Employee Handbook and Policy Acknowledgments: What US Employers Should Keep
A handbook only protects you if you can show each employee received it. A signed acknowledgment is how you show it: who received which version of the policy, and when.
This guide covers why that proof matters, which states require you to hand out a written harassment policy, what an acknowledgment should record, and how long to keep it. It is general information, not legal advice.
Why the signature matters
In Faragher v. City of Boca Raton (1998), the Supreme Court set out a defense for employers in harassment cases that rests on taking reasonable care to prevent and correct harassment. The city lost partly because it had entirely failed to distribute its harassment policy to the employees involved. The defense isn't available when the harassment ends in a tangible employment action, such as a firing or demotion.
A written policy is part of showing reasonable care. An acknowledgment from each employee is what proves the policy actually reached them, rather than sitting in a shared drive.
States that require you to hand out a written policy
Several states go beyond recommending a policy and require you to give it to employees:
- California requires a written harassment, discrimination and retaliation prevention policy (2 CCR §11023). Accepted ways to distribute it include a printed copy with an acknowledgment form, an email with an acknowledgment return form, or posting it on an intranet with a tracking system. If 10% or more of the workforce at a facility speaks a language other than English, the policy must be translated into that language.
- New York requires every employer to give employees its written sexual harassment policy and a notice about it when they're hired and at every annual training, in English and in the employee's primary language (Labor Law §201-g). The state encourages, but doesn't require, a signed acknowledgment.
- Massachusetts requires employers with six or more employees to give every employee an individual written copy of the sexual harassment policy every year, and new employees a copy when they start (G.L. c. 151B, §3A).
- Illinois requires restaurants and bars to have a written sexual harassment policy (775 ILCS 5/2-110), and the Department of Human Rights recommends that every employer keep one in its handbook.
In New York and Massachusetts, that means collecting the acknowledgment again each year, not just at hire. California, New York, Illinois and Connecticut also require harassment prevention training; see the official courses for each state.
What an acknowledgment should record
A signature on its own answers "did they sign?" A useful acknowledgment also answers "sign what, and when?":
- Who: the employee's name and email.
- Which version: the version number or effective date of the policy, and ideally a copy of the exact file they saw. "Our harassment policy" isn't enough once you've updated it twice.
- When: the date and time they acknowledged it.
- What they agreed to: the statement they confirmed, such as "I have read and understood this policy."
- How: for electronic sign-offs, details such as the IP address and browser help show the employee signed it themselves.
When the policy changes, collect a new acknowledgment for the new version, and keep the old ones. The question in a dispute is usually what the policy said at the time.
How long to keep acknowledgments
- Federal: employers must keep personnel records for at least one year, and keep all relevant records once a discrimination charge has been filed, until it's resolved (29 CFR 1602.14).
- California: harassment prevention training records must be kept for at least two years (2 CCR §11024).
- New York City: harassment training records, such as signed acknowledgments, must be kept for at least three years.
Claims can surface long after someone leaves, so plan to keep acknowledgments for former employees too. Ask your lawyer what period suits your business.
Collecting acknowledgments without chasing people
With Ethica, you upload the policy PDF and assign it. Each employee gets an email link, reads the policy in their browser and signs with one click. No account or password. Ethica reminds anyone who hasn't signed, and keeps the record above for each person: the version and file they signed, when, the statement they confirmed, and the IP address and browser they signed from. Set it to repeat every year where your state requires it, and export everything as a spreadsheet or a zip whenever someone asks, including for people who have left.
See how to add a policy for employees to sign, or read what records to keep for compliance training.