New York Passes S3460: The End of Employer-Controlled Personnel Files | NY Senate Bill S3460 & Personnel File Law | New York Employer Compliance Lawyers

New York Senate Bill S3460 represents a massive shift in how employers in the state must handle workplace documentation. For decades, New York stood apart from states like California and Massachusetts by treating personnel files as the exclusive property of the business. Employees had no general legal right to see what was in their files unless they extracted them through legal discovery. However, if Governor Kathy Hochul signs the bill, all of that will change. Both houses of the New York State Legislature passed the bill, meaning employers face an entirely new set of strict disclosure and recordkeeping mandates.  

The Hard Numbers: Turnaround Times and Deadlines

The procedural requirements of the bill leave almost zero room for administrative delay:

• 5-Day Production Window: Employers must hand over a complete copy of an employee’s personnel records within five business days of a written request.
• No Cost to the Worker: You cannot charge employees copy or administrative fees; files must be delivered entirely free of charge.
• Frequency Cap: Regular requests are limited to two times per calendar year.
• Fines for Violations: The New York Attorney General will enforce the statute, with civil penalties ranging from $500 to $2,500 per violation.
• Retaliation Shield: The law explicitly bans any adverse action against workers who request their files.

What Actually Counts as a "Personnel Record"?

The definition of a personnel record under the bill is performance-based and sweeping. It covers any written document that identifies an employee and “is used, has been used, or may affect or be used” regarding their:

• Qualifications for hire
• Compensation, wages, or raises
• Promotions or lateral transfers
• Disciplinary history or warnings

While formal applications, performance reviews, and official write-ups are clearly included, the phrasing "may affect or be used" introduces a significant gray area. Internal HR emails, manager notebooks, and informal slack messages discussing an employee's poor performance could easily fall under this definition if they influence future disciplinary decisions.

The 10-Day "Negative Information" Rule and Rebuttal Rights

The most disruptive component of the legislation is the affirmative obligation to disclose negative information. Employers will have to notify an employee within 10 days of placing any item in their file that could negatively impact their standing, pay, promotions, or lead to disciplinary action.

When an employee is notified of negative data, they can immediately request their file, and this request does not count against their two-review annual limit.

If an employee disputes a file entry, the bill sets up a clear correction framework:

1. Mutual Agreement: The employer and employee can agree to correct or expunge the disputed document.
2. Statutory Rebuttal: If management refuses to change the file, the employee has a legal right to submit a written rebuttal statement.
3. Permanent Attachment: This rebuttal statement must remain a permanent part of the file and must accompany the record whenever it is shared with third parties.

A Three-Year Post-Termination Retention Mandate

S3460 entirely eliminates the option to routinely purge old disciplinary write-ups. The bill mandates that employers retain an individual's complete, unedited personnel record from their initial hire date until three years after their termination. This creates an immediate operational burden for HR teams, requiring foolproof digital archiving and precise tracking to ensure no documents are prematurely deleted.

How Employers Can Prepare for Compliance

If signed into law, the statute takes effect 60 days after enactment. Because that compliance window is incredibly narrow, management should start taking steps now:

• Clean Up Current Files: Audit your existing HR folders. Ensure sensitive files—like I-9 forms, medical records, and confidential investigation notes—are kept strictly separate from the core personnel file.
• Establish Response Systems: Set up a dedicated workflow for incoming requests. Because five business days passes quickly, your team needs a standardized process to pull, review, and send records immediately.
• Train Managers on Documentation: Remind supervisors that their informal emails, text messages, or highly subjective performance notes may eventually be read by the employee or a court. All documentation should be strictly factual, professional, and objective.
• Create a Notification Protocol: Put a mechanism in place ensuring that whenever an employee is written up or given a poor review, HR is notified immediately so the mandatory 10-day notice can go out.

If you are a New York employer and have questions about how the bill could affect your business, contact Christopher Heyer at cheyer@scura.com or call (973) 696-8391 to discuss your strategy.