Capital Market Service Providers must retain copies of the reports produced for their annual compliance review, as specified in rule AML-3.3.1, for at least five years. Capital Market Service Providers must also maintain for five years reports made to, or by, the MLRO made in accordance with sections AML-4.1 and AML-4.2, and records showing how these reports were dealt with and what action, if any, was taken as a consequence of those reports.