COBS 10.7 Record keeping and retention periods for appropriateness records
For its MiFID business, a firm is required to keep orderly records of its business and internal organisation (see SYSC 9, General rules on record-keeping). For other business, a firm is required to take reasonable care to establish and maintain such systems and controls as are appropriate to its business (see SYSC 3, Systems and controls). The records may be expected to include the client information a firm obtains to assess appropriateness and should be adequate to indicate what the assessment was.