Credit Rating Services Act, 2012 (Act No. 24 of 2012)

A registered credit rating agency must arrange for adequate records and, where appropriate, audit trails of its credit rating services, which must be kept for a minimum period of five years or such longer period as may be prescribed in any other applicable law.