Docaro

Records Management Responsibilities By Business Function In The United Kingdom

Created:
This article helps United Kingdom organisations understand how records management duties are assigned across business functions. It supports clearer accountability, compliance, and operational efficiency, and complements our AI Generated Data Retention and Records Management Policy for use in the United Kingdom.
Typical Records
Record Owner
Primary Responsibility
Key Internal Stakeholders
Coordination Notes
Company Secretarial
Statutory registers, PSC register, board minutes, shareholder resolutions
Company Secretary
Create and maintain
Review and approve
Archive and retrieve
Board, Legal, Finance, Shareholders
Coordinate filings, board approvals and statutory inspection rights.
Confirmation statements, accounts filings, officer appointments, registered office changes
Company Secretary
Create and maintain
Review and approve
Monitor compliance
Board, Finance, Legal
Align Companies House submissions with approved board records.
Board Secretariat
Agendas, board packs, minutes, action logs, committee papers
Board Secretary
Create and maintain
Archive and retrieve
Directors, Legal, Executive Team
Restrict access to privileged, confidential or market-sensitive papers.
Finance
Ledgers, journals, trial balances, management accounts, reconciliations
Finance Director
Create and maintain
Review and approve
Archive and retrieve
Audit, Tax, Board, Operations
Retain evidence for statutory accounts, audit and tax enquiries.
Accounts Payable
Supplier invoices, purchase orders, payment approvals, remittance advice
Accounts Payable Manager
Create and maintain
Archive and retrieve
Procurement, Finance, Tax, Audit
Match invoices to contracts and purchase approvals before disposal.
Accounts Receivable
Customer invoices, credit notes, statements, debt collection records
Credit Control Manager
Create and maintain
Archive and retrieve
Sales, Finance, Legal, Customer Service
Check limitation, disputes and insolvency holds before deletion.
Tax
VAT returns, corporation tax computations, payroll tax records, tax correspondence
Head of Tax
Review and approve
Archive and retrieve
Monitor compliance
Finance, Payroll, External Advisers, Audit
Preserve supporting evidence for HMRC enquiries and disclosures.
VAT Compliance
VAT invoices, VAT account, MTD submissions, import VAT certificates
VAT Manager
Create and maintain
Monitor compliance
Finance, Procurement, Sales, Logistics
Ensure digital links and evidence support VAT return figures.
Payroll
Payslips, PAYE records, RTI submissions, deductions, benefits records
Payroll Manager
Create and maintain
Archive and retrieve
Monitor compliance
HR, Finance, Tax, Employees
Protect pay data and coordinate with HR on leavers and corrections.
Pensions
Auto-enrolment records, pension contributions, opt-in and opt-out notices
Pensions Manager
Create and maintain
Monitor compliance
Archive and retrieve
Payroll, HR, Finance, Pension Provider
Coordinate contribution evidence with payroll and scheme administrators.
Human Resources
Personnel files, contracts, right to work checks, appraisals, absence records
HR Director
Create and maintain
Review and approve
Archive and retrieve
Line Managers, Payroll, Legal, IT
Apply confidentiality, access controls and employment claim holds.
Recruitment
CVs, applications, interview notes, offer letters, background checks
Recruitment Manager
Create and maintain
Dispose or transfer
Monitor compliance
Hiring Managers, HR, Legal, Data Protection
Separate successful candidate records from unsuccessful applicant data.
Employee Relations
Disciplinary files, grievance records, investigation notes, settlement correspondence
Employee Relations Lead
Create and maintain
Review and approve
Archive and retrieve
HR, Legal, Line Managers, Unions
Legal should approve access and retention where claims are possible.
Learning and Development
Training attendance, competency certificates, e-learning results, CPD records
Learning and Development Manager
Create and maintain
Archive and retrieve
HR, Compliance, HSE, Line Managers
Retain mandatory training proof for audits and regulator reviews.
HR Compliance
Right to work checks, share codes, visa documents, sponsor records
HR Compliance Manager
Create and maintain
Monitor compliance
Dispose or transfer
Recruitment, Legal, Line Managers
Track visa expiry, repeat checks and sponsor licence evidence.
Legal
Executed contracts, negotiation drafts, legal opinions, authority approvals
General Counsel
Review and approve
Archive and retrieve
Monitor compliance
Sales, Procurement, Finance, Operations
Maintain contract repository and link obligations to business owners.
Legal Disputes
Claims files, pleadings, evidence bundles, settlement agreements, court orders
Head of Litigation
Review and approve
Archive and retrieve
Monitor compliance
Finance, HR, IT, Operations, External Counsel
