What is the recommended practice for retaining client records after the engagement ends?

• A. Destroy records after five years.
• B. Keep records for the client's lifetime.
• C. Destroy all records after seven years.
• D. Maintain records in accordance with legal requirements and firm policy; keep for as long as required.

Answer: (D)

Record retention after an engagement ends should be guided by legal requirements and firm policy, keeping records for as long as required. This approach ensures you can respond to regulatory requests, audits, disputes, and ongoing tax or financial planning needs, while protecting client confidentiality and managing risk. Fixed timeframes like five years, seven years, or keeping records for a client’s lifetime don’t account for differences in laws or record types and can either fall short of obligations or create unnecessary burden. The best practice is to identify the minimum retention periods for each category of records based on statutes of limitations, regulatory rules, and your firm's policy, then store records securely and destroy them when the retention period ends.