What records should a third party conformity assessment body retain regarding an audit?
Primary source
Verbatim text below is from the Electronic Code of Federal Regulations (eCFR), a public-domain U.S. government work. Always verify the current version with the eCFR before relying on it for any legal matter.
Full Text
A third party conformity assessment body must retain all records related to an audit that it receives from an accreditation body regarding a reassessment and all records pertaining to the third party conformity assessment body's resolution of, or plans for, resolving nonconformities identified through a reassessment by an accreditation body or through an examination by the CPSC. A third party conformity assessment body also must retain such records related to the last three reassessments (or however many reassessments have been conducted, if the third party conformity assessment body has been reassessed less than three times) and make such records available to the CPSC, upon request.
This is legal information, not legal advice. Laws vary by jurisdiction and change frequently. Always verify current law with official sources and consult a licensed attorney in your jurisdiction for advice on your specific situation.