 (accounting records kept three or six years)", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.gov.uk/running-a-limited-company/company-and-accounting-records", "label": "GOV.UK, Running a limited company: company and accounting records", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.gov.uk/guidance/record-keeping-for-vat-notice-70021", "label": "HMRC, VAT Notice 700/21 record keeping", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.handbook.fca.org.uk/handbook/SYSC/9/1.html", "label": "FCA Handbook, SYSC 9.1 general rules on record-keeping", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.legislation.gov.uk/ukpga/1980/58/section/5", "label": "Limitation Act 1980, s5 (six years in contract)", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.legislation.gov.uk/eur/2016/679/article/5", "label": "UK GDPR, art. 5 (storage limitation)", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.legislation.gov.uk/eur/2016/679/article/6", "label": "UK GDPR, art. 6 (lawful basis)", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.legislation.gov.uk/eur/2016/679/article/14", "label": "UK GDPR, art. 14 (data not obtained from the data subject)", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/170", "label": "Data Protection Act 2018, s170 (unlawful obtaining of personal data)", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.legislation.gov.uk/ukpga/2016/25/section/3", "label": "Investigatory Powers Act 2016, s3 (offence of unlawful interception)", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/1", "label": "Insolvency Act 1986, Sch 1 (powers of administrator, including sale)", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.legislation.gov.uk/ukpga/1986/45/schedule/B1/paragraph/60", "label": "Insolvency Act 1986, Sch B1 para 60", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/a-guide-to-lawful-basis/", "label": "ICO, A guide to lawful basis", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/monitoring-workers/", "label": "ICO, Employment practices: monitoring workers", "license": "from the publisher's own statutes, regulations and regulator pages; reproduced for comment", "class": "primary-government", "status": "not-terms", "why": "the stored read is the introduction and contents page of the ICO monitoring-workers guidance; it states no rule of its own" } ], "methodology": "Each rule's own statutes, regulations and regulator pages were read through estate-fetch and stored whole (sha256 on every row). For every page, four questions were answered from its own words: which country's law, what the rule settles for an email archive, the period it sets, what the rule says, verbatim. Every stated answer carries the sentence it rests on, checked against the stored text; 'not stated' means the page read does not address the question. A rule with several pages reads 'varies' where they disagree. 25 rules, 25 pages.", "embed": "
12 of 25 US and UK rules we read set how long business records must be kept; the rest govern who may see or sell them, read 28 October 2026.
How long business email must be kept, and who may see it, sellemailarchivetoai.com
" }