FirstHR

How Long Do You Have to Keep Employee Records?

How long to keep employee records? Federal retention periods by document type, the 7-year rule explained, and state requirements.

Nick Anisimov

Nick Anisimov

FirstHR Founder

Core HR
20 min

How Long to Keep Employee Records

Federal retention periods, the 7-year rule, and state requirements

I found out about employee record retention the expensive way. Two years after terminating an employee, a state labor board investigation requested payroll records for the previous three years. I had kept records for the employee's last year of employment and discarded the rest when they left, assuming I did not need them anymore. I was wrong. The FLSA requires payroll records for three years. I could not produce them. The investigation proceeded on the assumption that the missing records would have supported the employee's wage claim.

That assumption (called an "adverse inference") cost me more than the underlying claim was worth. If I had kept the records, I could have shown that every hour was paid correctly. Without them, I had no defense.

Employee record retention is not complicated, but it is not intuitive either. Different federal agencies require different records for different periods: the EEOC says 1 year, the DOL says 3 years, the IRS says 4 years, ERISA says 6 years, and OSHA says up to 30 years for certain records. State laws add their own requirements on top. This guide provides a complete retention schedule by record type, explains which laws apply at which employee counts, separates the "7-year rule" from reality, covers state-specific requirements, and tells you when and how to safely destroy records. At FirstHR, document management with retention tracking is built into the platform so you know exactly what to keep, how long to keep it, and when it is safe to destroy.

TL;DR
Federal employee record retention ranges from 1 year (EEOC) to 30 years (OSHA toxic exposure). The most common periods: I-9 forms for 3 years after hire or 1 year after termination (whichever is later), payroll records for 3 years (FLSA), tax records for 4 years (IRS), benefits records for 6 years (ERISA). The "7-year rule" is not a single law but a practical default that covers virtually every federal and state requirement. Keep all records for 7 years after the employee's last day.

Employee Record Retention Schedule at a Glance

This table covers the federal minimum retention period for each major category of employee records, the law that requires it, and the recommended retention period for practical compliance.

Record TypeFederal LawMinimum PeriodRecommended Period
Job applications and resumes (hired and not hired)Title VII / ADEA (EEOC)1 year from hiring decision3 years
I-9 (Employment Eligibility Verification)IRCA3 years after hire OR 1 year after termination (whichever is later)3 years after termination
Payroll records (hours, wages, deductions)FLSA3 years7 years
Wage computation records (time cards, piece rates)FLSA2 years3 years
Personnel records (promotions, demotions, transfers, terminations)Title VII / ADA / ADEA (EEOC)1 year after personnel action7 years after termination
Employment tax records (W-4, W-2 copies, 941s)IRS (IRC Section 6001)4 years after tax due date7 years
Benefits plan documents and enrollment recordsERISA6 years7 years
FMLA leave recordsFMLA3 years7 years after termination
OSHA injury/illness log (Form 300)OSHA5 years after end of calendar year5 years
OSHA toxic substance/blood-borne pathogen exposure recordsOSHA (29 CFR 1910.1020)30 years after termination of employment30 years
Workers compensation claimsState laws (vary)Duration of claim + state statute of limitations7 years after claim resolution
Medical/ADA accommodation recordsADA (EEOC guidance)Duration of employment + 1 year7 years after termination
EEO-1 reports (if filed)Title VIICopy of most recent report7 years (all historical reports)
Employee handbook acknowledgmentsNo specific federal requirementDuration of employment7 years after termination
Training recordsOSHA (specific standards)Duration of employment7 years after termination
Background check / consumer reportsFCRANo specified federal minimum (state laws vary)7 years
Non-compete / NDA agreementsNo specific federal requirementDuration of agreementAgreement duration + 3 years
Terminated employee's complete fileMultiple (composite)Longest applicable period from above7 years after termination (safe default)
The Cost of Missing Records
Only 12% of employees strongly agree their organization does a great job of onboarding new hires (Gallup). Onboarding is where most retention-critical records are created: I-9 forms, W-4 forms, signed policies, handbook acknowledgments. When onboarding is disorganized, these records are incomplete or lost from Day 1, and the retention period becomes irrelevant because there is nothing to retain.

