6.1 Payroll Recordkeeping Requirements & Retention Schedules

Payroll Recordkeeping Requirements & Retention Schedules

Maintaining accurate, comprehensive, and readily accessible payroll records is a fundamental legal obligation of every employer operating in the United States. Federal and state regulatory agencies enforce distinct recordkeeping mandates, each designed to protect employee rights, verify tax compliance, support benefit determinations, and establish audit trails. Because these statutory requirements originate from different federal agencies—including the Department of Labor (DOL), the Internal Revenue Service (IRS), the Equal Employment Opportunity Commission (EEOC), the U.S. Citizenship and Immigration Services (USCIS), the Occupational Safety and Health Administration (OSHA), and the Employee Benefits Security Administration (EBSA)—retention timelines and documentation standards often diverge significantly.

For the Certified Payroll Professional (CPP), mastering these overlapping retention schedules, understanding electronic storage standards, and implementing compliant document destruction protocols are essential to safeguarding the enterprise against severe civil penalties, retroactive tax assessments, and labor standard sanctions.

---

1. The Multi-Agency Payroll Recordkeeping Architecture

Payroll departments do not maintain records under a single unified federal rule. Instead, payroll professionals must design retention schedules that satisfy the most stringent applicable statutory timeline among overlapping agency jurisdictions.

+-----------------------------------------------------------------------------+
|                 FEDERAL PAYROLL RECORD RETENTION TIMELINE OVERVIEW          |
|                                                                             |
|   1 YEAR        2 YEARS       3 YEARS       4 YEARS       5 YEARS   6+ YEARS|
|   +-----------+ +-----------+ +-----------+ +-----------+ +-------+ +-------+|
|   | EEOC      | | FLSA Supp.| | FLSA Basic| | IRS / FICA| | OSHA  | | ERISA ||
|   | Personnel | | Timecards | | Payroll   | | FITW/FUTA | | 300   | | Form  ||
|   | Records   | | Piecework | | Form I-9* | | Form 941  | | Logs  | | 5500  ||
|   | Job Apps  | | Schedules | | FMLA Recs | | Form W-4  | | Recs  | | Vest- ||
|   | (TitleVII)| | Deductions| | ADEA Recs | | Copies W-2| | (Cal. | | ing   ||
|   |           | | Tables    | | (*Hire+3) | | (§ 6001)  | | Year) | | Recs  ||
|   +-----------+ +-----------+ +-----------+ +-----------+ +-------+ +-------+|
+-----------------------------------------------------------------------------+

[!IMPORTANT] The Maximum Rule of Retention: When a specific payroll record is subject to multiple regulatory mandates with differing retention periods, the employer must retain the record for the longest applicable period. For example, while the FLSA requires basic payroll records to be kept for 3 years, the IRS mandates retaining employment tax records for 4 years. Therefore, payroll summary registers containing tax withholding data must be retained for at least 4 years.

---

2. Fair Labor Standards Act (FLSA) Retention Mandates (29 CFR Part 516)

The Fair Labor Standards Act, enforced by the Wage and Hour Division of the U.S. Department of Labor, establishes specific recordkeeping requirements under 29 CFR Part 516. The FLSA divides payroll-related documentation into two primary classifications: 3-year basic records and 2-year supplementary records.

+-----------------------------------------------------------------------------+
|                        FLSA 3-YEAR VS. 2-YEAR RECORDS                       |
|                                                                             |
|   [3-YEAR BASIC RECORDS (29 CFR § 516.5)]                                   |
|   - Employee full identifying demographic data (Name, SSN, Home Address)   |
|   - Date of birth (if under 19) and gender/occupation                       |
|   - Standard workweek definition (day/hour workweek begins)                 |
|   - Regular hourly rate of pay and basis of compensation                    |
|   - Total daily and weekly straight-time hours worked                       |
|   - Total straight-time earnings and total weekly overtime premium pay      |
|   - Total additions to or deductions from wages paid each pay period        |
|   - Total gross and net wages paid each pay period                          |
|   - Date of payment and the pay period covered by the payment               |
|   - Collective bargaining agreements and individual employment contracts    |
|   - Sales and purchase records (used for enterprise coverage tests)         |
|                                                                             |
|   [2-YEAR SUPPLEMENTARY RECORDS (29 CFR § 516.6)]                           |
|   - Basic time cards, time sheets, or electronic badge punch logs           |
|   - Piecework tickets, work logs, or production records                     |
|   - Wage rate tables, piece rate schedules, or bonus plans                  |
|   - Work-time schedules establishing daily/weekly hours of work             |
|   - Order, shipping, and billing records documenting employee assignments   |
|   - Detailed itemized records of additions to or deductions from pay        |
+-----------------------------------------------------------------------------+

Central vs. Local Record Storage Rules (29 CFR § 516.7)

• Central Recordkeeping: Employers may maintain basic records at a centralized corporate office or third-party payroll service provider's secure facility.
• 72-Hour Inspection Rule: If records are stored at a central location away from the workplace, the employer must make them available for inspection and copying at the local operating establishment within 72 hours of an official request from the DOL Wage and Hour Division.

