Mark your calendar: starting November 8, 2026, every employer in New York State – public or private, five employees or five thousand – will be legally required to hand over an employee’s personnel file within five business days of a written request. The new law, signed by Governor Hochul as Chapter 293 on September 9, adds a brand-new Section 210-b to the New York Labor Law, and it reaches far beyond simple file access. It creates notice obligations, dispute rights, retention mandates, and real financial exposure for employers who get it wrong.[1][2]
If you run a business in New York, or manage HR for one, this is a law you need to understand now!
The law in brief
Senate Bill S3460, sponsored by State Senator Andrew Gounardes, cleared the Legislature after passing the Senate twice (most recently 38–21 in April 2026) and the Assembly in May 2026. Governor Hochul delivered and signed it the same day, September 9, 2026.[1] The new Labor Law § 210-b takes effect 60 days later, on November 8, 2026, and applies to current and former employees alike.[2] Commentators have noted it was modeled in part on a similar Massachusetts personnel-records statute, though New York’s version differs meaningfully in scope, in employees’ right to an actual copy of the file (not just a chance to inspect it), and in its anti-retaliation protections.[3]
Who’s covered
The law doesn’t carve out small businesses. It applies to “employers” broadly defined – individuals, corporations, partnerships, labor organizations, associations, and business entities of any size, along with their agents – covering both public and private employment in New York.[2][4] Both current employees and former employees can invoke their rights under the statute.
What counts as a “personnel record”
The definition is intentionally broad: any record that identifies an employee and is used, has been used, may be used, or may affect decisions about that employee’s qualifications for employment, promotion, transfer, additional compensation, or discipline.[4] In practice, that sweeps in:
Identifying information, job applications and résumés, job titles and descriptions, pay and compensation records and start dates, performance evaluations, written warnings and probationary-period documentation, signed waivers, disciplinary records, and termination notices.[4][3]
Importantly, the obligation doesn’t stop at records an employer keeps in-house. Records held by a third party on the employer’s behalf (think payroll processors, HRIS platforms, or professional employer organizations) are covered too, which means vendor contracts may need a second look before November 8.[4]
One built-in limit: personal information about a different individual is excluded where disclosure would be a “clearly unwarranted invasion” of that person’s privacy, so employers will need a redaction process before producing files (see Section 210-b(c)).
The right to request and review
Upon written request, an employer must provide a free copy of the personnel record within five business days.[2][4] Employees generally can’t demand more than two reviews per calendar year, but a review triggered by the employer’s own negative-information notice (see below) doesn’t count against that cap.[2]
Mandatory notice of negative information
This is one of the law’s more significant new burdens: employers must notify an employee within ten calendar days whenever information is added to the file that could negatively affect the employee’s qualifications, promotion, transfer, compensation, or potential discipline.[2][3] The statute doesn’t spell out precisely when information is considered “placed” in a file, so supervisor-generated documents like counseling memos or performance write-ups that take time to reach HR could create compliance gaps unless employers build a reliable intake and routing process now.[4]
Disputes, corrections, and expungement
If an employee disagrees with something in the file, the law gives them options. The parties can agree to correct or remove the disputed material. Absent agreement, the employee may submit a written statement responding to the disputed information; that statement becomes part of the record and must travel with the disputed material any time it’s shared with a third party.[2][3] Separately, employees may seek expungement of information the employer knew, or should have known, was false through a collective bargaining agreement, other personnel procedures, or in court.[2]
Retention requirements
Employers must maintain the complete personnel record – without deletions – from the date of hire through three years after the employment relationship ends.[2][4] Written personnel policies, including any amendments, must be kept on file at the location where personnel matters are administered.[2]
Anti-retaliation protections
Employers may not discharge, threaten, discipline, or otherwise retaliate against an employee for exercising rights under the new law. Notably, the statute expressly calls out retaliation through immigration-related threats — including threatening to contact immigration authorities or to report an employee’s immigration status — as a prohibited form of retaliation.[3] Given how easily a records request or a dispute over negative information can become entangled with other workplace conflicts, this is an area where manager training will matter.
Enforcement and penalties
The Attorney General enforces the law, with civil penalties ranging from $500 to $2,500 per violation.[2][3] The statute does not create a broad, generalized private right of action for employees to sue directly over access violations (apart from the judicial expungement remedy), but disputes over records and retaliation claims can easily surface inside other employment litigation.[3]
Collective bargaining carve-out
Where a collective bargaining agreement already gives employees access that is “substantially similar” to what the statute requires, that agreement controls. Unionized employers should compare their current CBA language against the new statutory baseline now rather than after a dispute arises.[2][3]
What’s still unsettled
Governor Hochul’s approval memorandum flagged two open questions as part of a chapter amendment agreement with the Legislature: first, whether employers must create personnel files or documents they don’t already maintain (the expected answer, once amended, is no); and second, a tighter definition of what counts as a “personnel record” at all. Those clarifying amendments are expected in the legislative session that begins in January 2027, but until they pass, employers need to plan around the statute exactly as written today.[1][3]
A practical compliance checklist
With a hard effective date three weeks out, here’s where to start:
- Audit where employee records actually live, including with outside vendors.
- Review payroll, HRIS, and PEO contracts to confirm you can meet the five-business-day deadline.
- Compare retention practices against the three-year post-termination requirement.
- Build a workflow to intake and fulfill written requests on time.
- Create a process so HR learns about negative information quickly enough to meet the ten-day notice deadline, including a path for supervisor-generated documents.
- Put dispute, rebuttal-statement, and expungement procedures in writing.
- Develop a redaction protocol for third-party personal information.
- Train managers on what counts as “negative information” and on the law’s anti-retaliation rules.
- Check any existing CBA for substantially similar access provisions. And keep a close eye on the 2027 legislative session, since amendments are already on the way.[4]
The bottom line
New York just handed every employee in the state a meaningful new right to see what’s in their own file and handed every employer a tight compliance window to get ready. The businesses that treat November 8 as a real deadline, rather than a formality, will be the ones that avoid becoming the Attorney General’s first test case.
If you have questions about how the new personnel records law applies to your business, or want help auditing your current recordkeeping practices before the effective date, Burrell Law, P.C. is glad to help.
This post is for general informational purposes only and does not constitute legal advice. Consult with counsel regarding your specific circumstances.
Sources
- Senate Bill S3460, New York State Senate — official bill page, sponsor, legislative history, and Chapter 293 signing record
- New York Enacts Employee Personnel Records Access Law, Effective November 8, 2026 — Gibson Dunn client alert (October 2026)
- New York Enacts Personnel Records Access Law for Employees — Debevoise & Plimpton client alert (September 2026)
- New York’s New Personnel Records Law Significantly Expands Employer Obligations — Cole Schotz client alert
