Human resources teams across New York City handle a steady flow of sensitive documents, and few are more sensitive than employee background check records. These files contain Social Security numbers, criminal history, credit information, and personal references—a treasure trove of data that can cause severe harm if it falls into the wrong hands. Understanding when and how to properly dispose of employee background check records through shredding is not just good HR practice—it is a legal obligation under the Fair Credit Reporting Act (FCRA) and a key component of responsible data stewardship for any New York employer.
Many organizations retain background check files indefinitely out of misplaced caution, not realizing that holding data longer than required actually increases—not decreases—their legal exposure. The right approach is a documented retention schedule that ends with certified, secure shredding. This guide walks New York HR managers and business owners through the rules and best practices for handling background check records safely from hire to disposal.
What the FCRA Says About Background Check Record Retention
The Fair Credit Reporting Act governs how employers use consumer reports—which include background checks obtained through a Consumer Reporting Agency (CRA)—in employment decisions. The FCRA imposes specific disposal obligations that are often overlooked by HR departments focused primarily on the hiring process.
Key FCRA requirements for background check records include:
- Safe disposal mandate: The FCRA requires that consumer report information be disposed of in a manner that protects against unauthorized access or use. The FTC’s Disposal Rule specifies that “reasonable measures” include burning, pulverizing, or shredding paper documents.
- General retention period: The EEOC recommends retaining personnel and employment records, including application records and background check documentation, for at least one year from the date the record was made or the employment action was taken.
- Adverse action documentation: If you rejected an applicant based on a background check, retain the adverse action notice and related documentation for at least five years in case of EEOC or legal challenge.
Failure to comply with the FCRA’s disposal rule can result in FTC enforcement actions and civil liability. Learn more about how compliance-driven shredding protects your organization.
New York State-Specific Considerations
New York employers face additional layers of regulation beyond the federal FCRA. The New York SHIELD Act requires businesses to implement reasonable safeguards for private information, which includes the data typically found in background check files. New York City’s Fair Chance Act further restricts how and when employers can use criminal history information, adding complexity to the records you create and must eventually dispose of.
New York-specific best practices include:
- Storing background check files separately from general personnel files to limit access
- Designating a specific HR team member responsible for background check record management
- Documenting the destruction of background check records with a Certificate of Destruction
- Ensuring any digital copies of background check data are also securely deleted when the paper file is shredded
If your business operates across multiple New York locations, consider a scheduled shredding program that covers all offices in the five boroughs, Long Island, Westchester, and the Hudson Valley.
What Documents to Retain and What to Shred
Not all background check-related documents have the same retention requirements. HR managers should categorize documents carefully before establishing a destruction schedule:
- Consent and authorization forms: Retain for the duration of employment plus at least 3 years; shred 3 years after separation.
- Background check reports from CRAs: Retain for 1–5 years depending on whether adverse action was taken; shred after the retention period with proper documentation.
- Adverse action notices: Retain for 5 years from the employment action; shred after this period.
- Drug test results: Follow DOT requirements if applicable (minimum 5 years for positive results); otherwise retain per company policy and then shred.
- Reference check notes: Retain for 1 year from the employment decision; shred thereafter.
Consider working with an employment attorney to create a retention schedule tailored to your industry and employee base. Once you have a schedule, a certified shredding partner can help automate the destruction process. Explore our shredding service options for HR departments.
The Risks of Retaining Background Check Records Too Long
Many HR teams default to keeping everything “just in case,” but this approach creates real legal and operational risks. Retaining sensitive background check data beyond its useful period means:
- Greater exposure in a data breach—more sensitive records mean more potential harm and larger regulatory penalties
- Difficulty defending against stale discrimination claims if outdated records resurface
- Increased storage and administrative costs
- Higher risk of unauthorized internal access by employees who no longer need the information
The FTC has taken enforcement action against companies that failed to properly dispose of consumer report information, including cases involving paper records left in dumpsters. Establishing a scheduled destruction program with a certified vendor eliminates this exposure entirely.
How to Implement a Secure Background Check Records Shredding Program
A well-designed program does not require significant investment but does require consistent execution. Here is a practical framework for New York employers:
- Audit your current files: Identify all background check records currently in storage and note their creation dates.
- Apply your retention schedule: Flag records that have exceeded their retention period for immediate destruction.
- Place locked consoles near HR workstations: New York Shredding provides locked consoles that allow HR staff to deposit sensitive documents throughout the workday without risk.
- Schedule regular pickups: Monthly or quarterly shredding pickups keep files from accumulating.
- Obtain Certificates of Destruction: File these with your compliance records as evidence of lawful disposal.
Learn more about our shredding process and how we serve HR departments across New York. Then contact us for a custom quote tailored to your document volume.
Why New York Businesses Choose New York Shredding
For over a decade, New York Shredding Document Destruction, Inc. has helped businesses across New York City, Long Island, Westchester, and the Hudson Valley protect their sensitive information through certified, HIPAA-compliant shredding services. Our industrial-grade shredding equipment, locked on-site consoles, and Certificate of Destruction give your business the proof it needs for any compliance audit.
Whether you need scheduled shredding, a one-time purge, or hard drive destruction, we serve all five boroughs and surrounding areas with fast, reliable service. Request a free quote today and get your office on a shredding schedule that keeps you protected year-round.
Ready to get started? Contact New York Shredding for a free quote, or explore our full range of shredding services.