New York Personnel File Management: Key Changes Proposed Under S3460

The New York State Legislature has passed S3460, a bill that would significantly expand New York personnel file management requirements for employers. If signed by Governor Hochul, the bill would impose new obligations relating to personnel file access, notice of negative information, employee responses, record retention, and anti-retaliation protections.

S3460 has not yet become law. If signed, it would take effect 60 days later. Given the proposed five-business-day response period and 10-day notice requirement, New York employers and HR teams should begin reviewing their personnel file management policies, recordkeeping systems, performance documentation, disciplinary procedures, and employee request processes.

If your organization needs assistance reviewing its New York personnel file management policies, employee access procedures, performance documentation, or disciplinary records, ILS can assess your current practices and provide guidance on applicable requirements and potential compliance risks. For more information, please contact the ILS legal team at contact@consultils.com.

New York Personnel File Management Requirements

S3460 defines a personnel record broadly. The term would include records maintained by an employer that identify an employee and are used, have been used, or may affect decisions regarding the employee’s qualifications for employment, promotion, transfer, additional compensation, or disciplinary action.

Personnel records may include:

• The employee’s name, address, date of birth, job title, and job description;

• Employment applications, resumes, and other hiring materials;

• The employee’s start date;

• Wage, commission, bonus, and other compensation records;

• Performance evaluations;

• Written performance warnings;

• Probationary-period records;

• Waivers or acknowledgments signed by the employee;

• Dated termination notices; and

• Other documents relating to disciplinary action.

The proposed law may therefore apply beyond the contents of a traditional HR file. Emails, internal evaluations, investigation findings, disciplinary notes, and other records maintained by managers, payroll personnel, legal teams, or third-party HR platforms may also fall within the scope of New York personnel file management requirements if they are used in employment decisions.

Employers should identify where personnel records are stored, who has access to them, and whether those records can be collected and produced within the required timeframe.

Personnel File Access and Disclosure

Under S3460, an employer would be required to provide a complete copy of an employee’s personnel record at no cost within five business days after receiving a written request.

Employers could generally limit employees to two requests per year. However, that limit would not apply to requests involving newly added negative information.

The right to request personnel records would apply to both current and former employees. Although the bill does not establish a specific deadline for former employees to submit a request, employers would be required to retain a complete personnel record for three years after termination.

To satisfy the five-business-day requirement, employers should establish a centralized personnel file request process addressing:

• Where employees must submit written requests;

• Who is responsible for verifying the requester’s identity;

• How records maintained across multiple departments and platforms will be collected;

• How third-party personal information will be reviewed;

• Who will approve the final production; and

• How the delivery date and method will be documented.

Employers that rely on decentralized records, manager email accounts, multiple HR systems, or outside vendors may need to restructure their New York personnel file management practices.

Negative Information and Employee Responses

One of the most significant proposed changes concerns negative information placed in an employee’s personnel record.

An employer would generally be required to notify an employee within 10 days after adding information that has been used, may be used, or could negatively affect the employee’s:

• Qualification for employment;

• Promotion;

• Transfer;

• Additional compensation; or

• Exposure to disciplinary action.

Potentially covered documents may include written warnings, performance improvement plans, negative performance evaluations, disciplinary notices, investigation findings, and other records that may affect compensation, advancement, transfer, or continued employment.

The bill does not yet provide detailed guidance on what qualifies as negative information. Questions may remain regarding informal manager notes, draft evaluations, internal investigation interview notes, and documents created before a final employment decision is made.

Employers should consider implementing an internal review process under which HR or legal personnel determine whether a document:

• Qualifies as a personnel record;

• May negatively affect the employee;

• Triggers the 10-day notice requirement; and

• Has been properly delivered and documented.

If an employee disputes information in the personnel record, the employer and employee may agree to correct or remove it. If they do not reach an agreement, the employee would have the right to submit a written statement explaining the employee’s position.

That statement would become part of the employee’s personnel record. If the disputed information is later provided to a third party, the employer would also be required to provide the employee’s written response.

This requirement may affect background checks, internal transfers, promotion reviews, merger and acquisition due diligence, employment disputes, and regulatory investigations.

S3460 would also allow employees to seek removal of information that the employer knew or should have known was false. Employers should therefore ensure that performance reviews, disciplinary records, and investigation findings are accurate, fact-based, and supported by documentation.

Record Retention and Enforcement Risk

The proposed New York personnel file management law would require employers to preserve a complete personnel record for three years following an employee’s separation.

Employers should review:

• Which documents constitute the complete personnel record;

• Where paper and electronic records are stored;

• How the three-year retention period will be calculated;

• Whether HR systems contain automatic deletion settings;

• Whether third-party platforms delete records earlier;

• Whether records can be searched and exported promptly; and

• Whether access, editing, and deletion permissions are appropriately restricted.

