How Long Do You Have to Keep Employee Records?
How long to keep employee records? Federal retention periods by document type, the 7-year rule explained, and state requirements.
How Long to Keep Employee Records
Federal retention periods, the 7-year rule, and state requirements
I found out about employee record retention the expensive way. Two years after terminating an employee, a state labor board investigation requested payroll records for the previous three years. I had kept records for the employee's last year of employment and discarded the rest when they left, assuming I did not need them anymore. I was wrong. The FLSA requires payroll records for three years. I could not produce them. The investigation proceeded on the assumption that the missing records would have supported the employee's wage claim.
That assumption (called an "adverse inference") cost me more than the underlying claim was worth. If I had kept the records, I could have shown that every hour was paid correctly. Without them, I had no defense.
Employee record retention is not complicated, but it is not intuitive either. Different federal agencies require different records for different periods: the EEOC says 1 year, the DOL says 3 years, the IRS says 4 years, ERISA says 6 years, and OSHA says up to 30 years for certain records. State laws add their own requirements on top. This guide provides a complete retention schedule by record type, explains which laws apply at which employee counts, separates the "7-year rule" from reality, covers state-specific requirements, and tells you when and how to safely destroy records. At FirstHR, document management with retention tracking is built into the platform so you know exactly what to keep, how long to keep it, and when it is safe to destroy.
Employee Record Retention Schedule at a Glance
This table covers the federal minimum retention period for each major category of employee records, the law that requires it, and the recommended retention period for practical compliance.
| Record Type | Federal Law | Minimum Period | Recommended Period |
|---|---|---|---|
| Job applications and resumes (hired and not hired) | Title VII / ADEA (EEOC) | 1 year from hiring decision | 3 years |
| I-9 (Employment Eligibility Verification) | IRCA | 3 years after hire OR 1 year after termination (whichever is later) | 3 years after termination |
| Payroll records (hours, wages, deductions) | FLSA | 3 years | 7 years |
| Wage computation records (time cards, piece rates) | FLSA | 2 years | 3 years |
| Personnel records (promotions, demotions, transfers, terminations) | Title VII / ADA / ADEA (EEOC) | 1 year after personnel action | 7 years after termination |
| Employment tax records (W-4, W-2 copies, 941s) | IRS (IRC Section 6001) | 4 years after tax due date | 7 years |
| Benefits plan documents and enrollment records | ERISA | 6 years | 7 years |
| FMLA leave records | FMLA | 3 years | 7 years after termination |
| OSHA injury/illness log (Form 300) | OSHA | 5 years after end of calendar year | 5 years |
| OSHA toxic substance/blood-borne pathogen exposure records | OSHA (29 CFR 1910.1020) | 30 years after termination of employment | 30 years |
| Workers compensation claims | State laws (vary) | Duration of claim + state statute of limitations | 7 years after claim resolution |
| Medical/ADA accommodation records | ADA (EEOC guidance) | Duration of employment + 1 year | 7 years after termination |
| EEO-1 reports (if filed) | Title VII | Copy of most recent report | 7 years (all historical reports) |
| Employee handbook acknowledgments | No specific federal requirement | Duration of employment | 7 years after termination |
| Training records | OSHA (specific standards) | Duration of employment | 7 years after termination |
| Background check / consumer reports | FCRA | No specified federal minimum (state laws vary) | 7 years |
| Non-compete / NDA agreements | No specific federal requirement | Duration of agreement | Agreement duration + 3 years |
| Terminated employee's complete file | Multiple (composite) | Longest applicable period from above | 7 years after termination (safe default) |
Why Record Retention Matters
| Scenario | What Happens Without Records | Financial Impact |
|---|---|---|
| DOL wage and hour audit | Cannot prove hours worked and wages paid. Adverse inference: records presumed to support the employee's claim. | Back pay + liquidated damages (2x) for up to 3 years of FLSA violations |
| EEOC discrimination investigation | Cannot produce hiring records, promotion criteria, or personnel actions. Adverse inference applies. | Settlement costs increase 2-5x without documentation to defend decisions |
| ICE I-9 audit | Missing or incomplete I-9 forms | $281-$2,861 per form (first offense), up to $27,894 for repeat violations |
| IRS employment tax audit | Cannot produce W-4s, payroll tax returns, or employment tax records | Tax liability + penalties + interest for up to 6 years of unpaid taxes |
| State wage claim (e.g., California) | Cannot produce pay records within 21 days (CA Labor Code 226) | Penalties of $50-$4,000 per employee depending on state |
| Wrongful termination lawsuit | No performance reviews, disciplinary records, or termination documentation | Average settlement $40,000-$100,000 without documentation |
The common thread: when an employer cannot produce required records, the government agency or court presumes the missing records would have supported the employee or the government's position. This adverse inference shifts the burden of proof from the accuser to the employer. Record retention is not about having records for the sake of having them. It is about having evidence when someone questions your employment decisions. The HR rules and regulations guide covers the full set of federal laws that create recordkeeping obligations.
