Candidate Data Retention and Disposition SOP
This SOP defines how to retain applicant and candidate records, check holds, and dispose of files securely at the end of the retention period. It helps HR teams avoid premature deletion, missed legal holds, and inconsistent recordkeeping.
Trusted by frontline teams 15 years of frontline software AI customization in seconds
Built for: Corporate Hr And Recruiting · Healthcare Hiring · Manufacturing · Retail And Hospitality · Staffing And Workforce Services
Overview
This Candidate Data Retention and Disposition SOP template defines how HR and recruiting teams retain applicant and candidate records, check whether a legal hold applies, and approve secure disposal when the retention period ends. It is built for organizations that need a repeatable process for recruiting files, interview notes, disposition reasons, and related hiring documentation.
Use this SOP when you need to show consistent handling of candidate records across requisitions, locations, or business units, especially where OFCCP, EEOC, or state retention rules apply. It is also useful when records live in more than one place, such as an ATS, shared drive, email archive, or paper file cabinet, because the procedure forces a completeness check before destruction.
Do not use this SOP as a blanket deletion policy for employee personnel files, payroll records, or unrelated legal documents. It is also not appropriate to dispose of records if a complaint, audit, investigation, or litigation hold is active. The template is designed to prevent premature deletion, missing documentation, and inconsistent disposition decisions by requiring a clear trigger date, review of applicable requirements, escalation for holds, approval, and secure destruction with a documented reason.
Standards & compliance context
- This template supports documented information controls consistent with ISO 9001:2015 recordkeeping expectations by requiring defined review, approval, and retention evidence.
- It aligns with general EEOC and OFCCP retention practices by preserving candidate records for the applicable retention period and documenting disposition decisions.
- It helps organizations apply state-specific retention rules by making the trigger date, hold review, and longer-applicable requirement explicit before destruction.
- If candidate records include regulated hiring documentation, the SOP should be paired with internal privacy and records-management controls so disposal is traceable and authorized.
General regulatory context for orientation only — verify current requirements with counsel or the relevant agency before relying on this template for compliance.
What's inside this template
Steps
This section matters because it turns retention policy into a repeatable sequence with clear owners, verification points, and escalation paths.
-
Records custodian confirms the retention trigger date
The records custodian verifies the candidate record creation date, final disposition date, or other policy-defined trigger date against the applicable retention rule, then documents the trigger date in the disposition log before proceeding.
-
Records custodian reviews applicable retention requirements
The records custodian reviews the retention schedule, state law reference, and OFCCP/EEOC guidance, then records the longest applicable retention period for the candidate record set.
-
Records custodian checks for legal holds or investigations
The records custodian checks the legal hold register and case management log for any litigation hold, audit hold, complaint, investigation, or preservation notice, then records a yes/no eligibility decision for disposition.
-
Records custodian escalates records under hold
The records custodian documents the hold status, notifies the compliance owner, and excludes the records from any destruction workflow until written release is received.
-
Records custodian verifies record completeness before disposition
The records custodian confirms that required fields such as application data, interview notes, disposition reason, and any required demographic or compliance records are present in the candidate file before it is approved for destruction.
-
Records custodian documents the non-selection or disposition reason
The records custodian enters an objective, job-related disposition reason approved by HR and legal into the applicant tracking system so the record trail is complete and searchable.
-
Records owner approves records for secure disposal
The designated records owner or compliance approver reviews the disposition log and authorizes destruction only after confirming the records are eligible for secure disposal.
-
Assigned operator destroys records using approved secure method
The assigned operator destroys the candidate records using the approved secure method for the record medium, such as cross-cut shredding, secure pulping, or certified electronic wiping, and confirms the records are irreversibly destroyed.
-
Records custodian records disposition evidence and retains the audit trail
The records custodian files the certificate of destruction or other disposition evidence in the audit log, then retains the audit trail according to the records retention schedule.
How to use this template
- 1. The records owner confirms the retention trigger date for each candidate file and identifies the applicable retention rule before any disposal review begins.
- 2. The HR reviewer checks the candidate record set for completeness, legal holds, open investigations, and any jurisdiction-specific exceptions that extend retention.
- 3. The reviewer escalates any record under hold to legal or compliance and removes it from the disposal batch until written release is received.
- 4. The approver verifies the disposition reason, confirms the record is eligible for destruction, and authorizes the approved secure disposal method.
- 5. The assigned operator destroys the records using the approved method, then logs the action, date, and responsible role in the retention record.
Best practices
- Define the retention trigger date in one place and use the same trigger for every candidate record type unless legal counsel approves an exception.
- Check ATS, shared drives, email archives, and paper files together so a record is not partially retained in one system and destroyed in another.
- Require a hold check before every disposal batch, even when the records appear routine, because litigation and audits often start after the original review date.
- Document the non-selection or disposition reason in a controlled field so the record trail is consistent and searchable during audits.
