New York Workers Can See Their Personnel Files Starting Nov. 8. The Rules Change Again in 2027

Introduction

New York employers will be required, for the first time, to hand employees a copy of their personnel file on request and to tell workers when something damaging is put into it.

Governor Kathy Hochul signed S3460 into law on September 9, 2026 as Chapter 293 of the Laws of 2026, adding Section 210-b to the New York Labor Law and applying broadly to public and private employers. It takes effect on the sixtieth day after signing November 8, 2026.

What has drawn less attention is that the version taking effect in November is not the version Albany intends to keep. In an approval memorandum issued alongside her signature, Hochul stated that the bill as drafted contained ambiguities that should be resolved, and said she had reached an agreement with the Legislature to address them in the upcoming session. Those agreed changes — known in New York as chapter amendments are expected to pass in early 2027, while the law as signed goes into effect on November 8.

In simple terms: employers have roughly seven weeks to comply with a statute that the governor and the Legislature have already agreed is wrong, and workers will be asserting rights this fall under deadlines that are scheduled to loosen next year.

Background

New York has been an outlier. Unlike many other states, New York has long treated personnel files as company property, and no law required private employers to give employees access to them.

State Senator Andrew Gounardes and Assembly member Jessica González-Rojas introduced S3460 for the 2025-2026 session, modeled on Massachusetts’s personnel records law. Previous attempts dating back to 2021 had died in the Legislature.

The state’s own count of how much company New York now joins is not settled. Ogletree Deakins, citing the governor’s office, reported that New York joins at least seventeen other states with a personnel-file access requirement. The worker-side firm Katz Banks Kumin put the figure at twenty, noting that not all such laws provide equivalent protections and that New York’s goes further than many. The discrepancy is worth flagging because both figures are being repeated in employer advisories without qualification.

What the Law Requires

Access. An employer receiving a written request must provide a complete copy of the employee’s personnel record, at no cost, within five business days. Employers may limit employees to two reviews per calendar year, but a review triggered by the placement of negative information does not count toward that cap.

Who is covered. The law applies to both private- and public-sector employers and extends to current and former employees. Employers must retain a complete personnel record, without deletions or expungement, from the date of employment through three years after termination.

What counts as a file. The statute defines a personnel record as any record kept by an employer that identifies an employee, to the extent it is used, has been used, or may affect or be used relative to that employee’s qualifications for employment, promotion, transfer, additional compensation or disciplinary action. The enumerated list includes name, address and date of birth; job title and description; rate of pay and other compensation; starting date; job application and resume; all performance evaluations; written warnings of substandard performance; lists of probationary periods; signed waivers; dated termination notices; and any other documents relating to disciplinary action. The definition also reaches records held by a person or entity under contract with the employer to keep or supply personnel records.

Notice of negative information. Employers must notify an employee within ten days of placing in the record any information that is, has been used, or may be used to negatively affect the employee’s qualification for employment, promotion, transfer, additional compensation or the possibility of disciplinary action. Examples include written warnings, performance improvement plans, negative performance reviews and disciplinary notices.

The right to respond. If there is a disagreement about information in the record, removal or correction may be mutually agreed upon. If no agreement is reached, the employee may submit a written statement explaining their position, which becomes part of the record. That statement must be included when the disputed information is transmitted to a third party, so long as the original information is retained in the file.

False information. Where an employer places information in a record that it knew or should have known to be false, the employee has a remedy through a collective bargaining agreement, other personnel procedures or the judicial process to have the information expunged.

Written policies. An employer that elects to maintain a written personnel policy must keep it continuously available at the office where personnel matters are administered.

Who and What Is Exempt

The exemptions in the enacted statute are narrow and several carve-outs employers are likely expecting are not there.

Union contracts that already provide access. Section 210-b(6) states that nothing in the section supersedes the terms of a collective bargaining agreement, provided that the agreement gives employees at least substantially similar access to their personnel records as the statute does. This is the only categorical exclusion of a group of workers in the law.

Two things follow. The exemption is conditional, not automatic: a contract that is silent on file access, or that provides weaker access than Section 210-b, does not displace the statute. And the phrase “substantially similar” is undefined, meaning unionized employers must make a judgment call about their own agreements with no guidance and a penalty attached to guessing wrong.

Other people’s private information. The definition of personnel record excludes information of a personal nature about a person other than the employee where disclosure would constitute a clearly unwarranted invasion of that other person’s privacy. In simple terms: a complaint another employee filed against you is in your file, but that complainant’s home address, medical details or similar personal information can be withheld.

Format. The statute requires personnel records to be maintained in typewritten or printed form, or handwritten in indelible ink. The enacted text does not address electronic records at all an omission worth watching, since most employers maintain files in an HRIS.

What Is Not Exempt

There is no small-business exemption. The law contains no headcount threshold, no revenue threshold and no phase-in. A two-person shop has the same five-business-day obligation as a Fortune 500 employer.

