Wind-downs and transitions
What to do with employee records when a business closes
By SourceX Editorial · Updated
Short answer
When a business closes, employee records must be kept, not deleted: Form I-9s, payroll, tax, benefits, safety and personnel files each carry federal or state retention rules that outlast the company. Export them from HR and payroll systems before cancelling, name a custodian, and keep them out of any data licensing review. HR files are never licensed.
Key takeaways
- Closing the business does not end the retention periods that apply to I-9, payroll, tax, benefits and safety records.
- HR and payroll systems should be exported after final payroll, final tax filings and year-end forms are complete, and before access ends.
- Medical and leave records need separate, restricted storage apart from the general personnel file.
- Personnel, payroll, medical, background and immigration files belong on a never-license list with no exceptions.
- Work that employees created, such as tickets or code reviews, is a different category from records about employees.
Which employee records must a closing business keep?#
A closing business must keep the employee records that federal and state laws require employers to retain, and those duties continue after operations stop. The main groups are employment eligibility forms, payroll and wage records, payroll tax filings, benefit plan records, workplace safety logs and personnel files.
Periods differ by record type and by state. For example, the IRS says to keep employment tax records for at least 4 years after the date the tax becomes due or is paid, whichever is later, and a closing company's final payroll filings start that clock rather than end it. Some periods are counted from an employee's termination rather than from the date the record was created. Confirm the current requirements with your payroll provider, accountant or employment counsel, and write them into a retention schedule with a destroy-by date for each group.
| Record group | Rules that may apply | What to do at closing |
|---|---|---|
| Form I-9 and supporting documents | Federal immigration recordkeeping rules | Keep originals or compliant copies for the required period |
| Payroll registers, timecards, wage rates | FLSA recordkeeping and state wage laws | Export full payroll history, not just summaries |
| W-2s, W-4s and payroll tax returns | IRS employment tax rules and state tax agencies | Keep filed returns and supporting records with the tax files |
| Retirement and health plan records | ERISA and the plan documents | Coordinate with the plan administrator on plan termination |
| Injury and illness logs | OSHA recordkeeping rules, where they apply | Keep logs and incident reports with safety files |
| Personnel files and performance records | State access and retention laws | Keep, restrict access and record the custodian |
| Medical, leave and accommodation records | FMLA and ADA confidentiality rules | Store separately with tighter access |
Export HR and payroll systems in the right order#
HR and payroll systems should be exported after the final payroll runs and year-end forms are issued, but before the subscription ends. Exporting too early misses the last pay period and final filings; exporting too late risks losing access altogether.
Many payroll and HR providers let former customers view or download reports for some time after cancellation, but the window and formats differ by vendor and plan. Read your provider's terms instead of assuming access will remain.
- Run final payroll, including final wages, any accrued leave owed and final deductions.
- Confirm who files the final quarterly and annual payroll tax returns: the provider or your accountant.
- Issue W-2s and tell former employees how they will receive them.
- Export complete payroll registers, tax filings, deduction histories and year-to-date reports.
- Export personnel files, I-9 records, offer and termination letters and policy acknowledgments from the HRIS.
- Download benefit enrollment and COBRA notice records, or confirm the plan administrator holds them.
- Store everything encrypted, with medical and leave records in a separate restricted folder.
Who keeps employee records after the business closes?#
Employee records after a closing are kept by a named custodian, typically a former owner or officer, the company's accountant or a records storage vendor, with the payroll provider or PEO holding some records under its own contract. The custodian needs written authority, access instructions and an index of what is held.
Pick someone who will stay reachable. Former employees ask for wage statements, employment verification and benefits information long after the doors close, and state agencies or auditors may request payroll records. A custodian with no index turns each request into a search.
If the business used a PEO, the PEO usually holds the payroll and benefits records it processed, while the company often keeps its own personnel files and I-9s. Confirm in writing which party holds what before the PEO agreement ends.
The never-license list for HR files#
HR files are never licensed, because records about employees are sensitive personal information with no legitimate place in a training dataset. A closing company should mark these record groups as excluded at the start of any data review, before anyone discusses scope.
