Definition

In an APC context, project information storage refers to the methods, systems and processes by which a surveying organisation captures, organises and retains data generated during a project — from initial instructions and site surveys through to final accounts and handover documentation. Storage may be physical (paper files, drawing cabinets) or electronic (practice management systems, document management systems, cloud-based Common Data Environments).

Why this matters for Data Management

  • Level 1 knowledge: you must be able to describe how project information is stored in your organisation and explain the controls that ensure it remains accessible, accurate and secure.
  • Good information storage is a risk management essential: surveyors facing a professional indemnity claim or regulatory enquiry need to produce reliable records quickly.
  • On BIM-enabled projects, ISO 19650 mandates a Common Data Environment as the single authoritative storage location.
  • UK GDPR and the Data Protection Act 2018 impose specific obligations on the storage of personal data held within project files.

Key principles

Electronic storage methods

Most surveying organisations use one or more of the following. A networked file server with a structured folder hierarchy is the simplest approach but is vulnerable to inconsistent filing. Practice management systems integrate project files with financial records and time recording. Cloud-based storage (SharePoint, Google Drive) provides multi-location accessibility but requires clear access governance. On larger construction projects, a Common Data Environment (CDE) compliant with ISO 19650 provides the structured, workflow-controlled environment required for BIM.

Version control and document status

Every project generates multiple versions of the same document — design drawings are revised, cost plans are updated, reports are redrafted. In a CDE under ISO 19650, documents pass through defined workflow states (work in progress, shared, published, archived) that make the current approved version unambiguous. In a simpler network-folder environment, a clear naming convention including revision number and date, together with an archive folder for superseded versions, achieves a similar outcome.

Retention requirements

Professional indemnity considerations typically drive retention of at least six years post-completion (Limitation Act 1980 for contract claims), and up to 12 years where the contract is executed as a deed. The Building Safety Act 2023 introduced the "golden thread" requirement for higher-risk buildings — a digital record maintained throughout the building's operational life. Firms must have a documented retention schedule and a secure disposal process for records that reach the end of their retention period.

Security and access

Project files contain commercially sensitive and personal data. Access should be controlled on a need-to-know basis, with electronic systems enforcing role-based permissions. Backup and disaster recovery procedures should ensure information can be recovered quickly in the event of a system failure or cyber incident.

Relevant RICS guidance and legislation

  • Data Protection Act 2018 / UK GDPR — governs the storage of personal data within project files; requires appropriate security, defined retention periods and a lawful basis for processing.
  • ISO 19650-2 — specifies CDE requirements for information storage and management on BIM-enabled construction projects.
  • Limitation Act 1980 — sets the statutory limitation periods that drive minimum retention requirements for project records.
  • Building Safety Act 2023 — introduces the "golden thread" obligation for higher-risk buildings, requiring ongoing retention of structural and fire safety information.
  • RICS Rules of Conduct (effective 2 February 2022) — Rule 5 encompasses the duty to maintain adequate project records.

Ethics and Rules of Conduct angle

The Responsibility rule requires firms to have systems and controls that protect client information and meet legal requirements. A surveyor who cannot produce a reliable record of advice given or decisions made is in a weak position if a dispute arises. The Honesty and Integrity rule applies to the integrity of the record itself: records must not be altered retrospectively to present a misleading picture. Competence in information storage is a professional necessity, not an administrative nicety.

APC-style Q&As

Q (Level 1)How is project information typically stored in a surveying organisation?

Project information is typically stored electronically using a networked file server, a practice management system, cloud-based storage, or a dedicated project extranet. On BIM-enabled projects, a CDE compliant with ISO 19650 is used. The key features of any storage system are version control, access permissions, a clear folder structure and a backup procedure.

Q (Level 1)How long must project records generally be retained after project completion?

The standard minimum is six years from practical completion for projects under simple contract, consistent with the Limitation Act 1980. Where the contract is executed as a deed, the limitation period extends to 12 years. Specific project types — structural records and fire safety information for higher-risk buildings under the Building Safety Act 2023 — may require longer retention. Firms should maintain a documented retention schedule for all project record categories.

Q (Level 2)What is the purpose of the ISO 19650 workflow states in a Common Data Environment?

The workflow states — work in progress, shared, published and archived — control how information moves through the project team. Work-in-progress documents are visible only to the authoring team; documents move to shared when ready for coordination; once approved they are published as the authoritative version; and superseded documents are archived but retained. This structured workflow prevents unapproved information from being acted upon and coordinates the team around a single source of truth.

Q (Level 2)What does the Building Safety Act 2023 require in terms of project information retention?

The Act introduced the "golden thread of information" for higher-risk buildings — principally residential buildings above 18 metres. The golden thread is a digital record of design, construction and modification information that must be maintained and updated throughout the building's operational life, ensuring information needed to manage fire and structural safety is always available to those responsible for the building.

Q (Level 3)You have just completed a major commercial development and the client asks you to delete all project files immediately to save storage costs. How do you respond?

I would explain that I cannot delete all files immediately. Professional indemnity requirements mean I must retain records for at least six years under a simple contract or 12 years under a deed. Project files may also contain personal data that must be disposed of securely under UK GDPR. I would archive the files securely, applying the firm's retention schedule and disposing of records as they reach the end of their retention period, and document this conversation with the client in writing.