---

3. IRS & Federal Employment Tax Retention (IRC § 6001)

Under IRC § 6001 and Treasury Regulation § 31.6001-1, every employer subject to federal employment taxes (FITW, FICA, and FUTA) must maintain all records pertinent to those taxes for at least 4 years.

The 4-Year Retention Clock

The 4-year clock begins on the later of:

1. The due date of the return for the period to which the records relate; or
2. The date the tax was paid.

For employment tax returns (such as Form 941), the statutory rule provides that a return filed before April 15 of the following calendar year is deemed filed on April 15 of that subsequent year for statute of limitations purposes under IRC § 6501(b)(2).

+-----------------------------------------------------------------------------+
|                 MANDATORY IRS 4-YEAR EMPLOYMENT TAX RECORDS                 |
|                                                                             |
|   - Employer Identification Number (EIN) and legal entity verification      |
|   - Employee names, permanent addresses, occupations, and Social Security  |
|     Numbers (SSNs)                                                          |
|   - Total amounts and dates of all wage, salary, annuity, and pension pay   |
|   - Portions of wage payments subject to FITW, Social Security, and Medicare|
|   - Withholding Exemption Certificates (Forms W-4, W-4P, W-4S, and W-4R)    |
|   - Dates and amounts of all federal tax deposits made via EFTPS            |
|   - Copies of all filed tax returns (Forms 941, 944, 940, 945, and W-3)     |
|   - Copies of filed employee wage statements (Forms W-2, W-2c, and 1099)    |
|   - Records of employee tips reported, allocated tips, and tip agreements   |
|   - Records of employer-provided fringe benefits, including valuation logs |
|   - Documentation substantiating employee expense reimbursement plans       |
|   - Third-Party Sick Pay statements, reconciliations, and Form 8922 copies  |
|   - Documentation supporting any employment tax credits claimed (e.g., WOTC)|
+-----------------------------------------------------------------------------+

[!CAUTION] Retention of Invalid Forms W-4: An employer must retain an employee's Form W-4 for at least 4 years after the date the last return was filed using the information on that certificate. If an employee provides a revised Form W-4, the prior Form W-4 must still be retained for 4 years following the tax filing date for the final year in which that old W-4 was effective.

---

4. Form I-9 Retention: The USCIS "Hire + 3 / Term + 1" Formula

Under the Immigration Reform and Control Act of 1986 (IRCA), codified in 8 U.S.C. § 1324a and 8 CFR § 274a.2, employers must verify the identity and employment authorization of every hired employee on Form I-9 (Employment Eligibility Verification).

The Statutory Retention Formula

Employers must retain Form I-9 for the longer of the following two periods: $\text{Retention Period} = \max\left(\text{Date of Hire} + 3\text{ years},\; \text{Date of Termination} + 1\text{ year}\right)$

+-----------------------------------------------------------------------------+
|                        FORM I-9 RETENTION FORMULA EXAMPLES                  |
|                                                                             |
|   CASE 1: SHORT-TENURE EMPLOYEE                                             |
|   - Hired: January 15, 2023 | Terminated: June 30, 2023 (Worked 5.5 months) |
|   - Hire Date + 3 Years:        January 15, 2026                            |
|   - Termination Date + 1 Year:  June 30, 2024                               |
|   - REQUIRED RETENTION DATE:    January 15, 2026 (Hire + 3 Years is LATER)  |
|                                                                             |
|   CASE 2: LONG-TENURE EMPLOYEE                                              |
|   - Hired: March 1, 2018 | Terminated: November 30, 2024 (Worked 6.75 years)|
|   - Hire Date + 3 Years:        March 1, 2021                               |
|   - Termination Date + 1 Year:  November 30, 2025                           |
|   - REQUIRED RETENTION DATE:    November 30, 2025 (Term + 1 Year is LATER)  |
+-----------------------------------------------------------------------------+

Form I-9 Storage and Inspection Rules

• Separate File Requirement: Best practice and statutory risk mitigation dictate storing Forms I-9 in a dedicated, separate Form I-9 binder or secure digital folder, completely separated from general personnel files. This prevents government auditors (from ICE or DOL) from accessing confidential personnel data during an I-9 audit.
• 3-Day Inspection Notice: Employers must be provided at least 3 business days' notice prior to an inspection of Forms I-9 by Immigration and Customs Enforcement (ICE), the DOL, or the Department of Justice (DOJ).

