Records Retention and Privacy Exceptions in New York City

General Governance and Administration New York 3 Minutes Read ยท published February 02, 2026 Flag of New York

New York City, New York requires municipal agencies to follow official retention rules and to limit access to records when privacy exceptions apply. This guide explains how retention schedules are issued, who enforces them, common compliance steps, and where to find official forms and contacts in the city. Use this to prepare retention plans, respond to records requests, and avoid inadvertent destruction or disclosure of sensitive records.

Check the official retention schedule before disposing of any records.

Records retention overview

City agencies follow retention and disposition schedules that define how long specific record types must be kept and when they may be destroyed. The Department of Records and Information Services (DORIS) publishes retention schedules and guidance for agencies; agencies also maintain Records Access Officers and retention contacts to implement schedules DORIS retention schedules[1].

Penalties & Enforcement

Penalties and enforcement for improper destruction, mishandling, or unlawful disclosure of municipal records are handled through administrative remedies and, where applicable, civil or criminal processes. Specific civil fines or per-day penalties for retention violations are not specified on the cited page; consult the enforcing office for precise sanctions.[1]

  • Enforcer: Department of Records and Information Services (DORIS) and the agency records management unit.
  • Complaint and inspection pathway: agency Records Access Officer or DORIS records management contact; see DORIS contact and schedule pages.[1]
  • Appeals/review: agency-level review and administrative appeal routes may apply; specific time limits for appeals are not specified on the cited page.[1]
  • Monetary penalties: not specified on the cited page.
  • Non-monetary sanctions: orders to preserve or cease destruction, mandatory corrective actions, and referral to legal or prosecutorial authorities where unlawful conduct is suspected.
If a retention period is unclear, suspend destruction and consult DORIS before disposing.

Applications & Forms

Some disposition actions require formal authorization or documentation. The cited municipal page lists retention schedules and guidance but does not publish every agency form in the same place; specific forms such as disposition authorization forms may be maintained by DORIS or an individual agency and are not specified on the cited page.[1]

  • Records retention schedule: published by DORIS; agencies must follow the schedule for disposition actions.[1]
  • Deadlines: retention periods are schedule-dependent; disposal without authorization may violate city rules.

Common violations and practical steps

Common compliance failures include premature destruction, improper redaction of privacy-sensitive material, and failure to register or follow schedule changes. Practical steps below help agencies and custodians comply.

  • Identify records types and match to the official schedule.
  • Create or update a retention schedule inventory for your unit.
  • Establish retention triggers tied to events (termination, closure, final action).
  • Apply privacy exceptions and redactions where authorized; consult counsel for ambiguous cases.
Document every disposition decision and retain supporting approvals.

FAQ

Who issues retention schedules for New York City agencies?
The Department of Records and Information Services (DORIS) publishes and maintains city retention schedules and guidance.[1]
What if a record contains sensitive personal data?
Apply privacy exceptions and redaction practices before disclosure; if retention conflicts with disclosure obligations, consult DORIS and legal counsel.
Are there fines for improper destruction?
Specific fine amounts or per-day penalties are not specified on the cited page; enforcement may include administrative orders and other remedies.[1]

How-To

  1. Identify the record series you need to dispose of and consult the DORIS retention schedule to confirm the retention period.
  2. If the schedule permits disposition, gather required internal approvals or disposition authorization forms as required by your agency.
  3. Document the disposal action, including dates, approvers, method of destruction, and any privacy reviews.

Key Takeaways

  • Always match records to the official DORIS schedule before disposal.
  • Privacy exceptions can limit disclosure but do not automatically permit destruction.
  • When in doubt, consult DORIS or your agency records officer and suspend destruction.

Help and Support / Resources

  1. [1] Department of Records and Information Services - Retention schedules and guidance

Categories

General Governance and Administration Public Safety Public Health and Welfare Land Use and Zoning Housing and Building Standards Transportation Environmental Protection Parks and Public Spaces Business and Consumer Protection Taxation and Finance Labor and Employment Education Civil Rights and Equity Elections and Campaign Finance Events and Special Uses Signs and Advertising Utilities and Infrastructure Technology and Data