Employee data disposal for HR teams.
HR departments hold some of the most sensitive personal data in any organisation — employment contracts, disciplinary records, right-to-work documents, payroll files and health information. Under UK GDPR and the Data Protection Act 2018, you have a legal obligation to dispose of this data securely when it is no longer needed.
Employee records contain some of the most sensitive data in your organisation.
HR departments routinely hold data that sits at the very top of the UK GDPR sensitivity scale — health information, disciplinary records, DBS check results, right-to-work documentation and financial details such as salary and bank information. Much of this is special category data under UK GDPR, requiring the highest standard of protection at every stage.
The obligation to handle this data securely does not end when an employee leaves. Employment records must be retained for specific periods after departure — PAYE records for three years, right-to-work check evidence for two years, disciplinary records depending on outcome — and only then destroyed. Critically, that destruction must be secure and documented.
An employee whose personal data is carelessly disposed of — whether by placing records in a general bin, leaving files in a skip during an office move, or recycling payslips without shredding — has a legitimate subject access complaint and potential ICO referral. A certificate of destruction from a certified provider is your evidence that you took their data rights seriously to the very end.
Sickness records, disability information and disciplinary records may constitute special category data requiring the highest level of security at disposal.
Employee data must not be held beyond the period for which it is genuinely needed. HR teams must have documented procedures for destruction at end of retention.
Employers must retain right-to-work check evidence for 2 years after the end of employment. After this period, documents must be securely destroyed.
The ICO's Employment Practices Code requires that records about workers are disposed of securely when they are no longer needed, with documented evidence of disposal.
Every type of employee record accepted.
All paper-based HR and employee documents accepted. No sorting required — everything goes in together.
Signed contracts, offer letters, variation agreements and terms and conditions of employment.
Payslips, P60s, P45s, P11 deduction working sheets and payroll run records at end of retention.
Copies of passports, visas, biometric residence permits and share codes used for right-to-work checks.
Self-certification forms, fit notes, occupational health reports and absence management correspondence.
Investigation notes, hearing records, outcome letters, appeals documentation and settlement agreements.
Disclosure and Barring Service certificates — should not be retained beyond 6 months per DBS guidance.
Annual and interim appraisal records, performance improvement plans and objective-setting documentation.
CVs, application forms, interview notes and reference correspondence for unsuccessful candidates.
Letters, emails printed for files, meeting notes and any correspondence containing employee personal data.
Beyond paper — ID cards, uniforms & branded items.
When employees leave, paper records are not the only risk. ID cards, access badges and branded workwear all require secure destruction to prevent misuse.
ID cards, access badges and smart cards retained after an employee leaves are a physical security risk. Certified destruction eliminates the risk and provides documented evidence that access credentials have been permanently destroyed.
Uniforms and branded workwear not returned by departing employees — or items worn beyond their useful life — should be destroyed rather than donated or binned, to prevent misrepresentation of your organisation.
How long should you keep employee records?
These are the key minimum retention periods for common HR documents. Once the retention period is met, secure destruction with a certificate is required under UK GDPR.
| Record type | Minimum retention | Basis |
|---|---|---|
| Payroll records | 3 years After end of tax year | HMRC PAYE regulations |
| Right-to-work check evidence | 2 years After employment ends | Immigration Act 2014 |
| Recruitment records (unsuccessful) | 6 months After process ends | Limitation Act / best practice |
| Employment contracts | 6 years After employment ends | Limitation Act 1980 |
| Disciplinary records (warnings) | 6 months – 2 years Depends on outcome | ACAS Code of Practice |
| Sickness / absence records | 3 years After employment ends | Best practice / litigation risk |
| DBS check certificates | 6 months maximum Then destroy | DBS guidance |
| Pension records | 12 years After end of scheme | Pensions Act 1995 |
| Maternity / paternity records | 3 years After end of leave year | Maternity / Paternity regulations |
This table is for general guidance. Retention periods may vary with specific circumstances. Always refer to your HR legal adviser for guidance on your specific situation.
Fixed prices. No surprises.
All plans include free sacks or lockable bin and a certificate of destruction after every collection. No hidden fees.
Serving HR departments across three counties.
Trusted by HR teams across the region.
"Reliable and professional. The certificate of destruction gives our HR team complete confidence that employee records have been disposed of compliantly. Exactly what we needed."
"We use Clearcut for all our HR document destruction, including ID cards when staff leave. Transparent pricing, no hidden fees and completely dependable. Highly recommend."
HR document shredding FAQs
Get a quote for your HR department.
We work with HR teams across Dorset, Hampshire and Wiltshire. Regular scheduled collections, specialist ID card and uniform destruction — tell us what you need and we'll confirm a price the same day.
89 Commercial Road, Bournemouth, England, BH2 5RR
Office@Clearcutconfidentialwaste.co.uk
01202 022409
© 2026 Clearcut Confidential Waste