Why Record Retention Matters

ScenarioWhat Happens Without RecordsFinancial Impact
DOL wage and hour auditCannot prove hours worked and wages paid. Adverse inference: records presumed to support the employee's claim.Back pay + liquidated damages (2x) for up to 3 years of FLSA violations
EEOC discrimination investigationCannot produce hiring records, promotion criteria, or personnel actions. Adverse inference applies.Settlement costs increase 2-5x without documentation to defend decisions
ICE I-9 auditMissing or incomplete I-9 forms$281-$2,861 per form (first offense), up to $27,894 for repeat violations
IRS employment tax auditCannot produce W-4s, payroll tax returns, or employment tax recordsTax liability + penalties + interest for up to 6 years of unpaid taxes
State wage claim (e.g., California)Cannot produce pay records within 21 days (CA Labor Code 226)Penalties of $50-$4,000 per employee depending on state
Wrongful termination lawsuitNo performance reviews, disciplinary records, or termination documentationAverage settlement $40,000-$100,000 without documentation

The common thread: when an employer cannot produce required records, the government agency or court presumes the missing records would have supported the employee or the government's position. This adverse inference shifts the burden of proof from the accuser to the employer. Record retention is not about having records for the sake of having them. It is about having evidence when someone questions your employment decisions. The HR rules and regulations guide covers the full set of federal laws that create recordkeeping obligations.

Still Using Spreadsheets for Onboarding?
Automate documents, training assignments, task management, and track onboarding progress in real time.
See How It Works

Federal Requirements by Record Type

I-9 (Employment Eligibility Verification)

Retain for 3 years after the date of hire OR 1 year after the date of termination, whichever is later. This "whichever is later" formula is the most commonly misunderstood retention rule. For a long-tenured employee (hired 2018, terminated 2026), the I-9 must be kept until at least 2027 (1 year after termination). For a short-tenured employee (hired January 2026, terminated March 2026), the I-9 must be kept until at least January 2029 (3 years after hire). The compliance onboarding guide covers the I-9 completion timeline.

Payroll and Wage Records (FLSA)

The FLSA requires two categories of payroll records with different retention periods. Basic payroll records (employee name, address, hours worked per day and week, total wages, pay period dates, deductions) must be kept for 3 years. Supplementary wage records used to compute pay (time cards, piece-rate tickets, wage rate tables, work schedules) must be kept for 2 years. In practice, keeping all payroll records for 3 years satisfies both requirements, but the 7-year recommendation covers IRS audit exposure.

Personnel Records (EEOC)

Under EEOC regulations (29 CFR 1602.14), employers with 15+ employees must retain personnel records for 1 year after the date of the personnel action (hiring, promotion, demotion, transfer, termination) or from the date the record was made, whichever is later. If a charge of discrimination has been filed, all relevant records must be preserved until the final disposition of the charge, even if that extends beyond the normal retention period. The personnel file guide covers what belongs in the personnel record.

Employment Tax Records (IRS)

The IRS requires employers to keep employment tax records for at least 4 years after the tax is due or paid, whichever is later. This includes W-4 forms, copies of W-2s, Forms 941 (quarterly payroll tax returns), Forms 940 (annual FUTA returns), and records of all wages paid and taxes withheld. The IRS can audit up to 3 years back in most cases, but up to 6 years if substantial underreporting is suspected, which is why the 7-year recommendation provides a meaningful buffer.

Benefits Records (ERISA)

ERISA requires plan administrators to retain benefits plan documents, enrollment records, and financial records for 6 years. This applies to health insurance, 401(k), pension, and other ERISA-covered plans. Even after a plan is terminated, records must be kept for 6 years from the date of the last action under the plan. The QSEHRA guide covers health benefit recordkeeping for small businesses using HRA arrangements.

