Cookies on the Gambling Commission website

The Gambling Commission website uses cookies to make the site work better for you. Some of these cookies are essential to how the site functions and others are optional. Optional cookies help us remember your settings, measure your use of the site and personalise how we communicate with you. Any data collected is anonymised and we do not set optional cookies unless you consent.

Set cookie preferences

You've accepted all cookies. You can change your cookie settings at any time.

Skip to main content
  1. Home
  2. About us
  3. Records Retention Schedule

Guidance

Records Retention Schedule

The Gambling Commission's Records Retention Schedule.

Published
12 May 2026

Last updated
12 May 2026 - Changes

Document actions
Print or save (opens in new tab)

  1. Contents
  2. Information Management function

Information Management function

Information Management function records retention schedule

Information Management function records retention schedule
Type of record Retention period Trigger Reason and/or relevant legislation Action at end of retention period
Data protection impact assessments (DPIA) 6 years Date completed Limitation Act 1980 Destroy
Information Asset Register 6 years When superseded Limitation Act 1980 Destroy
Information audits and/or health checks 6 years Date completed Limitation Act 1980 Destroy
Information request appeals for Freedom of Information (FOI) or Subject Access Requests (SAR) 3 years Conclusion of appeal Business need Destroy
Information requests, responses and information gathered (including FOI and SAR requests log) 3 years Last action Business need Destroy
Information security breaches - reports, investigations, outcomes 6 years Closure of case Limitation Act 1980 Destroy
Information sharing agreements 6 years Expiration of agreement Limitation Act 1980 Destroy
Legitimate Interest Assessments 6 years Date completed Limitation Act 1980 Destroy
Memoranda of Understanding (MOUs) 6 years Expiration of agreement Limitation Act 1980 Destroy
Privacy notices 6 years When superseded Limitation Act 1980 Destroy
Record of processing activity (ROPA) 6 years When superseded Limitation Act 1980 Destroy
Records relating to the transfer of records to the National Archives including catalogue lists, transfer sheets 6 years Date of transfer National Archives retention guidance Review
Retention schedule previous versions 6 years When superseded Limitation Act 1980 Destroy
Previous section
Governance function Next section
IT function
Is this page useful?
Back to top