In the UK, most ex-employee records should be kept for six years after the person leaves, which matches the limitation period for a breach of contract claim in England, Wales, and Northern Ireland. Scottish employers can work to five. The two big exceptions pull in opposite directions: HMRC payroll records only need three years, while health surveillance records tied to asbestos or other hazardous substances must be held for 40 years from the last entry. Knowing how long to keep ex-employee records in the UK comes down to identifying which category each document falls into and applying the longest rule that touches it.
General Personnel Files: Six Years
Employment contracts, disciplinary records, grievance outcomes, performance reviews, and training records make up the core personnel file. These are your evidence base if a former employee brings a breach of contract claim, and the limitation period for that kind of claim sets the retention floor.
In England and Wales, a breach of contract action cannot be brought more than six years after the cause of action arose.1Legislation.gov.uk. Limitation Act 1980 In practice, that means six years from the date employment ended or from whatever event triggered the dispute. Scotland runs on a five-year prescriptive period for the same obligation under the Prescription and Limitation (Scotland) Act 1973.2Legislation.gov.uk. Prescription and Limitation (Scotland) Act 1973 Northern Ireland mirrors the six-year English rule.
Six years is the standard for general personnel files across England, Wales, and Northern Ireland. Scottish employers can reasonably work to five, though many keep records for six anyway to stay consistent across UK-wide operations.
Payroll, Tax, and Statutory Pay Records
Financial records split into several buckets, each with its own retention rule. HMRC can charge penalties of up to £3,000 if your records are incomplete.3GOV.UK. PAYE and Payroll for Employers: Keeping Records
PAYE and NIC
HMRC requires employers to keep Pay As You Earn records, including National Insurance contributions and tax deductions, for three years from the end of the tax year they relate to.3GOV.UK. PAYE and Payroll for Employers: Keeping Records Records for the 2025–26 tax year (ending 5 April 2026) must therefore be retained until at least 5 April 2029.
Statutory Pay
Records for Statutory Sick Pay, Statutory Maternity Pay, Statutory Paternity Pay, Shared Parental Pay, and Statutory Adoption Pay follow the same three-year-from-end-of-tax-year rule as PAYE.4GOV.UK. Statutory Adoption Pay and Leave: Employer Guide – Record Keeping
National Minimum Wage
NMW records carry a longer obligation. Since 1 April 2021, employers must keep them for at least six years from the day after the end of the pay reference period they cover.5HM Revenue & Customs. National Minimum Wage Manual – Records: Length of Time to Retain Records That extended period also applies to records that existed before April 2021 under the earlier three-year requirement. There is no prescribed format, but the records must be detailed enough to produce a single document per worker per pay reference period.
Where a payroll record also evidences minimum wage compliance, keep it for six years rather than three. Overlap always resolves in favour of the longer rule.
Auto-Enrolment Pension Records
Workplace pension duties come with their own record-keeping rules, enforced by The Pensions Regulator rather than HMRC. Most auto-enrolment records must be kept for six years, including each enrolled worker’s name, National Insurance number, date of birth, gross qualifying earnings, contribution amounts, and the dates contributions were paid to the scheme.6The Pensions Regulator. Keeping Records: Records That Must Be Kept by Law Under the Employer Duties
Opt-out notices are the exception. If a worker chose to opt out of automatic enrolment, the original notice or an electronic copy must be kept for four years.6The Pensions Regulator. Keeping Records: Records That Must Be Kept by Law Under the Employer Duties The records can sit within an existing payroll system, but they must be legible or convertible to a legible format if the regulator asks for them.
Working Time Records: Two Years
Regulation 9 of the Working Time Regulations 1998 requires records adequate to show compliance with the 48-hour average weekly working limit and night work limits. These must be retained for two years from the date they were made.7Legislation.gov.uk. The Working Time Regulations 1998 – Regulation 9
The regulations do not prescribe a format or require daily time tracking for every worker. If challenged, you need to be able to demonstrate that the worker did not exceed the limits; failure to evidence compliance is treated as non-compliance. For former employees, two years from the last entry is the minimum, though employers whose personnel files already run to six years will often store working time data alongside everything else.
Health and Safety Records
Retention periods for health and safety documents range from three years to 40, depending on the hazard. This is the area where keeping records too briefly can cause the most damage, because occupational illness claims sometimes surface decades after exposure.
