Applicant Tracking and Record Retention Standards
Applicant tracking and record retention standards define how employers must collect, store, and ultimately dispose of hiring-related data across the full recruitment lifecycle. These requirements are shaped by federal equal employment opportunity law, agency-specific regulations, and a growing body of state-level mandates that extend obligations well beyond what federal rules require. Compliance failures in this domain can expose employers to audit liability, discrimination litigation, and civil penalties — making record governance one of the most consequential administrative functions in any hiring operation. This page describes the regulatory structure, operational mechanics, common compliance scenarios, and the decision thresholds that determine which standards apply in a given hiring context.
Definition and scope
Applicant tracking, as a compliance function, refers to the systematic capture of candidate data — applications, screening results, interview records, assessment scores, and disposition codes — in a format that satisfies federal and state audit requirements. Record retention refers to the minimum periods during which those records must be preserved and the conditions under which they may be lawfully destroyed.
The primary federal authorities governing these obligations are the Equal Employment Opportunity Commission (EEOC), the Office of Federal Contract Compliance Programs (OFCP), and the Department of Labor (DOL). Under 29 CFR Part 1602, covered employers must retain all personnel and employment records — including records related to hiring — for a minimum of 1 year from the date of the record's creation or the date of the personnel action, whichever is later. For federal contractors subject to Executive Order 11246 and OFCCP oversight, the retention floor extends to 2 years for contractors with 150 or more employees or contracts of $150,000 or more (41 CFR Part 60-1.12).
The scope of covered records is broader than many employers anticipate. It includes not only formal applications but also résumés submitted without a specific opening, expressions of interest through online portals, recruiting agency referrals, and internal transfer requests. The EEOC's Uniform Guidelines on Employee Selection Procedures (UGESP) require that records be sufficient to permit adverse impact analysis — meaning race, sex, and national origin data must be collected or reconstructable for each applicant pool. This connects directly to the concepts addressed under adverse impact and hiring standards and equal employment opportunity and hiring standards.
How it works
A compliant applicant tracking operation moves through five functional stages:
- Candidate definition — Establishing who qualifies as an "applicant" for recordkeeping purposes. The EEOC's internet applicant rule (29 CFR Part 1607) sets criteria: the individual must submit an expression of interest through the internet or electronic data technology, the employer must consider the individual, and the individual must not have removed themselves from consideration before an employment decision.
- Data capture — Recording application source, submission date, job title, requisition number, and all screening actions taken. Applicant tracking systems (ATS) must generate disposition codes that document why each candidate advanced or was rejected.
- Adverse impact monitoring — Comparing selection rates by demographic category at each stage of the process. The four-fifths rule under the UGESP holds that a selection rate for any protected group below 80 percent of the rate for the highest-selected group signals potential adverse impact requiring further analysis.
- Record storage and access control — Maintaining records in a format accessible to auditors, segregated from active personnel files to prevent bias in future employment decisions.
- Scheduled destruction — Applying a documented retention schedule that triggers lawful disposal only after the mandatory period has elapsed and no litigation hold is active.
The mechanics of an ATS platform must align with underlying legal requirements. Technology automates data capture but does not substitute for regulatory compliance. Employers using AI and automated hiring tools face additional scrutiny, as algorithmic screening decisions must be documented with the same granularity as human decisions.
Federal contractors face the most comprehensive tracking obligations, including written affirmative action program documentation and applicant flow logs that can be audited by OFCCP during compliance reviews. The full scope of those obligations is addressed under hiring standards for federal contractors.
Common scenarios
Multi-state recruiting. An employer posting positions in California, New York, and Illinois simultaneously navigates retention requirements that exceed federal floors. California's Government Code §12946 requires retention of applications and records for 2 years from the date of the employment action, consistent with DFEH enforcement posture. State-specific layering of this kind is catalogued under state-specific hiring standard variations.
Litigation hold. When an EEOC charge, demand letter, or lawsuit is filed or reasonably anticipated, the routine retention clock is suspended. All records potentially relevant to the claim must be preserved indefinitely until the matter is resolved. Premature destruction of records after a charge is filed can result in spoliation findings.
High-volume seasonal hiring. Employers conducting large seasonal hiring cycles — such as retail or distribution operations — may process thousands of applications per requisition. The EEOC's internet applicant framework permits employers to establish minimum qualifications as a pre-screening filter, but the filter criteria and the population screened against them must themselves be retained. This scenario intersects with seasonal and temporary worker hiring standards.
Background check records. Records generated during background screening — including consumer report disclosures, authorization forms, and adverse action notices required by the Fair Credit Reporting Act (15 U.S.C. § 1681 et seq.) — carry their own retention requirements and must be stored separately from the general applicant file. The standards governing that process are addressed under background check standards.
Decision boundaries
Two key contrasts determine which retention regime applies to a given employer:
Federal contractor vs. non-contractor status. Non-contractors covered only by Title VII, the ADEA, and the ADA operate under the 1-year EEOC floor. Contractors meeting the 150-employee / $150,000-contract threshold operate under the 2-year OFCCP floor, with additional affirmative action program documentation requirements. This distinction is foundational to understanding the legal framework for hiring standards.
Active litigation hold vs. standard retention schedule. The retention schedule sets a floor; a litigation hold overrides it upward. Employers must have a documented legal hold policy that is triggered by identifiable events — receipt of an EEOC charge, a demand letter, or internal notice of potential litigation — and that suspends automatic deletion processes.
The decision tree for retention period also depends on the type of record involved:
- Applications and résumés: 1 year (non-contractor), 2 years (contractor)
- Interview notes and scoring rubrics: Same as above; notes are personnel records subject to the same floors
- Background check authorization and results: 5 years recommended under FCRA best practice, though the statute does not specify a destruction deadline
- I-9 employment eligibility records (for hired candidates): 3 years from hire date or 1 year after termination, whichever is later (8 CFR §274a.2)
Employers conducting pre-employment testing must also retain test results, scoring keys, and validation studies for the full period applicable to the requisition, since those records may be required to demonstrate job-relatedness in the event of an adverse impact challenge.
The full landscape of how tracking and retention intersect with structured hiring procedures is mapped across hiringstandards.com, where related compliance domains — from offer letter standards to onboarding and post-hire standards — are treated as distinct reference topics.
References
- U.S. Equal Employment Opportunity Commission (EEOC)
- 29 CFR Part 1602 — Recordkeeping and Reporting Under Title VII, the ADA, and GINA (eCFR)
- 41 CFR Part 60-1.12 — OFCCP Record Retention Requirements (eCFR)
- Uniform Guidelines on Employee Selection Procedures (UGESP) — EEOC
- Office of Federal Contract Compliance Programs (OFCCP) — U.S. Department of Labor
- Fair Credit Reporting Act — 15 U.S.C. § 1681 et seq. (FTC)
- [8 CF