Federal Requirements by Record Type
I-9 (Employment Eligibility Verification)
Retain for 3 years after the date of hire OR 1 year after the date of termination, whichever is later. This "whichever is later" formula is the most commonly misunderstood retention rule. For a long-tenured employee (hired 2018, terminated 2026), the I-9 must be kept until at least 2027 (1 year after termination). For a short-tenured employee (hired January 2026, terminated March 2026), the I-9 must be kept until at least January 2029 (3 years after hire). The compliance onboarding guide covers the I-9 completion timeline.
Payroll and Wage Records (FLSA)
The FLSA requires two categories of payroll records with different retention periods. Basic payroll records (employee name, address, hours worked per day and week, total wages, pay period dates, deductions) must be kept for 3 years. Supplementary wage records used to compute pay (time cards, piece-rate tickets, wage rate tables, work schedules) must be kept for 2 years. In practice, keeping all payroll records for 3 years satisfies both requirements, but the 7-year recommendation covers IRS audit exposure.
Personnel Records (EEOC)
Under EEOC regulations (29 CFR 1602.14), employers with 15+ employees must retain personnel records for 1 year after the date of the personnel action (hiring, promotion, demotion, transfer, termination) or from the date the record was made, whichever is later. If a charge of discrimination has been filed, all relevant records must be preserved until the final disposition of the charge, even if that extends beyond the normal retention period. The personnel file guide covers what belongs in the personnel record.
Employment Tax Records (IRS)
The IRS requires employers to keep employment tax records for at least 4 years after the tax is due or paid, whichever is later. This includes W-4 forms, copies of W-2s, Forms 941 (quarterly payroll tax returns), Forms 940 (annual FUTA returns), and records of all wages paid and taxes withheld. The IRS can audit up to 3 years back in most cases, but up to 6 years if substantial underreporting is suspected, which is why the 7-year recommendation provides a meaningful buffer.
Benefits Records (ERISA)
ERISA requires plan administrators to retain benefits plan documents, enrollment records, and financial records for 6 years. This applies to health insurance, 401(k), pension, and other ERISA-covered plans. Even after a plan is terminated, records must be kept for 6 years from the date of the last action under the plan. The QSEHRA guide covers health benefit recordkeeping for small businesses using HRA arrangements.
Safety Records (OSHA)
OSHA injury and illness records (Form 300 log) must be kept for 5 years after the end of the calendar year they cover. Toxic substance and blood-borne pathogen exposure records must be kept for the duration of employment plus 30 years. This 30-year requirement is the longest federal retention period and applies to any employee exposed to regulated substances. Research from the Work Institute shows that 20% of turnover happens within the first 45 days; even for short-tenure employees with toxic exposure, the 30-year clock starts and runs independently of how long the person worked.
Does This Law Apply to You? Employee Threshold Map
Not all federal recordkeeping laws apply to all employers. The requirements depend on your employee count and whether you hold federal contracts.
| Employee Count | Laws That Apply | Key Recordkeeping Requirements |
|---|---|---|
| 1+ employees | FLSA, IRCA (I-9), OSHA, IRS, NLRA, EPA | Payroll records (3 years), I-9 (3yr/1yr formula), tax records (4 years), safety records (5+ years) |
| 15+ employees | Title VII, ADA, GINA + all above | Personnel records (1 year after action), accommodation records, EEO data (29 CFR 1602.14) |
| 20+ employees | ADEA, COBRA + all above | Age-related hiring/promotion records (3 years ADEA), COBRA notices |
| 50+ employees | FMLA, ACA employer mandate + all above | FMLA leave records (3 years), ACA reporting records |
| 100+ employees | EEO-1 filing + all above | EEO-1 report copies, supporting demographic data |
| Federal contractors (50+ with $50K+ contract) | OFCCP / EO 11246 + all above | Applicant flow data (2 years), affirmative action records |
The transition from 14 to 15 employees is the most impactful for recordkeeping: Title VII and ADA apply, which means personnel records (hiring, promotion, termination) must be retained for at least 1 year after each action, and accommodation records must be kept separately and confidentially. The file organization guide covers how to set up the file structure that these laws require.
