Nonprofit Personnel Files -- A Guide from Ask Rita

Dear Rita: We've never paid too much attention to our personnel files, but we've just entered a contract with the county and we think it's time for us to get our act together on this. I know we need a personnel file for each employee -- but what should be in it? Signed, An Accidental HR Manager

Dear Accidental: It's great that you are asking this question now! Good personnel files are important not just for your county contract but because documentation of various employment matters is required by many state and federal employment laws and most employee-specific documentation is best retained in a personnel file.

  • For example, to comply with the Fair Credit Report Act (FCRA) when doing a background check, you've got to give specific written notices and get a written authorization if a third party conducts the records check. The proof that you've complied with FCRA should be kept in each individual's personnel file.
  • The file should also contain performance evaluations and any documentation that evidences the employee's employment status (a signed offer letter, an Employee Change Form reflecting things such as job title, wage rate, promotions, benefit coverage, and leaves of absence). The personnel file should read like the rings of a tree, giving evidence of an employee's history with your agency.

The rest of this article provides an overview of how to manage your organization's personnel files and a checklist of documents to include in a personnel file. First, let's talk about what should not be in a personnel file, which is just as important from a legal perspective.

What NOT to put in the personnel file

Following are the most important items to exclude:

  • Any writing regarding the employee's performance that the employee has not seen should not be in the file. For example, while the performance evaluation that was presented to the employee should be in there, a complaint memo from a department manager about an error the employee made that was never shown to the employee should not.
  • Working notes or logs that a supervisor has kept for her own benefit, usually to assist in the drafting of a performance evaluation. The notes should be destroyed after documenting anything of importance in the annual performance evaluation.
  • Any medical information (including drug testing information) about the employee from any source should never be in the employee's personnel file, but rather in a separate, more restricted confidential medical file. This separate medical file could also include any medical-related information such as documents related to Workers' Compensation, FMLA and ADA.
  • Complaints or investigation reports (harassment, discrimination, ethics, licensing etc.). Any complaint about an employee that is subject to an investigation should not be in the employee's personnel file, but in a separate complaint file. For example, if an employee is accused of sexual harassment, the only thing that should be lodged in the personnel file is any disciplinary action taken against the employee or a substantiated report of wrongdoing -- but not the original complaint or investigation notes.
  • These items also should not be kept in a personnel file, but in separate, confidential files:

In short, to manage all of this personnel information we suggest four sets of files:

  1. A personnel file for each employee
  2. A separate medical file for each employee
  3. One folder that has Forms I-9 for all employees
  4. A file (or set of files) for all employee payroll records

What can the employee put into his or her own file?

Most employers' policies allow an employee a limited period of time to submit a written response to any negative information in the file regarding performance. While responses and rebuttals are not required by law, this practice allows the employee to have her concerns documented, typically making it easier for everyone to move beyond any dispute and focus on performance.

Where should we keep personnel files?

Since personnel files contain confidential personal information, you will also need to establish a policy about access and security of these files. We recommend these practices:

  • Keep files in a locked cabinet and identify two staff (such as the HR manager and the executive director in a small organization) who will hold the keys.
  • Maintain a written log that shows when a personnel file has been reviewed and by who. You can, for instance, staple such a form to the inside front cover of the file.
  • Include a policy in your employee handbook that personnel files can only be accessed by the employee, his or her supervisor/manager, and others only if they have a need to know. (Note that many states have laws that grant employees the right to review their own personnel file or to keep a copy of certain documents.
  • In a separate locked drawer:
    • Keep one file that has Forms I-9 (Immigration) for all employees. Again, do NOT put an employee's I-9 in his or her personnel file, athough you might want to have a checklist in the file that indicates that this information has been collected. Form I-9 is the "Employment Eligibility Verification" form from the U.S. Citizenship & Immigration Services (USCIS, formerly called the INS). The government is entitled to inspect these forms, and if it does, you don't want the agents viewing the rest of the employee's personnel-and personal--information at the same time.
    • Keep a medical file for each employee.

How long should we keep a personnel file?

As a general rule, keep files for four years after an employee separates from your organization, with the exception of the following documents, which must be retained for a longer period of time:

  • Employee Benefit Plan documents and enrollment forms (medical, retirement, etc.) (must be retained for 6 years under ERISA)
  • OSHA Toxic Chemical Exposure records and Material Safety Data Sheets (30 years) and
  • Workers' compensation lost time injury reports (example: in California, 5 years)

Remember also that since personnel files contain confidential information, proper destruction of records is critical. The Fair and Accurate Credit Transactions (FACT) Act, effective in 2005, requires all employers to burn or shred all applicant or employees' personal information such as Social Security numbers, addresses, telephone numbers and any other information reported to an employer by a consumer reporting agency. Medical information should be handled similarly. Employers that use an outside party to dispose of records are expected to conduct due diligence in hiring a document destruction contractor.

Checklist for documents to keep in a personnel file:

  • Job description(s)
  • Resume and/or employment application
  • Offer letter
  • Authorizations for background checks
  • Certifications, licenses or proof of educational degrees or training
  • Drivers' license and proof of auto insurance (if employee drives as part of the job)
  • Personal and emergency contact information
  • W-4 tax exemption form
  • Benefits enrollment forms
  • Beneficiary and dependent benefit forms
  • Employee acknowledgment of receipt of Employee Handbook or any additional Employer Policies
  • Performance evaluations
  • Letters of commendation
  • Attendance records (but not payroll records)
  • Disciplinary memos
  • Personnel action form (also called employee change forms): Changes in salary, job title, etc.
  • Payroll information including direct deposit authorization, memos related to wages attachments or garnishments, request/authorization forms for leaves of absence (excluding medical certification)
  • Letters of resignation or termination

(Click here to download this checklist in a Word document you can modify.)

