That sounds like &quot;working as intended&quot; - after all, if instead of just requesting their file the employee had initiated legal action against you, it would have been illegal to destroy those documents. And it also raises the question of which part of your HR process is generating incriminating documents in the first place?