Records Retention for Law Firms in 2026
Closing a file does not settle records retention. Build a retention schedule by record type, check preservation holds and document disposal authority.
- Published
- Updated
Records retention means keeping each category of record for a justified period, measured from a defined event. For a law firm, the schedule must identify the applicable jurisdiction and the authority for any eventual disposal. Closing a matter starts a review process. It does not give permission to destroy everything in the folder.
What Records Retention Means for a Legal File
A legal file contains different record categories, each of which needs its own retention decision. Client documents can sit beside the firm’s working papers and records of trust money. A commissioned report and its source material can also form part of the matter.
Separate the client file from original documents held in safe custody. Identify trust records independently of office accounting material. Distinguish bank PDFs from extracted transactions and the findings derived from them. These categories can share a matter number while having different owners or continuing uses.
In NSW, the Law Society’s client-document guidance explains reasonable care and return obligations. It describes rule 14’s seven-year period from completion or termination of the engagement, subject to client instructions and legislation. That conditional permission does not establish a national disposal rule for every document category.
Government records require their own jurisdiction-specific authority before a practice applies a general schedule. The public records act guide covers that separate framework.
Build and Maintain the Retention Schedule
Build a records retention schedule around the obligation for each category and the event that starts its period. Keep the source and its version beside the schedule entry so a supervisor can check the calculation.
Fields for Each Schedule Entry
Use the following fields for each category. Leave the period field blank until the responsible reviewer has established the applicable rule.
| Field | What the practice records |
|---|---|
| Record category | The documents covered, with exclusions such as safe-custody originals |
| Applicable jurisdiction | The state or territory, plus any relevant Commonwealth regime |
| Legal or operational basis | The provision, client instruction or documented continuing purpose |
| Trigger | The event that starts the period, with evidence of when it occurred |
| Period to verify | The applicable duration and any condition that changes the calculation |
| Record owner | The named practice role responsible for the entry and its exceptions |
| Storage location | The physical location or system, including relevant provider copies |
| Disposal authority | The person authorised to approve disposal and the required approval record |
The distinction between triggers can change the result. A period measured from the end of an engagement differs from one measured from completion of a transaction. A record created late in the matter might also fall under a separate obligation.
Victoria’s trust-account guidance illustrates the difference. It specifies seven years after the last transaction entry or finalisation of the relevant matter, whichever is later. Record the governing trust-record provision for the applicable jurisdiction before adopting that entry elsewhere.
For office accounting material, identify the entity that owns the obligation and the record concerned. Keep the analysis of section 286 of the Corporations Act separate from the firm’s client-file schedule. A company’s financial records and a solicitor’s retained copy need separate classification.
When a source obligation changes, record the amendment and review the categories it affects. Determine how its commencement and transitional rules apply to existing records. Preserve the previous schedule version and record any revised endpoint. A shorter amended period must still pass the hold and authority review before disposal.
Apply Retention Duties and Check Holds Before Disposal
Check continuing preservation requirements before approving disposal, even when the scheduled period has elapsed. The scheduled endpoint is a review point with conditions attached.
Give the supervising solicitor the proposed record set and check for the following matters.
- Current or anticipated proceedings and relevant court orders.
- An investigation or unresolved complaint that needs the records.
- Client ownership, instructions and outstanding return requests.
- Continuing statutory duties, contractual obligations or another documented need.
Where a preservation duty applies, it prevents disposal of the affected records despite the ordinary schedule. Route the decision through the practice’s litigation hold process. The retention schedule needs the hold reference and responsible decision maker, without reproducing the whole hold procedure.
A Closed Financial Dispute
Consider a fictional matter containing original bank PDFs, an extracted transaction workbook and a commissioned report. The engagement has ended, and the matter reaches its scheduled review point. A new complaint challenges the handling of a transfer discussed in the report.
The supervising solicitor identifies which records the complaint requires. The relevant PDF pages explain the transaction, while the workbook shows its classification and the report records the finding. Preserve that connected set and the references between its parts while the applicable preservation requirement continues.