---

5. Civil Rights, EEOC & Discrimination Statutes

Federal civil rights legislation enforces recordkeeping standards to ensure documentation is available to investigate unlawful discrimination charges:

+-----------------------------------------------------------------------------+
|                    EEOC & CIVIL RIGHTS RETENTION MANDATES                   |
|                                                                             |
|   STATUTE                 COVERED RECORDS                     RETENTION     |
|   ----------------------  ----------------------------------  ------------  |
|   Title VII / ADA / GINA  Personnel records (applications,    1 Year from   |
|   (29 CFR § 1602.14)      resumes, hiring, promotion, demot-  creation or   |
|                           ion, transfer, termination, pay)    action date   |
|                                                                             |
|   ADEA (Age Discrim.)     Basic payroll records & demo data   3 Years       |
|   (29 CFR § 1627.3)       Job applications, pre-employment    1 Year        |
|                           tests, physical exam records                      |
|                                                                             |
|   EEO-1 Component 1       Copies of filed annual EEO-1        1 Year (Min)  |
|   (100+ employees)        reports and workforce data logs     (Best: 3 yrs) |
+-----------------------------------------------------------------------------+

[!IMPORTANT] The Active Charge Exception (Litigation Hold): Under 29 CFR § 1602.14, once a charge of discrimination has been filed with the EEOC or a state fair employment practices agency, or a lawsuit has been initiated, the employer must preserve all relevant personnel, payroll, and performance records until the final disposition of the charge or legal action. Routine document destruction schedules must be immediately suspended for affected files.

---

6. OSHA, FMLA, and ERISA Retention Rules

Occupational Safety and Health Administration (OSHA / 29 CFR Part 1904)

• Covered Forms: OSHA Form 300 (Log of Work-Related Injuries and Illnesses), Form 300A (Summary of Work-Related Injuries and Illnesses), and Form 301 (Injury and Illness Incident Report).
• Retention Mandate: Employers must retain these records for 5 years following the end of the calendar year covered by the records.
• Confidentiality: Employee medical and exposure records must be maintained for the duration of employment plus 30 years under 29 CFR § 1910.1020.

Family and Medical Leave Act (FMLA / 29 CFR § 825.500)

• Retention Period: 3 years for all FMLA-related records.
• Covered Records: Basic payroll and demographic data, dates FMLA leave is taken, copies of employee FMLA notices, employer eligibility and designation notices, and records of any leave disputes.
• Separate Medical Files: Medical certifications, recertifications, and medical histories must be maintained in separate, confidential medical files under strict HIPAA/ADA confidentiality protocols, distinct from standard payroll and personnel files.

Employee Retirement Income Security Act (ERISA §§ 107 & 209)

• Plan Filings (§ 107): Records supporting annual Form 5500 employee benefit plan filings (vouchers, work papers, receipts, actuarial statements) must be retained for at least 6 years after the filing date.
• Benefit Determinations (§ 209): Employee service, hours worked, and compensation records necessary to determine vesting and benefit eligibility must be maintained indefinitely (for as long as they may be relevant to determine benefits due).

---

7. Master Federal Record Retention Comparison Matrix

---

8. Electronic Recordkeeping & Data Integrity Standards

Under IRS Revenue Procedure 98-25 and DOL regulations under 29 CFR § 516.1, employers are permitted to maintain payroll and tax records electronically, provided the electronic storage system satisfies strict operational criteria:

+-----------------------------------------------------------------------------+
|                 ELECTRONIC PAYROLL STORAGE COMPLIANCE CRITERIA              |
|                                                                             |
|   [1. LEGIBILITY & ACCURACY] ---> Guarantees exact reproduction of paper    |
|                                   originals without data distortion         |
|                                                                             |
|   [2. RETRIEVAL & INDEXING]  ---> System provides search, indexing, and     |
|                                   retrieval capabilities within 72 hours    |
|                                                                             |
|   [3. AUDIT TRAILS & LOGS]   ---> Captures all additions, modifications, and|
|                                   deletions with user IDs and timestamps    |
|                                                                             |
|   [4. SECURITY CONTROLS]     ---> Implements role-based access, encryption, |
|                                   and off-site disaster recovery backups    |
|                                                                             |
|   [5. SECURE DISPOSAL]       ---> Compliant document destruction (NIST 800-|
|                                   88 shredding/wiping) at retention end     |
+-----------------------------------------------------------------------------+

[!WARNING] Premature Record Destruction Penalties: Destroying payroll or tax records prior to the expiration of the statutory retention period leaves the employer unable to substantiate deductions, tax credits, or wage calculations during an audit. In such cases, regulatory agencies may disallow credits, assess maximum statutory penalties, and draw adverse legal inferences against the employer in wage-and-hour or discrimination litigation.