All patient records and results should be maintained to comply the requirements of the GDPR.
Establishments must comply with SaBTO advice in record keeping and maintenance.
The requirements for these are described in the Human Tissue (Quality and Safety for Human Application) Regulations 2007 (as amended), FACT-JACIE Standards, NetCord-FACT Standards and WMDA standards as above.