1522.129—Recordkeeping requirements.
(a)
Each validation firm must maintain records demonstrating compliance with all statutes, regulations, directives, orders, and security programs that apply to operation as a validation firm, including the records listed below.
(b)
Each validation firm must retain the following records for 180 days after the individual is no longer employed by the validation firm or is no longer acting as the firm's agent.
(1)
Records of all training and instruction given to each individual under the requirements of this subpart.
(2)
Records demonstrating that the validation firm has complied with the security threat assessment provisions of § 1522.121.
(3)
Records about the qualifications of validators it uses to conduct assessments under this subpart.
(c)
Each validation firm must retain the following records until completion of the validation firm's next review under § 1522.115, after which the records may be destroyed unless TSA instructs the validation firm to retain the records for a longer period.
(1)
Copies of all applications for approval, or renewal of approval, by TSA to operate as a validation firm under part 1522.
(d)
Each validation firm must retain assessment reports and copies of back-up documentation supporting each assessment report submitted to TSA for 42 months after the assessment.