Issue legal holds and suspend deletion for relevant custodians.
Legal Operations
Legal hold notices, custodian lists, preservation confirmations, release notices
Legal Operations Manager
Review and approve
Monitor compliance
IT, HR, Finance, Records Owners
Override routine retention schedules until Legal releases the hold.
Intellectual Property
Trade mark files, patent filings, design registrations, licence agreements
IP Counsel
Create and maintain
Review and approve
Archive and retrieve
R&D, Marketing, Legal, Finance
Track renewal deadlines and ownership evidence for registered rights.
Data Protection
ROPA, DPIAs, privacy notices, consent records, breach logs
Data Protection Officer
Review and approve
Monitor compliance
Archive and retrieve
IT, Legal, Marketing, HR, Operations
Align retention schedules with UK GDPR storage limitation obligations.
DSAR requests, identity checks, response bundles, exemptions and decision logs
Data Protection Officer
Review and approve
Monitor compliance
Archive and retrieve
HR, IT, Legal, Customer Service
Preserve search evidence and redaction rationale for complaints.
Information Security
Security policies, risk assessments, access reviews, incident reports
Chief Information Security Officer
Create and maintain
Monitor compliance
Archive and retrieve
IT, Data Protection, Legal, Risk
Coordinate breach records with DPO and Legal notification decisions.
IT Operations
Asset registers, configuration records, service tickets, change logs
IT Operations Manager
Create and maintain
Archive and retrieve
Dispose or transfer
Security, Finance, Procurement, Users
Link assets to licences, users, retention rules and disposal evidence.
Identity and Access Management
User accounts, access approvals, privileged access logs, joiner-mover-leaver records
IAM Manager
Create and maintain
Monitor compliance
Dispose or transfer
HR, IT, Security, Audit
Synchronise access removal with HR leaver and contractor end dates.
IT Continuity
Backup logs, restore tests, disaster recovery plans, recovery reports
IT Continuity Manager
Archive and retrieve
Monitor compliance
Dispose or transfer
IT, Security, Risk, Business Continuity
Ensure backups do not undermine approved deletion requirements.
Procurement
Tender documents, supplier due diligence, purchase approvals, framework agreements
Head of Procurement
Create and maintain
Review and approve
Archive and retrieve
Legal, Finance, Operations, Risk
Keep award rationale and approvals with final supplier contract.
Supplier Management
Supplier performance reviews, SLA reports, audits, corrective action plans
Supplier Relationship Manager
Create and maintain
Monitor compliance
Procurement, Legal, Operations, Finance
Escalate poor performance evidence before renewal or termination.
Procurement Compliance
Processor due diligence, DPAs, SCCs, transfer risk assessments
Procurement Compliance Lead
Review and approve
Monitor compliance
Archive and retrieve
Data Protection, Legal, IT, Security
DPO and Legal should approve high-risk processing suppliers.
Sales
Proposals, quotes, order forms, sales contracts, renewal records
Sales Director
Create and maintain
Archive and retrieve
Legal, Finance, Customer Success, Operations
Store signed terms and pricing approvals in the contract repository.
Sales Operations
CRM accounts, contacts, pipeline history, opportunity notes, activity logs
Sales Operations Manager
Create and maintain
Dispose or transfer
Monitor compliance
Sales, Marketing, Customer Success, Data Protection
Remove stale personal data unless a lawful retention reason remains.
Marketing
Marketing consents, suppression lists, campaign logs, preference centre records
Marketing Director
Create and maintain
Monitor compliance
Dispose or transfer
Sales, Data Protection, IT, Customer Service
Keep suppression records to avoid unlawful re-contact after opt-out.
Digital Marketing
Cookie consent logs, analytics settings, tag records, cookie notices
Digital Marketing Manager
Create and maintain
Monitor compliance
Data Protection, IT, Legal, Web Team
DPO should review consent mechanism and cookie retention periods.
Customer Service
Support tickets, complaints, call recordings, chat transcripts, refund requests
Customer Service Manager
Create and maintain
Archive and retrieve
Dispose or transfer
Sales, Legal, Finance, Data Protection
Flag complaints, DSARs and disputes before routine deletion.
Complaints Handling
Complaint files, investigation notes, outcomes, redress records, ombudsman correspondence
Complaints Manager
Create and maintain
Review and approve
Archive and retrieve
Legal, Customer Service, Compliance, Operations
Escalate regulated, legal or repeat complaints for retention review.
Operations
Operating procedures, job sheets, production logs, service delivery records
Operations Director
Create and maintain
Archive and retrieve
Quality, HSE, Finance, Customer Service
