Longest Rule: Keep payroll records for the longest applicable federal, state, or event-based deadline when requirements overlap.
Agency Timelines: FLSA generally requires two to three years, while IRS employment tax records require at least four years.
Sensitive Storage: Use controlled digital systems with encryption, access limits, backups, audit trails, and searchable retention schedules.
State Differences: Remote employees and state laws can add obligations, so review each worker’s location before setting schedules.
How long to keep payroll records depends on the record and the laws that apply. Federal law usually requires you to keep payroll records for two to six years (or even longer). The IRS requires four years, while the Fair Labor Standards Act (FLSA) requires two to three. Other laws may require longer retention, and when multiple rules overlap, the longest one wins.
Keeping records too briefly can leave you exposed during audits, wage disputes, and litigation, but keeping everything indefinitely creates unnecessary security and storage risks. This guide breaks down the key retention requirements by agency and record type, then explains how to store, organize, and securely destroy records when their required retention period ends (and which payroll software is best suited to help).
How Long to Keep Payroll Records
How long you should keep payroll records depends on the record type. Here’s a quick summary:
| Record Type | Retention Period | Governing Law or Agency |
|---|---|---|
| Employment tax records (W-2s, W-4s, 941s, deposit records, EIN documentation) | 4 years | IRS |
| Form I-9 | 3 years from hire date or 1 year after termination, whichever is later | USCIS, DHS |
| Basic payroll and wage records (payroll registers, collective bargaining agreements) | 3 years | FLSA, DOL |
| FMLA leave records (requests, dates, hours, disputes, policies, premium payments) | 3 years | FMLA, DOL |
| Supplementary payroll records (timecards, schedules, wage-rate tables, piece-rate tickets) | 2 years | FLSA, DOL |
| Pay-equity documentation and records demonstrating equal pay compliance | 2 years | Equal Pay Act, EEOC |
State laws may extend any of these periods (e.g., New York, which requires you to keep records for 6 years, and California, which requires you to keep records for 4 years). Always check the requirements for every state where you have employees.
What Are Payroll Records?
Payroll records include any document used to calculate, verify, or report employee compensation. This includes wage registers, hours worked, tax withholdings, deduction details, benefits elections, and employment actions like hiring, promotions, and terminations.
The following records form the core data set behind every paycheck your business issues:
- Employee identifying data: Includes full legal name, Social Security number, home address, date of birth, sex, and occupation
- Compensation data: Includes regular hourly pay rate, basis of pay (hourly, salary, piece rate, commission), daily or weekly straight-time earnings, overtime compensation per workweek, wages paid each pay period, and the pay date and period covered.
- Hours data: Includes hours worked each day, hours worked each week, and the day of the week and time of day the workweek begins.
- Deductions and additions: Include deductions for federal and state taxes, Social Security, and Medicare; garnishments and child support withholdings; health insurance and retirement contributions; and additions like bonuses, commissions, and tips.
How Long Does the FLSA Require Payroll Records?
3-Year Records (Basic Payroll and Wage Data)
The Department of Labor requires employers to keep the following records for a minimum of three years:
- Payroll registers showing all wages paid per pay period
- Collective bargaining agreements
- Sales and purchase records used to compute wages
- Certificates related to FLSA exemptions
Store these at your place of business or a central records office. DOL investigators may ask for extensions, computations, or transcriptions from these records at any time.
2-Year Records (Supplementary and Supporting Documents)
Records on which wage computations are based must be kept for at least two years. These include:
- Timecards and time sheets
- Wage-rate tables
- Piece-rate tickets
- Work and time schedules
- Order, shipping, and billing records
- Records of additions to or deductions from wages
These provide backup evidence for your payroll register entries. If a DOL investigator needs to reconstruct how a pay amount was calculated, these are the records they will request.
Nonexempt vs. Exempt Employee Nuances
The FLSA requires different levels of detail depending on an employee's exemption status.
- Non-exempt employees: You must record daily and weekly hours worked, the time of day and day of week the workweek begins, the regular hourly rate, total straight-time earnings, overtime premium per week, and total wages paid each pay period.
- Exempt employees: Records must show the basis on which wages are paid and the total salary per pay period. You don’t need to track daily hours, but you must document why the employee qualifies for exemption. Keep job descriptions and duties tests on file alongside pay records in case a classification is ever challenged.
How Long Does the IRS Require Employment Tax Records?
The IRS requires you to keep all employment tax records for at least four years after the due date of the return for the period or the date the tax was paid, whichever is later.
In practical terms, here is how the calendar works: Say you file your fourth-quarter Form 941 for tax year 2025 (due by January 31, 2026). This is when the clock starts—you must keep all supporting records until at least January 31, 2030. If you filed late, made a late payment, filed an amended Form 941, or issued a corrected W-2 the clock starts from the later date.
