Returning the File: A Practical Policy for UK Professional Firms Facing Client Record Requests

When a client relationship ends, a request for 'my file' can arrive with little warning. It may come from the client directly, from a new adviser or from a formal data protection request. The firm's response matters commercially and professionally. A blanket refusal can damage reputation and invite a complaint. Releasing everything without thought can breach confidentiality, data protection or the firm's own retention obligations.

The right answer is a documented process. Professional firms do not need a rigid rule for every document, but they do need a defensible position on what is released, what is retained and what is charged.

What is actually in the file?

The client file is not a single legal object. It may contain documents provided by the client, documents created for the client, third-party correspondence, court or tax filings, original deeds, accounting records, internal notes and administrative material. Different categories attract different treatment.

Solicitors, accountants and consultants also work under different regulatory regimes. A solicitor's obligations are informed by the SRA's rules and guidance. Accountants may be subject to ICAEW, ACCA or other professional body requirements. Consultants may have no sector regulator but still owe contractual and data protection duties. The engagement letter is the first place to look, but it cannot override professional rules or data protection law.

Start with the engagement letter

A clear file-handover policy should be agreed at the start of the relationship, not invented at the end. The engagement letter can explain that the firm will retain a copy of the file for a defined period, that original client documents will be returned on request, that electronic copies may be provided in a standard format and that reasonable copying, retrieval and delivery charges may apply.

That policy should be written in plain English and drawn to the client's attention. It is much easier to rely on a charge that was disclosed at the outset than to introduce one when the client is already dissatisfied.

What must generally be released

Subject to any lawful lien or unpaid fees position, clients are generally entitled to documents that belong to them or that were created for them in the course of the engagement. That includes original documents supplied by the client, completed filings, correspondence with third parties, contracts, court papers and accounting records held on the client's behalf.

If a new adviser asks for the file, the firm should verify the client's authority before releasing anything. A letter of authority, signed instruction or direct confirmation from the client is usually sufficient. Where the client is a company or trust, confirm who has power to instruct the firm.

What can be retained

Firms may retain copies of the file for regulatory, insurance, limitation and record-keeping purposes. Internal working papers, know-how, templates, risk assessments, internal emails and drafts may not form part of the client's file in the same way as final documents. However, the label 'internal' is not a magic shield. Personal data in those documents may still be accessible under data protection law, and professional rules may require a more generous approach.

A solicitor's lien can, in certain circumstances, allow documents to be retained pending payment of outstanding fees. It is not a general right to hold every paper as security. Accountants and consultants may have contractual rights, but those depend on the engagement terms. Original documents needed for a client's urgent legal or tax position should be handled with particular care, and advice should be taken before refusing release.

Data protection is not the same as file release

The UK GDPR and the Data Protection Act 2018 give individuals rights over their personal data, including a right of access. A subject access request is not identical to a request for the whole client file. The firm must respond within the statutory timeframe, usually one month, and may need to redact third-party personal data or information that is exempt.

Firms should not use data protection as an excuse to delay a legitimate file handover, nor should they treat every file request as a subject access request. Keep the two processes distinct, record the basis for redactions and take advice where the request is broad or contentious.

Charging for copying and retrieval

Reasonable charges are usually acceptable if they are transparent, proportionate and provided for in the engagement terms. Copying, secure delivery, retrieval from archive and conversion to an electronic format can all cost money. What is not acceptable is a charge designed to punish the client or to make a legitimate handover prohibitively expensive.

Original documents should normally be released without a copying charge, although delivery costs may still apply. For electronic copies, a modest administrative fee may be reasonable. Subject access requests are generally free, although a reasonable fee can be charged in limited circumstances such as manifestly unfounded or excessive requests. Firms should not confuse a commercial file-transfer fee with a statutory subject access fee.

Retention and destruction

A retention policy should set out how long different categories of file are kept and why. Six or seven years is a common starting point for many professional engagements, but it is not a universal rule. Tax, property, trusts, wills, minors and anti-money laundering requirements can justify longer periods. Litigation holds should suspend destruction where a dispute is reasonably anticipated.

Retention should not become indefinite storage by default. A scheduled review and destruction process reduces risk and cost, provided it is operated consistently and with appropriate checks.

A model handover process

A practical sequence is:

• verify the identity and authority of the requester;
• identify the scope of the request and the relevant engagement;
• check for unpaid fees and any lawful lien before deciding the release position;
• review the file for third-party data, privilege and confidentiality issues;
• agree the format, delivery method and any disclosed charges;
• provide a schedule of what is being released and what is being retained, with reasons;
• keep a record of the decision and the client's response.

The bottom line

A client file request is a test of the firm's administration as much as its legal knowledge. Firms that have a clear policy, a consistent retention schedule and a transparent charging approach can respond quickly and confidently. Those that improvise risk complaints, regulatory scrutiny and unnecessary cost. The objective is not to win the argument. It is to end the relationship cleanly, with the client's records returned and the firm's own obligations properly protected.