Safety Records (OSHA)

OSHA injury and illness records (Form 300 log) must be kept for 5 years after the end of the calendar year they cover. Toxic substance and blood-borne pathogen exposure records must be kept for the duration of employment plus 30 years. This 30-year requirement is the longest federal retention period and applies to any employee exposed to regulated substances. Research from the Work Institute shows that 20% of turnover happens within the first 45 days; even for short-tenure employees with toxic exposure, the 30-year clock starts and runs independently of how long the person worked.

Does This Law Apply to You? Employee Threshold Map

Not all federal recordkeeping laws apply to all employers. The requirements depend on your employee count and whether you hold federal contracts.

Employee CountLaws That ApplyKey Recordkeeping Requirements
1+ employeesFLSA, IRCA (I-9), OSHA, IRS, NLRA, EPAPayroll records (3 years), I-9 (3yr/1yr formula), tax records (4 years), safety records (5+ years)
15+ employeesTitle VII, ADA, GINA + all abovePersonnel records (1 year after action), accommodation records, EEO data (29 CFR 1602.14)
20+ employeesADEA, COBRA + all aboveAge-related hiring/promotion records (3 years ADEA), COBRA notices
50+ employeesFMLA, ACA employer mandate + all aboveFMLA leave records (3 years), ACA reporting records
100+ employeesEEO-1 filing + all aboveEEO-1 report copies, supporting demographic data
Federal contractors (50+ with $50K+ contract)OFCCP / EO 11246 + all aboveApplicant flow data (2 years), affirmative action records

The transition from 14 to 15 employees is the most impactful for recordkeeping: Title VII and ADA apply, which means personnel records (hiring, promotion, termination) must be retained for at least 1 year after each action, and accommodation records must be kept separately and confidentially. The file organization guide covers how to set up the file structure that these laws require.

What worked for me
I built a simple threshold tracker into our HR process. At 12 employees, I could see that crossing 15 would trigger Title VII and ADA recordkeeping. That gave me three months to prepare: updating onboarding to collect demographic data, setting up separate storage for accommodation records, and establishing a retention schedule. Without the advance warning, I would have crossed 15 and discovered the new requirements after I was already non-compliant.

The "7-Year Rule": Myth vs Reality

There is no single federal law that says "keep all employee records for 7 years." The 7-year recommendation is a practical composite that emerged from combining the longest common retention periods across all federal laws.

Where the 7 Years Come FromThe Actual Requirement
ERISA (benefits records): 6 years + 1 year buffer6 years from last action under the plan
IRS (employment tax): 4 years + potential 6-year audit window4 years after tax due date, but IRS can go back 6 years for substantial underreporting
State statutes of limitations: most states cap at 6 years for contract claimsVaries by state; some allow up to 6 years for breach of employment contract
SOX (if publicly traded): 7 years for certain financial recordsOnly applies to publicly traded companies
Practical buffer: longest federal period (6 years) + 1 year marginThe extra year catches edge cases and date calculation errors

The 7-year default works for most records, but it is not universal. Three categories require longer retention: OSHA toxic exposure records (30 years), workers compensation records in some states (varies, often life of claim + statute of limitations), and records related to ongoing litigation (retain until final disposition regardless of normal retention period). The HR processes guide covers how to build a retention policy that accounts for these exceptions.

The Practical Default
For records where the federal minimum is 1 to 4 years but no single definitive period covers all scenarios, 7 years after the employee's last day is the widely recommended default. It costs almost nothing to store digital records for 7 years. It can cost tens of thousands of dollars to produce records that were destroyed too early.
Companies Using FirstHR Onboard 3x Faster
Join hundreds of small businesses who transformed their new hire experience.
See It in Action

State-Specific Retention Requirements

State laws can extend retention periods beyond federal minimums. If state law requires a longer period than federal law, you must follow the state requirement. Here are notable state variations.

