1. Set and follow standard retention times for categories of information held on the records of employees, workers and former workers. Base the retention times on your business needs, taking into account any relevant professional guidelines and a risk analysis approach. Records should only be retained for a particular purpose and should not be kept for longer than is necessary for that purpose.
2. Be aware of statutory requirements to retain records, for example in relation to income tax or certain aspects of health and safety, as those requirements override data protection guidance on retention of records.
3. Identify who, within the Company, retains employment records. Provide training on the retention of records to those persons.
4. Ensure no one retains information beyond the standard retention times, unless there is a sound business reason for doing so.