Accidents and RIDDOR
Under Regulation 12 of the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013, records of reportable injuries, diseases, and dangerous occurrences must be kept for at least three years from the date the entry was made.8Legislation.gov.uk. The Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 – Regulation 12 Records must be stored at the workplace where the incident occurred or at the employer’s usual place of business. Accident book entries follow the same three-year rule.9Health and Safety Executive for Northern Ireland. Accident Records
Where an incident involved a child or young person, widely followed guidance recommends keeping the records until the individual turns 21, to account for the extended period during which a minor’s representative could bring a claim. This is best practice rather than a rule written into RIDDOR itself.
Hazardous Substance Exposure: 40 Years
Records of asbestos exposure demand the longest retention of any employment document. Regulation 22 of the Control of Asbestos Regulations 2012 requires health records for employees who performed licensable asbestos work to be kept for at least 40 years from the date of the last entry.10Legislation.gov.uk. The Control of Asbestos Regulations 2012 – Regulation 22 The same 40-year period applies to health surveillance records under COSHH, covering biological monitoring and exposure documentation for any hazardous substance.11Health and Safety Executive. Health Surveillance – Record Keeping
These long periods exist because diseases like mesothelioma and occupational asthma have latency periods measured in decades. A worker exposed in 2006 might not develop symptoms until the 2030s. Without the original health records, neither the employer nor the former employee has evidence to work with.
Right to Work Documents: Employment Plus Two Years
Home Office rules are precise. Copies of documents used to verify someone’s right to work in the UK must be kept throughout employment and for two years after employment ends.12GOV.UK. Right to Work Checklist Falling short of this means you lose the “statutory excuse” against a civil penalty if it later turns out the worker did not have the right to work. The two-year clock starts on the date employment ends, not on the date the original check was carried out.
For unsuccessful applicants, no single statute sets a fixed period. The practical floor is the employment tribunal time limit: a discrimination claim must generally be filed within three months minus one day of the act complained of. Factoring in ACAS early conciliation, most employers keep application forms, CVs, and interview notes for around six months. Employment agencies and businesses have a separate statutory duty to retain applicant records for at least one year.
What UK GDPR Adds Once the Retention Period Ends
Retention obligations sit alongside data protection law, not above it. The UK GDPR requires personal data to be kept only as long as necessary for the purpose it was collected. For ex-employee records, the retention periods described above provide a lawful basis for holding the data. Once those periods expire, continuing to store the records without a clear purpose becomes a compliance risk in its own right.
Erasure Requests From Former Employees
Former employees have the right to request deletion of their personal data. The right is not absolute. Where an employer is legally required to keep certain records, the erasure request can be refused for that specific data. The ICO gives a direct example: an employer may refuse to erase salary details it is legally obliged to disclose to HMRC.13Information Commissioner’s Office. Right to Erasure The refusal only covers data you are actually required to keep. Anything without a legal or legitimate business justification should still be erased on request, and the obligation extends to backup systems, not just live databases.
Subject Access Requests
A former employee can also submit a Subject Access Request to obtain a copy of the personal data you hold about them. You must respond within one calendar month. If the request is complex or you receive multiple requests from the same person, the deadline extends to a maximum of three calendar months, but you must notify the individual of the extension within the first month.14Information Commissioner’s Office. Time Limits for Responding to Data Protection Rights Requests
Quick Reference: Retention Periods at a Glance
- General personnel files: 6 years after employment ends (5 years in Scotland)
- PAYE and statutory pay records: 3 years from the end of the tax year they relate to
- National Minimum Wage records: 6 years from the end of the relevant pay reference period
- Auto-enrolment pension records: 6 years (4 years for opt-out notices)
- Working time records: 2 years from the date the record was made
- RIDDOR and accident book entries: 3 years from the date of the entry (until age 21 if a minor was involved)
- Asbestos and COSHH health surveillance: 40 years from the date of the last entry
- Unsuccessful applicant records: 6 months to 1 year
- Right to work documents: duration of employment plus 2 years
When several rules overlap for the same document, keep it for whichever period is longest. A payroll record that also serves as evidence of minimum wage compliance should follow the six-year NMW rule rather than the three-year PAYE rule. Building your retention schedule around the longest applicable period for each document type is the simplest way to stay compliant without having to relitigate individual files.