1. Introduction

HR data archiving means the systematic process by which an employer identifies, stores, protects, retains, retrieves and ultimately disposes of employee-related information after it is no longer required for day-to-day HR operations.

HR records may include:

• employee applications and resumes;
• appointment letters and employment contracts;
• salary and payroll records;
• attendance records;
• leave records;
• performance evaluations;
• disciplinary records;
• promotion and transfer records;
• grievance and complaint records;
• medical and occupational-health records;
• tax and social-security information;
• provident-fund records;
• resignation and termination documents;
• exit interviews;
• litigation-related documents; and
• electronic communications relating to employment.

A good archiving policy must balance two competing objectives:

Retain information long enough to satisfy legal, regulatory and business requirements, but do not retain personal information indefinitely merely because it might be useful someday.

This balance is particularly important because employee records may contain highly sensitive personal and professional information. The Supreme Court has recognized that professional records, performance evaluations, disciplinary proceedings and medical information can constitute personal information deserving privacy protection.

2. Meaning of an HR Data Archiving Policy

An HR Data Archiving Policy is an organization's formal framework specifying:

1. what HR information must be retained;
2. why it must be retained;
3. how long it should be retained;
4. where it should be stored;
5. who can access it;
6. how it should be protected;
7. when it should be reviewed;
8. when it should be deleted or destroyed; and
9. how records must be preserved when litigation or investigation is anticipated.

In simple terms:

Collection → Active Use → Archiving → Retention Review → Secure Deletion/Destruction

3. Why HR Data Archiving Is Important

A. Legal compliance

Employers may need employment records to establish compliance with:

• labour legislation;
• wage laws;
• social-security obligations;
• tax requirements;
• workplace-safety requirements;
• anti-discrimination obligations;
• employment contracts; and
• court or regulatory orders.

An organization that destroys records too early may be unable to defend an employment claim.

B. Evidence in employment disputes

HR records can become evidence in disputes involving:

• wrongful termination;
• discrimination;
• harassment;
• unpaid wages;
• promotion;
• seniority;
• misconduct;
• disciplinary proceedings;
• bonus and incentive claims;
• workplace accidents; and
• retirement or pension benefits.

Therefore, archiving is not merely an administrative function. It can have significant evidentiary consequences.

C. Protection of employee privacy

HR archives frequently contain sensitive information.

For example:

Employee file → salary + address + medical information + performance evaluation + disciplinary history

If such information is unnecessarily retained or improperly disclosed, the employee's privacy may be affected.

The Supreme Court has treated professional records such as performance evaluations, ACRs and disciplinary proceedings as personal information in appropriate contexts.

4. Core Principles of an HR Data Archiving Policy

A sound policy should follow several principles.

4.1 Purpose limitation

Information should be retained for a legitimate and identified purpose.

For example:

Payroll records may need to be retained for statutory, accounting and employment-related purposes.

But an employer should not retain unrelated personal information indefinitely simply because it was collected during recruitment.

4.2 Data minimisation

Only information that is reasonably necessary should be retained.

For example, an employer may need to retain:

• employment dates;
• salary history;
• tax records;
• statutory contribution records.

It may not be necessary to retain every informal communication or duplicate document forever.

4.3 Accuracy

Archived information should remain accurate and properly indexed.

This is particularly important because inaccurate service records can affect:

• retirement benefits;
• seniority;
• promotions;
• pension;
• gratuity;
• salary;
• eligibility for employment benefits.

The Supreme Court has emphasized the employer's responsibility as custodian of service records where inaccurate entries affected an employee's service record.

4.4 Security

Archived HR information should be protected through appropriate measures such as:

• access controls;
• encryption;
• authentication;
• audit logs;
• restricted physical access;
• secure backups;
• disaster recovery;
• segregation of sensitive records.

4.5 Retention limitation

An organization should establish a retention period for each category of HR information.

A retention schedule may look like:

Important: There is no single universal retention period applicable to every HR record. The period should be determined by the applicable law, the purpose of processing, contractual requirements, limitation periods and legitimate business needs.

5. Litigation Hold

One of the most important features of an HR archiving policy is a litigation hold.

