Records Management Responsibilities By Business Function In The United Kingdom
Typical Records | Record Owner | Primary Responsibility | Key Internal Stakeholders | Coordination Notes |
|---|---|---|---|---|
Company Secretarial | ||||
Statutory registers, PSC register, board minutes, shareholder resolutions | Company Secretary | Create and maintain Review and approve Archive and retrieve | Board, Legal, Finance, Shareholders | Coordinate filings, board approvals and statutory inspection rights. |
Confirmation statements, accounts filings, officer appointments, registered office changes | Company Secretary | Create and maintain Review and approve Monitor compliance | Board, Finance, Legal | Align Companies House submissions with approved board records. |
Board Secretariat | ||||
Agendas, board packs, minutes, action logs, committee papers | Board Secretary | Create and maintain Archive and retrieve | Directors, Legal, Executive Team | Restrict access to privileged, confidential or market-sensitive papers. |
Finance | ||||
Ledgers, journals, trial balances, management accounts, reconciliations | Finance Director | Create and maintain Review and approve Archive and retrieve | Audit, Tax, Board, Operations | Retain evidence for statutory accounts, audit and tax enquiries. |
Accounts Payable | ||||
Supplier invoices, purchase orders, payment approvals, remittance advice | Accounts Payable Manager | Create and maintain Archive and retrieve | Procurement, Finance, Tax, Audit | Match invoices to contracts and purchase approvals before disposal. |
Accounts Receivable | ||||
Customer invoices, credit notes, statements, debt collection records | Credit Control Manager | Create and maintain Archive and retrieve | Sales, Finance, Legal, Customer Service | Check limitation, disputes and insolvency holds before deletion. |
Tax | ||||
VAT returns, corporation tax computations, payroll tax records, tax correspondence | Head of Tax | Review and approve Archive and retrieve Monitor compliance | Finance, Payroll, External Advisers, Audit | Preserve supporting evidence for HMRC enquiries and disclosures. |
VAT Compliance | ||||
VAT invoices, VAT account, MTD submissions, import VAT certificates | VAT Manager | Create and maintain Monitor compliance | Finance, Procurement, Sales, Logistics | Ensure digital links and evidence support VAT return figures. |
Payroll | ||||
Payslips, PAYE records, RTI submissions, deductions, benefits records | Payroll Manager | Create and maintain Archive and retrieve Monitor compliance | HR, Finance, Tax, Employees | Protect pay data and coordinate with HR on leavers and corrections. |
Pensions | ||||
Auto-enrolment records, pension contributions, opt-in and opt-out notices | Pensions Manager | Create and maintain Monitor compliance Archive and retrieve | Payroll, HR, Finance, Pension Provider | Coordinate contribution evidence with payroll and scheme administrators. |
Human Resources | ||||
Personnel files, contracts, right to work checks, appraisals, absence records | HR Director | Create and maintain Review and approve Archive and retrieve | Line Managers, Payroll, Legal, IT | Apply confidentiality, access controls and employment claim holds. |
Recruitment | ||||
CVs, applications, interview notes, offer letters, background checks | Recruitment Manager | Create and maintain Dispose or transfer Monitor compliance | Hiring Managers, HR, Legal, Data Protection | Separate successful candidate records from unsuccessful applicant data. |
Employee Relations | ||||
Disciplinary files, grievance records, investigation notes, settlement correspondence | Employee Relations Lead | Create and maintain Review and approve Archive and retrieve | HR, Legal, Line Managers, Unions | Legal should approve access and retention where claims are possible. |
Learning and Development | ||||
Training attendance, competency certificates, e-learning results, CPD records | Learning and Development Manager | Create and maintain Archive and retrieve | HR, Compliance, HSE, Line Managers | Retain mandatory training proof for audits and regulator reviews. |
HR Compliance | ||||
Right to work checks, share codes, visa documents, sponsor records | HR Compliance Manager | Create and maintain Monitor compliance Dispose or transfer | Recruitment, Legal, Line Managers | Track visa expiry, repeat checks and sponsor licence evidence. |
Legal | ||||
Executed contracts, negotiation drafts, legal opinions, authority approvals | General Counsel | Review and approve Archive and retrieve Monitor compliance | Sales, Procurement, Finance, Operations | Maintain contract repository and link obligations to business owners. |