Redaction does not change this. Automated de-identification has limits; the open-source Presidio toolkit warns in its own documentation that automated detection gives no guarantee of finding all sensitive information and that additional protections should be used. HR systems are therefore excluded as whole sources, not cleaned and offered.
- Personnel files, performance reviews and disciplinary records.
- Compensation, payroll, bank account and tax withholding records.
- Form I-9s, identity documents and immigration files.
- Medical, leave, accommodation and workers' compensation records.
- Background checks, drug test results and reference checks.
- Benefit enrollments, dependents and beneficiary designations.
- Internal investigation, complaint and termination files.
Records employees created are a different question#
Records employees created while doing their jobs, such as support replies, code reviews, job notes and project discussions, are company work product rather than employee records. They may be licensable after a rights review and the removal of names and personal details, depending on the employee notices and systems involved.
Internal chat is the hardest case. Slack and Teams messages mix work discussion with personal remarks, and whether notice or consent is needed depends on what employees were told and on the laws that may apply. Counsel assesses that deal by deal, and narrow slices with clear business content are easier to clear than whole workspaces.
| Record | About employees or by employees? | Licensing position |
|---|---|---|
| Performance reviews and compensation | About employees | Never |
| Timecards and timesheets | About employees | Never |
| Support ticket replies and resolution notes | By employees | Possible after de-identification |
| Code reviews and commit messages | By employees | Possible, with customer code carved out |
| Technician job notes | By employees | Possible after de-identification |
| Internal chat channels | Mixed | Narrow slices only, after counsel review |
Illustrative: an engineering firm closes and sorts its HR records#
Illustrative: Marlow Pike Engineering, a fictional civil engineering firm, closes after its founding principals retire. It used BambooHR for personnel files, ADP for payroll, Deltek for project accounting and time, and a shared drive for project files, RFIs and submittals.
The office manager waits until final payroll and year-end forms are complete, then exports BambooHR personnel files and ADP payroll registers and tax filings into an encrypted archive, with medical and leave documents in a separate folder. A former principal agrees to act as custodian, and the firm's accountant keeps a copy of the payroll tax records.
When the principals ask whether the firm's records could be licensed, the HR archive and Deltek timesheets are excluded at the outset. The review looks only at project records such as RFI logs and internal review comments, with client deliverables and client names carved out.
How SourceX treats employee records#
SourceX approaches HR, payroll and personnel systems as excluded sources, and the SourceX Evidence Packet notes that exclusion as part of the privacy record for any package. The initial assessment collects metadata only, so no employee files are requested at that stage.
Where a closing company has work product worth reviewing, the Rights and Preparation steps of the SourceX five-step transaction address employee notices and remove personal details before anything reaches Approval.
Frequently asked questions
Do I have to give employees copies of their personnel files when the business closes?
Some states give current or former employees a right to inspect or copy their personnel files, and the rules differ by state. Even where no such right applies, providing final pay statements and W-2 information heads off many requests. Check your state's rules with employment counsel or your payroll provider.
What happens to employee records if the custodian can no longer act?
Without a successor, requests go unanswered and records may be lost. The closing plan should name a backup custodian, such as the company's accountant or counsel, and the custodian agreement should say how the records pass on if the first custodian cannot continue.
Can I destroy employee records once the business is dissolved?
Not automatically. Retention duties attach to the records, not to the operating business, and some periods run well past closing. Destroy records only after their retention period ends and no claims or holds apply, and log the method and date.
How should former employees request records after closing?
Give them a contact in the final notice: an email address on the retained domain, a mailing address or the payroll provider's former-employee portal. Explain how to get W-2s, wage statements and employment verification, and brief the custodian on what will be asked.
Are anonymized HR analytics safe to license?
They should stay off the table. Aggregated workforce figures can still point to individuals in small teams, and the underlying records carry legal and ethical sensitivity that outweighs any value. Treat HR systems as an excluded source rather than a candidate for de-identification.
Sources
- Presidio's own documentation warns that because it is using automated detection mechanisms, there is no guarantee that Presidio will find all sensitive information, and that additional systems and protections should be employed. Source
- The IRS says to keep employment tax records for at least 4 years after the date that the tax becomes due or is paid, whichever is later. Source
Related resources
See if your company qualifies
A short company assessment. No data uploads are needed.