Records management with
360 Documents
Conformance with ISO 15489-1:2016 and GeBüV
Swiss legal retention periods for personnel records, employee files, and HR documents
Last update: 17 May 2025
"The employer's interest in retaining employee files - usually for evidentiary purposes or to fulfil a legal obligation such as issuing a work certificate - must be balanced against the legal obligation to retain employee data only to the extent necessary and to treat it with the utmost care"
Definition and typology
Swiss personnel files or human resources records are a compilation of all records relating to an employee from the time they join the organization until they leave, and usually include the following entries:
- Contact details and address
- Application documents: ID, resume, references, professional trainings, certificates, diplomas, etc.
- Results of tests taken as part of the recruitment process
- Employment contract and its annexes
- Bank details and insurance information
- Pay slips and salary statements
- Information on working hours, sick leave (medical certificates), absences, and vacation
- Ongoing training and career planning
- Performance reviews
- Information on disciplinary measures: warnings, file notes on incidents, sanctions
- Correspondence between employer and employee
- Registry extracts: criminal record extract, extract from the debt collection register, etc.
Regular review of the Swiss personnel file
Personal data in Switzerland may only be processed in accordance with the principle of proportionality and good faith (Art. 6 para. 2 FADP). Swiss human resources departments may therefore only add records to the personnel file if they (i) "concern the employee’s suitability for his job" or (ii) "are necessary for the performance of the employment contract" (Art. 328b CO).
For this reason, Swiss human resources records must be regularly reviewed and cleaned up (pruned) to ensure that they are (i) accurate (ii) up to date and (iii) necessary. Inaccurate or incomplete personal data must be corrected, and documents that are "no longer required for the purpose of processing" must be "destroyed or anonymized" (Art. 6 para. 4 and 5 FADP).
Right of information to the Swiss personnel file
Under Swiss data protection law, all employees in Switzerland have the right to inspect the contents of their personnel files, and a corresponding request for information must generally be answered free of charge within 30 days (Art. 25 FADP).
The right to know what is contained in one's employee file includes the right to gain clarity on:
- the processed personal data
- the purpose of processing
- the retention period for the personal data or, if this is not possible, the criteria for determining this period
- the available information about the source of the personal data, if it has not been collected from the employee directly
- if applicable, whether an automated individual decision has been taken and the logic behind the decision
- if applicable, the recipients or the categories of recipients to which such personal data is disclosed, including if applicable any foreign states or international bodies
Swiss retention periods for human resources records
The employer's interest in retaining employee files (usually for evidentiary purposes or to fulfil a legal obligation such as issuing a work certificate) must be balanced against the legal obligation to retain employee data only to the extent necessary and to treat it with the utmost care.
For this reason, Swiss HR files must generally be destroyed once the employment relationship has ended. And although Swiss law does not specify any explicit recordkeeping periods for personnel files, the following retention periods can be observed in Swiss human resources practice:
- HR records of rejected candidates: destroy immediately after completion of the recruitment process
- HR records related to salary claims: retain for 5 years from the claim becoming due (Art. 128a in conjunction with Art. 130 para. 1 CO)
- HR records related to the work certificate: retain for 10 years from the date of departure (Art. 330a CO)
- HR records related to accounting: retain for 10 years from the end of the financial year in which the last entry was made
The term salary claim must be interpreted very broadly and includes all claims relating to the work performed. This includes gratuities and similar payments such as bonuses or profit sharing, compensation for overtime, night work, work on Sundays (basic wage and supplements), holiday pay, holiday entitlement, and wages in the event of absence from work for reasons beyond the employee's control (continued payment of salary under Art. 324a CO).
The
indefinite storage of employee data is not permitted in Switzerland.