Employers that maintain performance, compensation, investigation, and disciplinary records across different systems may need to create a centralized index or record-management protocol. The New York Attorney General would have authority to enforce the law. Violations could result in penalties ranging from $500 to $2,500.

S3460 also includes broad anti-retaliation protections. Employers could not take adverse action against an employee for requesting personnel records, seeking corrections, submitting a written response, or exercising other rights under the law.

The bill would also prohibit threats to contact, or actual contact with, immigration authorities concerning the suspected immigration status of an employee, the employee’s family member, or a member of the employee’s household.

Employers should ensure that personnel file requests are not improperly connected to decisions involving scheduling, compensation, promotion, transfer, performance evaluation, discipline, or termination.

Impact on Performance Management and Investigations

S3460 could significantly affect how New York employers document employee performance, disciplinary action, internal investigations, and separation decisions.

Because employees may be able to inspect and respond to performance evaluations and disciplinary records, employers should ensure that documentation:

• Is based on specific and verifiable facts;

• Identifies relevant dates and events;

• Is consistent with prior feedback;

• Uses objective and professional language;

• Applies consistent standards across employees; and

• Is supported by relevant business records or communications.

Employers should avoid creating extensive negative documentation only after termination is under consideration. Performance management should be an ongoing process, with concerns communicated and documented consistently.

Internal investigation materials may also require careful classification. If an investigation document is used to support discipline, transfer, promotion, or termination, it may fall within the scope of an employee’s personnel record.

Employers should distinguish among:

• Factual investigation materials;

• Witness and third-party personal information;

• Final investigation findings;

• Documents used in employment decisions;

• Attorney-client privileged communications; and

• Attorney work product.

HR and legal teams should establish clear rules regarding which investigation materials enter the formal personnel file and which records should be maintained separately.

Steps for New York Employers

Although S3460 has not yet taken effect, New York employers should consider taking the following steps:

• Inventory personnel records maintained across HR systems, manager email accounts, messaging platforms, payroll systems, and third-party vendors;

• Define which documents are included in the official personnel file;

• Establish a process for responding to written requests within five business days;

• Develop procedures for identifying and notifying employees of negative information;

• Standardize performance reviews, investigation reports, and disciplinary records;

• Confirm that complete personnel files are retained for at least three years after separation;

• Review automatic deletion and data-retention settings;

• Train HR personnel, legal teams, and managers on personnel file access and anti-retaliation requirements; and

• Confirm that HR platforms, payroll providers, professional employer organizations, and other vendors can support record retrieval and production.

Employers should also review access controls to prevent unauthorized editing, deletion, or decentralized storage of personnel records.

Next Steps

S3460 remains subject to review by Governor Hochul. If signed, the proposed New York personnel file management requirements would take effect 60 days later.

Employers should continue monitoring whether New York issues additional guidance concerning:

• The meaning of negative information;

• Exceptions to employee access rights;

• Treatment of third-party personal information;

• Electronic delivery requirements;

• Privileged or protected materials; and

• Procedures for requests submitted by former employees.

Because the implementation period would be relatively short, employers should not wait until the law becomes effective to assess their current New York personnel file management practices.

If enacted, S3460 would substantially increase New York employer compliance obligations involving personnel file management. Employers would need to do more than produce personnel records upon request. They would also need to maintain accurate and complete files, identify negative information, provide timely notice, preserve employee responses, retain former employee records, and avoid retaliation.

New York employers should review their personnel file management policies, performance documentation, disciplinary practices, investigation procedures, and separation processes to ensure that written policies and actual practices are aligned.

If your organization needs assistance reviewing its New York personnel file management policies, employee access procedures, performance documentation, or disciplinary records, ILS can assess your current practices and provide guidance on applicable requirements and potential compliance risks. For more information, please contact the ILS legal team at contact@consultils.com.

Disclaimer: The materials provided on this website are for general informational purposes only and do not, and are not intended to, constitute legal advice. You should not act or refrain from acting based on any information provided here. Please consult with your own legal counsel regarding your specific situation and legal questions.

---

As Managing Partner at ILS, Richard Liu ranks among the leading U.S. attorneys in corporate, employment, and regulatory law. He is known for crafting legal strategies aligned with clients’ business objectives and advising Fortune 500 companies, startups, and executives on corporate transactions, financing, privacy, and employment matters across the technology, healthcare, and financial sectors.

Before founding ILS, Richard practiced at top defense firms, where he developed a reputation for anticipating risks and designing strategies that balance protection with growth. He has secured favorable outcomes in contract and intellectual property disputes, represented clients in state and federal courts, and is recognized for combining large-firm expertise with boutique-firm agility. Richard is also a frequent speaker at industry and legal conferences.

Email: contact@consultils.com | Phone: 626-344-8949