Since 8 November, any current or former employee in New York can ask for a copy of their personnel record and must receive it within five business days. The statute defines that record by what it is used for, not where it is stored. In a modern HR estate, that means a dozen systems and several vendors.
Governor Kathy Hochul signed Senate Bill S3460 on 9 September as Chapter 293 of the laws of 2026. It adds section 210-b to the New York Labor Law and took effect on the sixtieth day after signature, 8 November. The mechanics are short. An employee, current or former, makes a written request and receives a free copy of their personnel record within five business days. The employer must tell the employee within ten days when negative information is placed in that record. If the two disagree about an entry and cannot settle it, the employee may add a written statement, and that statement has to accompany the disputed information whenever it goes to a third party. The complete record must be kept, without deletion or expungement, from hire until three years after the employment ends. The Attorney General enforces it, with fines of $500 to $2,500 per violation.
Law-firm coverage has treated this as a request-handling exercise: name a responder, write a procedure, brief managers. That is necessary and it is the easy part. The provision that will occupy the HRIS team is the definition.
A record defined by use
Under section 210-b, a personnel record is a record kept by the employer that identifies an employee and that is used, or may be used, in relation to qualifications, promotion, transfer, additional compensation or discipline. Records held by a contractor under agreement with the employer are included. The statute then lists contents: name, address, date of birth, job title and description, pay, start date, applications and résumés, performance evaluations, written warnings, probationary lists, signed waivers and termination notices.
Nothing in that test refers to a folder. Most HCM suites ship a documents area that is labelled the personnel file, and plenty of HR teams treat it as the answer. The statute does not. A performance evaluation sits in the performance module or a separate talent tool. The application and résumé of a person who was hired sit in the applicant tracking system, often under a candidate retention schedule written for people who were not hired. Pay history may live with a payroll provider or a PEO. Warnings and investigation outcomes sit in an employee relations case tool, or in a shared drive belonging to whoever ran the case. Signed waivers live in the e-signature platform. The phrase "may be used" reaches further still, towards calibration notes, talent review grids and compensation planning worksheets, the artefacts of the decisions the law is about.
The paper personnel file was a container. Section 210-b asks for the contents, and assumes someone knows where they went.
The drafting is visibly older than the systems it now governs. The statute closely follows Massachusetts' personnel records law (General Laws chapter 149, section 52C), which uses the same definition, the same five-business-day and ten-day clocks and the same rebuttal mechanism. New York's text even carries over the requirement that records be typewritten, printed or handwritten in indelible ink. As Gibson Dunn noted in its October briefing, the law does not expressly address records that exist only electronically. Unlike Massachusetts, where several duties apply only to employers with 20 or more employees, New York sets no size threshold.
Five business days is a retrieval standard
A fulfilment deadline of a week is easy to meet when everything is in one place. When it isn't, five business days becomes a test of whether the organisation has a map. Somebody has to know, before the request arrives, which systems hold which statutory categories for this employee, who can extract from each, and how long the vendor takes to answer a records request of its own.
Then there is redaction. The statute excludes information about other people where disclosing it would be a clearly unwarranted invasion of their privacy. A single employee's evaluation is simple to produce. A calibration spreadsheet or a nine-box grid that names forty colleagues is not, and if counsel decides it falls within "may be used", it has to be cut down to one person's slice by a human who understands what may be withheld. The same applies to investigation files that quote witnesses. None of that is quick, and two such requests in the same week would stretch most people operations teams.
Figure 1
Part of the record | Where it usually lives | What tends to break |
|---|---|---|
Identity, job title, pay, start date | Core HRIS; pay history often with the payroll provider or PEO | Older pay history held only by a previous provider after a switch |
Application and résumé | Applicant tracking system | Candidate purge rules applied to people who were hired |
Performance evaluations | Performance module or standalone talent tool | Editable goals and ratings overwritten; history lost when the tool is replaced |
Calibration and talent review notes | Spreadsheets, talent tools, meeting files | Multi-person documents that need redaction; uncertain whether in scope |
Warnings and disciplinary documents | Employee relations case tool, shared drives, manager email | No trigger for the ten-day notice; records outside any HR system |
Signed waivers, termination notices | E-signature platform, document management | Not linked to the employee record; retention set by IT, not HR |
One record, six homes. Statutory categories from New York Labor Law s. 210-b(1), as enacted by Chapter 293 of 2026. The locations and failure points are editorial assessment of common HR system configurations, not survey data or legal advice. Whether calibration material is within the definition is a question for counsel and may be affected by the amendments expected in 2027.
