9.2 Employee Records and Retention Controls

Building a Defensible Employee Record System

Employee records support hiring, pay, benefits, leave, performance, investigations, safety, separation, and compliance. A record is useful only if HR can find it, trust it, justify why it exists, and limit access to those with a business need. The PHR treats recordkeeping as a control problem, not a memorization drill.

The first control is classification. HR must know which documents belong in a general personnel file, which are payroll or benefits records, which are medical or leave records, and which are investigation or employee-relations records. Federal law requires several of these to be stored separately. Mixing everything into one file risks exposing protected information to a reviewer who has no need for it.

Retention Is a Control, Not Just Storage

A retention schedule tells HR how long to keep each record type and when disposal may occur. Periods vary by statute and jurisdiction, so the exam rewards "follow the applicable legal and policy requirement," not guessing. Critically, HR must suspend disposal under a litigation hold whenever a lawsuit, EEOC charge, audit, internal investigation, or active dispute applies, even if the routine retention date has arrived.

Retention also means avoiding overcollection. Keeping every draft, side note, and duplicate forever creates confusion and discovery risk. HR retains records that support legitimate decisions and compliance obligations, then follows approved disposal for records past their period that are not under hold.

Several retention anchors recur on the exam. Title VII / EEOC records run one year from the personnel action, extended through final disposition of any charge. The Age Discrimination in Employment Act (ADEA) requires keeping payroll records three years and certain benefit and seniority plans for the plan's duration plus one year. OSHA Form 300 injury logs are kept five years following the year they cover. FMLA records are kept three years. Affirmative-action obligations under OFCCP generally require two years (one year for employers with fewer than 150 employees).

When a question gives a specific statute, match the period to that law rather than averaging.

Operational Recordkeeping Practices

• Standardize file names, document types, employee identifiers, and effective dates.
• Separate confidential medical, leave, and ADA accommodation records from ordinary personnel files.
• Limit manager access to documents needed for supervision or a specific decision.
• Track who added, changed, viewed, or removed sensitive records where audit logs exist.
• Confirm both retention status and any active hold before deleting records from the HRIS, shared drives, or vendor platforms.

A common scenario: a manager wants to review an employee's full file before a disciplinary meeting. The better answer is not automatic full-file access. HR supplies the relevant, non-restricted documents the decision requires and keeps protected records sealed.

Which Records Go in Which File

Maintaining separate files is a federal expectation, not just best practice. Co-mingling can expose protected data and create discrimination claims if a decision-maker sees medical or genetic information.

• General personnel file: application, offer, job changes, performance reviews, training, discipline, acknowledgments.
• Confidential medical file (separate, locked): ADA accommodation records, FMLA medical certifications, workers' compensation medicals, drug-test results, fitness-for-duty exams.
• I-9 file (separate from personnel): kept apart so an audit or inspection does not expose unrelated personnel data.
• Investigation file (restricted): complaints, witness statements, findings, kept confidential to protect parties and integrity.
• Genetic Information Nondiscrimination Act (GINA) data: any family-medical-history information must be siloed and never used in decisions.

Retention Lifecycle and a Worked Example

Think of every record as moving through create, use, retain, and dispose. A defensible program documents each stage. Worked example: an employee resigns in March 2026. The I-9 was completed at hire in 2019. The retention clock is the later of 3 years after hire (2022) or 1 year after termination (March 2027), so March 2027 governs, the I-9 cannot be purged until then. If that former employee files an EEOC charge in May 2027, a litigation hold immediately freezes disposal of the I-9 and all related records until final disposition, regardless of the routine date.

Recordkeeping also drives fairness: if one employee's discipline is fully documented and another's rests on undocumented manager memory, HR cannot apply policy consistently or defend the decision in an unemployment claim, audit, or charge. A frequent exam trap is an option that destroys records on schedule while a charge or audit is pending, always preserve under a hold first. The PHR-level lesson is compact: keep the right record, in the right place, for the right period, with the right access.