If you think about the average employee file, there is a lot of “stuff” that goes in there – or should go in there. For the purposes of this article, let’s assume that your company has followed all the guidelines on what needs to be retained in employee files. This means that the average employee file could contain the following:
- Resume
- Interview questions and answers
- Reference checks
- Job description
- Offer letter and signed employment agreement
- Payroll/salary information
- Benefit sign up forms
- SIN number and banking information
- Attendance, vacation, leave information
- Performance reviews
- Performance management notes and or disciplinary documentation
- Investigation forms
- Training information
- WSIB forms
- Doctors notes
- Etc.
Now, if you think about it, that is a lot of information, and much of it is private and confidential. So, this means that really, only those people that really need to have access to this information should be able to access it. Let’s look at some examples. A manager. Does a manager need to see completed WSIB forms? How about have access to the benefit sign up forms? What about the Health and Safety Manager who needs to access training information, do they need access to the full file? The Payroll department needs access to the benefits form and any information that impacts salary, but, do they need access to performance reviews or disciplinary documentation? The answer is “no”. So, under the Privacy Act – PIPEDA, we need to do whatever we can to protect confidential employee information. This doesn’t just mean that employee files need to be under lock and key – it also means that we may need to separate employee file information depending on who needs access to what – and these files need to be stored separately and under separate lock and key.
For more information on PIPEDA – click the link here.
Have other thoughts for an upcoming blog post you would like to see? Send them here: info@1stophrconsulting.com