Experian's Credit Reference Data Retention Periods

The retention periods in the table are those linked to in section 7 of CRAIN. These periods are subject to regular review and may change from time to time.

Information type	Retention period
Identifiers	Identification data like names, addresses and dates of birth are kept while there is a continuing need to keep it. This need will be assessed on a regular basis, and data that is no longer needed for any purpose will be disposed of.
Electoral register data	We will retain this information while the consumer has an open ER record or they are a current occupant at an address. Where a consumer has a closed ER record or is no longer a current occupant, we will retain this information until 11 years after the close date.
Credit account performance data	11 years. This consists of six years for live decision-making plus a further five years for profiling and statistical analysis. For commercial credit accounts, which includes non-limited companies, sole traders and partnerships, as well as limited companies, profiling and statistical analysis may take place for up to 21 years in order to provide insight across multiple economic cycles.
Current Account turnover data	6 years. This consists of 12 months for live decision making plus a further 5 years for profiling and statistical analysis.
Application salary data	6 years. This consists of 12 months for live decision making plus a further 5 years for profiling and statistical analysis.
Open Banking data	6 years. This consists of 12 months for live decision making plus a further 5 years for profiling and statistical analysis.
Judgment data	11 years. This consists of six years for live decision-making plus a further five years for profiling and statistical analysis. For commercial judgment data, which includes non-limited companies, sole traders and partnerships, as well as limited companies, profiling and statistical analysis may take place for up to 21 years in order to provide insight across multiple economic cycles.
Insolvency data	6 years from the start date, or until the stated end date (whichever is latest). It can then be held for a further 5 years for profiling and statistical analysis.
Rental related data	12 years. This consists of up to 6 years for the tenancy period and 6 years from the end of the tenancy.
Search footprints	HARD Footprints, which are visible to lenders, are kept for one year for live decision-making plus a further five years for profiling and statistical analysis. SOFT Footprints, which are only visible to consumers, are kept for one year. Except for Debt Recovery searches, which are kept for two years plus a further five years for profiling and statistical analysis; and Insurance Quotation searches, which are only kept for three months. Additional contact information received as part of a search footprint (such as email address or phone number) may be used and retained for up to six years.
Fraud prevention indicators	Cifas data is retained for six years for individuals who are suspected to pose a fraud or money laundering risk, or two years for individuals who are suspected to be victims of fraud.
Other third party data	Other third party data may be kept for a range of different periods depending on the nature of the data and the licence period granted by the data supplier.
Other data credit reference agencies create	Address links and aliases are retained for as long as they are relevant for the purposes for which they are used, such as asset reunification and tracing for debt collection purposes. Financial association links are made between people for as long as the credit reference agencies believe that those individuals continue to be financially connected or until notified that they are no longer financially associated. When two people stop being financially associated, either can write to each credit reference agency and ask for the link to be removed. Each credit reference agency will then follow a process to check the people are no longer associated with each other. The fact that the individuals were once financially associated will be retained for audit and analytical purposes.
Data provided by individuals themselves	A notice of correction which is applied to a particular entry on your credit report is retained for the same duration as the data to which it relates or until you ask for it to be removed. A notice of correction which is applied to your credit report as a whole is retained indefinitely until you ask for it to be removed.
Archived data	Credit reference agencies may hold credit reference data in an archived form for longer than the periods described above for activities such as research and development, compliance with legal requirements (including supporting third parties with such requirements), audit, and the establishment, exercise or defence of legal claims.

Notes:

Information about a judgment can be removed if the judgment is paid within one calendar month of the date of the judgment, or if the judgment is set aside or recalled by the courts.
Insolvency data may be retained for longer than indicated if the relevant event (such as the period of the bankruptcy) is extended. Some data, such as a bankruptcy restrictions order, can also remain in live use for longer than six years. Although the start of these events is automatically reported to the credit reference agencies, the end (such as a discharge from bankruptcy or completion of an Individual Voluntary Arrangement) might not be. Therefore, consumers are advised to contact the credit reference agencies when this happens to make sure their credit reference data is updated accordingly.
Where the table above does not provide a specific retention period, the credit reference agencies retain data for a period which is appropriate taking into account factors such as the period for which the data is expected to remain relevant, accurate and necessary to achieve the aims for which it is being held; any contractual restrictions imposed by the relevant data suppliers; regulatory requirements; industry practice; and any limitation periods set out in law.
The table does not include retention periods for personal data that is used in the marketing services Experian provides to clients. Information about those retention periods is provided on Experian’s Consumer Information Portal in the section linked to from here https://www.experian.co.uk/privacy/consumer-information-portal/protecting-data/safeguards/

Experian Ltd is authorised and regulated by the Financial Conduct Authority (firm reference number 738097). Experian Ltd is registered in England and Wales (no. 00653331). Registered office: The Sir John Peace Building, Experian Way, NG2 Business Park, Nottingham NG80 1ZZ.