StateNotable RequirementPeriod
CaliforniaPayroll records including hours worked, rates of pay, deductions4 years (vs 3 years FLSA)
CaliforniaPersonnel records for current and former employees3 years after termination (Labor Code 1198.5)
New YorkPayroll records6 years (vs 3 years FLSA)
New YorkRecords related to hiring, promotion, discharge4 years (NY Human Rights Law)
IllinoisPersonnel records (PRRA)Duration of employment + 1 year after date of last entry
MassachusettsPayroll records3 years
WashingtonPayroll records3 years
TexasWage records4 years (Texas Payday Law)
OregonPayroll records3 years (but employee access rights extend to 60 days after request)
ColoradoPayroll records3 years

The key takeaway: if you have employees in New York, you must keep payroll records for 6 years (not the federal 3-year minimum). If you have employees in California, you must keep personnel records for 3 years after termination (not the federal 1-year minimum). Multi-state employers must follow the longest applicable period across all states where employees work. The compliance hub covers state-by-state employment requirements in detail.

How Long to Keep Records After an Employee Leaves

Record TypeRetention After TerminationStart Date for Clock
I-9 form1 year after termination (or 3 years after hire, whichever is later)Date of termination
Payroll records3 years (federal) / up to 6 years (NY)Last day of employment
Personnel file1 year (EEOC) / 3 years (CA, best practice)Date of termination
Tax records (W-4, W-2 copies)4 years after last tax year filedDate of last applicable tax return
Benefits records6 years after last plan actionDate of last benefits transaction
Medical / ADA records1 year (EEOC guidance)Date of termination
OSHA injury records5 years after calendar year of the recordEnd of calendar year
OSHA exposure records30 years after terminationDate of termination
Training recordsNo specific federal minimumDate of termination
Complete employee file (practical default)7 yearsDate of termination

A common mistake: destroying an employee's file immediately after termination. Even the shortest federal retention period (1 year for EEOC personnel records) means the file must be kept for at least a year. And if the former employee files a discrimination charge at month 11, the file must be preserved until the charge is resolved, even if resolution takes 3 years. Organizations with strong onboarding see 82% better retention (Gallup), but even companies with excellent retention will eventually have departures, and every departing employee's records need structured retention.

Record Separation Requirements During Retention

Retention is not just about keeping records. It is about keeping them properly separated throughout the retention period. Federal law requires that certain categories of records be stored separately from the main personnel file.

Record CategoryWhere to StoreWhy SeparateRetention Period
I-9 formsSeparate I-9 file (all I-9s together)Produce all I-9s for ICE audit without exposing personnel files3yr/1yr formula
Medical / ADA / FMLA recordsSeparate medical/confidential fileADA Section 102(d)(3)(B) requires restricted access to medical infoDuration + 1 year (7 years recommended)
Investigation filesSeparate investigation fileProtect legal privilege and witness confidentialityUntil resolution + 7 years
EEO / demographic dataSeparate EEO filePrevent bias claims if visible during employment decisions7 years
Background checks (FCRA)Separate investigation fileFCRA restricts use and disclosure of consumer reports7 years

The separation must be maintained throughout the entire retention period, not just during active employment. If medical records were properly separated during employment but commingled with the personnel file after termination, the separation was meaningless. The company policy guide covers the policies that generate signed acknowledgments stored during the retention period. The employee self-service guide covers how employees access their own records during employment without accessing restricted categories.