Legal Disputes | ||||
Claims files, pleadings, evidence bundles, settlement agreements, court orders | Head of Litigation | Review and approve Archive and retrieve Monitor compliance | Finance, HR, IT, Operations, External Counsel | Issue legal holds and suspend deletion for relevant custodians. |
Legal Operations | ||||
Legal hold notices, custodian lists, preservation confirmations, release notices | Legal Operations Manager | Review and approve Monitor compliance | IT, HR, Finance, Records Owners | Override routine retention schedules until Legal releases the hold. |
Intellectual Property | ||||
Trade mark files, patent filings, design registrations, licence agreements | IP Counsel | Create and maintain Review and approve Archive and retrieve | R&D, Marketing, Legal, Finance | Track renewal deadlines and ownership evidence for registered rights. |
Data Protection | ||||
ROPA, DPIAs, privacy notices, consent records, breach logs | Data Protection Officer | Review and approve Monitor compliance Archive and retrieve | IT, Legal, Marketing, HR, Operations | Align retention schedules with UK GDPR storage limitation obligations. |
DSAR requests, identity checks, response bundles, exemptions and decision logs | Data Protection Officer | Review and approve Monitor compliance Archive and retrieve | HR, IT, Legal, Customer Service | Preserve search evidence and redaction rationale for complaints. |
Information Security | ||||
Security policies, risk assessments, access reviews, incident reports | Chief Information Security Officer | Create and maintain Monitor compliance Archive and retrieve | IT, Data Protection, Legal, Risk | Coordinate breach records with DPO and Legal notification decisions. |
IT Operations | ||||
Asset registers, configuration records, service tickets, change logs | IT Operations Manager | Create and maintain Archive and retrieve Dispose or transfer | Security, Finance, Procurement, Users | Link assets to licences, users, retention rules and disposal evidence. |
Identity and Access Management | ||||
User accounts, access approvals, privileged access logs, joiner-mover-leaver records | IAM Manager | Create and maintain Monitor compliance Dispose or transfer | HR, IT, Security, Audit | Synchronise access removal with HR leaver and contractor end dates. |
IT Continuity | ||||
Backup logs, restore tests, disaster recovery plans, recovery reports | IT Continuity Manager | Archive and retrieve Monitor compliance Dispose or transfer | IT, Security, Risk, Business Continuity | Ensure backups do not undermine approved deletion requirements. |
Procurement | ||||
Tender documents, supplier due diligence, purchase approvals, framework agreements | Head of Procurement | Create and maintain Review and approve Archive and retrieve | Legal, Finance, Operations, Risk | Keep award rationale and approvals with final supplier contract. |
Supplier Management | ||||
Supplier performance reviews, SLA reports, audits, corrective action plans | Supplier Relationship Manager | Create and maintain Monitor compliance | Procurement, Legal, Operations, Finance | Escalate poor performance evidence before renewal or termination. |
Procurement Compliance | ||||
Processor due diligence, DPAs, SCCs, transfer risk assessments | Procurement Compliance Lead | Review and approve Monitor compliance Archive and retrieve | Data Protection, Legal, IT, Security | DPO and Legal should approve high-risk processing suppliers. |
Sales | ||||
Proposals, quotes, order forms, sales contracts, renewal records | Sales Director | Create and maintain Archive and retrieve | Legal, Finance, Customer Success, Operations | Store signed terms and pricing approvals in the contract repository. |
Sales Operations | ||||
CRM accounts, contacts, pipeline history, opportunity notes, activity logs | Sales Operations Manager | Create and maintain Dispose or transfer Monitor compliance | Sales, Marketing, Customer Success, Data Protection | Remove stale personal data unless a lawful retention reason remains. |
Marketing | ||||
Marketing consents, suppression lists, campaign logs, preference centre records | Marketing Director | Create and maintain Monitor compliance Dispose or transfer | Sales, Data Protection, IT, Customer Service | Keep suppression records to avoid unlawful re-contact after opt-out. |
Digital Marketing | ||||
Cookie consent logs, analytics settings, tag records, cookie notices | Digital Marketing Manager | Create and maintain Monitor compliance | Data Protection, IT, Legal, Web Team | DPO should review consent mechanism and cookie retention periods. |
Customer Service | ||||
