FR-17

Code of Practice on Records Access

IICSA · The Report of the Independent Inquiry into Child Sexual Abuse · Issued 20 October 2022 · Addressed to: UK Government

Government responseUK Government: Accepted in part (May 2023)

DeliveryDepartment for Education says in progress (Jun 2026)Home Office says in progress (Jan 2026)UK Government says in progress (Apr 2025)

Recommendation, verbatim from the inquiry

●Inquiry recommendation, K.7

The Inquiry recommends that the UK government directs the Information Commissioner's Office to introduce a code of practice on retention of and access to records known to relate to child sexual abuse. The retention period for records known to relate to allegations or cases of child sexual abuse should be 75 years with appropriate review periods. The code should set out that institutions should have: retention policies that reflect the importance of such records to victims and survivors, and that they may take decades to seek to access such records; clear and accessible procedures for victims and survivors of child sexual abuse to access such records; policies, procedures and training for staff responding to requests to ensure that they recognise the long-term impact of child sexual abuse and engage with the applicant with empathy.

IICSA, The Report of the Independent Inquiry into Child Sexual Abuse · 20 Oct 2022 Source PDF →

Published evidence summary

AI-generated evidence summary

In June 2026, Minister Josh MacAlister, answering for the Department for Education, stated that the government will lay regulations instructing the Information Commissioner's Office to produce a code of practice on the retention of personal data relating to child sexual abuse, with the regulator then preparing the code following consultation with an expert panel (Josh MacAlister, Jun 2026). Home Office Minister Jess Phillips had previously stated in January 2026 that the government was preparing the regulations and intended to lay them "as soon as possible" (Jess Phillips, Jan 2026). HM Government reported in April 2025 that the code cannot mandate organisations to keep records for 75 years, but will provide best practice guidance (Home Office, Apr 2025).

Sources

Josh MacAlister, Jun 2026
Jess Phillips, Jan 2026
Home Office, Apr 2025

AI-generated summary of the record on this page, checked by a second model and automatic checks, 26 Sep 2026.

Government response

●UK Government · Accepted in part · 22 May 2023

Words of: HM Government, Government response to the final report of the Independent Inquiry into Child Sexual Abuse (CP 844), presented to Parliament by the Home Secretary, May 2023

We accept the importance of access to records. We will engage with the Information Commissioner’s Office on implementing this recommendation.

Extract from: Government response to the final report of the Independent Inquiry into Child Sexual Abuse

Delivery

●Department for Education says in progress · 2 Jun 2026

In April 2025, the government set out the immediate and longer-term steps it is taking to act on the recommendations of the Independent Inquiry into Child Sexual Abuse and to tackle child sexual abuse and exploitation more broadly, which included some evidence linked to Grafton Close. Regarding access to institutional records, the government will lay regulations instructing the Information Commissioner’s Office (ICO) to produce a code of practice on the retention of personal data relating to child sexual abuse. The ICO will then prepare the code following consultation with an expert panel.

From: Written question 2025, "Children in Care: Personal Records", asked by Suella Braverman, tabled 18 May 2026, answered 2 June 2026

Site note: Department for Education written answer of 2 June 2026 to a question about access to historical care records. The passage names the Inquiry's recommendations and reports that regulations directing the Information Commissioner's Office to produce a code of practice are still to be laid.

●Home Office says in progress · 21 Jan 2026

The Government is preparing regulations instructing the Information Commissioner’s Office to produce a code of practice on the retention of personal data relating to child sexual abuse. We intend to lay the regulations before the House as soon as possible. Once the regulations have been laid, the ICO will prepare the code following consultation with an expert panel.

From: Written question 105568, "Offences against Children: Codes of Practice", asked by Sarah Pochin, tabled 13 January 2026, answered 21 January 2026

Site note: Home Office written answer of 21 January 2026. The same answer was given to ten questions tabled on 13 January 2026 about the Inquiry's recommendations; it reports under one heading per recommendation, and the row is the passage under the heading "Retention of Records", cited to the question that asks about it.

●UK Government says in progress · 9 Apr 2025

To respond to IICSA’s recommendation on records retention the Government will lay regulations in Autumn 2025 instructing the Information Commissioner’s Office to produce a code of practice on the retention of personal data relating to CSA. The Code cannot mandate organisations to keep such records for 75 years but will include best practice guidance. The Government remains open to legislating if the Code does not have the desired effect.

From: Tackling child sexual abuse: progress update (accessible version)

How this page is built

The recommendation and the government responses are verbatim from primary documents. Delivery statements and other bodies' findings are shown in their own words, each with its source. The summary is written by this site and labelled as such. The Index does not paraphrase sources or characterise intent; it records what has been published.