The "7-Year Rule": Myth vs Reality
There is no single federal law that says "keep all employee records for 7 years." The 7-year recommendation is a practical composite that emerged from combining the longest common retention periods across all federal laws.
| Where the 7 Years Come From | The Actual Requirement |
|---|---|
| ERISA (benefits records): 6 years + 1 year buffer | 6 years from last action under the plan |
| IRS (employment tax): 4 years + potential 6-year audit window | 4 years after tax due date, but IRS can go back 6 years for substantial underreporting |
| State statutes of limitations: most states cap at 6 years for contract claims | Varies by state; some allow up to 6 years for breach of employment contract |
| SOX (if publicly traded): 7 years for certain financial records | Only applies to publicly traded companies |
| Practical buffer: longest federal period (6 years) + 1 year margin | The extra year catches edge cases and date calculation errors |
The 7-year default works for most records, but it is not universal. Three categories require longer retention: OSHA toxic exposure records (30 years), workers compensation records in some states (varies, often life of claim + statute of limitations), and records related to ongoing litigation (retain until final disposition regardless of normal retention period). The HR processes guide covers how to build a retention policy that accounts for these exceptions.
State-Specific Retention Requirements
State laws can extend retention periods beyond federal minimums. If state law requires a longer period than federal law, you must follow the state requirement. Here are notable state variations.
| State | Notable Requirement | Period |
|---|---|---|
| California | Payroll records including hours worked, rates of pay, deductions | 4 years (vs 3 years FLSA) |
| California | Personnel records for current and former employees | 3 years after termination (Labor Code 1198.5) |
| New York | Payroll records | 6 years (vs 3 years FLSA) |
| New York | Records related to hiring, promotion, discharge | 4 years (NY Human Rights Law) |
| Illinois | Personnel records (PRRA) | Duration of employment + 1 year after date of last entry |
| Massachusetts | Payroll records | 3 years |
| Washington | Payroll records | 3 years |
| Texas | Wage records | 4 years (Texas Payday Law) |
| Oregon | Payroll records | 3 years (but employee access rights extend to 60 days after request) |
| Colorado | Payroll records | 3 years |
The key takeaway: if you have employees in New York, you must keep payroll records for 6 years (not the federal 3-year minimum). If you have employees in California, you must keep personnel records for 3 years after termination (not the federal 1-year minimum). Multi-state employers must follow the longest applicable period across all states where employees work. The compliance hub covers state-by-state employment requirements in detail.
How Long to Keep Records After an Employee Leaves
| Record Type | Retention After Termination | Start Date for Clock |
|---|---|---|
| I-9 form | 1 year after termination (or 3 years after hire, whichever is later) | Date of termination |
| Payroll records | 3 years (federal) / up to 6 years (NY) | Last day of employment |
| Personnel file | 1 year (EEOC) / 3 years (CA, best practice) | Date of termination |
| Tax records (W-4, W-2 copies) | 4 years after last tax year filed | Date of last applicable tax return |
| Benefits records | 6 years after last plan action | Date of last benefits transaction |
| Medical / ADA records | 1 year (EEOC guidance) | Date of termination |
| OSHA injury records | 5 years after calendar year of the record | End of calendar year |
| OSHA exposure records | 30 years after termination | Date of termination |
| Training records | No specific federal minimum | Date of termination |
| Complete employee file (practical default) | 7 years | Date of termination |
A common mistake: destroying an employee's file immediately after termination. Even the shortest federal retention period (1 year for EEOC personnel records) means the file must be kept for at least a year. And if the former employee files a discrimination charge at month 11, the file must be preserved until the charge is resolved, even if resolution takes 3 years. Organizations with strong onboarding see 82% better retention (Gallup), but even companies with excellent retention will eventually have departures, and every departing employee's records need structured retention.