The notice duty runs on every entry
Requests will be occasional. The ten-day notice applies every time negative information is placed in the record, which makes it the larger operational obligation by volume. The statute defines neither "negative" nor "placed". Jackson Lewis has pointed out that a supervisor's internal notes, never shown to the employee, sit squarely in the grey area, while written warnings and poor evaluations plainly do not.
For a systems owner this is a question about events. A written warning issued through a case tool can generate a notification. A rating below a threshold in a performance cycle can trigger an acknowledgement task. A PDF of a performance improvement plan uploaded to a shared drive generates nothing at all. Where the notice is produced is where the evidence of compliance will live, so the log of notices matters as much as the notices.
Rebuttals and retention pull against current settings
Two further provisions sit awkwardly with how HR data is now managed. The rebuttal statement must travel with the disputed information to third parties, which requires a link in the data model between a specific entry and the employee's response. Most HR systems can attach a comment to a document. Few can guarantee the comment goes wherever an export or integration sends the document.
The retention rule is stricter. "Without deletions or expungement" from hire to three years after separation is hard to square with continuous performance tools that let managers edit or remove feedback, ATS purges keyed to application date, and contracts that leave historical data with a vendor once the organisation moves on. Multi-state employers will also need to reconcile it with their own minimisation policies. The statute leaves room for agreed corrections, which helps, but an agreed correction is a recorded event, not a quiet edit.
What this means for HR systems owners
There is a case for restraint. According to Gibson Dunn and Debevoise, the Governor signed on the basis of an agreement with the Legislature to amend the law in the 2027 session, clarifying that employers do not have to create a personnel file or produce documents they do not already keep, and narrowing the definition to records actually used for listed decisions. Building an elaborate new repository for a definition that may tighten in a few months would be poor use of a year-end change window.
The inventory and the trigger are a different matter. Knowing where each category of record lives, and generating a notice when negative information is created, will be needed under any version of the text, and a well-drawn map also serves data subject requests, litigation holds and the next HRIS migration. Employers with Massachusetts staff may already have a process; the New York version reaches every employer, however small, and possibly anyone working remotely from the state, which Debevoise advises planning for.
Before the first written request arrives
Map each statutory category in s. 210-b to the system, vendor and extract owner that holds it for New York employees.
Ask payroll, PEO, background and talent vendors how quickly they can return one employee's records, and put the answer in the contract.
Name a responder and a backup, and track requests against the five-business-day clock and the two-per-year limit.
Decide with counsel whether calibration, talent review and investigation material is in scope, and write down the redaction approach.
Configure notice triggers where warnings and low ratings are created, and keep a log of notices sent.
Suspend candidate-purge rules for hired employees and lock edit and delete rights on finalised evaluations.
Check that rebuttal statements can be linked to the specific entry and travel with it in exports.
The old personnel file was a cabinet drawer, and the law assumed the employer could open it. Most organisations stopped filling that drawer years ago. New York has asked, with five days' notice, to see what they put in its place.
Sources and notes. New York State Senate, S3460 (2025–2026 session), bill text and status: signed 9 September 2026, Chapter 293; new Labor Law s. 210-b; effective on the sixtieth day after enactment. Massachusetts General Laws, chapter 149, s. 52C. Gibson Dunn, "New York Enacts Employee Personnel Records Access Law, Effective November 8, 2026", 1 October 2026 (electronic records; summary of the Governor's approval memo). Debevoise & Plimpton, "New York Enacts Personnel Records Access Law for Employees", 16 September 2026 (expected 2027 amendments; remote workers). Jackson Lewis, "Looming Compliance Changes for NY Employers", 16 September 2026 (scope of negative information). WilmerHale, "New York Employment Law Developments to Watch", 2 November 2026. The Governor's approval memo is reported via these briefings and was not read directly. Figure 1 locations and failure points, and the description of how HR systems hold these records, are editorial assessment, not survey data. HRHubsMedia has no commercial relationship with any firm named. Journalism, not legal or procurement advice. Corrections welcome.
