How Long You’re Actually Required to Keep Employee Records

A new HR leader inherits a filing cabinet, a shared drive, and three different opinions about how long to keep an old employee's file. Someone says seven years. Someone says forever. Someone says "check with legal." All three are guessing, and none of them are wrong exactly, because the honest answer is that there is no single retention period for employee records. There are several, running on different clocks, tied to different documents, and mixing them up is how a business ends up either destroying something it was legally required to keep or holding onto sensitive files years past when it needed to.

Recordkeeping is one of the practices called out in 8 Best Practices for HR Compliance, which frames it as maintaining a centralized, secure system for organizing and retrieving employment records. That framing is correct as far as it goes, but it doesn't answer the question most HR and payroll leaders actually have. How long. This guide answers that question with the current federal minimums, record type by record type, and explains why "check your state" is not a throwaway line.

Recordkeeping is not one rule, it's three

Federal law does not treat "employee records" as a single category with one retention clock. Immigration verification, wage and hour documentation, and general personnel files each fall under a different agency, a different statute, and a different minimum retention period. A record that has satisfied its federal requirement under one rule can still be subject to another. That's the part that trips up even organized HR teams: the safe move is rarely to pick the shortest deadline and apply it everywhere, and it's just as risky to assume the longest deadline covers everything else by default.

Form I-9 retention

Every employer must complete Form I-9 to verify identity and work authorization for each employee. Per USCIS I-9 retention guidance, employers must retain each I-9 for 3 years after the date of hire or 1 year after the date employment ends, whichever is later.

That "whichever is later" clause matters. For an employee who stays five years, the retention clock is driven by the termination date, not the hire date, since 1 year after termination falls well past the 3-year mark. For an employee who leaves after eight months, the 3-year-from-hire rule controls instead, because it extends further out than 1 year from termination would. Employers who apply a flat "3 years and done" rule to every I-9 risk destroying files early for short-tenure employees.

Payroll records under the FLSA

Wage and hour documentation carries its own federal clock. Under DOL's FLSA recordkeeping rule, specifically U.S. Department of Labor, Wage and Hour Division, Fact Sheet #21 and 29 CFR Part 516, employers must keep payroll records, collective bargaining agreements, and sales or purchase records for at least 3 years.

A separate, shorter minimum applies to the records that support how wages were calculated. Time cards, wage rate tables, and work and time schedules, the documentation underlying payroll figures rather than the payroll figures themselves, must be kept for at least 2 years under the same FLSA recordkeeping rule.

For payroll leaders, this is the distinction that matters most day to day. The payroll register and pay stub history run on the 3-year clock. The punch data and schedules that produced those numbers run on the 2-year clock. Treating them as one bucket with one deadline is a common and avoidable error.

Personnel and employment records under EEOC

General personnel and employment records fall under EEOC recordkeeping requirements, and this is where the rules get the most specific.

Baseline retention is at least 1 year from the date the record was made or from the personnel action it relates to, whichever is later. That covers routine employment records: applications, promotion and demotion documentation, job descriptions, performance evaluations, and similar files.

Involuntary termination changes the clock. If an employee is involuntarily terminated, that employee's personnel records must be retained for 1 year from the date of termination, per EEOC recordkeeping requirements.

An open charge changes the clock again, and it overrides everything else. If an EEOC charge is filed, all relevant records must be retained until final disposition of the charge or any related lawsuit, regardless of what the standard 1-year minimum would otherwise allow. A file that would normally be eligible for disposal can suddenly need to be held indefinitely because of a single charge.

Payroll records get a specific carve-out here too. Under the ADEA, payroll records specifically must be kept 3 years, per EEOC recordkeeping requirements, aligning with (though separately sourced from) the FLSA's 3-year payroll standard.

Federal minimums at a glance

Record type Federal minimum retention Source
Form I-9 3 years after date of hire, or 1 year after employment ends, whichever is later USCIS
Payroll records, collective bargaining agreements, sales/purchase records At least 3 years DOL Wage and Hour Division, Fact Sheet #21, 29 CFR Part 516
Records underlying wage computations (time cards, wage rate tables, work/time schedules) At least 2 years DOL Wage and Hour Division, Fact Sheet #21, 29 CFR Part 516
General personnel/employment records At least 1 year from date made or from the personnel action, whichever is later EEOC recordkeeping requirements
Personnel records, involuntary termination 1 year from date of termination EEOC recordkeeping requirements
Payroll records under the ADEA At least 3 years EEOC recordkeeping requirements
Records relevant to an open EEOC charge Until final disposition of the charge or related lawsuit EEOC recordkeeping requirements

These are current federal floors rather than ceilings, and they do not substitute for confirming the rule that actually applies where a given employee works.

State law can require longer

Federal minimums set the floor, not the finish line. Many states set their own recordkeeping requirements, and in a number of cases those state rules extend well past the federal minimums described above, sometimes by years. A business operating in a single state needs to know that state's rules on top of the federal ones. A business operating in multiple states needs to know the longest applicable requirement for each record type and apply it consistently, because defaulting to the federal minimum in a state that requires more is still a compliance gap, even if every federal box gets checked.

This is exactly the kind of detail that's easy to get wrong when retention policy is decided once, informally, and never revisited as the business adds locations or as state rules change.

Turning retention rules into an actual system

Knowing the rules is one problem. Applying them consistently, for every employee, across every record type, is a different problem, and it's the one most HR teams actually lose to. When I-9s live in a filing cabinet, payroll records live in the payroll provider's portal, and personnel files live on a shared drive with no consistent naming convention, nobody can say with confidence what's been kept, for how long, or whether anything eligible for disposal is sitting around unnecessarily. That gap tends to surface at the worst possible moment, during an audit, a departing employee's records request, or the early stages of a charge investigation.

AsureCentral addresses this by keeping payroll, HR, and employee documentation in one connected system of record rather than scattered across spreadsheets and separate file folders. When I-9s, payroll history, and personnel records live in the same platform with role-based access, retention becomes a matter of applying a documented policy consistently instead of reconstructing where everything is after the fact. That's a meaningfully different starting point than rebuilding a paper trail under deadline pressure.

When the answer depends on your state

Because state requirements vary and can exceed federal minimums, the honest answer to "how long do we keep this" is sometimes "longer than the federal rule, depending on where this employee works." Getting that answer wrong in either direction, destroying records too early or holding sensitive data indefinitely, carries real risk.

This is where Asure HR Compliance fits for HR leaders who don't have in-house legal or compliance staff dedicated to tracking every state's recordkeeping statute. Certified HR professionals can help confirm what a specific state requires beyond the federal floor, so retention policy reflects the actual rules in every state where a business has employees rather than only the federal minimums that apply everywhere.

The bottom line

There is no single number for "how long do we keep employee records." There are several, and they depend on the document. Three years or one year after termination, whichever is later, for I-9s. Three years for payroll records, two years for the timecards and schedules behind them. One year for general personnel records, one year from termination for involuntary separations, and indefinitely if a charge gets filed. Then state law on top of all of it. A centralized system of record removes the guesswork about where things live and how long they've been there; knowing which federal clock applies to which document is what keeps that system from applying the wrong deadline in the first place.

Related posts