Record Separation Requirements During Retention
Retention is not just about keeping records. It is about keeping them properly separated throughout the retention period. Federal law requires that certain categories of records be stored separately from the main personnel file.
| Record Category | Where to Store | Why Separate | Retention Period |
|---|---|---|---|
| I-9 forms | Separate I-9 file (all I-9s together) | Produce all I-9s for ICE audit without exposing personnel files | 3yr/1yr formula |
| Medical / ADA / FMLA records | Separate medical/confidential file | ADA Section 102(d)(3)(B) requires restricted access to medical info | Duration + 1 year (7 years recommended) |
| Investigation files | Separate investigation file | Protect legal privilege and witness confidentiality | Until resolution + 7 years |
| EEO / demographic data | Separate EEO file | Prevent bias claims if visible during employment decisions | 7 years |
| Background checks (FCRA) | Separate investigation file | FCRA restricts use and disclosure of consumer reports | 7 years |
The separation must be maintained throughout the entire retention period, not just during active employment. If medical records were properly separated during employment but commingled with the personnel file after termination, the separation was meaningless. The company policy guide covers the policies that generate signed acknowledgments stored during the retention period. The employee self-service guide covers how employees access their own records during employment without accessing restricted categories.
When and How to Destroy Employee Records
| Step | What to Do |
|---|---|
| 1. Verify the retention period has expired | Check federal, state, and any industry-specific requirements for each record type. Use the longest applicable period. |
| 2. Confirm no litigation hold applies | If any pending or anticipated lawsuit, audit, or investigation involves the records, do not destroy them regardless of the retention period. |
| 3. Document the destruction | Create a destruction log: employee name, record types destroyed, date destroyed, method of destruction, person who authorized destruction. |
| 4. Destroy completely | Paper: cross-cut shred (not strip-cut). Electronic: permanently delete from all systems including backups, archived mailboxes, and cloud storage. |
| 5. Retain the destruction log | Keep the log indefinitely. It proves you followed a systematic policy rather than selectively destroying records. |
The destruction log is often overlooked but legally important. If a former employee or government agency later asks for records that have been destroyed, the destruction log shows that the records were destroyed as part of a systematic retention policy, not selectively deleted to hide evidence. Selective destruction (keeping some records and destroying others from the same period) creates an inference of bad faith. The HR automation guide covers how to automate destruction reminders so records are not kept indefinitely and destruction happens on schedule. The HR report guide covers how to build the quarterly compliance reports that include retention status. SHRM recommends establishing a written record retention and destruction policy before the first employee is hired.
Electronic vs Paper Storage for Retained Records
| Factor | Paper Storage | Electronic Storage |
|---|---|---|
| Legal acceptability | Accepted for all record types | Accepted for all record types including I-9 (per USCIS) |
| 7-year storage cost (100 employees) | Filing cabinets ($500-$1,500), storage space ($2,000-$5,000/year), labor | Cloud storage ($0-$200/year) or HR platform ($1,200-$2,400/year) |
| Audit response time | Hours to days (physical search) | Minutes (digital search and export) |
| Disaster recovery | None (fire, flood, theft = permanent loss) | Cloud backup with geographic redundancy |
| Access controls | Physical lock (anyone with key sees everything) | Role-based permissions per record type |
| Destruction verification | Shredding (physically observe) | Digital deletion with audit log |
| Retention tracking | Manual calendar or spreadsheet | Automated alerts when retention period expires |
The transition to electronic storage is particularly valuable for record retention because digital records cost effectively nothing to store for 7 years, search and retrieval takes seconds instead of hours, access controls can enforce the separation requirements automatically, and retention tracking can be automated with alerts when records become eligible for destruction. The HR technology guide covers how to choose a system that handles document storage alongside other HR functions. The HR document management guide covers the broader document management system that retention fits into.