Ordinary deletion schedules should be suspended when the organization reasonably anticipates:

• litigation;
• arbitration;
• investigation;
• regulatory proceedings;
• disciplinary proceedings; or
• a formal legal dispute.

Example

Suppose an employee sends a legal notice alleging wrongful termination.

The company normally deletes old emails after 12 months.

Once the legal dispute becomes reasonably foreseeable, relevant emails should be placed under a legal hold rather than automatically deleted.

This prevents the accidental destruction of potentially relevant evidence.

6. Digital and Physical Archives

Modern HR archiving involves two major forms.

A. Physical archives

Examples:

• personnel files;
• signed contracts;
• disciplinary files;
• paper medical documents;
• attendance registers.

They should be stored in:

• secure rooms;
• controlled-access cabinets;
• fire-resistant storage where appropriate;
• indexed file systems.

B. Digital archives

Examples:

• HRMS records;
• emails;
• payroll databases;
• scanned employment contracts;
• performance-management systems;
• cloud storage;
• employee portals.

Digital archives should incorporate:

• role-based access;
• encryption;
• audit trails;
• backups;
• access reviews;
• secure deletion;
• disaster recovery.

7. Sensitive HR Information Requires Greater Protection

Not all HR information has the same sensitivity.

Ordinary employment information

Examples:

• employee ID;
• designation;
• joining date;
• department.

Sensitive information

Examples:

• medical records;
• disability information;
• disciplinary records;
• sexual-harassment complaints;
• financial information;
• tax information;
• biometric information.

Such records should generally have stricter access controls and shorter or specifically justified retention periods.

The Supreme Court has recognized that medical records and professional records can fall within the category of personal information deserving protection against unwarranted invasion of privacy.

8. Access Control

An archiving policy should clearly specify who can access different categories of records.

For example:

Access should follow the principle of need-to-know.

9. Employee Access to Archived Records

Archiving does not mean that records become completely inaccessible to the employee.

Depending on applicable law and circumstances, an employee may have rights concerning:

• correction of inaccurate information;
• access to records;
• employment history;
• statutory records;
• documents necessary to pursue legal remedies.

However, access may be subject to:

• confidentiality;
• third-party privacy;
• legal privilege;
• statutory exemptions;
• ongoing investigations.

10. Case Law

Case 1: Justice K.S. Puttaswamy (Retd.) v. Union of India

(2017) 10 SCC 1

This landmark Supreme Court decision recognized privacy as a fundamental right under Article 21 and the Constitution.

Relevance to HR archiving

The judgment is important because organizations holding employee information must recognize that personal information has privacy implications.

The judgment discussed principles such as:

• purpose limitation;
• collection limitation;
• data security;
• transparency;
• accountability.

Principle

HR data should not be treated merely as an organizational asset. It involves the privacy interests of employees.

Application

An HR archiving policy should therefore ask:

Why are we retaining this information, who needs it, how is it protected, and when should it be deleted?

11. Case 2: Central Public Information Officer, Supreme Court of India v. Subhash Chandra Agarwal

(2019) 16 SCC 413

This is an important authority concerning personal information and privacy.

The Supreme Court discussed the nature of personal and professional information and recognized that information such as:

• performance evaluations;
• ACRs;
• disciplinary proceedings;
• medical records;
• financial information; and
• other professional records

may constitute personal information.

Relevance to HR archiving

This case supports the proposition that archived employee information should not be treated as freely disclosable organizational information.

An employer should maintain:

• confidentiality;
• controlled access;
• proper authorization;
• disclosure procedures.

Key principle

Retention of employee records does not eliminate the employee's privacy interest in those records.

12. Case 3: Girish Ramchandra Deshpande v. Central Information Commissioner

(2013) 1 SCC 212

The Supreme Court considered disclosure of service-related information under the RTI framework.

The Court treated information relating to an employee's:

• service record;
• disciplinary proceedings;
• assets;
• liabilities; and
• related personal matters

as personal information protected under Section 8(1)(j) of the RTI Act, subject to the statutory public-interest framework.

The principle has subsequently been repeatedly applied in cases concerning employee records.

Relevance to archiving

This case demonstrates why organizations should maintain classification and access controls over archived HR records.