Specific records the IRS expects you to retain include:
- Employer Identification Number documentation
- Copies of all Forms W-2 furnished to employees
- Completed Forms W-4, W-4P, W-4R, W-4S, and W-4V from employees
- Forms W-9 from independent contractors
- Quarterly Form 941 or annual Form 944 filings and confirmation numbers
- Dates and amounts of federal tax deposits, with EFTPS acknowledgment numbers
- Records of all wage, annuity, and pension payments, including amounts and dates
- Amounts of tips reported by employees and allocated tips records
- Fair market value of in-kind wages paid
- Fringe benefit valuations and expense reimbursement substantiation
- Periods and amounts of sick pay
Independent Contractor Records
Contractor relationships create recordkeeping obligations beyond filing a 1099. Retain Forms W-9 and copies of 1099-NEC forms for four years, just like employee tax records. Also keep documents that support classification: the contract, evidence of how the worker controls their schedule and methods, invoices, and correspondence that demonstrates the relationship.
Given the prevalence of misclassification disputes and the aggressive posture the IRS and DOL have taken on this issue, keep classification documentation for at least six years. If a worker is reclassified as an employee, you may owe back taxes, penalties, and interest stretching back to the beginning of the relationship.
Form I-9 Retention Requirements
Retain Form I-9 for three years after the date of hire or one year after the date employment ends, whichever is later. For an employee hired on January 15, 2024, and terminated on March 1, 2025, you would keep the I-9 until at least January 15, 2027, since that date (three years after hire) is later than March 1, 2026 (one year after termination).
Store I-9 forms separately from general personnel files. During a government inspection, you will hand over I-9s for review. Keeping them in a separate binder or digital folder prevents inspectors from accessing confidential information unrelated to the I-9 audit.
Other Federal Laws That Affect Payroll Retention
FMLA (Family and Medical Leave Act)
Keep all FMLA-related records for three years. This includes leave requests, dates and hours of leave taken, records of any disputes between employer and employee, copies of your FMLA policies, and documentation of health insurance premium payments made during leave periods.
Even if an employee never takes FMLA leave, retain the records that establish their eligibility. Store these alongside payroll records, since leave often ties directly to compensation data.
ERISA (Employee Retirement Income Security Act)
ERISA requires you to retain plan documents, annual reports, and records of transactions for six years from the date the report was filed or the transaction occurred. This covers 401(k) plans, pension plans, and welfare benefit plans like employer-sponsored health insurance.
Six years is the longest standard federal retention period most employers will encounter. Given the complexity of benefit plan disputes, keep these records for seven years to be safe.
EEOC, Equal Pay Act, and Title VII
Retain records that demonstrate pay-equity compliance for two years. This includes job evaluations, wage surveys, and any documentation showing how you set compensation levels across roles.
For personnel and employment action records like hiring decisions, promotions, transfers, and terminations, keep those for one year from the date of the action.
ADA and ADEA
Retain records related to any personnel action for one year after the action was taken. If a charge of discrimination is filed, you must retain all relevant records until the final disposition of the charge or any resulting litigation.
This is an area where many employers get caught off guard. Once a charge is filed, your obligation shifts from a time-based rule to an event-based rule. Destroying records during pending litigation can lead to court sanctions. The moment you receive notice of a claim, issue a litigation hold to every person and system that touches the relevant records.
How and Where to Store Payroll Records Securely
Paper, Digital, and Software-Based Storage
- Paper filing cabinets: Common in small businesses. They are simple and do not require software. But paper degrades, takes up physical space, and can be destroyed. If you use paper, keep copies in a fireproof cabinet and maintain offsite backups.
- Scanned-document archives: Offer a middle ground. You scan paper records into PDFs and store them on local servers or external drives. This protects against physical loss, but you are still managing the organization yourself.
- Cloud-based payroll and HRIS platforms: This is what I recommend. Platforms like QuickBooks, Gusto, ADP, and Paychex store payroll data, apply access controls, and include retention features. The records are backed up, searchable, and accessible. Many platforms offer retention scheduling that flags documents approaching destruction date and AI-assisted document classification that reduces manual filing errors.
Are Electronic Records Legally Equivalent to Paper Originals?
Yes, with conditions. The IRS and DOL accept electronic storage systems under Revenue Procedure 98-25, provided the system can reproduce legible and readable records, includes reasonable controls to ensure integrity and prevent unauthorized alteration, and can produce hard copies on demand.
This means you can scan paper originals and shred them, but only if your electronic storage system meets these standards. Don’t store scanned documents as basic image files on an uncontrolled shared drive with no audit trail. Use a payroll platform or document management system with access controls, version history, and backup protocols, you are on solid legal ground.
Security and Confidentiality Requirements
Payroll records contain sensitive data: Social Security numbers, bank account details, and salary information.
