The Employee Records You Have to Keep for 30 Years

The rule most HR teams have never read

Retention schedules are usually built around tax and payroll, because those are the rules finance lives with. Three years here, seven there, then the box goes to the shredder. Chemical exposure records run on a different clock.

OSHA's standard on access to employee exposure and medical records, 29 CFR 1910.1020, sets it. Employee exposure records must be preserved and maintained for at least 30 years. Medical records get longer: duration of employment plus 30 years. Any analysis built from either carries the same 30-year obligation.

The definition of an exposure record is wider than people assume. It covers environmental and biological monitoring results, safety data sheets, and chemical inventory records that reveal where and when a substance was used and what it was. So a 1998 tank-mix log naming Roundup, the purchase record for the drum it came from, and the SDS filed next to it are all regulated records, not operational scrap paper. Most grounds crews treated them as scrap paper anyway.

There are carve-outs. Background sampling data can be kept for one year if the results and methodology survive the full 30. Safety data sheets need no fixed period if the identity of the substance and where it was used is retained instead. Medical records for someone employed under a year do not have to be kept past the end of employment if they are given to the employee on the way out.

Recommended reading: How Document Management Systems Help Protect Long-Term Business Records

Retention periods do not line up with each other

Most policies collapse into a single number because managing several is tedious. The regulations do not cooperate.

Two things follow. The one-year personnel rule is a floor, not permission to destroy a file another rule protects for three decades. And the payroll retention periods that accounting systems are configured around have nothing to do with the exposure clock, so a schedule inherited from finance deletes the wrong things quietly.

The request arrives decades after the work

Nobody asks for a 1996 spray log while it is current. The request comes when a former employee gets sick, when an insurer reopens a file, or when a site sold years ago draws a regulator's attention.

Roundup is the live example. The evidence checklist a claimant works from asks for the pathology report, credit card statements and store receipts showing years of purchases, and records if you used Roundup at work, plus application records and any workplace incident report connected to the product. Your former sprayer can get his own medical records in a week. The work half of that list only exists in one place, which is your archive, and he is writing to ask whether it survived.

Answer that with dated application logs, a safety training certificate and a list of products issued to his crew and the whole thing takes an afternoon. Answer it with a letter saying the records were destroyed in an office move, and that letter becomes part of the file too. Employers end up as custodians of evidence in disputes they are not party to, which is worth knowing before a retention policy gets signed off, because storing a scanned log for 30 years costs almost nothing next to explaining its absence.

Keep Financial Records as Organized as Your Compliance Files

Long-term recordkeeping extends beyond HR and safety documents to the purchasing and financial information businesses rely on for audits and historical verification. InvoiceAction captures and validates supplier invoice data while automating matching and AP workflows.
Create more accurate, structured financial records while reducing the manual work behind invoice processing.

Book a demo now

Thirty years outlasts the system you store it in

A retention period spanning several generations of storage technology is a migration problem rather than a filing problem. Records from 1996 have already survived a system replacement, probably a merger, possibly a move between countries. Each transition is where indexes get dropped and image files arrive stripped of the metadata that made them findable.

Scanned pages with no index are technically retained and practically lost. If answering a request means opening 4,000 image files looking for a name, the archive is doing nothing but occupying space.

What makes an old record usable

Three qualities decide whether a 30-year-old document is worth anything. It can be found, which means index fields captured at creation: employee name and identifier, substance, site, date. It can be read, which means searchable text extracted at capture rather than a picture of a page. Its integrity can be shown, which means an audit trail recording when it entered the system and who has touched it since.

Medical records add a fourth condition. They stay confidential and separate from the general personnel file, with access controls that can report who viewed what.

Recommended reading: Learn How OCR Makes Long-Term Records Searchable and Accessible

Start with the boxes nobody opens

Find out which legacy records fall under the 30-year rule before somebody else asks. Chemical inventories, monitoring results, spray and application logs, site safety files. In most organizations they are behind a label written by someone who retired in 2011.

Capture them once, index them properly, and set deletion dates to match the rule that actually applies rather than the one finance uses.

Make Decades of Records Searchable, Not Just Stored

A scanned document may technically be retained while remaining practically useless if nobody can locate it without opening thousands of files. docAlpha uses AI to extract document data and create structured information that can support indexing and automated workflows.
Improve document accessibility and turn long-term archives into usable business information instead of digital storage boxes.

Book a demo now