Dear Accidental: This may be more information than you expected, but it isn't as complicated as it might seem. Sincerely, Rita in HR

See also in Blue Avocado:

File attachments: 

Comments (21)

  • Anonymous

    Great overview. I have intended to review all of these files. The checklist will be a big help. On a related matter, what responsibilities does an employer have re HIPAA?

    Aug 09, 2011
  • Anonymous

    So why shouldn't notes and logs for a performance evaluation be kept? I can see the logic of keeping a separate complaint or investigation file, but you encourage the destruction of notes. If you have documented when an employee is excessively late or times you have had to discuss times you witnessed negative interactions with customers, poor money handling practices, etc., shouldn't you have a log of the incidents to back up your evaluation in case the employee disputes your claims?

    Aug 09, 2011
  • Anonymous

    Great article! I have one question ... the article states that FACT "requires all employers to burn or shred all applicant or employees' personal information." When does that occur?

    Aug 10, 2011
  • Great questions deserve an answer, so I'll try and respond to the comments above: 1. Employers are not "medical providers" under HIPPA vis-a-vis their employees. (They may be a medical provider towards their clients and the medical records of their clients.) That said - all employee medical records in an employers' possession should be treated confidentially. 2. I recommend that supervisor notes should be used to create the annual evaluation, and if its important it should go in the evaluation - if its on ongoing issue that is not get "ripe" yet - then sure, keep the notes until you want to report the issue in an evaluation. However, if it is not important enough to go in an evaluation why should it be kept? 3. The Fair and Accurate Credit Transactions Act (FACT) does not require destruction at any particular time - it just requires that personal information covered by the law be maintained confidentiality, and that when a business decides to destroy it, it be shredded or burned. Regards, Rita

    Aug 10, 2011
  • Anonymous

    Thanks!

    Aug 11, 2011
  • Anonymous

    HIPAA (not HIPPA) is a little more narrow, and actually only covers instances where health information is communicated electronically. Other statutes cover privacy in general. Thus, when there are electronic communications between employer and employee health benefit managers , then HIPAA is triggered (e.g., email or a web protal but interestingly, not fax!). As complicated as it sounds, all you need is a "Business Associate Agreement" between your organization and the benefits group (which is the Business Associate). This agreement essentially stipulates that the benefit group will ensure the tranmission is confidential, usually through encryption of some sort. Julie

    Aug 19, 2011
  • Anonymous

    Where should the Executive Directors personnel file be kept? The Board President wrote the ED's performance evaluation but doesn't have the key to the locked cabinet. Should electronic copies (.pdf) of the performance evaluations be kept?

    Aug 11, 2011
  • Anonymous

    Under what NOT to keep, things the employee has never seen: is this a legal requirement that could expose a company to liability? Or is this just a good practice?

    Aug 12, 2011
  • This is very helpful -- our personnel files are pretty complete, but I didn't know about separate files for I-9s, etc. or the required retention times. Leslie, Rainbow Community Center

    Aug 13, 2011
  • Anonymous

    So here's a crazy question: Can you legally keep personnel files electronically? Meaning, do you have to keep them in hard copy?

    Sep 01, 2011
  • With regard to keeping personnel records, including personnel files, in electronic format, I think that is fine as long as you have systems in place for electronic storage or back up to ensure that the electronic files won't be lost. If you are requested to produce any legally-required records, you will be able to print the documents from the electronic storage if necessary. Any document with an employee signature should be scanned (or an electronic signature obtained) so that you have proof that the employee acknowledged receipt. Regards, Rita

    Sep 01, 2011
  • Anonymous

    As a co-op employee does the chairman of the board have a right to take my personal file home without asking in the state of NV ?

    Aug 21, 2012
  • That depends on the rules of the co-op. This sort of thing is not typically addressed by the law, other than for the law to say that co-ops must follow their own charters.

    Jan

    Aug 23, 2012
  • Anonymous

    Is an employee legally allowed to request his/her personnel file after they have been terminated by an organization?

    Mar 20, 2013
  • The answer differs state-by-state. Best to consult an attorney in your city or state.

    Mar 21, 2013
  • The author of the article aslo suggests to check the website of Department of Labor or Labor Commissioner in the state th e question writer is located; they typically have resources that will answer this question for them.

    Mar 21, 2013
  • Anonymous

    What do you need to share with outside auditors from personnel files when they request them?

    Apr 01, 2013
  • Anonymous

    I didn't see a response to the excellent question above...where would the ED's evaluations typically be retained? If an HR assistant has access to the personnel files, it may not make sense for that to be retained with other personnel files.

    Oct 03, 2013
  • It would typically be in the personnel file. The HR assistant has access to her own boss' evaluation, so the ED isn't really different. Alternatively, senior staff personnel files may be in a separate locked cabinet where the COO and the ED have access.

    jan

    Oct 10, 2013
  • In a non-profit organization does the chairman of the board have a right to take personnel files home for permanent storage?

    Oct 06, 2016
  • No one member of the Board has any right to control where the files of a nonprofit are stored. Personnel files obviously have confidential information and the full Board should establish the recordkeeping policies of the nonprofit.

    Oct 18, 2016

Leave a comment

Fill this field in if you want to post a name a user login

Filtered HTML

  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <small> <sup> <sub> <cite> <blockquote> <code> <ul> <ol> <li> <dl> <dt> <dd> <h1> <h2> <h3> <h4> <img> <br> <br/> <p> <div> <span> <b> <i> <pre> <img> <u><strike>
  • Lines and paragraphs break automatically.

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.

subscribe (free)

 

Donate to American Nonprofits, sponsor of Blue Avocado