HR document control should make it clear which version is approved, who owns it and who needs access. Start with the documents people rely on for decisions: policies, forms, templates and procedures. File names alone are not enough if drafts and approved copies circulate together.

The controls below are practical suggestions. They do not establish a universal legal retention schedule or prove compliance with every employment or privacy requirement. Apply the relevant rules and your organisation’s approved records process.

1. Give each document a clear purpose and owner

State what the document covers and who is responsible for keeping it current. A role-based owner can be more durable than an individual’s name alone, provided responsibility is actually assigned.

Avoid leaving shared documents ownerless because several teams contribute. The owner should know who reviews content and who approves changes. If a document no longer serves a useful purpose, assess whether it should be retired through the appropriate process rather than keeping it available indefinitely without context.

2. Separate draft, approved and retired status

Use a visible status so readers can tell whether a document is ready for use. Keep review drafts out of the normal approved-document location where practical. Mark retired versions so they cannot easily be mistaken for current instructions.

Do not rely solely on final in a file name. A file called final-new-revised gives little confidence about authority. Define what approval means and who can provide it. The status should reflect the actual review, not merely the author’s intention to finish.

3. Record version and effective date

Include a version identifier and the date the approved content applies. Distinguish that from the date someone last opened or copied the file. Where a change applies from a future date, make the transition understandable.

Keep a brief change summary focused on what users need to know. For example, identify a changed approval route rather than stating general updates. Readers should be able to see whether the change affects their next action without comparing every line of two long documents.

4. Maintain one approved source location

Direct users to a stable approved location rather than encouraging repeated email attachments. Check that the intended audience can access it and that unnecessary editing rights are not granted.

Where offline copies are needed, explain how they are identified and refreshed. A central file is not enough if teams continue using an outdated printed form. Build the control around actual working practices rather than assuming everyone checks the same folder before every task.

5. Review access according to the content

Differentiate a general staff policy from a record containing personal or sensitive information. Grant access through the organisation’s approved process and review it when responsibilities change. Do not treat all HR files as suitable for a shared public folder.

Avoid copying personal data into a template merely to show an example; use fictional details where appropriate. A document-control checklist should record the relevant permission decision without duplicating confidential material. Escalate uncertain access questions to the responsible owner.

6. Communicate changes that affect work

Tell affected people what changed, when it applies and where to find the approved version. Identify any action they need to take. Do not assume uploading a new file means everyone has understood a changed process.

Use a proportionate acknowledgement or training step where appropriate. Distinguish receiving a notice from understanding or agreeing to a contractual change. The communication method should match the significance of the update and the applicable process, not simply maximise the number of notification emails.

7. Review, archive and dispose through the proper process

Set a practical review trigger, such as a process change or scheduled check. When a document is replaced, preserve or dispose of records according to applicable requirements and authorised procedures.

Do not invent one retention period for every HR document. MOM’s employment records guidance addresses specified records for covered employees; other records may need separate consideration. Keep enough context to understand which version applied without leaving obsolete instructions in the active-use location.

A small document register

Suggested fields: document name; purpose; owner; status; version; effective date; approved location; access group; next review trigger. Add approval evidence where your process requires it. Avoid turning the register into a second uncontrolled copy of every document.

Hypothetical example: two leave-request forms use different approvers. The owner confirms the current process, approves one form, marks the old form retired and updates the staff link. Renaming both files would not resolve the underlying ambiguity.

Is a shared drive enough?

Only if ownership, status, access and update practices are clear. The tool alone does not define the process.

Should old versions always be deleted?

No blanket rule applies. Follow the relevant retention and authorised disposal requirements.

For writing the procedure itself, use the SOP checklist.