Personnel File Requirements: Employee Documents and Cross-Checks

This article is provided for information only and is not legal advice. Regulatory references are accurate as of 31 October 2026. Check current rules with a qualified professional before applying them to an individual file.

A personnel file is the set of records an employer holds about one employee: identity, right to work, contract, tax and social security identifiers, pay details and role-specific proofs. No single law lists its contents in most countries. Instead, several rules each require a record, and an inspector, auditor or payroll provider later expects those records to agree. This guide lists what each market asks for, then focuses on the part most checklists skip: which field on which document you compare with which other document, what a mismatch looks like, and what the reviewer does next.

What must a personnel file contain?

A personnel file must hold the records that law requires for the job and the country, and nothing the employer cannot justify. The core is the same everywhere: proof of identity, proof of the right to work, the signed terms of employment, the identifiers used to report the employee to tax and social security bodies, and the bank details used for pay. Role-specific items (licences, qualifications, medical fitness) are added only when the job requires them.

Collecting these is the easy half. The harder half is that each record carries fields (name, date of birth, start date, expiry date, account holder) that must tell the same story.

Which fields should you compare, and what do you do on a mismatch?

Seven cross-checks catch most personnel file errors before they reach payroll or an inspection. The table gives the spine of the method: a field on one document, the document or register it must match, what a mismatch looks like and the reviewer's next step.

A cross-check compares fields. It does not prove that a document is genuine. A passport number that matches everywhere can still sit on a forged document, which is why legal checks such as the right-to-work procedure remain separate steps.

United Kingdom: right to work evidence and the starter checklist

In the UK the employer must complete a right to work check before employing someone, and keep copies for the length of employment plus two years. The GOV.UK right to work guidance allows an online check using a share code, a manual check of original documents with the applicant present, or an identity service provider using identity document validation technology. It asks you to record the date of the check, copy the passport expiry page and the pages showing the holder's details, and re-check before any time-limited permission ends. A civil penalty applies if you employ an illegal worker without a correct check.

For tax, GOV.UK explains that you use the employee's P45, or HMRC's starter checklist when there is no P45, to set the tax code, and that you must tell HMRC about the new employee on or before their first pay day. The written statement of employment particulars is required under section 1 of the Employment Rights Act 1996.

UK cross-checks to run: name on the share code result against the contract and payroll record; the share code's end date against the contract end date; the P45 or starter checklist details against the payroll record; start date on the contract against the first-pay-day reporting to HMRC. A right to work result proves the person's status on the check date. It does not prove their identity matches the P45 or bank account, so those remain your comparison.

Germany, France, Spain, Portugal: the register behind the file

Each European market has an official step that creates a second record, and the personnel file must agree with it. Source: national authorities cited below, status as of October 2026.

France: the Code du travail, article L1221-13 requires the registre unique du personnel in every establishment employing staff, with names in hire order. Article D1221-23 adds nationality, date of birth, sex, job, qualification, entry and exit dates, contract type, and, for foreigners needing authorisation, the type and number of the work permit. The register does not prove anyone's papers are valid; it is the employer's own record, so the check is that it matches the file.

Germany: § 2 of the Nachweisgesetz lists the essential contract terms the employer must document in writing. Employees can inspect their file under § 83 BetrVG, so assume every page will be read by the employee.

Spain: registration with Social Security happens before work starts. The check is that the identity number registered (DNI or NIE) is the one on the identity document in the file.

Portugal: the official guidance says the admission must be communicated through Segurança Social Direta within the 24 hours before the contract takes effect, using form Mod. RV1009-DGSS, as described on the Portuguese government employer page. Compare the NISS and NIF in the file with those submitted.

What do HR teams ask on forums?

The recurring questions are what is mandatory, how long to keep it and what to do when documents disagree. Users on HR and payroll forums ask whether a copy of the passport must stay in the file, whether the file is the same as the payroll folder, and what to do when the bank account is not in the employee's name.

• Do I keep a passport copy? Keep what the law requires you to prove. In the UK that includes copies of right to work documents for employment plus two years; elsewhere, keep the evidence of the check and avoid extra copies.
• Is the payroll folder the personnel file? Not necessarily. Payroll data and the file overlap, but access, retention and purpose differ, which is why UK GDPR and EU GDPR minimisation applies. See the ICO and the CNIL.
• The account is not in their name, what now? Treat it as a mismatch: get written confirmation and a reason before the first payment.

How do you keep the file consistent over time?

Consistency decays after day one, so schedule the re-checks. Expiry dates drive most of them. Set a reminder at least 60 days before any permit or licence ends, re-run name and address comparisons after every change of details, and log who decided each exception and when.

Operationally, a file that validates each line at upload, flags expiries and keeps the reviewer's decision per document defends better in an audit than a PDF checklist. Our platform supports more than 3,200 document types and OCR extraction in 24 languages across 32 jurisdictions, and compares fields, dates and registers across the documents of one file. See also our new hire document checklist and the guide on payroll onboarding: bank details and tax ID validation. For the wider picture by sector, read the industry verification pillar guide. Security details are on the security page and plans on the pricing page.

To apply these cross-checks to your employee files, start with the CheckFile solution for HR teams.

Frequently Asked Questions

What documents are mandatory in a personnel file?

There is no universal list. Typically the file holds identity, right to work, signed contract or written statement, tax and social security identifiers and bank details, plus role-specific proofs. Your country's rules decide the rest.

How long should an employer keep personnel file records?

It depends on the record. In the UK, right to work copies must be kept for the length of employment plus two years. For other records, set a documented retention period based on the legal requirement and data protection law.

What is the most common personnel file error?

Name differences between the identity document, the contract and the bank account. Resolve them before the first payroll run, not after a rejected transfer.

Does cross-checking prove a document is genuine?

No. It compares fields and dates between documents and registers and flags inconsistencies for a human reviewer. Legal checks remain separate.

Can employees see their own personnel file?

In several countries yes. In Germany, § 83 BetrVG gives employees a right to inspect their file, and under UK and EU data protection law employees can request their personal data.