Support tickets, complaints, call recordings, chat transcripts, refund requests | Customer Service Manager | Create and maintain Archive and retrieve Dispose or transfer | Sales, Legal, Finance, Data Protection | Flag complaints, DSARs and disputes before routine deletion. |
Complaints Handling | ||||
Complaint files, investigation notes, outcomes, redress records, ombudsman correspondence | Complaints Manager | Create and maintain Review and approve Archive and retrieve | Legal, Customer Service, Compliance, Operations | Escalate regulated, legal or repeat complaints for retention review. |
Operations | ||||
Operating procedures, job sheets, production logs, service delivery records | Operations Director | Create and maintain Archive and retrieve | Quality, HSE, Finance, Customer Service | Retain evidence needed for quality, warranty and customer claims. |
Quality Management | ||||
Quality manuals, audit findings, non-conformance reports, corrective actions | Quality Manager | Create and maintain Monitor compliance Archive and retrieve | Operations, Compliance, Procurement, Customers | Align retention with certification, product liability and customer audit needs. |
Product Compliance | ||||
Safety assessments, technical files, conformity declarations, recall records | Product Compliance Manager | Create and maintain Monitor compliance Archive and retrieve | Legal, Quality, Operations, Customer Service | Preserve safety evidence for recalls, regulator enquiries and claims. |
Research and Development | ||||
Lab notebooks, design files, test results, prototypes, invention disclosures | R&D Director | Create and maintain Archive and retrieve | IP, Legal, Finance, Product | Protect confidentiality and evidence creation dates for IP ownership. |
Facilities | ||||
Leases, licences, maintenance logs, contractor records, inspection reports | Facilities Manager | Create and maintain Archive and retrieve Dispose or transfer | Legal, Finance, HSE, Procurement | Coordinate lease, insurance and safety evidence with Legal and HSE. |
Health and Safety | ||||
Risk assessments, accident reports, training records, inspection logs | Health and Safety Manager | Create and maintain Monitor compliance Archive and retrieve | Facilities, HR, Legal, Operations | Preserve accident evidence for RIDDOR, insurance and civil claims. |
RIDDOR reports, accident book entries, investigation records, witness statements | Health and Safety Manager | Create and maintain Review and approve Archive and retrieve | HR, Legal, Insurers, Line Managers | Legal should review serious incidents before disposal decisions. |
Facilities Compliance | ||||
Asbestos surveys, asbestos register, management plan, contractor permits | Facilities Compliance Manager | Create and maintain Monitor compliance Archive and retrieve | HSE, Legal, Landlord, Contractors | Keep current register accessible before maintenance or refurbishment work. |
Fire Safety | ||||
Fire risk assessments, evacuation drills, alarm tests, fire equipment checks | Responsible Person | Create and maintain Monitor compliance Archive and retrieve | Facilities, HSE, HR, Landlord | Update records after premises changes or fire safety remedial works. |
Environment and Sustainability | ||||
Waste transfer notes, permits, emissions data, environmental audits | Environmental Manager | Create and maintain Monitor compliance Archive and retrieve | Facilities, Operations, Procurement, Legal | Retain waste and permit evidence for regulator inspections. |
Insurance | ||||
Policies, claims files, renewal submissions, certificates, broker correspondence | Insurance Manager | Archive and retrieve Review and approve | Finance, Legal, HSE, Facilities | Preserve incident records supporting notified or potential claims. |
Risk Management | ||||
Risk registers, control assessments, incident logs, risk committee papers | Chief Risk Officer | Review and approve Monitor compliance Archive and retrieve | Board, Compliance, Finance, Operations | Link risk decisions to audit evidence and board reporting. |
Internal Audit | ||||
Audit plans, working papers, findings, management actions, assurance reports | Head of Internal Audit | Review and approve Archive and retrieve Monitor compliance | Audit Committee, Finance, Risk, Operations | Protect audit independence and track action closure evidence. |
Compliance | ||||
Policies, compliance attestations, monitoring reviews, regulatory correspondence | Compliance Officer | Review and approve Monitor compliance Archive and retrieve | Legal, Risk, HR, Operations | Maintain evidence of policy approval, staff attestations and remediation. |
Ethics and Compliance | ||||
