what are the requirements for record keeping?
In 20 (2), it requires any record, paper or electronic, to be kept securely, but in a place where it can be accessed promptly when needed. A record should then be kept for an “appropriate” period of time, after which it should be securely destroyed.