Labor and Employment

Spring Cleaning Your Employee Files

April 1, 2026

By Sarah Goodman

Spring Cleaning Your Employee Files

Spring inspires a certain kind of ambition. Closets are reorganized. Garages are reclaimed. Kitchen drawers finally surrender their mysterious collections of takeout menus and expired soy sauce packets.

Employers would do well to apply the same seasonal energy to another space that tends to accumulate clutter quietly over time: employee records.

Personnel files have a remarkable way of expanding without supervision. A performance note here, an email printed there, a manager’s handwritten reminder tucked into a folder for “later.” Years later, the file resembles less of a clean employment record and more of a historical archive.

Unfortunately, when a dispute arises, those archives tend to become exhibits.

Spring is a useful moment for employers to step back and examine how employee records are organized, what should be retained, and what should not be living in the same file in the first place. A thoughtful approach to data retention is not just good housekeeping, it is a meaningful risk management strategy.

One of the most common misconceptions about employee files is that everything related to an employee should live in one folder. Legally speaking, that approach creates more problems than it solves.

Most employers should maintain several distinct categories of employee records, each with its own purpose and level of confidentiality.

The traditional personnel file is the record most employers think of first. It typically contains materials related to hiring, compensation, performance evaluations, promotions, disciplinary actions, and other employment decisions. In short, it tells the professional story of the employee’s relationship with the company.

But certain types of information should not live in that same file.

Medical information is a prime example. Documents related to medical conditions, disability accommodations, and medical certifications for leave must be maintained separately and treated as confidential under federal law, including the Americans with Disabilities Act. Keeping medical records apart from the general personnel file helps limit access and ensures managers reviewing performance information are not inadvertently exposed to protected medical details.

Immigration related documents are another category that deserve their own home. Form I-9s, which verify employment eligibility, should be stored in a separate I-9 file or electronic system rather than within the personnel file itself. There is a practical legal reason for this. If the Department of Homeland Security or another agency conducts an I-9 audit, employers are required to produce those forms. Housing them separately allows employers to provide the required documents quickly without turning over the entire personnel file or exposing unrelated, potentially sensitive employment records.

A similar logic applies to background check documentation. Reports obtained under the Fair Credit Reporting Act often contain personal information that should be maintained separately from routine personnel materials and handled in accordance with the statute’s confidentiality requirements.

If this sounds like a lot of folders, it is. But the structure matters. Separating records by category is not about bureaucracy. It is about protecting sensitive information, limiting unnecessary disclosure, and ensuring compliance with multiple overlapping employment laws.

Consistency is equally important. Employers should aim for uniform recordkeeping practices across the workforce. Documents that are routinely created, such as performance evaluations or written warnings, should appear consistently in employee files. Sporadic documentation invites uncomfortable questions later about whether records were selectively created or preserved.

This becomes especially relevant in litigation. When employee files contain scattered notes, informal comments, or partial documentation, they often raise more questions than they answer. The absence of records can be just as problematic. If an employer asserts that an employee struggled with performance but the file contains no documentation of those concerns, that gap becomes difficult to explain.

Of course, spring cleaning does not mean shredding everything in sight.

Employers must comply with a bevy of federal and state record retention requirements. Under the Fair Labor Standards Act, for example, payroll records must generally be retained for at least three years. The Equal Employment Opportunity Commission requires employers to preserve personnel and employment records for at least one year, and longer if a charge of discrimination has been filed. Form I-9s must be retained for a specific period tied to the employee’s date of hire and separation. Benefit plan records, tax documents, and workplace injury reports often carry their own retention timelines as well.

Because the rules vary, the most effective approach is to adopt a written document retention policy that clearly identifies which records must be maintained and for how long. A well-designed policy helps HR teams manage records consistently and prevents the ad hoc cleanups that tend to occur when file cabinets become too full.

Those spontaneous cleanups can create real problems.

Once an employer becomes aware of a dispute, investigation, or potential claim, the organization has a legal obligation to preserve relevant records. Destroying documents after that point, even if it would normally be permitted under a retention policy, can lead to allegations of evidence destruction. Courts tend to take a dim view of that kind of spring cleaning.

Modern technology has also complicated the recordkeeping landscape. Employee information now lives in HR platforms, email systems, messaging tools, shared drives, and occasionally personal devices. A comprehensive retention strategy should account for both physical and electronic records and ensure they are governed by consistent rules.

At the same time, employers should resist the temptation to keep everything forever. Over retention can create its own problems. The more documents an organization keeps, the more it may have to search, review, and produce in the event of litigation or an investigation.

In other words, the goal is not hoarding. It is curation.

Spring cleaning employee files may not provide the immediate satisfaction of finally conquering the garage, but it offers something arguably more valuable: clarity. Organized, compliant records help employers make better decisions, respond confidently to audits or claims, and protect the confidentiality of sensitive information.

And unlike that kitchen drawer full of soy sauce packets, an orderly recordkeeping system rarely produces unpleasant surprises later.