- Use a competent person to approve exceptions, since informal recruiter judgment is not enough when retention timing or legal holds are unclear.
- Photograph or scan paper destruction logs only if your policy requires a visual audit trail; otherwise keep a signed destruction record with date, method, and batch reference.
- Separate routine retention expiration from corrective deletions, because records removed for error correction should follow a non-conformance path, not a standard disposal path.
What this template typically catches
Issues teams running this template most often surface in practice:
Common use cases
Frequently asked questions
What records does this SOP cover?
It covers applicant and candidate records tied to recruiting and selection, such as applications, interview notes, disposition reasons, and related hiring documentation. You can scope it to active requisitions, rejected candidates, internal transfers, and rehires if your policy treats them differently. It should also define what is excluded, such as payroll files or employee personnel records after hire. Clear scope prevents accidental deletion of records that belong in a different retention schedule.
When should the retention period start?
The SOP should define the retention trigger date, such as the date of non-selection, requisition closure, or final hiring decision, depending on your policy. That trigger needs to be consistent across recruiters and HR operations so the retention clock is not started from an informal date. If state law or a legal hold changes the timeline, the SOP should require the longer applicable period. This is one of the most common places where ad hoc handling creates risk.
Who should run this SOP?
Typically HR operations, recruiting operations, or a records owner runs the process, with legal or compliance consulted for holds and exceptions. A competent person should verify the retention rule and approve any deviation from standard disposal timing. If your organization is decentralized, the SOP should name the role that owns the final disposition decision. That avoids situations where recruiters delete records on their own judgment.
How often should candidate records be reviewed for disposal?
The review cadence should match your retention schedule, often monthly, quarterly, or by batch when records reach the end of their retention period. The SOP should require a scheduled review rather than one-off cleanup so records are not left past their due date. If you have high hiring volume, batch review by requisition close date is usually easier to control. The key is to make the cadence explicit and repeatable.
How does this SOP handle legal holds or investigations?
The SOP should require a hold check before any disposal and immediate escalation if a record is subject to litigation, audit, complaint, or investigation. Records under hold should be excluded from destruction until legal or compliance releases them in writing. The procedure should also define who can place the hold and who can lift it. Without that control, teams may destroy records that are needed as evidence.
Does this template support OFCCP, EEOC, and state retention rules?
Yes, the template is designed to align with general retention and disposition practices used for OFCCP, EEOC, and applicable state requirements. It does not hard-code a single retention period because the correct period can vary by jurisdiction, employer status, and record type. The SOP should direct users to apply the longest applicable requirement when rules differ. Legal review is still needed to confirm your organization’s specific schedule.
What is the most common mistake with candidate record disposal?
The most common mistake is deleting records before verifying the full retention period, hold status, and record completeness. Another frequent issue is disposing of files without documenting the reason for non-selection or the basis for destruction. Teams also sometimes forget that backups, shared drives, and email attachments may contain copies that need the same treatment. The SOP should force a final verification step before any secure destruction.
Can this SOP be customized for ATS and HR systems?
Yes, it can be customized for your applicant tracking system, document repository, shared drives, and backup workflow. You can add system-specific steps for exporting disposition logs, tagging records, or routing approvals in the ATS. If your tools support retention labels or automated deletion, the SOP should still keep a human verification step for holds and exceptions. That combination gives you control without relying entirely on automation.
How is this different from an ad hoc cleanup process?
An ad hoc cleanup process usually depends on memory, one person’s judgment, or a one-time purge, which makes it hard to prove compliance later. This SOP creates a documented sequence for trigger date review, hold checks, approval, and secure destruction. It also leaves an audit trail showing who reviewed the records and why they were disposed. That matters when you need to demonstrate consistent handling across candidates and requisitions.
Related templates
Go deeper on the topic
-
A standard operating procedure (SOP) is a documented, step-by-step procedure for a repeatable task — the written version of "how we do this here." Good SOPs...
-
Overtime calculation is the process of applying federal, state, local, and contractual rules to hours worked to determine the correct pay — including...
-
Predictive scheduling laws — also called fair workweek laws or secure scheduling — require employers in covered industries to publish employee schedules...
-
Geofencing defines a virtual geographic boundary — a "fence" — around a work location. When an employee's mobile device enters or exits the fence, the...
-
Learn how organizations with hourly workers, union contracts, and shift differentials can apply compensation rules consistently and accurately at scale.
-
See how automated credential checks, labor rules, and real-time coverage tracking give charge nurses a schedule they can trust before every shift.
-
Learn how task management and real-time collaboration tools create an efficient business workflow — keeping teams connected, accountable, and productive.
-
Spring '26 brings AI course creation, Power BI agent queries, LMS automation, Google Workspace integration, and enterprise survey tools to MangoApps.
Ready to use this template?
Get started with MangoApps and use Candidate Data Retention and Disposition SOP with your team — pricing built for small business.