Retain evidence needed for quality, warranty and customer claims.
Quality Management
Quality manuals, audit findings, non-conformance reports, corrective actions
Quality Manager
Create and maintain
Monitor compliance
Archive and retrieve
Operations, Compliance, Procurement, Customers
Align retention with certification, product liability and customer audit needs.
Product Compliance
Safety assessments, technical files, conformity declarations, recall records
Product Compliance Manager
Create and maintain
Monitor compliance
Archive and retrieve
Legal, Quality, Operations, Customer Service
Preserve safety evidence for recalls, regulator enquiries and claims.
Research and Development
Lab notebooks, design files, test results, prototypes, invention disclosures
R&D Director
Create and maintain
Archive and retrieve
IP, Legal, Finance, Product
Protect confidentiality and evidence creation dates for IP ownership.
Facilities
Leases, licences, maintenance logs, contractor records, inspection reports
Facilities Manager
Create and maintain
Archive and retrieve
Dispose or transfer
Legal, Finance, HSE, Procurement
Coordinate lease, insurance and safety evidence with Legal and HSE.
Health and Safety
Risk assessments, accident reports, training records, inspection logs
Health and Safety Manager
Create and maintain
Monitor compliance
Archive and retrieve
Facilities, HR, Legal, Operations
Preserve accident evidence for RIDDOR, insurance and civil claims.
RIDDOR reports, accident book entries, investigation records, witness statements
Health and Safety Manager
Create and maintain
Review and approve
Archive and retrieve
HR, Legal, Insurers, Line Managers
Legal should review serious incidents before disposal decisions.
Facilities Compliance
Asbestos surveys, asbestos register, management plan, contractor permits
Facilities Compliance Manager
Create and maintain
Monitor compliance
Archive and retrieve
HSE, Legal, Landlord, Contractors
Keep current register accessible before maintenance or refurbishment work.
Fire Safety
Fire risk assessments, evacuation drills, alarm tests, fire equipment checks
Responsible Person
Create and maintain
Monitor compliance
Archive and retrieve
Facilities, HSE, HR, Landlord
Update records after premises changes or fire safety remedial works.
Environment and Sustainability
Waste transfer notes, permits, emissions data, environmental audits
Environmental Manager
Create and maintain
Monitor compliance
Archive and retrieve
Facilities, Operations, Procurement, Legal
Retain waste and permit evidence for regulator inspections.
Insurance
Policies, claims files, renewal submissions, certificates, broker correspondence
Insurance Manager
Archive and retrieve
Review and approve
Finance, Legal, HSE, Facilities
Preserve incident records supporting notified or potential claims.
Risk Management
Risk registers, control assessments, incident logs, risk committee papers
Chief Risk Officer
Review and approve
Monitor compliance
Archive and retrieve
Board, Compliance, Finance, Operations
Link risk decisions to audit evidence and board reporting.
Internal Audit
Audit plans, working papers, findings, management actions, assurance reports
Head of Internal Audit
Review and approve
Archive and retrieve
Monitor compliance
Audit Committee, Finance, Risk, Operations
Protect audit independence and track action closure evidence.
Compliance
Policies, compliance attestations, monitoring reviews, regulatory correspondence
Compliance Officer
Review and approve
Monitor compliance
Archive and retrieve
Legal, Risk, HR, Operations
Maintain evidence of policy approval, staff attestations and remediation.
Ethics and Compliance
Gifts registers, hospitality approvals, ABC training, due diligence reports
Ethics and Compliance Officer
Create and maintain
Monitor compliance
Archive and retrieve
Legal, Procurement, Sales, HR
Keep adequate procedures evidence for bribery risk defence.
Whistleblowing
Speak-up reports, investigation files, outcome records, retaliation checks
Whistleblowing Officer
Create and maintain
Review and approve
Archive and retrieve
Legal, HR, Compliance, Board
Restrict access and protect reporter confidentiality throughout retention.
Financial Crime Compliance
KYC files, CDD records, sanctions checks, SAR decisions, monitoring alerts
Money Laundering Reporting Officer
Create and maintain
Monitor compliance
Archive and retrieve
Sales, Legal, Finance, Operations
Limit access to SAR-sensitive material and tipping-off risks.
Sanctions Compliance
Screening results, match reviews, licences, escalation decisions
Sanctions Compliance Lead
Create and maintain
Review and approve
Monitor compliance
Legal, Sales, Finance, Procurement
Document false positive decisions and licence conditions clearly.
Treasury
Bank mandates, loan agreements, hedging records, cash forecasts
Treasurer
Create and maintain
Review and approve