Implement role-based access controls so only authorized personnel can view or modify records. Use encryption for digital records in transit or at rest. Lock physical filing cabinets and restrict key access. Many states have data-privacy statutes with requirements for protecting employee personal information, so review the rules for every state where you operate.
When and How to Destroy Payroll Records
Over-retention creates its own risks. Every document you hold beyond its required retention period expands your exposure in litigation discovery, increases the potential damage from a data breach, and adds to storage costs that compound year after year.
Once a record has passed its retention deadline and there are no open disputes, audits, or litigation holds that extend the obligation, you should destroy it. But destruction needs to be systematic, documented, and defensible:
- Create a destruction schedule: At least once a year, review your records against your retention policy and identify documents that have cleared their required holding periods.
- Use secure destruction methods: Paper records should be cross-cut shredded or incinerated by a certified destruction vendor. Electronic records should be permanently deleted using methods that prevent recovery, not simply moved to a recycle bin.
- Maintain a destruction log: For every batch of records you destroy, document record types, date range, the retention period, date of destruction, and method used. This is your evidence that destruction was routine and policy-driven, not selective or suspicious.
- Never destroy records during a dispute: If a complaint, charge, audit, or lawsuit is open or anticipated, issue a hold and suspend routine destruction. Destroying records can result in court sanctions, adverse inference instructions to the jury, or worse.
Best Practices for Avoiding Payroll Recordkeeping Mistakes
The most common payroll recordkeeping pitfalls I see are entirely preventable:
- Inconsistent filing: Some records go digital, some stay on paper, and some live in a manager's desk drawer. Pick one system and enforce it.
- Co-mingling I-9s with personnel files: This creates confidentiality issues during government inspections. Keep I-9s in a separate file.
- Relying solely on paper without backups: One flood or office fire, and years of records are gone.
- Checking only one law's retention period: An employer who keeps records for three years under FLSA rules may still violate the four-year IRS requirement.
- Failing to update retention schedules when laws change: Federal and state retention periods do change, and your policy needs to reflect current rules.
- Disposing of records too early during open disputes: If a complaint or charge has been filed, normal retention timelines do not apply.
To fix these issues:
- Implement payroll software with automated retention alerts: Most modern platforms will flag when a document approaches its destruction date.
- Conduct an annual retention audit: Once a year, review what you are holding and confirm it aligns with current federal and state requirements.
- Assign a clear records custodian: One person should own the retention schedule and be responsible for compliance.
- Create a written record-retention policy: Document your retention periods, storage methods, and destruction procedures. Share it with your HR and payroll teams.
Consequences and Penalties for Non-Compliance
There are several risk and non-compliance penalties to look out for:
- DOL and FLSA exposure: Inadequate payroll records can make it harder to defend wage-and-hour claims. When required records are missing, employees may be able to rely on reasonable estimates of uncompensated work, potentially leading to back pay, liquidated damages, and attorney fees.
- IRS penalties: Missing employment tax records can prevent you from substantiating tax returns, deductions, or credits, potentially resulting in additional taxes, interest, and penalties.
- Payroll litigation risk: Incomplete timesheets, wage records, and other payroll documentation can weaken your position in disputes over wages, overtime, deductions, and benefits.
Multi-State and Remote Workforce Complexities
Many states impose longer retention periods than federal law requires. Several states also require retention of pay stubs or earnings statements for specific periods, or mandate that certain records be available to employees on demand. This goes beyond what’s required at the federal level and can catch employers off guard when they hire in a new jurisdiction.
Remote and hybrid workforces create additional complexity. A single employee working from home in a different state can trigger that state's recordkeeping obligations. Default to the longest applicable state requirement for any employee who works or has worked in a given state, and layer federal minimums underneath. If California says four years and the FLSA says three, keep the record for four years. If New York says six and the IRS says four, keep it for six.
Frequently Asked Questions
Do I need to keep payroll records for terminated employees?
Yes. Termination does not end your retention obligations. Every record must be kept for its full required retention period, measured from the relevant start date (date of hire, date of the action, date the return was due, or date of termination, depending on the record type and governing law). For most records, you will need to retain them for several years after the employee leaves.
What happens if I lose payroll records in a fire or natural disaster?
You should immediately document the loss, notify any relevant agencies if an audit is pending, and reconstruct what you can from bank statements, tax filings, payroll platform backups, and employee records. The loss of records does not eliminate your legal obligations, but demonstrating a good-faith effort to maintain and reconstruct records can mitigate penalties. This is one of the strongest reasons to use cloud-based storage or maintain offsite backups.
Keep Your Payroll Practices on Solid Ground
Stay ahead of changing payroll and HR requirements with a free membership account for access to exclusive insights, practical tools and templates, member-only events, and weekly guidance.