A record being stored by an organization does not mean it can automatically be disclosed to every requester.

13. Case 4: Canara Bank v. C.S. Shyam

(2018) 4 SCC 544

The case concerned requests for employment-related information concerning employees of a bank.

The Supreme Court held that information relating to an employee's:

• service records;
• performance;
• disciplinary matters; and
• other employment-related information

could constitute personal information under the RTI Act.

The Court emphasized the privacy interests of employees and the requirement of a proper public-interest justification for disclosure.

Relevance

An HR archive should therefore have:

classification → access restriction → authorization → disclosure logging

rather than unrestricted access.

14. Case 5: R.K. Jain v. Union of India

(2013) 14 SCC 794

The Supreme Court considered access to records relating to an employee, including ACR-related information.

The decision reinforces the principle that service-related records can constitute personal information and that access to such information must be governed by the applicable legal framework.

HR archiving significance

Performance evaluations and ACR-type records should be:

• separately classified;
• securely stored;
• available only to authorized persons;
• protected from unnecessary disclosure.

15. Case 6: CBSE v. Aditya Bandopadhyay

(2011) 8 SCC 497

Although this case concerned examination records rather than conventional HR files, it is highly relevant to the broader principle of custody and management of personal records.

The Supreme Court considered issues concerning records held by an institution and the rights of individuals seeking access to information.

The later Subhash Chandra Agarwal jurisprudence has drawn upon the broader principles concerning personal information and institutional custody.

HR relevance

Organizations should maintain a structured system for:

• identifying the record owner;
• determining authorized access;
• responding to legitimate requests;
• protecting third-party information.

16. Case 7: State of Maharashtra v. Public Concern for Governance Trust

The Supreme Court's privacy jurisprudence emphasizes that information concerning individuals cannot be treated as unrestricted information merely because it is held by a public authority or organization.

The broader principle is relevant to HR archives:

Custody of personal information creates responsibilities concerning its handling and disclosure.

This supports the adoption of formal information-governance policies rather than informal employee-file management.

17. Case 8: Service Records and Employer's Custodial Responsibility

A recent Supreme Court decision concerning an employee's service records emphasized that the employer was the custodian of service records and was expected to maintain consistency and responsibility in recording employment particulars.

Importance

This establishes an important archival principle:

An employer's responsibility is not merely to store records but to maintain reliable and accurate records.

An incorrect archived record can affect:

• date of birth;
• pension;
• seniority;
• retirement;
• salary;
• employment benefits.

Therefore, HR archiving must include record accuracy and correction procedures.

18. Archiving and Right to Privacy

The interaction can be expressed as:

HR data
↓
Personal information
↓
Privacy interest
↓
Legitimate purpose for retention
↓
Limited access
↓
Secure storage
↓
Defined retention period
↓
Secure deletion

The objective is not simply to preserve information.

It is to preserve it responsibly.

19. HR Data Retention Schedule

A mature organization should prepare a formal HR Records Retention Schedule.

For each category, it should identify:

1. Record category

Example: payroll.

2. Purpose

Why is it being retained?

3. Legal basis

Which law, contract or legitimate business requirement requires retention?

4. Retention period

How long must it be retained?

5. Storage location

Physical archive, HRMS, cloud repository, etc.

6. Access level

Who may access it?

7. Disposal method

How will it be destroyed?

8. Exception

Does a litigation hold or investigation prevent deletion?

20. Secure Deletion

When the retention period expires, information should not simply be thrown away.

Physical records

Use:

• secure shredding;
• controlled destruction;
• certified disposal where appropriate.

Electronic records

Use appropriate:

• secure deletion;
• cryptographic erasure;
• destruction of storage media;
• deletion from active systems and applicable backups.

However, deletion should be documented.

A deletion log can record:

• record category;
• date;
• responsible officer;
• reason for deletion;
• authorization;
• method of destruction.

21. Backup Data

A common mistake is to delete information from the HR system but forget about:

• backup servers;
• cloud backups;
• email archives;
• disaster-recovery systems;
• employee devices.