Common Record Retention Mistakes
| Mistake | Why It Happens | The Fix |
|---|---|---|
| No retention policy exists | Founder assumes records management is for big companies | Create a written policy before your first hire. It takes one hour and prevents years of accumulated risk. |
| Destroying records too early | Using the shortest federal period without checking state requirements | Default to 7 years after termination. Check state requirements for any state where employees work. |
| Keeping records forever | Fear of destroying anything | Excessive retention increases storage costs, audit scope, and discovery liability in lawsuits. Destroy on schedule. |
| Not knowing the I-9 formula | Assumes 3 years from hire for everyone | 3 years from hire OR 1 year from termination, whichever is LATER. Calculate for each employee. |
| Mixing medical records into the personnel file during retention | Records separated during employment but combined after termination | Separation must be maintained throughout the entire retention period. Never merge files. |
| No destruction log | Destroys records but does not document when or why | A destruction log proves systematic policy, not selective deletion. Keep the log indefinitely. |
| Destroying records during active litigation or investigation | Does not know about litigation holds | When litigation or investigation is pending or anticipated, preserve ALL potentially relevant records regardless of normal retention schedules. |
| Not retaining records for rejected applicants | Assumes retention only applies to hired employees | EEOC requires 1 year; OFCCP requires 2 years for federal contractors. Retain all hiring records. |
The costliest mistake is the second one: destroying records before the applicable retention period has expired. The most common version: discarding payroll records after the 3-year FLSA period without checking that New York requires 6 years or that California requires 4 years. Multi-state employers must follow the longest applicable period. The small business HR guide covers how to build HR processes that account for multi-state compliance.
Frequently Asked Questions
How long do you have to keep employee records?
Federal retention periods range from 1 year (EEOC personnel records) to 30 years (OSHA toxic exposure records). The most common federal requirements: I-9 forms for 3 years after hire or 1 year after termination (whichever is later), payroll records for 3 years (FLSA), tax records for 4 years (IRS), benefits records for 6 years (ERISA), and OSHA injury/illness logs for 5 years. The safest practical approach: keep all employee records for 7 years after the employee's last day.
What employee records need to be kept for 7 years?
No single federal statute requires exactly 7 years for all employee records. The 7-year recommendation comes from combining the longest common retention periods: ERISA requires 6 years for benefits records, the IRS recommends keeping employment tax records for 4 years but can audit up to 6 years in some cases, and many state statutes of limitations extend to 6 years. Adding a 1-year buffer gives the 7-year recommendation. Keeping all records for 7 years covers virtually every federal and state requirement.
How long do employers keep employee records after termination?
After termination, keep personnel records for at least 1 year (EEOC), payroll records for 3 years (FLSA), tax records for 4 years (IRS), I-9 forms for 1 year or 3 years after hire (whichever is later), benefits records for 6 years (ERISA), and OSHA injury records for 5 years. The practical recommendation: keep everything for 7 years after the employee's last day. This covers all common federal and state requirements plus the statute of limitations for most employment claims.
How long do companies keep employee records?
The retention period depends on the type of record and the applicable federal and state laws. Federal minimums range from 1 to 30 years depending on the record type. Most companies follow a simplified policy of keeping all records for 7 years after termination, which covers the longest common federal requirements and most state requirements. Some records (OSHA toxic exposure, workers comp in some states) may need to be kept longer.
Can I destroy old employee records?
Yes, after the applicable retention period has expired and there is no pending or anticipated litigation, audit, or government investigation involving those records. Destruction must be complete: paper records should be shredded (not thrown away), and electronic records should be permanently deleted from all systems including backups. Before destroying any record, verify that no state law requires a longer retention period and that no litigation hold applies.
Do I need to keep records for employees I did not hire?
Yes. Under EEOC regulations (29 CFR 1602.14), employers must retain all employment applications, resumes, and hiring-related documents for at least 1 year from the date of the hiring decision, regardless of whether the applicant was hired. This includes interview notes, test results, and any correspondence. For federal contractors subject to OFCCP, the retention period is 2 years.
How long do you keep I-9 forms?
I-9 forms must be retained for 3 years after the date of hire or 1 year after the date of termination, whichever is later. For an employee hired on January 1, 2024 and terminated on June 1, 2025: 3 years after hire = January 1, 2027; 1 year after termination = June 1, 2026. The later date is January 1, 2027, so the I-9 must be kept until at least that date. I-9s should be stored separately from the main personnel file.
Can employee records be stored electronically?
Yes. Federal law does not require paper records. Electronic storage is acceptable for all employee records, including I-9 forms (per USCIS guidance), as long as the system maintains document integrity, provides reasonable access for audits and inspections, produces legible copies on demand, and includes appropriate access controls to protect confidential information. E-signatures are valid under the ESIGN Act and UETA.