Related People

Related Services

  • Overview
  • People
  • Labor and Employment Law Blog
  • Publications & News
  • Events

Firm Highlights

  • Events
    The 2026 Economic, Tax, and Accounting Updates
    We are looking forward to the Mid-Atlantic CFO Roundtable's next event on November 13, 2026. This is a program with topics built for Finance Executives. We are extremely fortunate to have three excellent speakers: Dr. Daraius Irani, Vice President of Business and Public Engagement at Towson University; Mike Stankus, Tax Office Managing Principal at BDO; and Daniel Wahlberg, Managing Partner of Acclare Solutions. The economy is rapidly changing with various factors driving it. The November 3rd midterm elections may also have an impact. Our three expert presenters will discuss the ramifications of the election, and the current year updates to GAAP financial reporting and Federal and State income taxes. Please join us for what will surely be an informative and timely discussion. Meet Our Speakers: Daraius Irani, Ph.D. • Towson University Vice President, Business & Public Engagement Dr. Daraius Irani serves as Vice President of Business and Public Engagement at Towson University as well as the chief economist for the Regional Economic Studies Institute (RESI) at Towson University, a policy group providing economic, fiscal impact, and policy analysis to public and private entities.  Dr. Irani is often called upon to provide economic presentations to organizations across Maryland. He has appeared on numerous television programs and in local and regional print media. Dr. Irani holds a Ph.D. in economics from University of California, Santa Barbara. Dan Wahlberg • Acclare Solutions Managing Partner With over 28 years of experience, Dan Wahlberg is a recognized leader in audit and assurance for the Mid-Atlantic’s middle market business community. As a licensed CPA in Maryland and Virginia, Dan has led assurance practices at top regional firms, including serving as Baltimore Audit Managing Partner and Assurance Practice Leader at BDO USA in Baltimore and as Partner and member of the Management Committee at Hertzbach & Company P.A which merged into BDO in 2020. His expertise centers on delivering clarity, strategic guidance, and proactive solutions to middle-market businesses across Baltimore and beyond. His entrepreneurial spirit has led him to begin a new CPA firm this year with four other CPAs serving the business community. Dan holds a Bachelor of Science in Accounting from Rutgers University and began his career at PWC in New York. He is also deeply engaged in the community, previously serving as President of ACG Maryland and current Board member and as Audit Committee Member for The Associated: Jewish Federation of Baltimore.  Mike Stankus • BDO USA LLP Tax Office Managing Principal Mike Stankus is the Tax Office Managing Principal for the firm’s Baltimore office. He has more than 16 years of experience providing tax planning and preparation and management advisory services for his clients. Mike focuses on advising privately held businesses and their owners on effective growth and tax strategies. He also performs various engagements for mergers and acquisitions and complex cost accounting projects and projections. In addition, he represents various government contracting clients before the DCAA and assists with FAR compliance. Mike’s areas of concentration include working with government contractors, professional service firms, construction companies, and homebuilders.
  • Events
    AIA Tri-State Conference
    Princeton will serve as the backdrop for three days of connection, learning, and design leadership. From keynotes to tours to the Tri-State Design Awards, this year’s conference is designed to go far beyond education sessions. Kick off the week with pre-conference intensives and individual state component Design Award celebrations, followed by three days of education, inspiration, networking, and design excellence at the 2026 AIA Tri-State Conference—featuring pre-conference intensives, three keynote speakers, 25 education sessions, curated tours, an expo, spec academies, and the AIA Tri-State Design Awards—bringing together architects and design professionals from New Jersey, New York, and Pennsylvania to connect, learn, and celebrate the best of the profession. G2. Designing Secure Practices: Cybersecurity, Data Privacy, Contractual Provisions, and Insurance Risks for Architects (4:00 PM - 5:30 PM) Architects and design professionals increasingly rely on cloud platforms, BIM software, and digital tools to manage sensitive data, creating cybersecurity and privacy risks. A single incident can trigger liability claims, regulatory obligations, reputational harm, and insurance challenges. Yet many firms underestimate how contracts, insurance, and internal practices intersect during a breach. This program offers legal and insurance perspectives on cyber risk in architecture, examining liability exposure, risky contract provisions, and mitigation strategies. A cyber insurance expert will explain policy responses, coverage gaps, coordination with professional liability, and best practices for aligning insurance with contractual risk and protecting firms from evolving cyber threats. Learning Objectives: Identify key cybersecurity and data privacy risks faced by architecture firms and explain how these risks can impact professional liability and project outcomes. Analyze common contractual provisions to determine which clauses may increase exposure to cyber incidents and propose strategies to mitigate these risks. Evaluate the scope and limitations of cyber insurance policies, including coordination with professional liability coverage, to determine how a policy would respond in a breach scenario. Develop actionable risk management strategies by integrating legal, contractual, and insurance considerations to protect sensitive client and project data.