Quick start
Ingestion: Upload, Outlook, scanner
OCR technology: text recognition
Indexation along your folder structure
Full-text search with results highlighting
Product features of 360 Documents
Business logic
- Capture documents and associated metadata: Via simple upload, drag & drop from Outlook, bulk scanning or via API calls
- Support of over 100 file extensions: Ingest and display documents in commonly used file formats
- File sharing: Give internal and external access, set passwords and link expirations
- Capture email attachments: As linked records or as a single compound record
- Import digital records and associated metadata: Migrate directly from an external application, either in bulk or individually
- Date of origination: When migrating, set a retention trigger predating a record's creation in 360 Documents
- Link workflows associated with records: Annotate records, validate metadata, post "To do" entries, sign with Swiss and EU electronic signatures
- Duplicate records: Use them in multiple business contexts (for example, in both the accounting and HR department)
- Lifecycle management: Produce reports on records capture, usage and disposal
- Website archiving
Usability
- Hands-on in-app documentation in 4 languages including the foundations of records mangement
- Full-text enterprise search: Advanced filtering, keyword and synonyms search in EN, DE, FR, IT
- OCR and business data extraction: Industry-leading computer vision stack with high confidence scores
- Data extraction at scale: Automatically detect and capture pre-existing metadata
- Automatic document recognition: Detect over 30 document types (invoices, Swiss QR bills, IDs, tickets)
- Business intelligence: Translate, summarize and question PDFs across all major LLMs
- Contextual metadata service: Define and capture custom metadata
- Metadata templates: Capture entity metadata according to one or several pre-determined templates
- Validate custom metadata values against syntactical standards (booleans, enums, numbers, strings, URLs, phones, timestamps)
- Classification service: Associate records and folders to their business context (for example, Accounting, HR, Sales, AML, etc.)
- Create, manage and maintain business classes
Regulatory
- Global compliance: ISO 15489-1:2016, ISO 16175-1:2020, DoD 5015.2-STD, MoReq2010
- Swiss compliance: CO, GeBüV, FADP, eCH-0026, eCH-0038, eCH-0160, eCH-0164 (Swiss disposal schedules come preconfigured)
- Disposal scheduling service: Allocate legal retention periods for records and folders, modify and replace existing disposal schedules to meet new legal or business demands
- Retain residual metadata after record disposal: As stipulated by applicable jurisdictional standards
- FADP compliance: Comply with Art. 25 et seq. of the Swiss Data Protection Act ("Rights of the Data Subject"), especially in terms of being able to provide information about "the retention period for the personal data"
- Legal holding service: Pause record disposal preventing records from being disposed of during lawsuits, audits or governmental inquiries
- Transfer records of continuing value together with their metadata to a public archive
- Retention triggers: date of creation / origination, from last addition to folder timestamp, from folder closed timestamp, customized triggers
Security
- User and user group service: Apply security and access restrictions on record, folder, document type and business class level ensuring that only authorized agents can access records
- Historical user data: Trace all actions of all past users of 360 Documents
- Model role service: Assign user roles choosing from over 200 function definitions (FND)
- Security logging: Create and maintain access, usage and security metadata, generating event logs for each system interaction
- Object lock: Protect records from any alteration on network level
- Generate checksums to support integrity and duplicates detection
- Authenticate users via 2FA before giving access
- Perform malware detection when uploading files
- Swiss data centers in compliance with ISO 27001 and FINMA requirements
- 3-2-1-Backup: Regular backups offline on tape in Switzerland to prevent ransomware
Related content
360core archiving Add-in on Microsoft AppSource (here)
Jeannine Dehmelt, Marc Ph. Prinz
(2024) Personaldossier: Den Datenschutz sicherstellen
(here)
Julia Gschwend (2022) Personaldossier und Datenschutz - was Sie darüber wissen müssen (here)
William Saffady (2019) Global Requirements for Personnel Records: A Survey of Laws and Regulations (here)
Swiss Data Protection Act - FADP (2023) (here)
Swiss Federal Data Protection and Information Commissioner (2025) Different phases of the employment relationship. What data are employers allowed to use? What do they have to do? (here)
Weisung des Personalamtes des Kantons Zürich
(2022) Umgang mit Personaldossiers
(here)