In Reg C it states "The financial institution shall retain a copy of its annual loan/application register submitted for its records for at least three years." The Reg B requirement states "For 25 months (12 months for business credit, except as provided in paragraph (b)(5) of this section) after the date that a creditor notifies an applicant of action taken on an application or of incompleteness, the creditor shall retain in original form or a copy thereof: (i) Any application that it receives, any information required to be obtained concerning characteristics of the applicant to monitor compliance with the Act and this part or other similar law, any information obtained pursuant to § 1002.5(a)(4), and any other written or recorded information used in evaluating the application and not returned to the applicant at the applicant's request."

Is there any concern from an exam stance if we get rid of information after 25 months and yet we're expected to keep LAR information for 3 years? Would safe practice be to keep all information for 3 years?

I would never get rid of an AAN notice that was HMDA reportable until at least that exam cycle had passed.

Chelsea: First, welcome to BOL!
Second, I want to clarify that you don't want to mix up regulatory requirements. You need to retain documents for the longest regulatory requirement (or longer for civil liability).

Reg B requires you to retain the application and supporting documentation for 12 or 25 months after the action taken occurred.
Reg C requires you to keep everything to support all HMDA fields for 3 years following submission. That can be as long as 4+ years (action on 1/1/19 but submitted on 3/1/20).
Most BSA requirements are 5 years. Same with RESPA.
Check your state laws too.

So, yes, there are concerns of getting rid of info after 25 months.

Thank you Dave for that guidance. What specifically would we need to retain from a BSA perspective for a denied application in which the applicant does not end up becoming a "customer"?

We have a CRA exam in process, and the examiners have reviewed 2016 and 2017 data. Is it safe to shred the denied applications after the exam is finished in June?

I wasn't trying to be specific to denied apps (although I realize that's the context of this conversation). I was simply trying to point out that Reg B has a 25 month retention requirement, but other regs have longer retention requirements. If you made the loan, BSA has a 5 year requirement. Sorry for the confusion.

If any of the denied apps were subject to HMDA, then you must keep all of the info necessary to support the HMDA data entries for 3 years following submission. IOW, 2017 data would submitted by 3/1/18, so you need to retain it until 3/1/2021.

Thank you Dave. That was the validation I was looking for!

You can shred the adverse action letters (and files) anytime you want to (unless contrary to state law). Instead, you can retain the information electronically. Many examiners will request electronic access to documents rather than paper copies. As mentioned above, for ECOA, you must retain documents for 25 months, so the 2017 data less than 25 months still needs to be retained.