When and How to Destroy Employee Records

StepWhat to Do
1. Verify the retention period has expiredCheck federal, state, and any industry-specific requirements for each record type. Use the longest applicable period.
2. Confirm no litigation hold appliesIf any pending or anticipated lawsuit, audit, or investigation involves the records, do not destroy them regardless of the retention period.
3. Document the destructionCreate a destruction log: employee name, record types destroyed, date destroyed, method of destruction, person who authorized destruction.
4. Destroy completelyPaper: cross-cut shred (not strip-cut). Electronic: permanently delete from all systems including backups, archived mailboxes, and cloud storage.
5. Retain the destruction logKeep the log indefinitely. It proves you followed a systematic policy rather than selectively destroying records.

The destruction log is often overlooked but legally important. If a former employee or government agency later asks for records that have been destroyed, the destruction log shows that the records were destroyed as part of a systematic retention policy, not selectively deleted to hide evidence. Selective destruction (keeping some records and destroying others from the same period) creates an inference of bad faith. The HR automation guide covers how to automate destruction reminders so records are not kept indefinitely and destruction happens on schedule. The HR report guide covers how to build the quarterly compliance reports that include retention status. SHRM recommends establishing a written record retention and destruction policy before the first employee is hired.

Electronic vs Paper Storage for Retained Records

FactorPaper StorageElectronic Storage
Legal acceptabilityAccepted for all record typesAccepted for all record types including I-9 (per USCIS)
7-year storage cost (100 employees)Filing cabinets ($500-$1,500), storage space ($2,000-$5,000/year), laborCloud storage ($0-$200/year) or HR platform ($1,200-$2,400/year)
Audit response timeHours to days (physical search)Minutes (digital search and export)
Disaster recoveryNone (fire, flood, theft = permanent loss)Cloud backup with geographic redundancy
Access controlsPhysical lock (anyone with key sees everything)Role-based permissions per record type
Destruction verificationShredding (physically observe)Digital deletion with audit log
Retention trackingManual calendar or spreadsheetAutomated alerts when retention period expires

The transition to electronic storage is particularly valuable for record retention because digital records cost effectively nothing to store for 7 years, search and retrieval takes seconds instead of hours, access controls can enforce the separation requirements automatically, and retention tracking can be automated with alerts when records become eligible for destruction. The HR technology guide covers how to choose a system that handles document storage alongside other HR functions. The HR document management guide covers the broader document management system that retention fits into.

Common Record Retention Mistakes

MistakeWhy It HappensThe Fix
No retention policy existsFounder assumes records management is for big companiesCreate a written policy before your first hire. It takes one hour and prevents years of accumulated risk.
Destroying records too earlyUsing the shortest federal period without checking state requirementsDefault to 7 years after termination. Check state requirements for any state where employees work.
Keeping records foreverFear of destroying anythingExcessive retention increases storage costs, audit scope, and discovery liability in lawsuits. Destroy on schedule.
Not knowing the I-9 formulaAssumes 3 years from hire for everyone3 years from hire OR 1 year from termination, whichever is LATER. Calculate for each employee.
Mixing medical records into the personnel file during retentionRecords separated during employment but combined after terminationSeparation must be maintained throughout the entire retention period. Never merge files.
No destruction logDestroys records but does not document when or whyA destruction log proves systematic policy, not selective deletion. Keep the log indefinitely.
Destroying records during active litigation or investigationDoes not know about litigation holdsWhen litigation or investigation is pending or anticipated, preserve ALL potentially relevant records regardless of normal retention schedules.
Not retaining records for rejected applicantsAssumes retention only applies to hired employeesEEOC requires 1 year; OFCCP requires 2 years for federal contractors. Retain all hiring records.

The costliest mistake is the second one: destroying records before the applicable retention period has expired. The most common version: discarding payroll records after the 3-year FLSA period without checking that New York requires 6 years or that California requires 4 years. Multi-state employers must follow the longest applicable period. The small business HR guide covers how to build HR processes that account for multi-state compliance.