There is no nonprofit or public-sector exemption. The definition of employer reaches any individual, corporation, partnership, labor organization, unincorporated association or other legal business, including any governmental entity or public employer as defined in Civil Service Law Section 201(6)(a), and any commercial entity as well as agents of the employer. Labor organizations are themselves covered as employers with respect to their own staff.

There is no active-investigation exemption in the law taking effect November 8. The reported chapter amendments would exclude records tied to an active criminal investigation, an active employer disciplinary investigation or an active regulatory investigation, and would state that employers need not create a file that does not exist. None of that language appears in Section 210-b as enacted. Between November 8 and whenever the 2027 amendment passes, an employer sitting on an open harassment investigation has no statutory basis to withhold the investigative file if it bears on the employee’s qualifications or possible discipline.

There is no vendor exemption. A personnel record expressly includes records held by any person or entity under a contractual agreement with the employer to keep or supply personnel records. Employers using a PEO, an outsourced HR platform or a third-party performance-management vendor remain on the hook for the five-day clock.

There is no exemption by seniority or employment status. Executives, probationary employees, at-will employees and former employees are all covered; employee is defined simply as a person currently or formerly employed by an employer.

Penalties for Non-Compliance

The number. Section 210-b(7) provides that any violation of the section by an employer “or any other person” shall be punished by a fine of not less than $500 and not more than $2,500, and that the section shall be enforced by the attorney general.

That is the entire penalty provision. Three questions are already unanswered.

Does it stack? The statute does not say. Other New York penalty provisions routinely specify “for each violation” or “for each day such violation continues” Section 210-b contains neither phrase. An employer that ignores fifty file requests may be exposed to $2,500 or to $125,000, and nothing in the enacted text resolves which. The difference between a rounding error and a real liability turns on a phrase the Legislature did not write.

Civil or criminal? The statute says a violation “shall be punished by a fine” penal phrasing, not the civil-penalty language New York typically uses for regulatory enforcement. Ogletree Deakins, analyzing the Massachusetts statute this law was modeled on, described that state’s mechanism as providing for criminal fines enforceable by the attorney general. Whether New York’s provision is criminal, civil or something a court will have to classify matters for the standard of proof, for whether an employment practices liability policy responds, and for whether an individual can be charged.

Who pays? The phrase “by an employer or any other person” is broader than the corporate entity. On its face it reaches the individual who withheld the file or backdated the write-up. Whether the attorney general would ever pursue an HR director or a line supervisor personally is untested, and no advisory reviewed for this article addressed the point.

Who enforces. Enforcement authority in the signed text rests exclusively with the Office of the New York Attorney General. There is no administrative complaint process, no Department of Labor role and no published intake mechanism as of this writing. The reported chapter amendments would add the New York State Department of Labor as an enforcement authority and would direct that penalty amounts be weighed against the size of the employer’s business, the employer’s good-faith belief that it was in compliance, the gravity of the violation and any history of prior violations mitigating factors that do not exist in the version taking effect November 8.

What an employee can recover. Ordinarily, nothing directly. The fine runs to the state, not to the worker. The statute provides one express judicial remedy to employees: under Section 210-b(3), where an employer places information in a file that it knew or should have known to be false, the employee may seek expungement through a collective bargaining agreement, other personnel procedures or the judicial process. That is a remedy in equity it removes the document. It does not carry damages.

Ogletree’s reading is that the statute does not appear to create an express private right of action for violations of the access, notice or response provisions. Other firms have characterized the law more expansively; Davis Wright Tremaine framed the private right of action as running to injunctive relief to remove information the employer knew or should have known was false, which is consistent with subdivision 3 rather than broader.

The retaliation gap. Section 210-b(8) bars discharging, threatening, penalizing or otherwise discriminating or retaliating against an employee who exercises rights under the section, and expressly includes immigration-status threats as prohibited retaliation. It prescribes no remedy of its own.

Ogletree flagged that the statute does not specify the enforcement mechanism for the anti-retaliation provision and that it is unclear whether the attorney-general language in subdivision 7 reaches retaliation claims under subdivision 8, or whether subdivision 8 supports an independent private claim — an ambiguity the firm expects to generate litigation. Bond, Schoeneck & King, by contrast, stated that workers who experience discrimination or retaliation for asserting their rights have a private right of action.

Katz Banks Kumin described Section 210-b(8) as consistent with the anti-retaliation provisions of Labor Law Section 215. If a court reads a Section 210-b retaliation claim as cognizable under Section 215 which carries its own civil penalties, liquidated damages, reinstatement and fee-shifting the practical exposure for firing someone over a file request is an order of magnitude beyond $2,500. If a court does not, the maximum consequence for terminating a worker who asked to see their own personnel file is a fine the state collects, capped at $2,500.

That is the single most consequential open question in the statute, and it is the one the law leaves most clearly unanswered.

The Amendment Nobody Has Published

Katz Banks Kumin, a worker-side employment firm whose account is based on changes agreed to by the governor and the Legislature, wrote that the Legislature has not yet published the full text of those changes, but that advocates for the bill were involved in the negotiations and aware of what was altered. By that account, the agreed amendments would materially change several of the law’s central terms.

