not so much &quot;incriminating&quot; as &quot;not required to be kept and could possibly be misconstrued&quot;.<p>Not our HR process, our customer&#x27;s. What was actually destroyed depended on their interpretation of the law.<p>One common one was the Data Protection requirement to not keep inaccurate data meant that all but the latest employee change of address forms had to be destroyed. Easy to implement post-scanning, pain in the arse to do pre-scanning.