- Keep staff files and signed employment contracts for 6 years after workers leave your business.
- Hold right to work checks for 2 years.
- Save working time records for 2 years.
- Promptly delete emergency contacts right away under UK GDPR rules.

Retention periods for personnel files in the UK balance statutory limitation rules against data protection standards. Keep core staff files for six years after an employee leaves your company. This six-year rule matches the legal limit for contract claims. It protects your business. Understanding these statutory deadlines protects your firm while ensuring UK GDPR compliance.
Old records help when disputes arise. Former staff may bring unexpected wage claims against you. Tax officials may ask for past data. But privacy law sets strict limits. UK GDPR stops firms from keeping personal files forever. Store only what the law demands. Securely clear out anything you no longer need.
Statutory retention schedule for former worker files
Different staff records have distinct legal deadlines under UK employment and data privacy statutes. Do not treat all files the same way. Each record has its own legal purpose.
The table below shows key deadlines for UK employers.
| Record Category | Retention Period | Governing Authority | Compliance Purpose |
|---|---|---|---|
| Personnel Files & Contracts | 6 years after employment ends | Limitation Act 1980 | Breach of contract claim defense |
| Written Contract Variations | 6 years after employment ends | Limitation Act 1980 | Contract dispute evidence |
| Right to Work Verification | 2 years after employment ends | Immigration Act 2006 | Civil penalty defense & audit |
| Working Time Records | 2 years from creation date | Working Time Regulations | Hours compliance & rest audit |
| Leaver Emergency Contact Details | Delete immediately upon exit | UK GDPR (ICO Guidance) | Storage limitation compliance |
Why the 6-year Limitation Act sets the core personnel standard
Six years is the main benchmark for employers. Section 5 of the Limitation Act 1980 sets this rule. Former staff have six years to claim breach of contract. A job contract is a simple legal agreement. When terms are broken, workers can sue.
Claims often involve bonus terms or unpaid hours. Disagreements over restrictive covenants can also arise. Civil courts allow contract breach claims for six years from the date the issue arose. Keep signed job offers, changes to terms, and exit notes safe. They provide vital proof.
Pay data follows its own rules. Read our guide on how long to keep payroll records UK. Aligning both systems keeps your firm safe.
Right to work and immigration record duties
Employers must retain right to work documentation for the duration of employment and for two years after an employee leaves. Keep these verification records securely archived throughout that statutory window.
Setting up new staff requires care. See our guide on hiring your first employee paperwork. Good habits from day one save time later.
Working time records and opt-out agreements
Under staff record rules, employers must keep working time records for two years. Keep these working time records safe for two full years. Once this two-year period passes, you can safely delete routine time tracking logs.
UK GDPR data minimisation and leaver offboarding
UK GDPR sets firm limits. Under the storage limitation principle, employers must never keep workers' personal information indefinitely. When an employee leaves, review their files right away.
The Information Commissioner's Office makes this very clear. Employers should delete personal data they no longer need once employment ends. Delete emergency contact details and previous addresses. These records serve no useful purpose once a worker departs.
Use this simple checklist when someone departs:
- Delete emergency contact details from your team files.
- Remove home addresses that are no longer needed.
- Move signed contracts and formal letters to an archive folder.
- Set an auto-delete date on the digital file.
- Shred paper files securely once statutory periods end.
Company accounts follow clear rules. As directors check how long to keep business records, apply the same care to staff files. Review your archives every year to stay safe.
Frequently Asked Questions
What are the standard retention periods for personnel files in the UK?
Core staff files and signed contracts must be kept for six years after an employee leaves.
How long must right to work documents be kept after staff exit?
Keep right to work checks during employment and for two years after the worker leaves.
Does UK GDPR allow businesses to keep former employee records indefinitely?
No. UK GDPR requires you to erase personal data once legal duties end.
Which leaver details must be destroyed immediately after offboarding?
Delete emergency contact details and previous addresses as soon as staff leave.