What Goes in the Personnel File (and What Must Stay Out)

If a former employee asked to see their personnel file tomorrow morning, could you produce the right folder — and only the right folder — within a few days? For most small businesses, the honest answer is uncomfortable: everything is in one overstuffed folder (or one shared drive), medical notes sit next to performance reviews, and nobody remembers where the I-9s are. That single habit creates three separate legal exposures at once: a disability-confidentiality violation, an immigration-audit overproduction, and a wage-claim recordkeeping failure.

The fix is not complicated. You need a small system of separate files, a clear rule for what goes where, and a written access procedure. This guide walks through exactly that.

What a Personnel File Actually Is​

A personnel file is your record of a person's employment: who they are as an employee, what job they hold, how they perform, what they are paid, and how the relationship changed or ended. It is an employment record, not a life record. Anything that does not relate to the job or the employment relationship does not belong in it.

There is no single federal law that defines the complete contents of a personnel file for private employers. Instead, several laws each claim a piece of it: disability law tells you to keep medical information out, immigration law tells you to keep work-authorization forms apart, anti-discrimination law tells you how long to keep hiring and personnel records, and wage law tells you how long to keep pay records. About 19 states add their own access rules on top. Your filing system has to satisfy all of them at the same time — which is precisely why one big folder fails.

What Goes in the Main Personnel File​

Keep the main file limited to job-related employment records. For a typical employee, that means:

• Job application, resume, and offer letter
• Job description for the position held
• Signed handbook acknowledgment and at-will acknowledgment (where used)
• Tax withholding forms (federal W-4 and state equivalents) — or a pointer to where payroll holds them
• Performance evaluations and goal plans
• Disciplinary records: warnings, performance improvement plans, suspension notices
• Promotion, demotion, transfer, and pay-change notices
• Training and certification records tied to the job
• Attendance summaries (dates and totals, not diagnoses behind absences)
• Leave requests showing dates taken (keep the medical certification behind the leave elsewhere — see below)
• Separation documents: resignation letter, termination notice, exit interview, COBRA notice record

A useful test before filing anything: would this document help a future reader understand what job this person did, how well they did it, or what changed about their employment? If yes, it probably belongs here. If it explains someone's health, it does not — even if it arrived attached to a leave request.

A note on pay records​

Payroll records (wage rates, hours, deductions, pay dates) are often stored with payroll rather than in the personnel file, and that is fine. What matters is that they exist, are accurate, and are retained for the full period wage law requires: three years for payroll records under the Fair Labor Standards Act, with timecards and wage-computation records kept at least two years. If your payroll lives in your accounting system, keep a pointer in the personnel file so you can assemble the complete picture on demand.

What Must Stay Out: The Three Separate Files​

This is the part most small businesses get wrong. Three categories of records must live outside the main personnel file.

1. Confidential medical file (legally required separation)​

Under the Americans with Disabilities Act, any medical information about an employee must be collected and maintained on separate forms, in separate medical files, treated as a confidential medical record. This applies to employers with 15 or more employees, but it is the right practice at any size. It covers more than you might expect:

• Doctor's notes and fitness-for-duty certifications
• FMLA medical certifications and related health details
• Workers' compensation medical records
• Disability accommodation requests and supporting medical documentation
• Drug-test results with medical information, biometric screening results, health insurance enrollment health details

Only narrow exceptions allow disclosure: supervisors may be told about necessary work restrictions and accommodations (restrictions, not diagnoses), and first-aid or safety personnel may be told if emergency treatment might be needed. A performance review that mentions an employee's diagnosis, or a leave file that includes the full medical certification stapled to the time-off form, breaks this separation. Store dates and eligibility decisions in the personnel file; store the health details in the locked medical file.

2. Form I-9 and work-authorization records (kept apart)​

Do not file Forms I-9 in personnel files. Immigration authorities recommend storing I-9s separately — in their own binder or electronic file — so that an inspection produces exactly what was requested and nothing more. If your I-9s sit inside personnel files, every file review risks overproducing sensitive documents to the wrong audience.

Retention has its own formula, different from everything else: keep each I-9 for three years after the date of hire or one year after employment ends, whichever is later. Only after someone leaves do you calculate the destruction date. Never send I-9s to the immigration agency unasked; you hold them and present them within three business days when an inspection notice arrives.

3. Investigations, grievances, and background screening (best kept apart)​

Keep complaints, investigation notes, witness statements, and grievance outcomes in a separate confidential investigation file rather than in the individual's personnel file. Final disciplinary actions that resulted from an investigation can be summarized in the personnel file; the underlying witness statements and deliberative notes should not travel with the employee's everyday record. Similarly, background-check reports obtained under the Fair Credit Reporting Act and reference checks with candid third-party assessments are best segregated, since several state access laws let employees inspect the main file — you do not want someone else's unfiltered opinions or another person's personal data produced in a routine file review.

The Multi-File System That Survives an Audit​

For a small business, five containers cover nearly everything:

1. Personnel file — the job record described above. One per employee.
2. Confidential medical file — locked, minimal access. One per employee, stored apart.
3. I-9 file — all active-employee I-9s together (alphabetical or by hire date), plus a separate set for terminated employees awaiting their destruction date.
4. Investigations file — complaints and findings, organized by incident, not by person.
5. Payroll and tax records — wage data, hours, deductions, tax filings, benefits enrollment records. This often lives in your accounting or payroll system; the requirement is completeness and retention, not a particular drawer.