Incorrect handling would remove the PDFs because the report appears to contain the same information. Correct handling keeps the source records available alongside the derived analysis covered by the preservation decision. Record the reason and review responsibility for each affected category. Unaffected records still need their own review before any disposal is authorised.
Preserve Usable Records Across Providers and Formats
Retained records must remain readable and connected to their sources when a practice changes systems or providers. A stored file that nobody can open or locate cannot support the same work as an accessible record.
Keep a file inventory with stable identifiers. Preserve originals alongside any necessary exported version and record how filenames or page references changed during migration. Store authorised access and recovery instructions securely, separate from ordinary matter notes where appropriate.
A provider handover needs answers about which records the practice can export and how long access continues after termination. Establish the format of exported records and whether annotations or source references survive. Identify backup copies, their retention cycle and the procedure for recovering records under a continuing hold.
For commissioned bank-statement analysis, keep the delivered workbook and report connected to the supplied PDFs. FinTrace saves professionals hours of statement review and gives each finding its source PDF filename and page. Preserving those references keeps the underlying evidence at hand after the matter closes. Apply the practice’s retention decision to its copies and record the provider’s separate contractual arrangements.
A deletion request can affect active storage differently from backups. Obtain the provider’s process for expired copies and recovery systems before recording disposal as complete. The OAIC’s APP 11 guidance addresses archived and backup copies, including the limited circumstances where information must be put beyond use. A request alone does not establish that every copy has disappeared.
Return Records and Document a Disposal Decision
Treat a client’s return or transfer request separately from the firm’s retention review. Establish which documents belong to the client and which records the practice has a lawful reason to retain.
In Queensland, rule 14 and its commentary address return on request after completion or termination, subject to an effective lien. The commentary also addresses consent before destruction. Apply the operative local requirements to the request and record the handover. Returning documents does not itself settle whether particular copies or related practice records must remain.
For practices covered by the Privacy Act, Australian Privacy Principle 11 requires reasonable steps to destroy or de-identify personal information no longer needed for a permitted purpose. Exceptions include retention required by Australian law or a court or tribunal order, and Commonwealth records. The OAIC’s security guide explains this relationship. Retention under a provider arrangement can still involve information the practice holds or controls.
Privacy Act coverage is a separate assessment. The OAIC’s small-business guidance explains the general exemption for businesses with annual turnover of $3 million or less, with exceptions. Assess the practice’s activities and applicable exceptions before treating that exemption as available. Professional confidentiality obligations also continue under their own rules.
The Disposal Decision Log
Create a decision record before any authorised disposal. Record the following details for the actual records under review.
| Log entry | What the reviewer records |
|---|---|
| Record set | Matter number, category and exact scope of copies |
| Authority checked | Applicable provision or instruction, its version and the reviewer’s conclusion |
| Period calculation | Trigger evidence and the calculated endpoint |
| Preservation review | Hold checks, unresolved issues and any release decision relied on |
| Client rights | Ownership, consent and return or transfer arrangements |
| Approval | Named approver, decision and approval date |
| Authorised method | Method appropriate to the records and required provider action |
| Completion evidence | Confirmation of the action, remaining copies and their continuing treatment |
This article supplies a review framework. It is not authority to delete a client file. Protect client confidentiality throughout return, continued storage and any authorised disposal.
Review the Schedule and Exceptions
Assign schedule maintenance to a named practice role, with a supervising solicitor responsible for legal decisions. Set a periodic review and additional reviews after legal changes or provider migrations. A new complaint or preservation requirement also needs a prompt review of affected records.
Keep an exception register for departures from the standard schedule. Record the affected category, reason for departure and responsible person. Include the next review event so an exception remains visible when the original matter team has moved on.
To check the process, select one closed file and ask a reviewer to locate its retention basis and trigger evidence. The reviewer must also find outstanding holds and the person responsible for the next decision. If the trigger is missing, correct the calculation before treating the file as eligible for disposal. If a hold’s status is unclear, refer it to its responsible solicitor and keep disposal suspended until that decision is recorded.
FinTrace
Statements in. Evidence out.
FinTrace turns your bank statements into one searchable Excel ledger and a written findings report, with every finding cited to its source page.
FinTrace
See how FinTrace works