Document retention policy

Following good Information Governance procedures, the Data Protection Act 1998 and the General Data Protection Regulation 2018, St Leonard’s Practice seeks to ensure that personal data is not kept for longer than necessary for the purpose of which it was processed.

How long is data kept?

Different types of data are kept for different periods depending on what they were originally used for. The table below defines at what point the data is reviewed before a decision is taken on whether to continue storing or to shred the information. The Practice use the NHS Code of Practice Part 2 Second Edition as its guidance and follows this.

Download the full document retention policy.

Date published: 9th June, 2026
Date last updated: 9th June, 2026