Then add two controls that cost nothing:

• Need-to-know access. Managers see performance information for their own reports. Only designated people (you, your HR lead, your payroll administrator) see pay details. Almost nobody sees the medical file. Write down who holds each key, physical or digital.
• An access log. Note who reviewed or copied a file, when, and why. It takes seconds and it is the first thing that makes an auditor or investigator trust your system.

If you operate digitally, the same structure applies to folders and permissions: separate directories with separate sharing rules, not one "HR" folder everyone can open. Encryption and backups matter here because these files concentrate Social Security numbers, medical details, and bank information in one place.

Employee Access Rights: What You Must Provide​

There is no general federal law giving private-sector employees the right to inspect their personnel file. Whether you must provide access depends on your state — and states split roughly into two camps. Around 19 states require employers to provide current employees (and sometimes former employees) with access to their personnel records; the rest leave it to employer policy, with Texas a prominent example of the latter: Texas employers generally have no legal duty to let employees view the file, though public-sector employees have separate open-records rights.

Where access laws exist, they differ on the details that matter operationally:

• Who can request. Some states cover current employees only; others extend to former employees for a window after separation, sometimes with limits (for example, access once in the year after termination).
• How fast you must respond. Deadlines range from a few business days to a few weeks. Washington's 2025 clarification, for instance, defines the file broadly — applications, evaluations, disciplinary records, leave and accommodation records, payroll records, employment agreements — and sets a 21-day furnishing deadline.
• What form access takes. Most states require at least supervised inspection, often with the right to take notes and get copies (you may charge a reasonable copying fee). A few restrict what must be shown, excluding investigation materials or reference letters.
• Retaliation is prohibited. Employees who assert access rights are protected, so treat requests as routine administration, never as an adversarial event.

Practical policy even where your state does not require access: accept written requests, respond within two weeks, provide supervised review plus copies on request, and have someone other than the employee's direct supervisor sit in. A calm, documented process turns a suspicious moment into a trust-building one — and if the request precedes a dispute, your log shows good faith.

How Long to Keep Everything​

Retention periods stack, so apply the longest applicable rule to each record type:

• Personnel and employment records (hiring, promotion, termination, applications): at least one year from creation or the personnel action under EEOC rules; one year from termination for involuntarily terminated employees. Keep records related to any discrimination charge until the matter is fully resolved.
• Payroll records (wages, hours, deductions, pay basis): three years under the Fair Labor Standards Act, and three years for age-discrimination payroll purposes. Supporting computations (timecards, piecework tickets, wage-rate tables) need at least two years.
• Form I-9: three years after hire or one year after termination, whichever is later.
• Benefits and leave records: plan documents and enrollment data generally follow the taxpayer and benefits rules (often six-plus years in practice); keep FMLA leave records at least three years.
• Job applications from people you did not hire: one year.
• State law: several states require longer periods (commonly three to five years for wage records), so check your state and follow whichever rule is longest.

Two habits prevent most retention failures. First, never destroy anything once you reasonably anticipate a claim, charge, or audit — a litigation hold overrides every schedule above. Second, put destruction dates on closed-employee files (a simple cover sheet: "destroy I-9 after [date], personnel file after [date]") so purging is a scheduled act, not a spring-cleaning impulse.

Common Mistakes That Create Exposure​

• The single-folder habit. Medical details, I-9 copies, and performance notes in one place means every production — to the employee, to an auditor, to a new manager — discloses something it should not.
• Shadow files. Managers who keep their own "real" notes outside the official file create records you cannot produce and cannot defend. Require that employment decisions rest on the official file.
• Medical language in performance documents. "Struggling since the diagnosis" in a review merges the two files you worked to separate. Describe observable work outcomes; file health information only in the medical file.
• Purging on autopilot. Deleting files at one year because "EEOC says one year" destroys payroll records owed three and I-9s owed longer. Apply per-record schedules.
• No access procedure. Scrambling when a request arrives produces delays that access-law states penalize and disputes that look like concealment. A one-page written procedure prevents both.
• Storing I-9s with personnel files, then handing over the file. The most avoidable overproduction in small-business HR. Separation is the entire remedy.

A 30-Minute Setup Checklist​

1. Create the five containers (physical folders or permission-separated digital directories) and move existing documents into the right ones.
2. Pull every medical document out of personnel files into the confidential medical file. Pull every I-9 into the I-9 file.
3. Write a one-page access policy: who may see each file type, how employees request review, your response time, and copy rules.
4. Add a cover sheet to each closed-employee set with the I-9 destruction date and the personnel/payroll destruction dates.
5. Restrict digital sharing on the medical and investigation folders today; remove the broad "everyone in the company" shares.
6. Calendar an annual purge review — with a litigation-hold check before anything is destroyed.

Keep Your Employee Records and Your Books Aligned​

Personnel files and payroll books describe the same employment relationship from two sides, and they should agree: the pay rate in the file should match the rate in the ledger, the hire and termination dates should match the payroll start and stop, and every off-cycle payment should trace to a documented decision. When the two drift apart, wage claims and tax notices get expensive fast. If your accounting already tracks pay rates, deductions, and payroll tax filings cleanly, file reviews become faster and audits become calmer.

Simplify Your Financial Management​

As you tighten up personnel files and payroll recordkeeping, keeping the financial side just as organized pays off at tax time and during any audit. Beancount.io offers plain-text accounting that is transparent, version-controlled, and AI-ready — every payroll run and tax payment traceable in files you own. Get started for free and see why developers and finance professionals are switching to plain-text accounting.