Certificate Retention Periods

Retention periods answer a practical question: how long should a certificate and its supporting records be kept, and by whom. Owners, assessors, schemes and registers each have different retention needs. An owner needs the current certificate for transactions and lettings, and older certificates as history for future assessments. An assessor needs survey records for correction and complaint purposes for the scheme's required period. A scheme needs lodged data for audit, quality control and register integrity. A register needs certificate data for public search and policy use, subject to its retention policy. Those needs overlap but are not identical, and a single retention rule does not cover all holders.

Certificate validity and retention are different concepts that are often confused. A UK EPC is valid for ten years for transaction purposes, but that does not mean it should be discarded after ten years, nor that it remains an accurate description for ten years where the building has changed. An expired certificate remains useful history, showing what a home was rated at assessment and what inputs drove that rating, and a new assessor can use it as a baseline, with its date and method noted. Retention beyond validity is therefore normal and useful for owners, even where the expired certificate can no longer be used for a transaction.

For owners, a sensible retention practice is to keep the current certificate, all superseded certificates, and their supporting evidence indefinitely in the building file, or at least for as long as the owner holds the property and for a reasonable period after sale, subject to personal data considerations. Personal correspondence and sensitive data should be separated from building evidence, so that the building file can be transferred to a buyer without transferring personal information unnecessarily.

For assessors and firms, retention follows scheme rules, which typically require survey records, photographs and lodged data to be kept for a defined period, often several years, to support corrections, complaints and audits. An assessor who discards records early cannot defend an assessment or correct it from evidence, and a firm that retains records without security or access controls creates data protection risks. Retention for assessors is therefore both a minimum, keep long enough for scheme purposes, and a maximum for personal data, do not keep personal data longer than necessary.

Registers have their own retention policies. Certificate data lodged on a register may remain searchable for a defined period, may be archived after expiry, or may remain available for policy and research in anonymised or aggregated form, depending on the register system. Owners should check the register route for their nation to understand how long a certificate remains publicly searchable, and should not assume that expiry from public search means deletion from all scheme records, or that continued search availability means the certificate remains valid for transactions.

For landlords and providers, retention should be organised per property, with certificate, exemption, improvement and letting records kept together and diarised for expiry and renewal. A portfolio retention system that mixes properties, or that discards records at certificate expiry, will fail at the next letting, enforcement check or funding bid, when a complete history is needed quickly. A per-property file, updated at each trigger and stage, is the practical solution.

By place, retention rules follow schemes and national law. UK assessor schemes and devolved registers set their own retention expectations, while EU national schemes and registers set theirs under national law and data protection rules. A holder of records in more than one system should follow the retention rule for each system, rather than applying one system's period everywhere, particularly where personal data is involved.

Data protection adds a retention ceiling for personal data, even where building data retention is longer. Names, contact details and photographs containing personal items should not be kept indefinitely without a purpose, while building data, such as ratings, inputs and work specifications, can often be kept longer as part of a building record, provided personal identifiers are removed or minimised. Separating building evidence from personal data at filing makes that distinction manageable.

A common mistake is to discard certificates at expiry, losing the history that future assessors and buyers need. Another mistake is the opposite: to keep every personal document indefinitely in a building file, creating data protection and privacy risks when the file is shared or transferred.

A further mistake is to rely solely on an assessor or register to hold records, and then to discover, at a transaction, that survey records have been archived or are unavailable. An owner's own building file is the durable record, and it should not depend on any single external holder.

Keep the building file live, adding each new certificate and stage, removing personal data that is no longer needed, and backing up digital files separately. That habit makes retention a routine rather than a periodic purge.

Questions to ask include: how long does this scheme require assessor records to be kept, how long will this certificate remain searchable, and what is in my own building file. Those questions give retention its proper shape.