Articles
Data Retention & Record Keeping
Retention periods for KYC, transactional and corporate records under Spanish and EU law.
Published 5 June 2026
Statutory minimums
- AML KYC and transaction records: 10 years (Law 10/2010).
- Accounting and tax: 6 years (Commercial Code) and up to 10 years for certain tax matters.
- HR records: 4 years (Workers' Statute) plus pensions-related retention.
Blocking vs deletion
GDPR allows blocking data instead of deleting it where a longer retention is justified by another legal obligation or an active claim.
Retention schedule
Document every category of data, the retention period, the legal basis and the deletion procedure.