How to Dispose of Old Resumes and Job Applications Securely

Every time your New York business hires a new employee, you accumulate a collection of sensitive personal records from the candidates you didn’t select. Resumes, job applications, cover letters, background check authorizations, reference check notes, and interview assessments from unsuccessful applicants contain Social Security numbers, home addresses, employment histories, educational credentials, and sometimes even financial and health information — making them among the most privacy-sensitive documents your HR department holds. Following sound resume disposal best practices protects your former applicants from identity theft and protects your business from SHIELD Act liability, EEOC record-keeping violations, and discrimination claims.

New York employers — from Brooklyn startups hiring their first team to Westchester corporations conducting hundreds of searches annually — often underestimate the compliance obligations associated with rejected candidate records. The focus naturally falls on the hiring process itself, with post-search records management as an afterthought. But regulators, plaintiffs’ attorneys, and state labor investigators have made clear that how businesses handle rejected applicant records is a genuine legal issue. This guide clarifies when to retain applicant records, when they become eligible for disposal, and how to destroy them securely.

What Applicant Records Contain — And Why It Matters

The scope of sensitive information contained in a typical job applicant file is broader than most hiring managers realize. A complete applicant package for a single candidate may include:

• Resume with home address, email, phone number, and personal website
• Job application form with Social Security number, date of birth, and prior employer details
• Background check authorization form including SSN and consent to a credit or criminal check
• Background check results containing criminal history, credit information, or driving record
• Reference check notes including evaluations of the candidate’s character and performance
• Interview scorecards with assessors’ subjective evaluations
• Offer letter and rejection correspondence
• Any accommodations requests or disability disclosure information provided during the interview process

The combination of SSN (from the application form), credit history (from the background check), and employment history (from the resume) is particularly dangerous — it provides essentially everything needed to commit financial identity theft. Under New York’s SHIELD Act, this data qualifies as “private information” requiring reasonable safeguards throughout its retention period and secure destruction at disposition. Review our compliance guidance to understand how SHIELD Act obligations apply to applicant records specifically.

How Long Must You Keep Rejected Applicant Records?

Federal and New York state law impose specific retention requirements on job applicant records that exist independently of your general business records schedule. These requirements reflect the need to preserve evidence for potential discrimination claims and EEOC investigations:

• Title VII and ADA (EEOC): All employment-related records — including applications, resumes, and hiring notes — must be retained for at least one year from the date the record was made or the personnel action was taken (whichever is later)
• Age Discrimination in Employment Act (ADEA): For employers with 20 or more employees, records relating to any employment action involving persons aged 40 or older must be retained for three years
• New York Human Rights Law: New York state generally follows the one-year federal standard but has been interpreted broadly by state agencies to require retention during the pendency of any related complaint investigation
• OFCCP (federal contractors): Federal contractors and subcontractors must retain applicant records for two years (one year for smaller contractors)

The practical result for most New York employers: retain all applicant records — hired and rejected — for at least one year from the date of the hiring decision, or two to three years if you are a federal contractor, have a workforce that includes significant numbers of employees over 40, or operate in a litigation-sensitive environment. Establish a calendar reminder or HRIS flag so that eligible records are systematically reviewed and disposed of when the retention window closes.

The Privacy Obligation to Rejected Candidates

Beyond legal compliance, there’s an ethical dimension to applicant record disposal that reflects well on your employer brand. Candidates who trust your organization with their personal information during an application process have a reasonable expectation that their data will be handled responsibly — including when they’re not selected. Businesses that properly secure and ultimately destroy rejected applicant records signal to the job market that they are trustworthy stewards of personal information.

This matters practically because:

1. Talented candidates who are not selected for one role may apply for future openings — and their willingness to do so depends partly on their confidence that their previous application was handled professionally
2. Rejected candidates who discover their application data was carelessly discarded have grounds for SHIELD Act complaints and, in some cases, civil claims
3. Word-of-mouth about a company’s hiring practices — including data handling — spreads quickly in New York’s interconnected professional communities

Building a reputation for privacy-conscious hiring practices starts with getting applicant record disposal right. New York Shredding’s HR records disposal service provides the certified destruction documentation that supports a defensible, privacy-respecting applicant records program.

The Secure Disposal Workflow for Applicant Files

Once applicant records are confirmed to be past their retention window and no EEOC charge, lawsuit, or investigation is pending, the disposal process should follow a documented workflow:

1. Quarterly eligibility review: Set a regular schedule — quarterly or semi-annually — to identify applicant files that have passed their retention window
2. Legal hold check: Confirm with your legal counsel that no pending or anticipated litigation, EEOC charge, or government investigation covers any candidate in the disposal batch
3. Prepare destruction list: Document each file or batch being destroyed (job title, search date, number of applicants, retention period applied)
4. Authorize destruction: Have HR director or compliance officer sign off on the destruction list
5. Secure destruction: Place files in a locked shredding console or sealed container for certified destruction by your shredding vendor
6. Obtain and retain Certificate of Destruction: File the certificate with your HR compliance documentation

Background check records — particularly those containing SSNs and credit information — should be separated from the general applicant file and destroyed first, given their higher sensitivity. Some HR departments maintain separate locked storage for background check results to ensure they receive heightened protection throughout their retention period. Contact New York Shredding to discuss a tailored HR records disposal schedule for your hiring volume.

Digital Application Records: The Other Half of the Problem

As online application systems, email submissions, and digital ATS platforms become the primary intake channel for most New York employers, the physical document disposal problem is paralleled by a digital records management challenge. However, physical copies remain common — printed resumes from career fairs, hard-copy application forms required by certain regulated employers, and printed reference check notes from phone calls.

For physical applicant records, the disposal process described above applies directly. For digital records, your IT team should implement equivalent procedures: secure deletion from ATS systems after the retention window, email purge protocols for application correspondence, and hard drive destruction for systems that stored applicant data when they are retired. New York Shredding offers hard drive destruction services that complete the digital side of your applicant records disposal program. We serve businesses throughout New York City, Long Island, Westchester, and the Hudson Valley.

Why New York Businesses Choose New York Shredding

For over a decade, New York Shredding Document Destruction, Inc. has helped businesses across New York City, Long Island, Westchester, and the Hudson Valley protect their sensitive information through certified, HIPAA-compliant shredding services. Our industrial-grade shredding equipment, locked on-site consoles, and Certificate of Destruction give your business the proof it needs for any compliance audit.

Whether you need scheduled shredding, a one-time purge, or hard drive destruction, we serve all five boroughs and surrounding areas with fast, reliable service. Request a free quote today and get your office on a shredding schedule that keeps you protected year-round.

Ready to get started? Contact New York Shredding for a free quote, or explore our full range of shredding services.