November 5, 2026 | Venture Commercial Insurance Agency
A personnel file can become the central record in a dispute over a promotion, pay decision, disciplinary warning, or termination. New York’s new access law makes the accuracy and availability of that record an immediate operational concern for employers—and a timely subject for an employment practices liability insurance review.
Governor Kathy Hochul signed S3460 on September 9, 2026, as Chapter 293, adding Section 210-b to the Labor Law. The law takes effect November 8, 2026. It covers current and former employees and broadly encompasses public and private employers. [1]
What employers need to know
The law establishes two distinct deadlines. Employers must provide a free copy of an employee’s personnel record within five business days of a written request. They must also notify an employee within ten days when information is added that negatively affects, or may negatively affect, employment qualifications, promotion, transfer, additional compensation, or possible discipline. The notice period is ten calendar days; the production period is five business days. Routine reviews may be limited to two per calendar year, but reviews prompted by negative-information notices do not count toward that limit. [2]
The statutory definition reaches beyond a folder labeled “personnel.” It includes qualifying records held by a contractor that keeps or supplies personnel records for the employer. It also excludes personal information about another person where disclosure would constitute a clearly unwarranted invasion of that person’s privacy. Employers should therefore map relevant HR systems and service providers and establish a review process for third-party information before releasing records. [1]
Listed records include identifying and job information, compensation information, employment applications and resumes, performance evaluations, written warnings, probationary-period lists, signed waivers, dated termination notices, and disciplinary documents, subject to the statutory wording concerning documents prepared by the employer. [1]
Employees may challenge information. The parties can agree to correct or remove it; if they cannot agree, an employee may submit a written response that becomes part of the record and accompanies the disputed information when shared with third parties while that information remains in the file. Information the employer knew or should have known was false is subject to an expungement remedy through applicable bargaining procedures, other personnel procedures, or judicial process. [2]
Retention, enforcement, and expected clarification
The law requires retention of the complete record throughout employment and for three years after separation. That general preservation rule must be read alongside the law’s correction and expungement provisions. It also protects employees against retaliation for exercising their rights. Enforcement rests with the New York Attorney General, with fines of $500 to $2,500 per violation. Gibson Dunn notes that the law does not expressly establish a private right of action for violations of the access, notice, or retention provisions. [3]
The enactment also leaves questions for employers to monitor. Debevoise reports that the Governor’s approval memorandum anticipates legislative clarification concerning whether employers must create files or new documents and which records fall within the law. Expected amendments are not enacted requirements and should not be treated as a postponement of the November 8 compliance date. [4]
Electronic recordkeeping deserves attention as well: Gibson Dunn notes that the text specifies typewritten, printed, or indelible handwritten records without expressly addressing electronic-only files. Employers should obtain guidance on their recordkeeping arrangements rather than assume that an HR platform resolves every requirement. [3]
Three years after separation is not a universal destruction date. For employers subject to applicable EEOC requirements, records relevant to a discrimination charge must remain available through final disposition of the charge or resulting litigation. Retention schedules should accommodate those obligations and applicable preservation holds. [5]
Why the law matters to an insurance program
The following are insurance and risk-management implications, rather than additional duties imposed by Section 210-b. Coverage depends on the issued policy, endorsements, allegations, and applicable law.
EPLI merits review, but a records violation does not establish coverage. Employment practices liability insurance addresses specified employment-related allegations. Chubb identifies retaliation, discrimination, and harassment among the exposures its EPL coverage addresses. A personnel-file dispute may accompany such allegations, making the consistency of warnings, evaluations, and termination explanations important to the defense. The practical recommendation is to document decisions contemporaneously, factually, and consistently. [6]
A demand can require insurance attention before a lawsuit. Chubb’s published ForeFront EPL wording includes certain written demands for monetary or nonmonetary relief against an insured for an employment practices wrongful act. As an illustrative distinction, a routine request for a file does not automatically establish an insured claim; a letter alleging retaliation and demanding relief may warrant prompt assessment. HR should route substantive allegations to the person responsible for insurance notice so the actual policy’s reporting requirements can be checked. [7]
Defense coverage, penalties, and compliance costs are separate questions. The same sample EPL wording excludes fines and penalties, subject to specified exceptions, and costs of complying with nonmonetary relief from its definition of loss. Chubb’s sample BOP employment-practices endorsement also excludes civil and criminal fines and provides for defense expenses to use the applicable limit. Employers should review their own forms for these distinctions, retentions, defense provisions, and reporting conditions. Insurance should not be budgeted as reimbursement for ordinary file administration or statutory penalties. [7, 8]
File production also creates a privacy exposure. An employer can meet a production deadline and still create a separate problem by sending sensitive records to the wrong person. Chubb’s cyber materials identify sensitive employee information as a relevant exposure and describe privacy and network-security liability coverage. Verify the requester, check the recipient, review third-party information, and use secure delivery. Any resulting privacy incident would require its own coverage assessment. [9]
Turning the requirements into a workable process
An effective response starts with an accountable owner and a backup. Employers should establish a request log, calculate the two deadlines separately, confirm that vendors can retrieve qualifying records promptly, and retain evidence of delivery and required notices.
Managers should know where to route requests and how to document performance concerns. Employee rebuttals should remain associated with disputed material when records are shared. Before deleting records or responding to a contested request, HR should check retention requirements, preservation holds, and the need for counsel’s review.
For the insurance review, use a concrete scenario: a former employee requests a file, disputes a warning, alleges retaliation, and demands correction and compensation. Ask which allegations could trigger EPL coverage, when notice is required, who selects counsel, whether defense reduces the limit, and which costs remain the employer’s responsibility. That exercise connects personnel practices to the coverage the business actually purchased.
This article describes the law and available commentary as reviewed November 5, 2026. Insurance examples illustrate coverage issues and do not establish coverage for a particular claim.
Sources
New York State Senate: S3460, legislative status and bill text.
Seyfarth Shaw: New York Governor Signs Employee Personnel Records Access Law, September 10, 2026.
Debevoise & Plimpton: New York Enacts Personnel Records Access Law for Employees, September 16, 2026.
Chubb: The Chubb Primary Employment Practices Liability Insurance.
Chubb: The ForeFront Portfolio Policy Guidebook, EPL form PF-55505 (07/21), printed pages 73–83.
Chubb: Sample BOP policy, Employment-Related Practices Liability Endorsement BOP-45208a (03/18).