Archive and retrieve
Finance, Legal, Board, Audit
Maintain signing authorities and evidence of board-approved borrowing.
Finance Operations
Bank reconciliations, payment runs, mandate changes, payment approvals
Finance Operations Manager
Create and maintain
Monitor compliance
Archive and retrieve
Treasury, Audit, IT, Procurement
Preserve payment approval trails for fraud and audit investigations.
Credit Management
Credit applications, credit checks, limits, guarantees, debt correspondence
Credit Manager
Create and maintain
Review and approve
Archive and retrieve
Sales, Finance, Legal
Retain guarantees and credit decisions while exposure remains open.
Project Management Office
Project plans, RAID logs, approvals, change requests, closure reports
PMO Lead
Create and maintain
Archive and retrieve
Dispose or transfer
Finance, Legal, Operations, IT
Transfer deliverables and approvals to business owners at closure.
Business Continuity
BCP plans, impact analyses, exercise reports, crisis logs
Business Continuity Manager
Create and maintain
Monitor compliance
Archive and retrieve
Risk, IT, Facilities, Executive Team
Update records after exercises, incidents and critical supplier changes.
Communications
Press releases, media enquiries, public statements, crisis communications
Communications Director
Create and maintain
Review and approve
Archive and retrieve
Legal, Executive Team, Marketing, HR
Legal should review statements linked to disputes or incidents.
Investor Relations
Investor presentations, analyst briefings, shareholder communications, market announcements
Investor Relations Director
Review and approve
Archive and retrieve
Monitor compliance
Board, Legal, Finance, Communications
Coordinate market-sensitive records with Legal and disclosure controls.
ESG Reporting
ESG metrics, carbon data, supplier questionnaires, sustainability reports
ESG Reporting Lead
Create and maintain
Review and approve
Archive and retrieve
Finance, Sustainability, Procurement, Legal
Keep source evidence for published statements and assurance reviews.
Supply Chain Compliance
Modern slavery statement, supplier questionnaires, risk assessments, board approval
Supply Chain Compliance Manager
Create and maintain
Review and approve
Monitor compliance
Procurement, Legal, Board, HR
Retain board approval and supplier due diligence behind statements.
Fleet Management
Vehicle records, MOT certificates, driver checks, maintenance logs, incident reports
Fleet Manager
Create and maintain
Monitor compliance
Archive and retrieve
HR, Insurance, HSE, Finance
Coordinate accident records with insurers, HSE and Legal if claims arise.
Travel and Expenses
Expense claims, receipts, approvals, travel bookings, mileage logs
Expenses Manager
Create and maintain
Archive and retrieve
Monitor compliance
Finance, HR, Tax, Line Managers
Retain evidence for tax, audit and anti-fraud monitoring.
Property Management
Leases, rent reviews, licences to alter, dilapidations, service charge records
Property Manager
Archive and retrieve
Review and approve
Legal, Finance, Facilities, Insurance
Retain lease evidence beyond occupation for claims and obligations.
Information Governance
Retention schedule, disposal logs, classification scheme, records policies
Information Governance Manager
Review and approve
Monitor compliance
Dispose or transfer
Legal, Data Protection, IT, Business Owners
Maintain central policy but require business owners to approve rules.
Records Archive
Archive inventories, retrieval logs, box lists, offsite storage records
Records Manager
Archive and retrieve
Dispose or transfer
All Departments, Legal, IT, Facilities
Confirm ownership, retention and legal holds before destruction.
Information Governance
Destruction certificates, disposal approvals, transfer logs, exception registers
Records Manager
Dispose or transfer
Monitor compliance
Legal, Data Protection, IT, Business Owners
Require owner approval and legal hold clearance before destruction.
Document Control
Controlled documents, version histories, approvals, obsolete document logs
Document Controller
Create and maintain
Archive and retrieve
Dispose or transfer
Quality, Operations, Compliance, IT
Archive superseded versions where evidence of past controls is needed.
Compliance Training
Mandatory training completions, attestations, refresher schedules, assessment results
Compliance Training Manager
Create and maintain
Monitor compliance
Archive and retrieve
HR, Compliance, HSE, Managers
Keep proof of training for regulated and safety-critical roles.
IT Asset Management
Software licences, subscriptions, entitlement records, audit evidence
IT Asset Manager
Create and maintain
Monitor compliance
Archive and retrieve
IT, Procurement, Finance, Legal
Retain licence evidence for vendor audits and renewal negotiations.
Software Development
Source code repositories, release notes, change approvals, test evidence
