i can't see how they can justify storing the information. they should view it, tick a box on the system, (or whatever they need to do) and delete it.
and yes, you should be able to go in and let them view the documentation to avoid it having to be sent electronically, and potentially stored...