- Personnel files typically include compensation history, benefits enrollment, performance reviews, disciplinary records, medical or leave documentation, employment contracts, and…
- Federal private-sector privacy law generally allows businesses involved in a proposed sale to share personal information for due diligence purposes without each individual’s consent —…
- Early due diligence: Aggregate, anonymized information — headcount, role types, total payroll, benefit plan summaries — rather than named files.
A business sale runs on information, and a lot of the most sensitive information in the data room is about people, not products: salaries, medical leaves, disciplinary records, performance reviews, and identifying details like a social insurance number. Transferring employee HR records during a business sale has to balance a buyer’s legitimate need to understand the workforce it may be acquiring against the privacy interests of employees who never agreed to have their personal file reviewed by a stranger.
Getting this wrong isn’t just a compliance headache — it can undermine employee trust at exactly the moment a business most needs stability. This article covers what typically counts as an HR record in this context, when and how records can be shared, and what to hold back until closing is actually certain.
What Counts as an "HR Record" in a Sale
Personnel files typically include compensation history, benefits enrollment, performance reviews, disciplinary records, medical or leave documentation, employment contracts, and identifying information like a social insurance number or banking details for payroll. Some of this a buyer genuinely needs to properly assess the workforce and plan the transition; much of it, a buyer has no legitimate reason to see before closing — or possibly ever, for employees it isn’t hiring.
The Governing Principle: Necessity, Not Free Access
Federal private-sector privacy law generally allows businesses involved in a proposed sale to share personal information for due diligence purposes without each individual’s consent — but that permission isn’t unlimited. The accepted approach limits sharing to what’s genuinely necessary to evaluate and complete the transaction, expects reasonable safeguards over how the information is handled, and expects the information to be used only for the deal and returned or destroyed if the transaction doesn’t close. In practice, this points toward disclosing summarized or anonymized information early, and full individual files only later, and only for people who are actually being hired.
A Practical Timeline for Sharing Records
- Early due diligence: Aggregate, anonymized information — headcount, role types, total payroll, benefit plan summaries — rather than named files.
- After a confidentiality agreement is signed: More detailed information, still generally anonymized where the buyer doesn’t yet need names attached.
- Closer to closing, under a secure data room: Individual records for key or long-service employees whose specific history matters to the deal (for example, someone with a pending claim).
- At or after closing, for hired employees only: Full personnel files transfer to the new employer for those specific individuals — generally not for employees who weren’t hired.
What Shouldn’t Be Shared Before It’s Necessary
- [ ] Full personnel files for employees the buyer isn’t planning to hire
- [ ] Medical details beyond what’s needed to assess a specific obligation, such as an accommodation
- [ ] Banking or social insurance information before it’s actually needed for payroll transition
- [ ] Informal notes, performance opinions, or unverified complaints not part of the formal file
- [ ] Records for employees who haven’t been told a sale is under discussion, where premature disclosure could cause harm
Share Sale vs. Asset Sale: A Quick Distinction
In a share sale, the corporation — and its personnel files — simply continues under new ownership; there’s no "transfer" of records in the legal sense, though the same due diligence and information-security principles apply before closing. In an asset sale, records genuinely need to move from the seller’s systems to the buyer’s for whichever employees are hired, which makes the timing and scope questions in this article more pressing.
Frequently asked questions
Can a buyer see our full personnel files before signing anything?
Generally, no — not without a confidentiality agreement in place first, and even then, full individual files are typically reserved for later in the process and for specific reasons, not handed over wholesale at the first meeting.
What happens to HR records for employees who aren’t hired by the buyer?
They generally stay with the seller. There is usually no legitimate business reason for the buyer to retain personal information about people it never employed, and it shouldn’t be transferred as part of the deal.
Do employees need to be told their information is being reviewed?
This depends on the specific circumstances and the safeguards in place, and it’s worth getting tailored advice — but as a matter of good practice, sellers often disclose in general terms that a sale process is happening once it reaches a stage where staff need to know.
Who is responsible if personal information is mishandled during due diligence?
Both parties typically have obligations, and the purchase agreement often addresses confidentiality and data handling directly. Responsibility can also depend on who actually controlled and misused the information at the time.
This is a business purchase or sale question
Start a file online — flat, published fees, reviewed by a licensed Ontario lawyer before a dollar is owed.