Engineering Manager
Create and maintain
Archive and retrieve
Monitor compliance
Product, Security, IT, Legal
Preserve release evidence for incidents, audits and IP disputes.
AI Governance
AI risk assessments, model inventories, prompts, testing logs, approval records
AI Governance Lead
Review and approve
Monitor compliance
Archive and retrieve
Legal, Data Protection, Security, Product
Keep records of human review, data sources and model change approvals.
Physical Security
CCTV footage, access logs, visitor logs, incident reports
Security Manager
Create and maintain
Dispose or transfer
Monitor compliance
Facilities, HR, Legal, Data Protection
Export footage promptly for incidents before routine overwrite.
Reception
Visitor sign-in logs, badges, meeting host records, evacuation lists
Office Manager
Create and maintain
Dispose or transfer
Facilities, Security, HSE, Data Protection
Set short retention unless required for incidents or investigations.
Mailroom
Incoming mail logs, courier receipts, recorded delivery proofs, scanning logs
Mailroom Supervisor
Create and maintain
Archive and retrieve
Legal, Finance, HR, Operations
Escalate legal notices, claims and regulator letters immediately.
Bid Management
Bid submissions, clarification questions, evaluation feedback, award notices
Bid Manager
Create and maintain
Archive and retrieve
Sales, Legal, Finance, Operations
Preserve submitted bid versions and approvals for procurement challenges.
Export Control
Export licences, classification decisions, end-user undertakings, shipment checks
Export Control Officer
Create and maintain
Review and approve
Monitor compliance
Legal, Sales, Logistics, Engineering
Retain classification and licence evidence for regulator audits.
Logistics
Delivery notes, bills of lading, customs documents, proof of delivery
Logistics Manager
Create and maintain
Archive and retrieve
Sales, Finance, Tax, Customer Service
Coordinate customs, VAT and customer delivery evidence with Finance.
Customs Compliance
Import declarations, export declarations, commodity codes, origin evidence
Customs Compliance Manager
Create and maintain
Monitor compliance
Archive and retrieve
Logistics, Finance, Procurement, Sales
Retain declaration evidence for HMRC customs audits and corrections.
Inventory Management
Stock counts, inventory adjustments, warehouse logs, write-off approvals
Inventory Manager
Create and maintain
Archive and retrieve
Finance, Operations, Audit, Logistics
Retain evidence for valuation, shrinkage and audit testing.
Manufacturing
Batch records, work orders, equipment logs, inspection results
Manufacturing Manager
Create and maintain
Archive and retrieve
Monitor compliance
Quality, HSE, Finance, Product Compliance
Retain traceability evidence for recalls, warranty and liability claims.
Engineering Maintenance
Planned maintenance logs, calibration certificates, repair records, permits
Maintenance Manager
Create and maintain
Archive and retrieve
Monitor compliance
Operations, HSE, Quality, Facilities
Preserve maintenance evidence after accidents or equipment failures.
Benefits Administration
Benefits elections, private medical records, salary sacrifice forms, provider files
Benefits Manager
Create and maintain
Dispose or transfer
Monitor compliance
HR, Payroll, Finance, Providers
Protect health data and reconcile deductions with Payroll.
Occupational Health
Fitness reports, health surveillance records, workplace adjustment recommendations
Occupational Health Lead
Create and maintain
Review and approve
Archive and retrieve
HR, HSE, Line Managers, Legal
Separate clinical details from HR management records where possible.
Equality and Inclusion
EDI monitoring data, pay gap analysis, reasonable adjustment records
EDI Lead
Create and maintain
Review and approve
Monitor compliance
HR, Legal, Payroll, Board
Minimise access to sensitive demographic and disability information.
Reward
Bonus plans, salary reviews, remuneration committee papers, LTIP records
Reward Director
Create and maintain
Review and approve
Archive and retrieve
HR, Finance, Board, Payroll
Restrict pay records and align awards with board approvals.
Share Schemes
Option grants, vesting records, exercise notices, EMI notifications
Share Schemes Manager
Create and maintain
Review and approve
Archive and retrieve
Company Secretarial, HR, Payroll, Tax
Coordinate grants, tax filings and cap table records consistently.
Corporate Development
NDAs, due diligence files, transaction documents, valuation models
Corporate Development Director
Review and approve
Archive and retrieve
Legal, Finance, Tax, Board
Apply restricted access and post-completion transfer rules.
Transaction Management
Data room indexes, Q&A logs, disclosure bundles, access logs
Transaction Counsel
Archive and retrieve
Dispose or transfer
Monitor compliance
Legal, Finance, HR, IT
Remove bidder access and archive final disclosure set at close.

