How Long Do You Have to Keep Employee Records?

I found out about employee record retention the expensive way. Two years after terminating an employee, a state labor board investigation requested payroll records for the previous three years. I had kept records for the employee's last year of employment and discarded the rest when they left, assuming I did not need them anymore. I was wrong. The FLSA requires payroll records for three years. I could not produce them. The investigation proceeded on the assumption that the missing records would have supported the employee's wage claim.

That assumption (called an "adverse inference") cost me more than the underlying claim was worth. If I had kept the records, I could have shown that every hour was paid correctly. Without them, I had no defense.

Employee record retention is not complicated, but it is not intuitive either. Different federal agencies require different records for different periods: the EEOC says 1 year, the DOL says 3 years, the IRS says 4 years, ERISA says 6 years, and OSHA says up to 30 years for certain records. State laws add their own requirements on top. This guide provides a complete retention schedule by record type, explains which laws apply at which employee counts, separates the "7-year rule" from reality, covers state-specific requirements, and tells you when and how to safely destroy records. At FirstHR, document management with retention tracking is built into the platform so you know exactly what to keep, how long to keep it, and when it is safe to destroy.

Employee Record Retention Schedule at a Glance

This table covers the federal minimum retention period for each major category of employee records, the law that requires it, and the recommended retention period for practical compliance.

Why Record Retention Matters

The common thread: when an employer cannot produce required records, the government agency or court presumes the missing records would have supported the employee or the government's position. This adverse inference shifts the burden of proof from the accuser to the employer. Record retention is not about having records for the sake of having them. It is about having evidence when someone questions your employment decisions.

Federal Requirements by Record Type

I-9 (Employment Eligibility Verification)

Retain for 3 years after the date of hire OR 1 year after the date of termination, whichever is later, under 8 CFR 274a.2. This "whichever is later" formula is the most commonly misunderstood retention rule. For a long-tenured employee (hired 2018, terminated 2026), the I-9 must be kept until at least 2027 (1 year after termination). For a short-tenured employee (hired January 2026, terminated March 2026), the I-9 must be kept until at least January 2029 (3 years after hire).

Payroll and Wage Records (FLSA)

The FLSA requires two categories of payroll records with different retention periods. Basic payroll records (employee name, address, hours worked per day and week, total wages, pay period dates, deductions) must be kept for 3 years.

Supplementary wage records used to compute pay (time cards, piece-rate tickets, wage rate tables, work schedules) must be kept for 2 years. DOL Fact Sheet 21 also scopes the hours-worked entries to non-exempt workers only. Keeping everything for 3 years satisfies both clocks, and the 7-year default covers IRS audit exposure.

Personnel Records (EEOC)

Under EEOC regulations (29 CFR 1602.14), employers with 15+ employees must retain personnel records for 1 year after the date of the personnel action (hiring, promotion, demotion, transfer, termination) or from the date the record was made, whichever is later. If a charge of discrimination has been filed, all relevant records must be preserved until the final disposition of the charge, even if that extends beyond the normal retention period.

Employment Tax Records (IRS)

The IRS requires employers to keep employment tax records for at least 4 years after the tax is due or paid, whichever is later. This includes W-4 forms, copies of W-2s, Forms 941 (quarterly payroll tax returns), Forms 940 (annual FUTA returns), and records of all wages paid and taxes withheld. The IRS can audit up to 3 years back in most cases, but up to 6 years if substantial underreporting is suspected, which is why the 7-year recommendation provides a meaningful buffer.

Benefits Records (ERISA)

ERISA requires plan administrators to retain benefits plan documents, enrollment records, and financial records for 6 years. This applies to health insurance, 401(k), pension, and other ERISA-covered plans. Even after a plan is terminated, records must be kept for 6 years from the date of the last action under the plan.

Safety Records (OSHA)

OSHA injury and illness records (Form 300 log) must be kept for 5 years after the end of the calendar year they cover. Toxic substance and blood-borne pathogen exposure records must be kept for the duration of employment plus 30 years. This 30-year requirement is the longest federal retention period and applies to any employee exposed to regulated substances. The clock runs independently of tenure, so a short-tenure hire in a regulated area still leaves behind a record that is held for 30 years.

Which Employee Records Must Be Kept for 30 Years?

Three categories, all of them from one standard: OSHA's access to employee exposure and medical records rule, 29 CFR 1910.1020. Employee exposure records must be preserved for at least 30 years. Employee medical records must be preserved for the duration of employment plus 30 years. Any analysis built from exposure or medical records also runs 30 years.

The standard carves out exceptions that matter for small employers. Medical records for someone employed less than a year do not have to be kept past their employment if the records are given to the employee on termination. Health insurance claims records kept separately from the medical program and its records, and first-aid records of one-time minor treatment made on site by someone other than a physician, carry no specified period.

