Record Disposal and Retention

Records must be kept long enough to support care, audit, and legal requirements, then disposed of securely. Retention is defined by the NHS Records Management Code of Practice and may differ for adults, children, and specific clinical contexts. When in doubt, current schedules should be followed rather than informal local custom.^[1][4][2]

Applying retention schedules without error

• Categorise correctly: distinguish primary optical records, imaging/diagnostics, and correspondence; identify child vs adult records and special cases (e.g., safeguarding).^[5][1]
• Track dates and events: record creation, last activity, and any legal holds (complaints, incidents, litigation) that pause disposal.^[1]
• Evidence compliance: maintain a retention register and keep certificates of destruction for audits and inspections.^[2]

Retention needs to consider linked media: OCT volumes, field plots, and other images should follow the same schedule unless guidance specifies otherwise.^[6][1]

Photos form part of the clinical record.

^[3]

If records are migrated between systems, preserving metadata and audit trails helps provenance survive the move.^[1][6]

Secure destruction and breach prevention

• Paper: cross-cut shredding, pulping, or secure incineration via certified providers; never general waste.^[2]
• Digital: cryptographic wipe, degauss, or physical destruction of media with certificates; remove residual data from device caches.^[2]
• Log and verify: dual sign-off for destruction events, with reconciliation against the retention register.^[2][1]

Improper disposal risks data breaches, regulatory sanctions, and loss of public trust. Staff should be trained to recognise when retention pauses apply and how to escalate uncertainty to the data controller or Caldicott lead.^[2][1]

References (numbered in text) Why we include references

1. Records Management Code of Practice for Health and Social Care — NHS England (Records Management Code of Practice, 2021) Find (opens in a new tab)
2. Destruction — Information Commissioner's Office (ICO) Find (opens in a new tab)
3. Recordings made as part of a patient's care, including investigation or treatment of a condition — General Medical Council (GMC) Find (opens in a new tab)
4. 8. Maintain adequate patient records — General Optical Council (GOC) Find (opens in a new tab)
5. Patient records (including Imaging) — The College of Optometrists Find (opens in a new tab)
6. Electronic medical records standards for UK ophthalmology services — The Royal College of Ophthalmologists Find (opens in a new tab)