Provision	As signed (effective Nov. 8, 2026)	As described post-amendment (expected 2027)
Time to produce the file	Five business days	Ten business days
Notice of negative information	Ten days	Fifteen days
Union employees	§210-b(6) already excludes CBA-covered employees where the agreement provides “at least substantially similar” access	Reportedly clarified — excluded where the CBA provides access; covered where the CBA is silent
Active investigations	No carve-out	Records tied to an active criminal, employer disciplinary or regulatory investigation excluded; no duty to create a file
Enforcement	Attorney General only	Attorney General or the NYS Department of Labor
Penalty assessment	$500–$2,500, no stated factors	Same range, weighed against employer size, good-faith belief, gravity and prior violations

Note: at least one widely circulated advisory presents the collective bargaining carve-out as a product of the chapter amendments. It appears in the enacted statute at subdivision 6.

Every other entry in the right-hand column rests on a single firm’s summary of an unpublished text. NexfinityNews has not reviewed amendment language, because none has been introduced. Readers and employers should treat that column as reported intent, not as law.

A separate employer-side advisory likewise noted that the law is scheduled to take effect on November 8, 2026, although a legislative amendment is expected to clarify its scope and application and cautioned that employers should watch for any chapter amendment addressing scope and any retroactivity.

Impact

For employees. The practical value of the law is less about curiosity than about evidence. A worker who suspects a discrimination or wage claim has, for the first time, a statutory route to the documents an employer would otherwise produce only in litigation and a right to attach a rebuttal that follows the disputed document out the door to any third party who receives it.

For employers. The definition is not limited to a folder maintained by human resources. Emails, investigation notes and informal disciplinary memos kept outside a traditional HR file may qualify if they are used or could be used in employment decisions and for employers with decentralized HR, multiple worksites or a mix of paper and electronic systems, meeting a five-business-day turnaround may require significant resources.

The tighter squeeze is the notice requirement. A written warning or a performance improvement plan would almost certainly trigger it. A mediocre but not overtly negative review, or a manager’s email documenting a performance conversation, is less clear the statute does not define what it means to negatively affect an employee’s qualifications, and the word “may” suggests a broad reading. Employment counsel expect those boundaries to be settled by guidance or litigation rather than by the text.

Analysis: A Right With a $2,500 Ceiling

Employment firms are not reading the enforcement provisions the same way, and the disagreement matters. The gap between “employees can sue for retaliation” and “it is unclear whether employees can sue for retaliation” is the difference between a law with teeth and a law with a $2,500 ceiling.

There is a structural problem underneath it. A maximum penalty of $2,500 is not a deterrent against a large employer with an incentive to withhold a file from a worker preparing a claim. Under the Massachusetts model on which this statute is based, Ogletree observed, the limited enforcement mechanism left a gap that courts ultimately filled through the common law. New York has adopted the Massachusetts architecture, including its enforcement bottleneck.

Finally, the sequencing deserves scrutiny on its own terms. A law that takes effect in November and is rewritten in the following session creates a window in which the operative deadlines five business days, ten days’ notice, no investigation carve-out — are stricter than what either branch of government says it wants. Whether the 2027 amendment applies retroactively to conduct during that window has not been answered, because no text exists to answer it.

Conclusion

The Access to Personnel Records Act closes a real gap. For decades, a New York worker could be denied the documents used to fire them and had no statutory recourse. That changes on November 8.

But the law arrives in a form that the governor, the Legislature and the employer bar all describe as unfinished with a definition of personnel record broad enough to reach a manager’s email, a notice trigger no one can define precisely, an enforcement ceiling of $2,500 that runs to the state rather than the worker, and an amendment already negotiated behind closed doors that has not been written down where the public can read it.

The right is new and it is real. The rules governing it are provisional.

Key Takeaways

S3460 was signed September 9, 2026 as Chapter 293 of the Laws of 2026, adding Labor Law Section 210-b; it takes effect November 8, 2026 and covers public and private employers and current and former employees.
Employers must produce a free copy of the personnel record within five business days of a written request, capped at two reviews per year, with negative-information reviews exempt from the cap.
Employers must give notice within ten days of adding information that may negatively affect an employee, who may then submit a rebuttal that becomes part of the file and travels with the disputed document to third parties.
The only categorical exclusion is for union employees whose collective bargaining agreement already provides substantially similar access. There is no small-business, nonprofit or active-investigation exemption in the version taking effect November 8.
Violations carry a fine of $500 to $2,500 enforced by the Attorney General and payable to the state, not the employee. The statute does not say whether fines stack, whether the fine is civil or criminal, or what remedy an employee has for retaliation.
Chapter amendments agreed to by Hochul and the Legislature are expected to pass in early 2027 and reportedly extend the deadlines, add carve-outs and add DOL enforcement but the text has not been published.

Related Coverage

The Right to Privacy Was Never Written Into the Constitution – NexfinityNews