17. The registered person must ensure that the records specified in Schedule 4 are maintained and that they are —
(a)kept up to date, in good order and in a secure manner; and
(b)retained for a period of not less than three years beginning on the date of the last entry.