Retention periods for personnel files UK statutory schedule and employer compliance
UK employers must balance statutory retention windows against UK GDPR storage limitation rules.

Retention periods for personnel files in the UK balance statutory limitation rules against data protection standards. Keep core staff files for six years after an employee leaves your company. This six-year rule matches the legal limit for contract claims. It protects your business. Understanding these statutory deadlines protects your firm while ensuring UK GDPR compliance.

Old records help when disputes arise. Former staff may bring unexpected wage claims against you. Tax officials may ask for past data. But privacy law sets strict limits. UK GDPR stops firms from keeping personal files forever. Store only what the law demands. Securely clear out anything you no longer need.

Statutory retention schedule for former worker files

Different staff records have distinct legal deadlines under UK employment and data privacy statutes. Do not treat all files the same way. Each record has its own legal purpose.

The table below shows key deadlines for UK employers.

Record Category Retention Period Governing Authority Compliance Purpose
Personnel Files & Contracts 6 years after employment ends Limitation Act 1980 Breach of contract claim defense
Written Contract Variations 6 years after employment ends Limitation Act 1980 Contract dispute evidence
Right to Work Verification 2 years after employment ends Immigration Act 2006 Civil penalty defense & audit
Working Time Records 2 years from creation date Working Time Regulations Hours compliance & rest audit
Leaver Emergency Contact Details Delete immediately upon exit UK GDPR (ICO Guidance) Storage limitation compliance

Why the 6-year Limitation Act sets the core personnel standard

Six years is the main benchmark for employers. Section 5 of the Limitation Act 1980 sets this rule. Former staff have six years to claim breach of contract. A job contract is a simple legal agreement. When terms are broken, workers can sue.

Claims often involve bonus terms or unpaid hours. Disagreements over restrictive covenants can also arise. Civil courts allow contract breach claims for six years from the date the issue arose. Keep signed job offers, changes to terms, and exit notes safe. They provide vital proof.

Pay data follows its own rules. Read our guide on how long to keep payroll records UK. Aligning both systems keeps your firm safe.

Right to work and immigration record duties

Employers must retain right to work documentation for the duration of employment and for two years after an employee leaves. Keep these verification records securely archived throughout that statutory window.

Setting up new staff requires care. See our guide on hiring your first employee paperwork. Good habits from day one save time later.

Working time records and opt-out agreements

Under staff record rules, employers must keep working time records for two years. Keep these working time records safe for two full years. Once this two-year period passes, you can safely delete routine time tracking logs.

UK GDPR data minimisation and leaver offboarding

UK GDPR sets firm limits. Under the storage limitation principle, employers must never keep workers' personal information indefinitely. When an employee leaves, review their files right away.

The Information Commissioner's Office makes this very clear. Employers should delete personal data they no longer need once employment ends. Delete emergency contact details and previous addresses. These records serve no useful purpose once a worker departs.

Use this simple checklist when someone departs:

Company accounts follow clear rules. As directors check how long to keep business records, apply the same care to staff files. Review your archives every year to stay safe.

Frequently Asked Questions

What are the standard retention periods for personnel files in the UK?

Core staff files and signed contracts must be kept for six years after an employee leaves.

How long must right to work documents be kept after staff exit?

Keep right to work checks during employment and for two years after the worker leaves.

Does UK GDPR allow businesses to keep former employee records indefinitely?

No. UK GDPR requires you to erase personal data once legal duties end.

Which leaver details must be destroyed immediately after offboarding?

Delete emergency contact details and previous addresses as soon as staff leave.