To organize employee files in a way that holds up under audit, split each worker’s records into five separate categories — a main personnel folder, a Form I-9 file, a medical and safety file, a payroll and tax file, and a benefits file — lock down access to each one, and keep every document for the specific retention period set by the federal law that governs it. Storing everything in a single folder is the most common mistake, and it is the one most likely to turn a routine inspection into a discrimination claim or a wage-and-hour finding.
The Separate Files You Need
Federal law treats different categories of employee information as legally distinct, and the safest system mirrors those distinctions on your shelves and in your HR software.
Main Personnel Folder
This holds the professional record of the employee’s time with your company: application, resume, offer letter, signed acknowledgment of the employee handbook, performance evaluations, records of promotions and transfers, disciplinary write-ups, and training certifications. It is the folder you would open to answer questions about someone’s career at the company.
Form I-9 File
Each employee’s completed Form I-9 goes in a dedicated file, kept away from the main personnel folder. Separating it prevents supervisors from encountering information about citizenship status or national origin when reviewing unrelated matters, and it lets immigration inspectors review I-9 records without gaining access to everything else.
One point of confusion worth clearing up: keeping photocopies of the identity documents an employee presents during verification is optional, not required. If you choose to keep copies, do so consistently for every employee regardless of national origin or citizenship status, or you invite a discrimination claim.1USCIS. Questions and Answers Copy for everyone, or for no one. If you participate in E-Verify, record the case verification number on the corresponding Form I-9 or attach the case details page.
Medical and Safety File
Any health-related documentation belongs here: fitness-for-duty exam results, ADA accommodation requests, workers’ compensation claims, FMLA medical certifications, and wellness program records. The ADA treats any medical data obtained through health inquiries, examinations, or wellness programs as a confidential medical record that must be kept physically and digitally apart from general personnel files.2U.S. Equal Employment Opportunity Commission. Enforcement Guidance on Disability-Related Inquiries and Medical Examinations of Employees under the ADA When medical records sit next to performance evaluations, even an accidental glance during a promotion review creates a discrimination risk that is nearly impossible to defend against later.
Direct supervisors should not have routine access. The typical people who need this file are HR staff handling accommodations, first aid personnel in an emergency, and government investigators.
Payroll and Tax File
This folder holds W-4 withholding forms, pay rate history, hours worked, overtime calculations, wage garnishment orders, direct deposit authorizations, and copies of W-2s. The IRS requires employers to keep employment tax records that include the employer identification number, dates and amounts of all wage payments, tip allocations, dates of employment, and copies of tax deposit records.3Internal Revenue Service. Employment Tax Recordkeeping Organizing this file by tax year rather than alphabetically makes quarterly and annual filings much easier.
Benefits File
Health insurance enrollment forms, retirement plan elections, beneficiary designations, and life insurance paperwork sit in their own benefits file. Beneficiary designations in particular deserve careful tracking, since an outdated form can trigger costly disputes after an employee’s death.
Other Restricted Files
If your company runs background checks, reports generated under the Fair Credit Reporting Act should be stored in a restricted file. Employers covered by Department of Transportation regulations must keep drug and alcohol testing results in a location with controlled access, and positive results must be retained for five years.4eCFR. 49 CFR Part 40 Subpart P Confidentiality and Release of Information
Who Can See What
Separation only works if access is actually restricted. Physical files belong in locked cabinets inside a room with restricted entry, and keys or combinations should be limited to designated HR staff. Handing a supervisor a key “just in case” undoes the entire structure.
For digital records, the baseline is encryption, password protection, and access logging that tracks who viewed which file and when. Role-based access is the practical way to enforce the categories above. A direct supervisor might have read access to performance records in the main personnel folder, but the system should block them from opening medical files, I-9 documents, or payroll data. When someone leaves the HR team, revoke their access the same day.
Employees in many states have the right to inspect their own personnel files on request, with the timing, frequency, and scope of what counts as a reviewable record varying by jurisdiction. Even where no state law applies, a clear process for handling access requests reduces the chance that a worker files a complaint out of suspicion about what the file contains.
How Long to Keep Each Type of Record
No single retention period covers every employee record. Different federal agencies impose different deadlines, and the clock starts at different points depending on the document. The safest approach is to track each category separately and destroy nothing until the longest applicable deadline has passed.
