Is there a record retention requirement for the actual Privacy Notice? I am not successful in finding anything that confirms either that there is or that there is not. Any assistance would be greatly appreciated!!

Thank you in advance.

Retention by whom - the bank? Why would you not keep a historical sample of your privacy notices?

Yes, the bank. We do keep a historical sample but how long are we required to keep them on file? I don't see a regulatory requirement specified anywhere (which I could be missing).

They are usually electronic, so a blip on the compliance officer's computer shouldn't be a problem, especially if an examiner wants to see what the bank sent out (and to whom).

Yes, it's simple enough to retain the electronic copies (which we do). Thank you.

Another poster asks:

Maybe I missed the point of the discussion, but, you're not saying you decided to keep 10,000 copies of an identical document, right?

I think what RLC was suggesting was that you'd want a) a sample document and b) a record showing when it was sent, and to whom. Not that you'd actually need to image 10,000 docs to 10,000 different files, right?