The bodies which are responsible for safeguarding vulnerable adults and children are requiring organisations is the care sector to report any disciplinary situations to them. In the guidelines received so far this includes allegations and investigations. Will employers in this sector now have to keep records of investigations which have either been unfounded or unproven and if they do how does this affect data protection requirements? Up until now any investigation docuementation that has not resulted in a disciplinary process have been destroyed but it would appear this will not satisfy regulator’s demands in the future. Can anyone suggest a suitable retention policy for files of this kind?