Business

Merger: consolidating two archives and destroying duplicates

11 July 2026 · 10 min read · DeSnipperaar

In a merger two organisations come together, and with them two complete archives. Two customer databases, two payroll administrations, two stacks of contracts that partly cover the same parties. Push them together without a plan and you are left with years of duplicate files and personal data kept too long. This guide shows how to order the two archives, which retention period applies, which duplicates you may clear out and how to destroy the rest confidentially.

The quick answer: a merger changes no retention period at all. The merged company takes over both parties' administration and keeps each item until its own end date. What you may clear out are genuine duplicates and documents whose purpose has expired. Do that confidentially and then update the record of processing.

A merger does not lengthen or shorten a retention obligation

The key misconception is that a merger gives a clean slate. It does not. The tax retention obligation, the GDPR storage limitation and all sector rules simply continue. The acquiring or newly formed legal entity steps into the place of both predecessors and thereby inherits their retention obligations and their risks. A file that still had to be kept for four years at one company must still be kept after the merger.

So do not treat the combined archive as a fresh start, but as the sum of two ongoing obligations. Each item keeps its own end date, counted from the moment the law prescribes. More on those periods in the 7-year tax retention obligation and how long to keep documents.

Step 1: inventory both archives separately

Do not start by merging, start by mapping. Walk through both archives separately and note what is there, how old it is and on which carriers it sits. Paper, file servers, old backup tapes and loose external drives all belong in it. Without this overview you will push two unknown stacks together and no one knows what sits where any more.

During this inventory, watch the sensitive categories. Copies of identity documents, national ID numbers, medical or financial data need extra care, because the risks of both organisations now come together at you after the merger. An approach for that inventory is in archive clean-up: step by step.

Step 2: decide per category which archive leads

Where both companies kept the same type of file, choose a leading system per category. Often that is the archive of the party with the tidier administration or the more modern system. The other archive is added to it or, where it is purely duplicate, cleared out. That way you avoid dragging two half-maintained series along side by side.

Look at overlapping relationships too. A customer or supplier who did business with both companies now has two files. Merge those into one complete file and keep the original documents at the longest applicable period. The rest is a candidate for clearing out.

Step 3: clear out the duplicates

A merger archive is full of genuine duplicates. The same annual accounts in two folders, the same agreement in both files, printouts made on either side. An exact duplicate copy with no retention value of its own may go, as long as you keep the original. That saves volume, cost and risk, because every superfluous copy with personal data is a place you no longer have to secure.

Clear those duplicates out confidentially, not into the paper bin. After all, they hold the same data as the original. Collect them in sealed containers and hand them over in a destruction round. If you are unsure whether something is a genuine duplicate, keep it until you know for certain.

Keep or destroy after a merger

The overview below helps you choose per type of document.

Situation	Action	Note
Original with a running retention period	Keep	until its own end date
Exact duplicate copy	Destroy confidentially	original is retained
File of the same relationship at both companies	Merge	longest period applies
Document whose purpose has expired	Destroy confidentially	no basis left
Outdated data carriers and tapes	Wipe or destroy	after transferring data
Doubtful case	Keep for now	assess first

Use this as a guideline. When in doubt about a specific file, consult your bookkeeper, legal adviser or data protection officer.

The GDPR angle: may you simply link the databases?

Merging archives is not only a logistical job, it touches the GDPR. Personal data one company collected for a specific purpose may not simply be used for a new purpose just because there was a merger. The original purpose and legal basis remain leading. If you want to truly integrate two customer databases and, say, start mailing them jointly, that requires an assessment and sometimes informing the data subjects.

After the merger the acquiring or new legal entity is the controller for the entire archive. So update the record of processing to match the new situation. Describe which data you now manage, for which purpose and with which period. How to set up that record is in record of processing, archives and destruction.

How to handle it in 6 steps

1. Inventory both archives separately, including data carriers and sensitive categories.
2. Choose per category a leading system that the other is added to.
3. Merge files of the same relationship and keep the longest period.
4. Clear out the genuine duplicates and collect them confidentially.
5. Have it destroyed with a certificate as proof.
6. Update the record of processing to the new organisation.

Destroy confidentially with a certificate

The duplicates, the expired documents and the old data carriers are destroyed confidentially. For a merger archive with customer and staff data a fine shred is the starting point. The material travels sealed and stays that way until destruction, so the chain is closed and nothing can leak on the way.

Afterwards you receive a certificate of destruction with the date, quantity and level. That certificate demonstrates during an audit that the clean-up after the merger was done carefully. Keep it with the updated record of processing. We collect within 20 km of Amsterdam with no call-out charge, work nationwide through pooled collection rounds and charge a fixed price per box or roll container. Drop-off on site is not possible; it works by appointment through collection.

Common mistakes

• Seeing the merger as a clean slate. All retention periods and risks simply continue.
• Pushing two stacks together. Without a leading system no one knows what is original.
• Linking customer databases without an assessment. A new purpose requires its own legal basis.
• Throwing duplicates away unshredded. They hold the same personal data as the original.
• Not updating the record. Then your accountability no longer matches reality.

Frequently asked questions

Which retention period applies after a merger?

The statutory period per document stays unchanged. A merger does not lengthen or shorten any retention obligation. The merged company takes over both parties' administration and keeps each item until its own end date.

May I destroy duplicate files after a merger?

An exact duplicate copy with no retention value of its own may go, provided you keep the original. Clear out duplicates confidentially, not into the paper bin, because they hold the same personal data.

Who is responsible for the combined archive?

After the merger the acquiring or new legal entity is the controller for the entire archive. Update the record of processing so the new situation is accurate.

May I simply merge the customer databases of both companies?

Only if the original purpose and legal basis allow it. Merging for a new purpose requires an assessment and sometimes informing the data subjects. When in doubt, consult your data protection officer.

Conclusion

Consolidating two archives after a merger is not a matter of pushing stacks together. Inventory both sides, choose a leading system per category, merge files of the same relationship and clear out the genuine duplicates confidentially. Each item keeps its own retention period; the merger changes nothing there. Then update the record of processing and close the clean-up with a certificate. That way the new organisation starts with an ordered archive instead of the double legacy of two.

Read also: business takeover and archive due diligence, closing a business: what to keep and destroy, changing legal form and your records and record of processing, archives and destruction.

---

Have your duplicate merger archive collected? Request a quote via desnipperaar.nl. Within a few minutes you have a fixed price, including a certificate as proof.