Gifts registers, hospitality approvals, ABC training, due diligence reports | Ethics and Compliance Officer | Create and maintain Monitor compliance Archive and retrieve | Legal, Procurement, Sales, HR | Keep adequate procedures evidence for bribery risk defence. |
Whistleblowing | ||||
Speak-up reports, investigation files, outcome records, retaliation checks | Whistleblowing Officer | Create and maintain Review and approve Archive and retrieve | Legal, HR, Compliance, Board | Restrict access and protect reporter confidentiality throughout retention. |
Financial Crime Compliance | ||||
KYC files, CDD records, sanctions checks, SAR decisions, monitoring alerts | Money Laundering Reporting Officer | Create and maintain Monitor compliance Archive and retrieve | Sales, Legal, Finance, Operations | Limit access to SAR-sensitive material and tipping-off risks. |
Sanctions Compliance | ||||
Screening results, match reviews, licences, escalation decisions | Sanctions Compliance Lead | Create and maintain Review and approve Monitor compliance | Legal, Sales, Finance, Procurement | Document false positive decisions and licence conditions clearly. |
Treasury | ||||
Bank mandates, loan agreements, hedging records, cash forecasts | Treasurer | Create and maintain Review and approve Archive and retrieve | Finance, Legal, Board, Audit | Maintain signing authorities and evidence of board-approved borrowing. |
Finance Operations | ||||
Bank reconciliations, payment runs, mandate changes, payment approvals | Finance Operations Manager | Create and maintain Monitor compliance Archive and retrieve | Treasury, Audit, IT, Procurement | Preserve payment approval trails for fraud and audit investigations. |
Credit Management | ||||
Credit applications, credit checks, limits, guarantees, debt correspondence | Credit Manager | Create and maintain Review and approve Archive and retrieve | Sales, Finance, Legal | Retain guarantees and credit decisions while exposure remains open. |
Project Management Office | ||||
Project plans, RAID logs, approvals, change requests, closure reports | PMO Lead | Create and maintain Archive and retrieve Dispose or transfer | Finance, Legal, Operations, IT | Transfer deliverables and approvals to business owners at closure. |
Business Continuity | ||||
BCP plans, impact analyses, exercise reports, crisis logs | Business Continuity Manager | Create and maintain Monitor compliance Archive and retrieve | Risk, IT, Facilities, Executive Team | Update records after exercises, incidents and critical supplier changes. |
Communications | ||||
Press releases, media enquiries, public statements, crisis communications | Communications Director | Create and maintain Review and approve Archive and retrieve | Legal, Executive Team, Marketing, HR | Legal should review statements linked to disputes or incidents. |
Investor Relations | ||||
Investor presentations, analyst briefings, shareholder communications, market announcements | Investor Relations Director | Review and approve Archive and retrieve Monitor compliance | Board, Legal, Finance, Communications | Coordinate market-sensitive records with Legal and disclosure controls. |
ESG Reporting | ||||
ESG metrics, carbon data, supplier questionnaires, sustainability reports | ESG Reporting Lead | Create and maintain Review and approve Archive and retrieve | Finance, Sustainability, Procurement, Legal | Keep source evidence for published statements and assurance reviews. |
Supply Chain Compliance | ||||
Modern slavery statement, supplier questionnaires, risk assessments, board approval | Supply Chain Compliance Manager | Create and maintain Review and approve Monitor compliance | Procurement, Legal, Board, HR | Retain board approval and supplier due diligence behind statements. |
Fleet Management | ||||
Vehicle records, MOT certificates, driver checks, maintenance logs, incident reports | Fleet Manager | Create and maintain Monitor compliance Archive and retrieve | HR, Insurance, HSE, Finance | Coordinate accident records with insurers, HSE and Legal if claims arise. |
Travel and Expenses | ||||
Expense claims, receipts, approvals, travel bookings, mileage logs | Expenses Manager | Create and maintain Archive and retrieve Monitor compliance | Finance, HR, Tax, Line Managers | Retain evidence for tax, audit and anti-fraud monitoring. |
Property Management | ||||
Leases, rent reviews, licences to alter, dilapidations, service charge records | Property Manager | Archive and retrieve Review and approve | Legal, Finance, Facilities, Insurance | Retain lease evidence beyond occupation for claims and obligations. |
Information Governance | ||||
