# The Reporting Cryptoasset Service Providers (Due Diligence and Reporting Requirements) Regulations 2025, Regulation 4: Due diligence and record-keeping

Extent: E+W+S+N.I.

(1) A UK reporting cryptoasset service provider must apply, and establish and maintain arrangements designed to apply, the due diligence procedures set out in Section III of the rules.
(2) A UK reporting cryptoasset service provider must keep a record of—
(a) the steps taken to comply with this regulation, and
(b) the information collected in the course of applying the due diligence procedures set out in Section III of the rules.
(3) A UK reporting cryptoasset service provider must keep the records required by paragraph (2) for a period of five years beginning with the day after the end of the calendar year to which they relate.
(4) For the purposes of paragraph (3), records in respect of a particular cryptoasset user or controlling person of an entity cryptoasset user relate to the calendar year in which the information was—
(a) collected,
(b) generated, or
(c) relied on under Section III of the rules.

---
Source: https://www.legislation.gov.uk/uksi/2025/744/regulation/4 (the official version)
Page: https://openlegislation.uk/reporting-cryptoasset-service-providers-due-diligence-and-reporting-requirements-regulations-2025/regulation-4
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.