Key Takeaways
Federal retention periods range from 1 year (EEOC personnel records) to 30 years (OSHA toxic exposure). The safest default: keep all employee records for 7 years after the employee's last day.
The '7-year rule' is not a single law. It is a practical composite of ERISA (6 years), IRS audit exposure (up to 6 years), and state statutes of limitations (up to 6 years) plus a 1-year buffer.
I-9 retention uses a special formula: 3 years after hire OR 1 year after termination, whichever is later. Calculate for each employee individually.
State laws can extend federal retention periods. New York requires payroll records for 6 years (vs 3 years federal). Always follow the longest applicable period.
Record separation (I-9, medical, investigation files stored separately) must be maintained throughout the entire retention period, including after termination.
Document every destruction: create a log with employee name, record types, date, method, and authorization. The log proves systematic policy, not selective deletion.

Frequently Asked Questions

How long do you have to keep employee records?

Federal retention periods range from 1 year (EEOC personnel records) to 30 years (OSHA toxic exposure records). The most common federal requirements: I-9 forms for 3 years after hire or 1 year after termination (whichever is later), payroll records for 3 years (FLSA), tax records for 4 years (IRS), benefits records for 6 years (ERISA), and OSHA injury/illness logs for 5 years. The safest practical approach: keep all employee records for 7 years after the employee's last day.

What employee records need to be kept for 7 years?

No single federal statute requires exactly 7 years for all employee records. The 7-year recommendation comes from combining the longest common retention periods: ERISA requires 6 years for benefits records, the IRS recommends keeping employment tax records for 4 years but can audit up to 6 years in some cases, and many state statutes of limitations extend to 6 years. Adding a 1-year buffer gives the 7-year recommendation. Keeping all records for 7 years covers virtually every federal and state requirement.

How long do employers keep employee records after termination?

After termination, keep personnel records for at least 1 year (EEOC), payroll records for 3 years (FLSA), tax records for 4 years (IRS), I-9 forms for 1 year or 3 years after hire (whichever is later), benefits records for 6 years (ERISA), and OSHA injury records for 5 years. The practical recommendation: keep everything for 7 years after the employee's last day. This covers all common federal and state requirements plus the statute of limitations for most employment claims.

How long do companies keep employee records?

The retention period depends on the type of record and the applicable federal and state laws. Federal minimums range from 1 to 30 years depending on the record type. Most companies follow a simplified policy of keeping all records for 7 years after termination, which covers the longest common federal requirements and most state requirements. Some records (OSHA toxic exposure, workers comp in some states) may need to be kept longer.

Can I destroy old employee records?

Yes, after the applicable retention period has expired and there is no pending or anticipated litigation, audit, or government investigation involving those records. Destruction must be complete: paper records should be shredded (not thrown away), and electronic records should be permanently deleted from all systems including backups. Before destroying any record, verify that no state law requires a longer retention period and that no litigation hold applies.

Do I need to keep records for employees I did not hire?

Yes. Under EEOC regulations (29 CFR 1602.14), employers must retain all employment applications, resumes, and hiring-related documents for at least 1 year from the date of the hiring decision, regardless of whether the applicant was hired. This includes interview notes, test results, and any correspondence. For federal contractors subject to OFCCP, the retention period is 2 years.

How long do you keep I-9 forms?

I-9 forms must be retained for 3 years after the date of hire or 1 year after the date of termination, whichever is later. For an employee hired on January 1, 2024 and terminated on June 1, 2025: 3 years after hire = January 1, 2027; 1 year after termination = June 1, 2026. The later date is January 1, 2027, so the I-9 must be kept until at least that date. I-9s should be stored separately from the main personnel file.

Can employee records be stored electronically?

Yes. Federal law does not require paper records. Electronic storage is acceptable for all employee records, including I-9 forms (per USCIS guidance), as long as the system maintains document integrity, provides reasonable access for audits and inspections, produces legible copies on demand, and includes appropriate access controls to protect confidential information. E-signatures are valid under the ESIGN Act and UETA.

Ready to transform your onboarding?

7-day free trial No credit card required
Start Your Free Trial