Retention schedule, disposal logs, classification scheme, records policies | Information Governance Manager | Review and approve Monitor compliance Dispose or transfer | Legal, Data Protection, IT, Business Owners | Maintain central policy but require business owners to approve rules. |
Records Archive | ||||
Archive inventories, retrieval logs, box lists, offsite storage records | Records Manager | Archive and retrieve Dispose or transfer | All Departments, Legal, IT, Facilities | Confirm ownership, retention and legal holds before destruction. |
Information Governance | ||||
Destruction certificates, disposal approvals, transfer logs, exception registers | Records Manager | Dispose or transfer Monitor compliance | Legal, Data Protection, IT, Business Owners | Require owner approval and legal hold clearance before destruction. |
Document Control | ||||
Controlled documents, version histories, approvals, obsolete document logs | Document Controller | Create and maintain Archive and retrieve Dispose or transfer | Quality, Operations, Compliance, IT | Archive superseded versions where evidence of past controls is needed. |
Compliance Training | ||||
Mandatory training completions, attestations, refresher schedules, assessment results | Compliance Training Manager | Create and maintain Monitor compliance Archive and retrieve | HR, Compliance, HSE, Managers | Keep proof of training for regulated and safety-critical roles. |
IT Asset Management | ||||
Software licences, subscriptions, entitlement records, audit evidence | IT Asset Manager | Create and maintain Monitor compliance Archive and retrieve | IT, Procurement, Finance, Legal | Retain licence evidence for vendor audits and renewal negotiations. |
Software Development | ||||
Source code repositories, release notes, change approvals, test evidence | Engineering Manager | Create and maintain Archive and retrieve Monitor compliance | Product, Security, IT, Legal | Preserve release evidence for incidents, audits and IP disputes. |
AI Governance | ||||
AI risk assessments, model inventories, prompts, testing logs, approval records | AI Governance Lead | Review and approve Monitor compliance Archive and retrieve | Legal, Data Protection, Security, Product | Keep records of human review, data sources and model change approvals. |
Physical Security | ||||
CCTV footage, access logs, visitor logs, incident reports | Security Manager | Create and maintain Dispose or transfer Monitor compliance | Facilities, HR, Legal, Data Protection | Export footage promptly for incidents before routine overwrite. |
Reception | ||||
Visitor sign-in logs, badges, meeting host records, evacuation lists | Office Manager | Create and maintain Dispose or transfer | Facilities, Security, HSE, Data Protection | Set short retention unless required for incidents or investigations. |
Mailroom | ||||
Incoming mail logs, courier receipts, recorded delivery proofs, scanning logs | Mailroom Supervisor | Create and maintain Archive and retrieve | Legal, Finance, HR, Operations | Escalate legal notices, claims and regulator letters immediately. |
Bid Management | ||||
Bid submissions, clarification questions, evaluation feedback, award notices | Bid Manager | Create and maintain Archive and retrieve | Sales, Legal, Finance, Operations | Preserve submitted bid versions and approvals for procurement challenges. |
Export Control | ||||
Export licences, classification decisions, end-user undertakings, shipment checks | Export Control Officer | Create and maintain Review and approve Monitor compliance | Legal, Sales, Logistics, Engineering | Retain classification and licence evidence for regulator audits. |
Logistics | ||||
Delivery notes, bills of lading, customs documents, proof of delivery | Logistics Manager | Create and maintain Archive and retrieve | Sales, Finance, Tax, Customer Service | Coordinate customs, VAT and customer delivery evidence with Finance. |
Customs Compliance | ||||
Import declarations, export declarations, commodity codes, origin evidence | Customs Compliance Manager | Create and maintain Monitor compliance Archive and retrieve | Logistics, Finance, Procurement, Sales | Retain declaration evidence for HMRC customs audits and corrections. |
Inventory Management | ||||
Stock counts, inventory adjustments, warehouse logs, write-off approvals | Inventory Manager | Create and maintain Archive and retrieve | Finance, Operations, Audit, Logistics | Retain evidence for valuation, shrinkage and audit testing. |
Manufacturing | ||||
