Data retention in procurement systems

Introduction

Data retention in procurement systems refers to the systematic preservation of records generated during purchasing, tendering, supplier selection, contract management, payment processing, and delivery of goods or services. These records may include purchase orders, invoices, tender documents, supplier details, technical specifications, financial statements, inspection reports, and electronic communications.

In biotechnology and pharmaceutical industries, procurement systems frequently involve purchasing laboratory equipment, biological materials, chemicals, medicines, research services, and clinical trial supplies. Maintaining these records is essential for financial accountability, regulatory compliance, prevention of corruption, and resolution of contractual disputes.

Data retention policies determine which records must be preserved, how long they should be retained, who can access them, and when they should be securely destroyed.

Legal framework governing data retention

1. General Financial Rules, 2017 (India)

The General Financial Rules establish financial management and procurement principles for Central Government departments and organisations. They promote transparency, accountability, competition, and proper documentation of government expenditure.

Procurement authorities must maintain appropriate records relating to tendering, approvals, evaluation, purchasing, and payments. These documents provide evidence that public funds have been used according to applicable financial procedures.

2. Public Procurement regulations

The Central Vigilance Commission (CVC) guidelines and applicable government procurement manuals emphasise transparency, proper documentation, and auditability in public procurement.

The Government e-Marketplace (GeM) also provides electronic procurement facilities through which purchase orders, supplier information, transaction records, and payment-related information can be maintained.

Organisations must follow the specific record-retention schedules applicable to their department, financial rules, audit requirements, and contractual obligations.

3. Companies Act, 2013

Section 128 requires companies to maintain books of account and relevant financial records. Such records must generally be preserved for at least eight financial years immediately preceding the current financial year, subject to statutory exceptions and directions.

Procurement invoices, payment records, and related accounting documents may form part of these records. Companies should ensure that electronic records remain accessible and reliable throughout the required retention period.

4. Digital Personal Data Protection Act, 2023

Procurement systems may contain personal information relating to suppliers, employees, authorised representatives, and individual contractors.

The DPDP Act requires personal data to be processed for lawful purposes and provides for erasure when the purpose is no longer served, unless retention is necessary for compliance with law. Section 8 contains important obligations concerning data processing and security.

Therefore, organisations should distinguish between financial records that must legally be retained and personal information that is no longer necessary. The Act's applicable commencement notifications and rules must also be considered.

Importance of data retention in procurement systems

1. Financial accountability

Retaining invoices, purchase orders, payment approvals, and bank transaction records helps organisations demonstrate that procurement expenditure was properly authorised.

2. Prevention of fraud and corruption

Procurement records can reveal irregular supplier selection, duplicate payments, false invoices, and conflicts of interest. Historical records also assist internal auditors and vigilance authorities.

3. Contractual dispute resolution

If disputes arise regarding product quality, delivery delays, pricing, or payment obligations, procurement records provide documentary evidence of the parties' contractual commitments.

4. Regulatory compliance

Pharmaceutical and biotechnology organisations may need to demonstrate that laboratory equipment, research materials, chemicals, and other supplies were purchased from authorised suppliers and met applicable regulatory requirements.

5. Audit and investigation

Maintaining complete procurement histories enables auditors, regulators, and investigating authorities to examine transactions and verify whether procurement procedures were followed.

Essential components of a procurement data-retention policy

An effective policy should establish:

Record classification: Separate financial, contractual, technical, supplier, and personal records.

Retention periods: Specify preservation periods according to applicable laws and regulatory requirements.

Access controls: Restrict confidential procurement information to authorised personnel.

Electronic preservation: Maintain secure backups, timestamps, audit trails, and version histories.

Data security: Protect records against unauthorised modification, deletion, and disclosure.

Legal holds: Suspend routine destruction when litigation, investigation, or an audit is pending.

Secure disposal: Destroy records safely once their retention period expires and no legal restriction prevents deletion.

Relevant case laws

There are limited judicial decisions specifically concerning retention periods for electronic procurement records. However, the following cases establish principles relevant to procurement transparency, public accountability, and preservation of documentary evidence.

1. Centre for Public Interest Litigation v. Union of India (2012)

In the 2G spectrum allocation case, the Supreme Court examined irregularities in the allocation of public resources. The judgment highlighted the importance of transparency, fairness, and accountability in government decision-making. These principles are relevant to maintaining reliable procurement records.

2. Ramana Dayaram Shetty v. International Airport Authority of India (1979)

The Supreme Court held that government authorities must act fairly and consistently with Article 14 when awarding public contracts. Procurement documentation is important for demonstrating that supplier selection follows fair and non-arbitrary procedures.

3. Tata Cellular v. Union of India (1994)

The Supreme Court explained the principles governing judicial review of government contractual decisions. The judgment emphasised fairness, legality, and proper exercise of administrative discretion. Procurement records help demonstrate that public authorities followed lawful decision-making processes.

4. Anvar P.V. v. P.K. Basheer (2014)

The Supreme Court examined the admissibility of electronic records under the former Indian Evidence Act. The judgment highlighted the importance of complying with statutory requirements when electronic documents are produced as evidence. Its principles remain relevant to procurement databases, digital invoices, and electronic transaction records, subject to the Bharatiya Sakshya Adhiniyam, 2023.

These judgments provide relevant legal principles rather than directly prescribing procurement data-retention periods.

Challenges and compliance measures

Procurement systems face challenges involving large volumes of electronic records, cybersecurity threats, inconsistent retention schedules, and cross-border supplier transactions. Excessive retention can increase privacy and security risks, while premature deletion may affect audits and legal proceedings.

Organisations should therefore conduct periodic record reviews, maintain a documented retention schedule, use secure electronic record-management systems, and coordinate procurement, finance, legal, and compliance departments.

Conclusion

Data retention in procurement systems is essential for financial transparency, contractual accountability, regulatory compliance, and prevention of fraud. Indian laws such as the Companies Act, 2013, the General Financial Rules, 2017, and the Digital Personal Data Protection Act, 2023 establish important obligations affecting procurement records. Organisations should adopt clear retention schedules, preserve reliable electronic evidence, protect confidential information, and securely dispose of records when legally permitted. A balanced retention policy strengthens institutional governance and ensures that procurement activities remain transparent, verifiable, and legally defensible.