Record Keeping Requirements for UK Charities Explained | LegalDocuments.co.uk

Overview

Record keeping for a charity means creating, organising, and retaining the documents and data that show how the organisation is governed, funded, and run. That covers a wider range of material than many trustees first realise. It includes the charity's governing document, minutes of trustee meetings, registers of trustees and members, financial accounts, bank statements, receipts, invoices, payroll records, Gift Aid declarations, grant agreements, safeguarding logs, employment files, and personal data held about donors, volunteers, and beneficiaries.

The duties come from several overlapping sources. The Charities Act 2011 sets out core obligations around accounts and annual reporting. HMRC has its own requirements where a charity claims tax reliefs such as Gift Aid. The UK GDPR and Data Protection Act 2018 govern how personal information is stored and for how long.

Employment law, health and safety rules, and safeguarding frameworks each add further layers. Taken together, these create a framework where trustees are expected not only to keep the right records, but to keep them for long enough, in a form that can be produced if asked, and in a way that protects the people the information relates to.

Key steps

1. Identify every category of record your charity needs to keep. Begin by mapping out what you actually hold and what you are required to hold. This typically covers the governing document, trustee meeting minutes, financial records, donor information, Gift Aid claims, employment files, volunteer records, safeguarding information, contracts, and insurance policies. A written register of record categories, updated annually, gives trustees a clear view of the charity's information landscape and makes gaps much easier to spot.
2. Set retention periods for each type of record. Different rules apply to different records. Financial accounts generally need to be kept for several years under the Charities Act, Gift Aid records have their own HMRC retention expectations, and employment records follow employment and tax rules. Personal data, by contrast, should only be held for as long as there is a lawful reason to keep it. Document your retention periods in a schedule so that staff and trustees know when to archive and when to securely destroy material.
3. Put proper financial controls and bookkeeping systems in place. Trustees must keep accounting records sufficient to show and explain the charity's transactions, and to allow accounts to be prepared that meet the applicable reporting standard. Whether you use cloud accounting software or a simpler ledger, the key is that income and expenditure are recorded promptly, receipts and invoices are matched to transactions, restricted funds are tracked separately, and bank reconciliations happen on a regular cycle.
4. Protect personal data and meet UK GDPR obligations. Charities hold a great deal of personal information, and the law expects that data to be accurate, secure, and only kept while it is needed. This means controlling who can access donor databases, using strong passwords and encryption where appropriate, having a clear privacy notice, training staff and volunteers on data handling, and responding properly to subject access requests. A written data protection policy helps demonstrate accountability to the Information Commissioner's Office.
5. Review, audit, and improve your record keeping regularly. Record keeping is not something you set up once and forget. Trustees should put it on the agenda at least annually, check that the retention schedule is being followed, review who has access to what, and test whether records could actually be produced quickly if the Charity Commission, HMRC, or a funder asked. An internal review, or an independent examination where required, helps catch problems before they become serious.

Common questions