Therefore, the archiving policy should distinguish between:

Active data → Archive → Backup → Legal hold → Deletion

The organization should establish how expired information is eventually removed from backup systems where technically and legally appropriate.

22. HR Data and Litigation

When litigation arises, ordinary deletion policies must be reviewed.

For example:

An employee claims:

"I was dismissed because of discrimination."

Relevant archived material may include:

• performance evaluations;
• manager emails;
• disciplinary warnings;
• promotion records;
• comparator employee information;
• salary records;
• termination documents.

If these records fall within a legal hold, they should be preserved until the legal matter is appropriately resolved.

23. HR Archiving and Employee Termination

Termination is not necessarily the end of record-retention obligations.

After termination, an employer may still need records for:

• wage claims;
• gratuity;
• provident fund;
• taxation;
• pension;
• litigation;
• regulatory audits;
• employment verification.

Therefore:

Employee exit should trigger a transition from active HR records to an appropriate archived-record category—not automatic destruction.

24. Special Protection for Sexual-Harassment Records

Records concerning workplace sexual harassment require particularly careful handling.

They may contain:

• allegations;
• witness statements;
• medical information;
• intimate personal details;
• investigation findings.

Such records should be subject to:

• restricted access;
• confidentiality;
• secure storage;
• controlled disclosure;
• appropriate retention.

The Supreme Court has also emphasized that sensitive information, such as the identity of sexual-harassment victims, may require protection from disclosure in appropriate circumstances.

25. Common Mistakes in HR Archiving

Mistake 1: Keeping everything forever

This increases:

• privacy risks;
• cybersecurity exposure;
• storage costs;
• accidental disclosure risks.

Mistake 2: Deleting everything when an employee leaves

This may destroy records required for:

• litigation;
• statutory compliance;
• pension;
• tax;
• employment disputes.

Mistake 3: No retention schedule

HR personnel may make inconsistent decisions about what to retain.

Mistake 4: No legal hold mechanism

Relevant evidence may be accidentally deleted during litigation.

Mistake 5: Excessive access

Every HR employee should not automatically have access to every archived record.

Mistake 6: Poor record accuracy

An incorrect archived record can adversely affect an employee's legal rights.

26. Model HR Archiving Policy Structure

An organization can structure its policy as follows:

Clause 1 — Purpose

Define the purpose of HR data retention and archiving.

Clause 2 — Scope

Apply the policy to employees, former employees, applicants, contractors and relevant HR records.

Clause 3 — Record Classification

Classify records as:

• ordinary;
• confidential;
• sensitive;
• highly restricted.

Clause 4 — Retention Schedule

Specify retention periods for each category.

Clause 5 — Access Controls

Define authorized users.

Clause 6 — Security

Specify encryption, passwords, physical security and monitoring.

Clause 7 — Accuracy

Provide procedures for correcting inaccurate records.

Clause 8 — Legal Hold

Suspend deletion where litigation or investigation is anticipated.

Clause 9 — Disclosure

Establish procedures for responding to requests from employees, regulators, courts and other authorized bodies.

Clause 10 — Disposal

Establish secure destruction procedures.

Clause 11 — Audit

Conduct periodic reviews of archived information.

Clause 12 — Accountability

Assign responsibility to HR, legal, IT and records-management personnel.

27. Six Major Cases — Quick Revision Table

28. Conclusion

HR data archiving is not simply the storage of old employee files. It is a legal, privacy, evidentiary and information-governance function.

A proper HR archiving policy should achieve five objectives:

Retain what is legally or legitimately necessary.
Protect what is retained.
Restrict access to authorized persons.
Preserve relevant evidence when disputes arise.
Securely dispose of information when its retention is no longer justified.

Indian judicial decisions, particularly Puttaswamy, Girish Ramchandra Deshpande, Canara Bank, R.K. Jain and CPIO v. Subhash Chandra Agarwal, demonstrate that employee records such as performance evaluations, service records, disciplinary proceedings and medical information may attract significant privacy protection.

Therefore, the central legal principle is:

An employer should retain HR data for a defined and legitimate purpose, maintain it accurately and securely, restrict unnecessary disclosure, preserve it when legally required, and destroy it securely once the applicable retention requirement has expired.