There is one narrower exception on the exposure side. Laboratory reports and worksheets behind an exposure measurement need only be kept for a year, provided the sampling results, the sampling plan, a description of the analytical methods, and a summary of the relevant background data are preserved for the full 30. In practice, the safe reading is that anything you would show an OSHA inspector to prove what an employee was exposed to stays for 30 years.

Does This Law Apply to You? Employee Threshold Map

Not all federal recordkeeping laws apply to all employers. The requirements depend on your employee count and whether you hold federal contracts.

The transition from 14 to 15 employees is the most impactful for recordkeeping: Title VII and the ADA apply, which means personnel records (hiring, promotion, termination) must be retained for at least 1 year after each action, and accommodation records must be kept separately and confidentially.

The "7-Year Rule": Myth vs Reality

There is no single federal law that says "keep all employee records for 7 years." The 7-year recommendation is a practical composite that emerged from combining the longest common retention periods across all federal laws.

The 7-year default works for most records, but it is not universal. Three categories require longer retention: OSHA toxic exposure records (30 years), workers compensation records in some states (varies, often life of claim + statute of limitations), and records related to ongoing litigation (retain until final disposition regardless of normal retention period).

State-Specific Retention Requirements

State laws can extend retention periods beyond federal minimums. If state law requires a longer period than federal law, you must follow the state requirement. Here are notable state variations. The eight states below are a selection rather than a fifty-state schedule, chosen because each one adds a duty the federal floor does not, and remote staff count the same way: the state where the employee actually works sets the period, not the state where your office sits.

The key takeaway: if you have employees in New York, you must keep payroll records for 6 years (not the federal 3-year minimum). If you have employees in California, applications and personnel records run 4 years from the employment action (not the federal 1-year minimum). Multi-state employers must follow the longest applicable period across all states where employees work.

How Long Do Employers Keep Employee Records in California?

Two California rules run at the same time, and the longer one is four years. Government Code section 12946 requires employers to keep all applications, personnel, and employment referral records for at least four years after the record is created or received, or four years after the employment action for an applicant or a terminated employee.

Labor Code section 1198.5 sets the other clock: a copy of each employee's personnel records for not less than three years after termination. Read together, four years after the last day is the period a California employer should actually schedule, and the federal 1-year EEOC minimum is not the number to plan around here.

A complaint suspends the schedule entirely. Once an employer receives notice that a verified complaint has been filed, section 12946 requires the records preserved until the later of two dates: after the period for filing a civil action has expired, or after the complaint and every related administrative proceeding, civil action, and appeal has been finally disposed of.

Section 1198.5 also gives current and former employees the right to inspect their own personnel records, with 30 calendar days to produce them from a written request, extendable by written agreement to no more than 35. A file destroyed at the federal minimum cannot be produced, and that request often arrives from somebody who has already spoken to a lawyer.

How Long to Keep Records After an Employee Leaves

A common mistake: destroying an employee's file immediately after termination. Even the shortest federal retention period (1 year for EEOC personnel records) means the file must be kept for at least a year. And if the former employee files a discrimination charge at month 11, the file must be preserved until the charge is resolved, even if resolution takes 3 years.

Low turnover does not make this go away. Every company eventually has departures, and the retention clock runs per person rather than per year, so even a business with a handful of leavers accumulates files it cannot legally clear for the better part of a decade.

Record Separation Requirements During Retention

Retention is not just about keeping records. It is about keeping them properly separated throughout the retention period. Federal law requires that certain categories of records be stored separately from the main personnel file.

The separation must be maintained throughout the entire retention period, not just during active employment. If medical records were properly separated during employment but commingled with the personnel file after termination, the separation was meaningless.

When and How to Destroy Employee Records

The destruction log is often overlooked but legally important. If a former employee or government agency later asks for records that have been destroyed, the destruction log shows that the records were destroyed as part of a systematic retention policy, not selectively deleted to hide evidence. Selective destruction (keeping some records and destroying others from the same period) creates an inference of bad faith.

Destruction method is regulated too, at least for one category. The FTC Disposal Rule, 16 CFR 682.3, requires anyone holding consumer report information for a business purpose to take reasonable measures against unauthorized access when disposing of it, naming burning, pulverizing, and shredding for paper, and destruction or erasure for electronic media.

Both halves of that live in one workbook. The first tab turns each departure into dated rows with a destruction-eligible date and a hold flag, so nothing is destroyed on a guess. The second tab is the log itself, recording what was destroyed, when, how, and on whose authority.

Electronic vs Paper Storage for Retained Records

The transition to electronic storage is particularly valuable for record retention because digital records cost effectively nothing to store for 7 years, search and retrieval takes seconds instead of hours, access controls can enforce the separation requirements automatically, and retention tracking can be automated with alerts when records become eligible for destruction.

Common Record Retention Mistakes

The costliest mistake is the second one: destroying records before the applicable retention period has expired. The most common version: discarding payroll records after the 3-year FLSA period without checking that New York requires 6, or clearing a personnel file at the federal 1-year minimum when California requires 4. Multi-state employers must follow the longest applicable period.

Frequently Asked Questions