Batch records, work orders, equipment logs, inspection results | Manufacturing Manager | Create and maintain Archive and retrieve Monitor compliance | Quality, HSE, Finance, Product Compliance | Retain traceability evidence for recalls, warranty and liability claims. |
Engineering Maintenance | ||||
Planned maintenance logs, calibration certificates, repair records, permits | Maintenance Manager | Create and maintain Archive and retrieve Monitor compliance | Operations, HSE, Quality, Facilities | Preserve maintenance evidence after accidents or equipment failures. |
Benefits Administration | ||||
Benefits elections, private medical records, salary sacrifice forms, provider files | Benefits Manager | Create and maintain Dispose or transfer Monitor compliance | HR, Payroll, Finance, Providers | Protect health data and reconcile deductions with Payroll. |
Occupational Health | ||||
Fitness reports, health surveillance records, workplace adjustment recommendations | Occupational Health Lead | Create and maintain Review and approve Archive and retrieve | HR, HSE, Line Managers, Legal | Separate clinical details from HR management records where possible. |
Equality and Inclusion | ||||
EDI monitoring data, pay gap analysis, reasonable adjustment records | EDI Lead | Create and maintain Review and approve Monitor compliance | HR, Legal, Payroll, Board | Minimise access to sensitive demographic and disability information. |
Reward | ||||
Bonus plans, salary reviews, remuneration committee papers, LTIP records | Reward Director | Create and maintain Review and approve Archive and retrieve | HR, Finance, Board, Payroll | Restrict pay records and align awards with board approvals. |
Share Schemes | ||||
Option grants, vesting records, exercise notices, EMI notifications | Share Schemes Manager | Create and maintain Review and approve Archive and retrieve | Company Secretarial, HR, Payroll, Tax | Coordinate grants, tax filings and cap table records consistently. |
Corporate Development | ||||
NDAs, due diligence files, transaction documents, valuation models | Corporate Development Director | Review and approve Archive and retrieve | Legal, Finance, Tax, Board | Apply restricted access and post-completion transfer rules. |
Transaction Management | ||||
Data room indexes, Q&A logs, disclosure bundles, access logs | Transaction Counsel | Archive and retrieve Dispose or transfer Monitor compliance | Legal, Finance, HR, IT | Remove bidder access and archive final disclosure set at close. |
Who Should Own Records Management Responsibilities In A UK Business?
Ownership should sit with the business function that understands the record and its operational purpose. For example, HR should own personnel records, Finance should own accounting and tax records, Company Secretarial should own statutory registers, and Legal should own litigation and legal hold records. IT, information governance and data protection teams should support these owners, but they should not be the default owner for every record set.
Which Records Need The Most Cross-Functional Control?
- Employee records often require coordination between HR, Payroll, Legal and Data Protection because they may contain special category data and may be needed for employment claims.
- Contracts, disputes and legal holds require Legal to suspend normal deletion by Finance, HR, Procurement, IT and operational teams where evidence may be relevant.
- Accounting, tax and payroll records require Finance-led ownership, with retention aligned to UK Companies Act, HMRC and audit requirements.
- Health and safety, accident, asbestos and fire safety records require Facilities, HSE, HR and Legal to coordinate because retention may be driven by long-tail liability and regulatory investigation risk.
- Marketing and customer data require close control by Marketing, Sales and Data Protection to evidence consent, suppression choices and compliance with UK GDPR and PECR.
How Should A Records Policy Allocate Responsibility?
A UK records retention policy should name a record owner for each record class, identify who can approve access and disposal, and explain when disposal must be paused. The dataset shows that most failures arise where records are shared across functions, such as procurement contracts used by Finance, HR files needed by Legal, or CRM data used by Marketing and Sales.
What Legal Triggers Should Be Reflected In Retention Workflows?
Retention workflows should include triggers for statutory retention, audit, subject access requests, investigations and legal holds. Important UK sources include the Companies Act 2006 accounting records requirement, Data Protection Act 2018, UK GDPR, and HMRC guidance on business record keeping at GOV.UK.

FAQs
You Might Also Be Interested In



