one year – HACCP records should be held for at least a year, while any records required by law to be kept longer than one year should be kept the legally mandated period. The shelf-life of a product also needs to be taken into account in establishing retention guidelines.