For how long should records of destruction be kept?

• A. 2 years
• B. 3 years
• C. 5 years
• D. 7 years

Answer: (C)

Records of destruction create an auditable trail showing what was destroyed, when, and by whom. Keeping this destruction log for five years provides a solid window to address audits, regulatory inquiries, or potential disputes that may arise after destruction. It offers enough time to respond within common statutory and audit cycles while avoiding unnecessarily long retention. Shorter periods like two or three years may not cover later reviews, and keeping logs for seven years can be more burdensome than needed. Five years strikes a practical balance, ensuring you have documentation ready if questions come up.