Personnel Records
The EEOC requires personnel and employment records to be kept for at least one year from the date the record was created or the date of the personnel action, whichever is later. For involuntarily terminated employees, the retention period is one year from the date of termination.5eCFR. 29 CFR 1602.14 Preservation of Records Made or Kept The ADEA imposes a similar one-year requirement for hiring, promotion, and discharge records and extends payroll retention to three years for basic wage and compensation data.6eCFR. 29 CFR Part 1627 Records To Be Made or Kept Relating to Age
There is a critical exception. If a discrimination charge has been filed or litigation has begun, you must preserve all personnel records relevant to the charge until the matter reaches final disposition, regardless of the normal retention period.7U.S. Equal Employment Opportunity Commission. Summary of Selected Recordkeeping Obligations in 29 CFR Part 1602 Destroying records during active litigation or a pending EEOC charge is one of the fastest ways to lose a defensible case.
Payroll and Wage Records
The Fair Labor Standards Act creates a two-tier system. Core payroll records showing pay and hours worked must be kept for at least three years from the last date of entry.8eCFR. 29 CFR 516.5 Records to Be Preserved 3 Years Supplementary records like daily time cards, wage rate tables, and records of deductions from pay have a two-year retention requirement.9eCFR. 29 CFR 516.6 Records to Be Preserved 2 Years Since the two clocks run on different documents, most employers keep everything for three years rather than sorting the categories.
Employment Tax Records
The IRS requires all employment tax records to be kept for at least four years after filing the fourth quarter return for the year. That four-year clock is longer than the FLSA payroll deadline, so tax rules effectively set the floor for how long you keep W-4s, deposit records, and wage payment documentation.3Internal Revenue Service. Employment Tax Recordkeeping
Form I-9
The retention formula is three years after the date of hire or one year after the date employment ends, whichever is later.1USCIS. Questions and Answers For a long-tenured employee, the “one year after termination” date almost always wins. For someone who lasted only a few months, the “three years after hire” date wins. Calculate both dates and keep the file until the later one.
FMLA Records
Employers covered by the Family and Medical Leave Act must retain leave records, including dates of leave taken, hours used, and copies of employee notices, for at least three years.10eCFR. 29 CFR 825.500 Recordkeeping Requirements
OSHA Injury and Illness Logs
Employers required to maintain OSHA 300 Logs, 301 Incident Reports, and the annual summary must save those records for five years following the end of the calendar year they cover.11Occupational Safety and Health Administration. Detailed Guidance for OSHA’s Injury and Illness Recordkeeping Rule Businesses with ten or fewer employees at all times during the previous calendar year are generally exempt from OSHA recordkeeping, though they still must report fatalities and serious incidents.12Occupational Safety and Health Administration. 1904.1 Partial Exemption for Employers with 10 or Fewer Employees
Benefit Plan Records
ERISA requires records supporting benefit plan filings to be retained for at least six years after the filing date.13GovInfo. 29 USC 1027 Retention of Records If a plan terminates, the safer practice is to keep records until all benefits have been paid out and any audit window has closed.
Destroying Records the Right Way
Once the longest applicable retention deadline passes, records should be destroyed rather than left to accumulate. Hanging onto files indefinitely feels cautious, but every old record is a record that can be subpoenaed, breached, or leaked.
Paper documents should be cross-cut shredded so that personal identifiers and financial data cannot be reconstructed. Strip-cut shredding is not sufficient for sensitive records. Digital deletion means overwriting the data on the storage drive, not just moving it to a recycle bin. If you use a third-party destruction vendor, federal rules expect due diligence, including reviewing their security policies or requiring certification from a recognized industry association.14eCFR. 16 CFR 682.3 Proper Disposal of Consumer Information
Background check reports deserve extra care. The FTC requires that consumer report information be disposed of so it cannot practicably be read or reconstructed, using the same burning, pulverizing, or shredding standards that apply to other sensitive documents.15Federal Trade Commission. Background Checks What Employers Need to Know The standard is impractical to reconstruct, not physically impossible.
What Happens If You Get It Wrong
Recordkeeping violations tend to surface at the worst possible time: during a government audit, a discrimination charge, or a wage-and-hour lawsuit. Missing or disorganized records shift the burden of proof. If the Department of Labor audits your payroll records and you cannot produce the required documentation, the agency will rely on the employee’s account of hours worked and wages owed, and that rarely favors the employer.
I-9 violations carry civil penalties ranging from a few hundred dollars to nearly $2,800 per form for paperwork errors, with substantially higher fines for knowingly employing unauthorized workers. Penalties are assessed per form, so a company with dozens of improperly completed I-9s can face tens of thousands of dollars in fines from one audit.
Failing to preserve records after a discrimination charge has been filed creates its own trouble. Courts routinely draw adverse inferences when an employer destroys relevant records during litigation, meaning a jury may be instructed to assume the missing documents would have supported the employee’s claims. No amount of good lawyering can undo that inference once it is in front of a jury.