A New York Law Could Fine You $2,500 Per Worker — Here's the November 8 Deadline

New York employers have a little over six weeks to overhaul how they handle employee files, or risk fines that the state's attorney general can now levy directly. A new law, S3460, takes effect November 8, 2026, and it rewrites the rules on who can see what's in a personnel file — and how fast an employer has to hand it over.

For a small business owner juggling payroll, scheduling, and a dozen other fires, "personnel records" might sound like a back-office detail. It isn't. The law applies to every employer in New York, regardless of size, and the penalties — while not enormous on a per-violation basis — can stack quickly for a business with even a handful of write-ups, performance notes, or disciplinary actions on file.

What the law actually requires

S3460 gives New York employees four new rights, and puts a clock on each one.

1. Fast access to personnel files

Once an employee submits a written request, the employer has five business days to let them review their personnel file — at no cost. Employers can cap in-person reviews at two occasions per calendar year, but that cap doesn't apply to the next requirement.

2. Mandatory notice of negative information

This is the part most owners will miss. Any time an employer adds something to a file that could hurt an employee's chances at a promotion, a raise, or continued employment — a write-up, a customer complaint, a performance warning — the employer has 10 days to notify the employee that it's been added. Notices triggered this way don't count against the two-review-per-year cap.

3. A formal dispute process

Employees can challenge what's in their file. They can ask for corrections, request that disputed material be removed, or submit a written statement giving their side of the story, which then has to be kept alongside the disputed record.

4. Three years of retention, no deletions

Employers have to keep personnel records intact for three years after an employee's last day — "without deletions or expungement," per the statute's language. That means the instinct to clean up a file before archiving it is now off the table.

The law also includes anti-retaliation language: an employer can't discipline, threaten, or fire an employee for exercising any of these rights.

What it costs if you get it wrong

The New York Attorney General enforces S3460, and violations carry fines of $500 to $2,500 each. There's no private right of action, meaning individual employees can't sue you directly over it — but a state investigation triggered by even one complaint could turn up a pattern of missed 10-day notices, and each one is a separate violation.

Do the math on a business with 15 employees and a normal amount of turnover and documented performance issues over a year. A handful of missed notification windows adds up fast, especially for an owner who's never had a formal HR process and has been keeping notes in a manager's inbox or a shared drive instead of a structured file.

Who has to comply

The statute defines "employer" broadly — individuals, corporations, partnerships, labor organizations, and government entities are all covered, and the law doesn't carve out an exemption based on headcount. That's a meaningful difference from a lot of New York employment law, which often only kicks in once a business crosses four, ten, or fifty employees. If you have one employee in New York, this law almost certainly applies to you.

What to do before November 8

You have a few weeks to get ahead of this. The businesses that will struggle are the ones treating it as a paperwork problem to solve later. A few concrete steps:

• Centralize your files now. If performance notes, complaints, or write-ups live in email threads or a manager's personal notebook, pull them into one place per employee. You can't meet a five-day access window if you don't know where everything is.
• Build a 10-day notice habit. Anytime something negative goes into a file, calendar a reminder to notify the employee within 10 days. This is the requirement most likely to get missed because it's proactive, not reactive — you have to remember to act even when no one has asked for anything.
• Write a simple access procedure. Decide now how an employee submits a written request, who reviews it, and how you'll verify the five-business-day clock. A one-page internal policy is enough for most small employers.
• Stop purging files early. If you have a habit of clearing out old employee records after a year to save space, that has to change. Three years, untouched, is the new floor.
• Loop in whoever handles your risk exposure. If you carry business insurance with an employment practices liability component, ask your broker whether missed-notice violations are the kind of claim that could trigger it, and whether your policy needs updating.

Why this matters even if you think you run a tight ship

Plenty of small business owners will read this and assume it doesn't apply to them because they don't have a formal HR department, or because their team is small enough that "everyone already knows what's in their file." That's exactly the profile of business most likely to get caught out — not because of bad intent, but because there's no system in place to track a 10-day clock across every employee, every file addition, every year.

It's also worth remembering that how you classify the people working for you determines whether this law even applies to a given individual. If you're not clear on the line between an employee and a contractor, this is a good moment to review it — misclassifying someone as a contractor doesn't just create tax exposure, it can also mean you've skipped legally required processes like this one for someone who should have been covered. The independent contractor vs. employee guide walks through how that distinction actually gets made.

How this compares to what New York already required

New York already had a patchwork of rules touching personnel files — some sector-specific, some tied to unemployment insurance recordkeeping, some buried in older labor law provisions that gave employees narrower review rights. S3460 replaces that patchwork with one clear standard that applies across industries and business sizes. If you've been operating under the assumption that only larger companies with formal HR departments need a documented personnel-file process, that assumption no longer holds. The law doesn't distinguish between a five-person retail shop and a 500-person logistics company — the five-day access window and the 10-day notice requirement apply the same way to both.

That uniformity is part of what makes this law easier to miss. Owners who've kept an eye on headcount-based thresholds in the past — the kind that exempt very small employers from certain New York labor requirements — may reasonably expect a similar carve-out here. There isn't one.

Common questions small employers are asking

Does this apply if I only have one or two employees?

Yes. The statute's definition of "employer" doesn't set a minimum headcount, unlike many other New York employment laws.

What counts as "negative information" that triggers the 10-day notice?

Anything that could reasonably affect an employee's standing — a formal write-up, a documented customer complaint, a performance improvement plan, or material tied to a disciplinary decision. Routine scheduling notes or neutral administrative records generally wouldn't trigger it, but if you're unsure whether something qualifies, the safer move is to treat it as covered and send the notice.

Can I charge a fee for producing the file?

No. Access within the five-business-day window has to be provided at no cost to the employee.

What if an employee disputes something in their file and I disagree with them?

You're not required to remove the material just because an employee disputes it. The law requires you to accept and retain their written statement alongside the disputed record — it creates a right to respond, not a right to erase.

The bigger pattern

S3460 fits into a broader trend of states giving workers more direct access to and control over their own employment records, and New York has been especially active on transparency requirements over the past two years. Business owners operating in New York — even those with just one or two employees — should treat this as the start of a pattern, not an isolated rule. If you're setting up HR processes for the first time, or tightening up ones you already have, checking your business license and registration status while you're at it is a reasonable way to make sure the rest of your compliance paperwork is current too.

The deadline is close enough that "we'll get to it" isn't really a strategy anymore. Five days to grant access, ten days to notify, three years to retain — those are the three numbers to build a process around before November 8.

Photo by Anastassia Anufrieva on Unsplash