21.B.55 Record-keeping

SI No. 588/2023

(a) The CAA must establish a record-keeping system that allows the adequate storage, accessibility and traceability of:

1. the documented policies and procedures of the management system;

2. personnel training, qualification and authorisation records;

3. allocation of tasks, covering the elements required by point 21.B.30, as well as the details of tasks allocated;

4. certification processes and continuing oversight of certified organisations, including:

(i) the application for a certificate, approval, authorisation and letter of agreement;

(ii) the CAA’s continuing oversight programme, including all the assessments, audits and inspection records;

(iii) the certificates, approvals, authorisations and letters of agreement issued, including any changes to them;

(iv) a copy of the oversight programme, listing the dates when audits are due and when audits were carried out;

(v) copies of all formal correspondence;

(vi) recommendations for the issue or continuation of a certificate, an approval, authorisation or a letter of agreement, details of findings and actions taken by the organisations to close those findings, including the date of closure, enforcement actions and observations;

(vii) any relevant assessment, audit and inspection report issued by the competent authority of a third country;

(viii) copies of all the organisation expositions, handbooks and manuals, and of any amendments to them;

(ix) copies of any other documents approved by the CAA;

5. Statements of Conformity (CAA Form 52, Appendix 8) and Authorised Release Certificates (CAA Form 1, Appendix 1) that have been validated by the CAA for organisations that produce products, parts or appliances without a production organisation approval certificate according to Subpart F of Section A of this Annex.

(b) The CAA must include in the record keeping:

1. documents supporting the use of alternative means of compliance;

2. safety information in accordance with point 21.B.6(a) and follow-up measures;

3. the use of safeguard and flexibility provisions in accordance with Articles 70, 71(1) and 76(4) of Regulation (EU) 2018/1139.

(c) The CAA must maintain a list of all the certificates, approvals, authorisations and letters of agreement it has issued.

(d) All the records referred to in points (a) to (c) must be kept for at least 5 years, in so far as that is compatible with data protection legislation.