Structure
In accordance with Information Commissioner's Office (ICO) guidance and standard data protection frameworks, an effective data erasure policy and retention schedule structures data by categorising each personal data type with a trigger event (such as the termination of the employment contract), a standard retention period, and a defined erasure procedure. Grouping similar data types into distinct erasure classes keeps the organisation's operational compliance manageable and auditable.
Typical Erasure Classes in Human Resources
| Data Category | Guideline / Statutory Baseline |
|---|---|
| Application documents of unsuccessful candidates | 6 months following the conclusion of the recruitment process (aligning with the 3-month statutory time limit for Employment Tribunal discrimination claims under the Equality Act 2010, allowing time for ACAS Early Conciliation) |
| Working time records / Timesheets | At least 2 years under Regulation 9 of the Working Time Regulations 1998 (WTR); typically 6 years for hourly paid workers to defend breach of contract claims under the Limitation Act 1980 and National Minimum Wage compliance |
| Payroll, PAYE, and National Insurance documents | At least 3 years after the end of the relevant tax year for HMRC PAYE records; 6 years after the relevant financial year under the Taxes Management Act 1970 and Companies Act 2006 |
| Written warnings / Disciplinary records | Usually 6 to 12 months (or active period specified in the ACAS Code of Practice / disciplinary policy); retained until expiry or spent, unless relevant to ongoing legal proceedings |
| Statutory Sick Pay (SSP) and leave records | At least 3 years following the end of the tax year to which they relate |
| Access logs and system audit trails | Short, strictly defined retention window (typically 30 to 90 days), unless required for an active security investigation |
The specific retention periods must be formally documented in an organisational retention schedule and reviewed regularly against UK statutory requirements.
Statutory Retention Overrides Erasure
Where a statutory retention obligation or legitimate legal basis applies, erasure is precluded under Art. 17(3)(b) or Art. 17(3)(e) UK GDPR (e.g. for compliance with a legal obligation or the establishment, exercise, or defence of legal claims). The affected data must instead be restricted in processing under Art. 18 UK GDPR: it remains archived and accessible solely for statutory compliance and dispute resolution, but must no longer be processed or utilised for active HR administration.
Implementation
A retention policy without automated technical execution introduces significant compliance risk under UK GDPR. What is required are automated retention rules within HR software, documented erasure runs with tamper-evident audit trails, and defined manual protocols for legacy or unstructured files that ensure verifiable proof of permanent deletion.
- Updated on