Is there a way to ensure sensitive investigation records remain confidential?

Q. One of our employees has just filed an internal complaint claiming that she has been sexually harassed. We are concerned that if we discipline the alleged harasser based on our findings and note this incident in his personnel file, he may demand to inspect our investigation records. May we avoid this by maintaining a separate investigation file?