An employee personnel file generally holds the core record of the employment relationship: role and offer documents, policy acknowledgments, relevant training records, performance documentation, and employment changes. It should not become an unrestricted folder containing every medical, payroll, investigation, and identity record associated with the employee.
Maintain approved role, acknowledgment, and performance records.
Route medical, payroll, I-9, and case materials appropriately.
Apply the verified schedule, legal holds, and authorized access.
Read the lanes as a planning framework; confirm the owners and requirements for your organization.
A practical personnel-file checklist
- Offer and role documents, including approved job descriptions and changes.
- Policy and handbook receipt acknowledgments with version information.
- Relevant nonmedical orientation and training completion records.
- Performance reviews, documented coaching, and approved corrective actions.
- Approved position, reporting, or employment-status changes.
- Separation documents appropriate to the employment record.
This is an organizational framework, not a universal list of legally required documents. Which records must exist, who can access them, and how long they must be retained depend on the employer, location, record type, and applicable requirements.
Which records need separate handling?
| Record category | Practical handling approach |
|---|---|
| Medical and accommodation information | Separate confidential records with restricted access |
| Payroll, tax, and bank information | Controlled payroll or finance records |
| Employment eligibility documentation | A controlled I-9 process with its own access and retention review |
| Investigation materials | Restricted case records; review what belongs in the general file |
| General employment documents | Organized personnel file with authorized access |
EEOC guidance treats employee medical information as confidential and limits permitted disclosures. A digital system needs meaningful permission boundaries; separate folder names alone do not protect records if every manager can open every folder.
Assign record owners and an access process
Decide who creates records, who reviews them, where approved versions are stored, and who may retrieve them. Supervisors need information relevant to their responsibilities, not automatic access to all sensitive information. Review access when people change roles or leave the organization.
Create a consistent employee identifier and naming convention. A file called “final-new-updated” does not show which version was approved. Useful metadata includes record type, employee identifier, event or effective date, and version where applicable.
Build a retention schedule by record type
Do not apply one blanket deletion date to every employment document. EEOC’s recordkeeping guidance identifies different requirements for covered employers, payroll records, and records related to a charge. Pending claims or legal holds can require preservation beyond a routine schedule.
For each category, record the applicable rule, retention trigger, responsible owner, and approved disposal method. Confirm federal, state, contractual, and industry requirements before deletion. Treat Form I-9 retention as a separately verified requirement rather than assuming the general personnel-file schedule applies.
Audit a manageable sample before reorganizing everything
Start with a defined sample spanning recent hires, established employees, and separations. Check whether required items are present, records are legible, acknowledgments identify the correct policy version, and access matches the approved roles. Report gaps by type and location rather than exposing unnecessary employee details in a leadership presentation.
Use a correction tracker with the missing item, owner, due date, and completion evidence. Do not recreate missing signatures, backdate documents, or imply that training occurred without evidence. Ask for the appropriate corrective process when a record cannot be recovered.
Make completeness part of the recurring workflow
Add a file check to onboarding, job changes, annual review cycles, and offboarding. Periodic sampling is more sustainable than waiting until a complaint or audit creates an emergency. If an HRIS stores the records, verify permissions and retrieval using actual user roles.
Holt’s employee file audit service is scoped by agreed record count and review depth. A broader workforce assessment can examine whether unclear ownership or disconnected workflows are causing repeated gaps.
What a scoped file audit should resolve
A file audit should explain which records and employee population were reviewed, which requirements were confirmed, and where the evidence remains incomplete. It should identify missing records, access concerns, conflicting versions, and correction priorities without treating every document category as universally required.
Corrections must accurately reflect what occurred. Do not invent dates or make a newly obtained acknowledgment appear to have been signed earlier. Competency questions require the appropriate qualified reviewer. Holt’s file-audit scope defines the sample, findings, and follow-through rather than offering one universal form for every employer.
Separate personnel file requirements from filing preferences
Three different questions often get combined: what records an employer must maintain, how long each record must be retained, and where the employer organizes it. A practical filing checklist helps with the third question; it does not automatically answer the first two.
Identify the record category, applicable source, retention trigger, access owner, and any additional obligations before setting a disposal date. Required payroll information may sit in a payroll system rather than the general personnel folder. Restricted medical or case information needs appropriate handling rather than broad manager access.
Examples show why one retention period is not enough
| Record example | Agency guidance to check | Planning implication |
|---|---|---|
| Personnel and employment records under applicable EEOC rules | The EEOC describes a general one-year rule and additional preservation when a charge is filed | Confirm coverage, the relevant event, and preservation obligations |
| Payroll records under the FLSA | DOL describes at least three years for covered payroll records | Do not use a shorter general-file period for payroll information |
| Underlying wage-computation records | DOL describes two years for records such as time cards and schedules | Classify supporting information separately from the payroll total |
These are selected federal examples, not a complete retention schedule. Other laws, locations, industries, contracts, and preservation duties can require different or longer treatment. A hold or unresolved matter may prevent disposal that would otherwise appear timely.
Start the file audit with an agreed sample. Record missing evidence, conflicting versions, access problems, and questions for specialist review. Assign correction owners and verify completion. A folder being renamed “compliant” is not evidence that the underlying obligations have been met.
Review the EEOC recordkeeping guidance and DOL’s FLSA recordkeeping fact sheet, checked November 2, 2026. For the wider review, use the small-employer HR compliance checklist.
Frequently asked questions
Can employee personnel files be electronic?
Electronic organization can work when records remain accessible, accurate, protected, and retained according to applicable requirements. Confirm any specific format or system requirements for the record type.
Should employee medical notes be stored with performance reviews?
Medical information requires confidential handling. Use the appropriate restricted record process rather than placing medical details in a general manager-accessible personnel file.
Primary resources
Sources reviewed October 21, 2026. Agency guidance supports the specific legal or measurement points identified in this article; the workflows and examples are Holt’s operational recommendations.
General HR planning information, not legal or clinical advice. Confirm requirements for your employer, work locations, roles, and service model with the responsible agencies and qualified specialists.
Are personnel file requirements identical for every small business?
No. Required records, access, retention, and notices can depend on location, applicable laws, workforce, industry, and specific circumstances. A general checklist is an organizing framework, not a universal legal inventory.
Can all employee documents use the same disposal date?
Do not assume that. Record categories can have different retention periods and triggering events, and preservation obligations may extend them. Establish a verified schedule before disposal.
A practical next step
Turn scattered HR practices into a usable foundation
Holt can scope the documents, records review, role clarity, or connected workflows your organization needs, with clear approval and maintenance responsibilities.
The proposal defines the deliverables and implementation work. If the priorities are unclear, the $1,500 assessment can establish a starting point.
Request a free introductory conversationExplore infrastructure support →