Can we legally shred original HR documents after scanning?

In most cases, yes. UK GDPR does not require paper originals, and employment tribunals routinely accept good-quality digital copies. Best practice is to scan to a verifiable standard with quality control, keep a certificate of destruction, and retain originals only where the signed document itself may carry evidential weight, such as contracts or settlement agreements.

How long should UK employers keep HR records?

It varies by document type. Right-to-work checks should be kept for two years after employment ends, payroll records for at least three years after the tax year (six years is common practice), and general personnel files are typically kept for six years after leaving to cover potential claims. Pension and industrial injury records can justify retention of 40 years or more.

Are scanned HR files GDPR compliant?

Scanning itself does not create or remove compliance — how the files are structured, secured, and retained does. Digitised HR files are compliant when they are indexed so retention rules can be applied per document type, protected with role-based access controls, and processed by providers with appropriate security standards such as ISO 27001 and BS 7858 screened staff.

Should HR files be scanned as one PDF per employee?

No. A single PDF per employee makes it very difficult to delete expired document categories, redact third-party information for subject access requests, or apply different retention periods. Scan each employee's file split by document category — contract, absence, disciplinary, payroll, pension — with each document indexed by date and type.

What is the fastest way to answer a subject access request from scanned HR files?

Full-text OCR combined with employee-level indexing. When every page is searchable and every document is tagged to an employee number, gathering the records for a subject access request becomes a search and export task that takes minutes, which makes the ICO's one-calendar-month response deadline straightforward to meet.

Best Way to Digitise HR Files Without Losing Structure or Compliance

The best way to digitise HR files is to scan them employee by employee, preserving the file structure your team already relies on, with each document indexed by employee name, employee number, and document type. HR records are among the most sensitive documents a UK business holds — they contain the special category data the UK GDPR singles out for extra protection — so the digitisation process itself must be secure, auditable, and mapped to your retention schedule from day one. Get the structure and indexing right before the first page goes through a scanner, and the digital archive becomes faster and safer than the filing cabinet ever was. Get it wrong, and you trade a messy paper problem for a messier digital one.

Why HR Files Are Different from Other Business Records

An HR file is not one document — it is a bundle of many document types with different sensitivities and different retention periods. A single personnel folder typically contains contracts, right-to-work checks, appraisals, disciplinary records, sickness absence notes, pension paperwork, and payroll history. Under the UK GDPR and the Data Protection Act 2018, health information and details revealing ethnicity, trade union membership, or criminal convictions are special category data, which demands tighter access control and a documented lawful basis for processing.

Retention rules also pull in different directions within the same folder. Right-to-work documents should be kept for two years after employment ends. Working time records are typically kept for two years and payroll records for at least three years after the tax year ends (six years is common practice for HMRC purposes). Pension and industrial injury records can justify much longer retention. A flat scan of the whole folder as one giant PDF makes it impossible to delete the parts you must delete while keeping the parts you must keep — which is exactly why structure matters more for HR than for almost any other record type.

Step 1: Map the Structure Before You Scan

Decide the digital folder and indexing scheme first, then make the scanning conform to it. For HR files the scheme that works almost universally is:

Level 1 — employee: surname, forename, and employee or payroll number
Level 2 — document category: contract, right to work, absence, performance, disciplinary, payroll, pension, leaver documents
Level 3 — the document itself: named with a date and a short description, e.g. 2021-03-15_Contract-Amendment.pdf

Splitting by category is what makes retention manageable later: when a leaver’s disciplinary records reach the end of their retention period, you can delete that category cleanly without touching the pension documents that must survive for decades. A professional document scanning provider will use separator sheets or barcode slips during preparation so every document lands in the right category automatically, rather than relying on someone splitting PDFs by hand afterwards.

Step 2: Choose the Right Capture Specification

Resolution and format

300dpi is the accepted standard for business records and comfortably supports accurate OCR. For long-term retention — and some HR documents will be kept 40 years or more — ask for PDF/A, the ISO-standardised archival format that embeds everything needed to render the file identically decades from now.

OCR and searchability

Full-text OCR turns every scanned page into searchable text, so a subject access request that once meant hours in the archive room becomes a keyword search. That matters commercially: the ICO expects most subject access requests to be answered within one calendar month, and employees are the most frequent makers of them. Searchable files are the difference between meeting that deadline routinely and scrambling every time.

Indexing fields

At minimum, index employee name, employee number, document category, and document date. Adding a leaver date field lets you automate retention: a simple report of “leavers plus six years” becomes your annual destruction list.

Step 3: Keep the Chain of Custody Tight

Because HR files contain special category data, the transfer and scanning process needs the same rigour as the storage itself. The provider should collect files in sealed, barcoded crates using their own vetted staff and tracked vehicles, scan in a secure UK facility, and give you an audit trail from collection to delivery. Staff handling the files should be security screened — BS 7858 is the relevant UK standard — and the facility should hold ISO 27001 certification for information security. If a scanning partner cannot evidence these basics, the compliance risk sits with you as the data controller, and ICO fines for serious infringements run up to £17.5 million or 4% of global turnover.

Step 4: Decide What Happens to the Paper Afterwards

Digitisation is only half a decision — the other half is the fate of the originals. There are three sound options:

Scan and shred: once scans pass quality control, originals are destroyed under a BS EN 15713 process with a certificate of destruction. Suitable for most routine HR paperwork, since UK GDPR and employment tribunals accept good-quality digital copies.
Scan and store: originals move to secure off-site storage. Sensible for documents where the original may carry evidential weight — signed contracts, settlement agreements, historic pension deeds.
Hybrid: shred the routine categories, store the exceptions. This is the most common outcome of a well-planned HR project.

Whichever route you take, record the decision in your retention schedule. Holding paper “just in case” after a compliant scan simply doubles your storage cost and your data protection exposure. If you do need to keep originals, combining secure document storage with digital access gives you both evidential originals and instant retrieval.

Common Mistakes That Destroy Structure or Compliance

Scanning whole folders as single PDFs — makes selective retention and redaction for subject access requests nearly impossible.
Letting untrained staff do the prep — missed staples, folded pages, and skipped duplexes are the leading cause of missing pages discovered years later.
No quality control sampling — insist on a documented QC step that checks image quality and page counts against the originals before anything is destroyed.
Dumping files into a shared drive with open permissions — special category data needs role-based access; HR files should not be readable by the whole company.
Ignoring leavers’ files — the biggest GDPR risk usually sits in the archive of people who left years ago and whose data should already be gone.

A Sensible Rollout Plan

Start with a pilot of 20–50 employee files, including at least a few thick legacy folders and a few leavers. Use the pilot to prove the indexing scheme, the OCR accuracy, and the retention reporting before committing the full archive. Then digitise leavers first — they carry risk with no operational benefit on paper — followed by current staff, and finally switch to day-forward scanning so new HR paperwork is captured digitally on arrival and the paper problem never regrows. For more guidance on planning projects like this, browse the rest of our resources library.

Done in that order, digitising HR files does not just preserve your structure and compliance — it improves both, replacing a cabinet-by-cabinet filing habit with an indexed, access-controlled, retention-aware archive that answers requests in minutes.