Audit Retention Policy Template for New Zealand

An Audit Retention Policy is a comprehensive governance document that establishes your organization's framework for maintaining, protecting, and disposing of audit-related records. This policy ensures you meet New Zealand's stringent regulatory requirements while protecting your business from compliance risks and potential legal issues. Your policy will define retention periods, assign responsibilities, and establish procedures for both physical and electronic record management.

When do you need this document?

You need an Audit Retention Policy when establishing formal governance structures, preparing for external audits, or ensuring regulatory compliance across your organization. This document becomes essential during regulatory inspections, tax audits, or legal proceedings where proper record retention demonstrates your commitment to compliance. Organizations typically implement this policy when expanding operations, facing increased regulatory scrutiny, or after compliance gaps have been identified. It's particularly crucial for companies with complex financial structures, multiple subsidiaries, or those operating across different industries with varying compliance requirements.

Key legal considerations

Your policy must address the seven-year retention requirement mandated by both the Companies Act 1993 and Tax Administration Act 1994, ensuring accounting records and tax documentation are properly maintained. Consider implementing robust access controls and security measures to protect sensitive audit information, particularly when dealing with personal data covered by the Privacy Act 2020. Your policy should clearly define roles and responsibilities for records management, establishing accountability chains and preventing gaps in oversight. Include provisions for both routine disposal and litigation holds, ensuring records can be preserved when legal proceedings are anticipated. Electronic record storage must comply with the Electronic Transactions Act 2002, requiring appropriate authentication and integrity measures for digital documents.

Legal requirements in New Zealand

Under the Companies Act 1993, your organization must maintain proper accounting records for seven years, including financial statements, supporting documentation, and audit working papers. The Tax Administration Act 1994 requires retention of all tax records and supporting documentation for seven years from the end of the relevant tax year, covering business records necessary for calculating tax obligations. If your organization prepares financial statements under the Financial Reporting Act 2013, you must maintain records supporting financial reporting compliance. Public sector entities must also comply with the Public Records Act 2005, which establishes specific requirements for maintaining and disposing of public records. The Privacy Act 2020 governs how personal information in your audit records should be collected, stored, and protected, including mandatory data breach notification requirements and individual access rights.