Who Should Own Records Management Responsibilities In A UK Business?

Ownership should sit with the business function that understands the record and its operational purpose. For example, HR should own personnel records, Finance should own accounting and tax records, Company Secretarial should own statutory registers, and Legal should own litigation and legal hold records. IT, information governance and data protection teams should support these owners, but they should not be the default owner for every record set.

Which Records Need The Most Cross-Functional Control?

  • Employee records often require coordination between HR, Payroll, Legal and Data Protection because they may contain special category data and may be needed for employment claims.
  • Contracts, disputes and legal holds require Legal to suspend normal deletion by Finance, HR, Procurement, IT and operational teams where evidence may be relevant.
  • Accounting, tax and payroll records require Finance-led ownership, with retention aligned to UK Companies Act, HMRC and audit requirements.
  • Health and safety, accident, asbestos and fire safety records require Facilities, HSE, HR and Legal to coordinate because retention may be driven by long-tail liability and regulatory investigation risk.
  • Marketing and customer data require close control by Marketing, Sales and Data Protection to evidence consent, suppression choices and compliance with UK GDPR and PECR.

How Should A Records Policy Allocate Responsibility?

A UK records retention policy should name a record owner for each record class, identify who can approve access and disposal, and explain when disposal must be paused. The dataset shows that most failures arise where records are shared across functions, such as procurement contracts used by Finance, HR files needed by Legal, or CRM data used by Marketing and Sales.

What Legal Triggers Should Be Reflected In Retention Workflows?

Retention workflows should include triggers for statutory retention, audit, subject access requests, investigations and legal holds. Important UK sources include the Companies Act 2006 accounting records requirement, Data Protection Act 2018, UK GDPR, and HMRC guidance on business record keeping at GOV.UK.

Records Management Responsibilities by Business Function
Want to Generate Your own Data Retention and Records Management Policy?
Docaro AI can help you write your own Data Retention and Records Management Policy for use in the United Kingdom in minutes.
Generate Your Document Now

FAQs

In the UK, records management responsibility is usually shared across legal, compliance, IT, HR, finance, operations and senior management. Each function manages records relevant to its activities while following the organisation’s retention policy.
Show All FAQs

You Might Also Be Interested In

UK Business Record Retention Schedule
UK business record retention schedule for compliance, audits, governance, and effective records management.
UK Retention Drivers and Policy Considerations
Explore UK retention drivers and policy considerations for practical records management, compliance planning, and data governance decisions.
United Kingdom data retention decision tree for choosing record retention periods and supporting compliant records management.
United Kingdom Records Disposal and Archiving Decision Tree
United Kingdom records disposal and archiving decision tree for compliant retention, secure destruction, and practical recordkeeping.
United Kingdom Records Management Responsibility Decision Tree
United Kingdom records management decision tree to clarify responsibilities, improve compliance, and support policy implementation.

References and Information Sources