How Long to Keep Payroll Records: IRS, FLSA, and State Rules

Federal law requires you to keep payroll records for at least four years under IRS employment tax rules, but that is only the floor. The Department of Labor, USCIS, ERISA, and most states impose their own clocks on documents that sit in the same employee file, and the longest applicable period controls. In practice, deciding how long to keep payroll records means checking each document against every rule that touches it, then holding the whole file until the last clock runs out.

The IRS Four-Year Rule

The IRS instructs employers to keep all employment tax records for at least four years after the date the tax becomes due or is paid, whichever is later.¹ The obligation flows from Internal Revenue Code Section 6001, which requires anyone liable for tax to maintain the records the IRS prescribes.²

The four-year requirement covers the documents most employers think of as payroll:

Form 941 quarterly returns and Form 940 annual unemployment returns
Copies of every W-2 issued and the W-3 transmittal
Deposit records from EFTPS, including dates, amounts, and acknowledgment numbers³
Any records used to determine tax liability: pay rates, hours worked, tip allocations, and taxable fringe benefit calculations
Form W-4 withholding certificates, kept for at least four years⁴

When an employee submits a replacement W-4, hold both the old and new versions until the four-year period has run for every return the old form affected. Tossing the superseded form early leaves you unable to explain a mid-year withholding change if the IRS asks.

When the Clock Starts

The starting date matters more than most employers realize. The four-year period begins on the later of the return’s due date or the date the tax was actually paid.¹ A Form 941 for the first quarter of 2026, due April 30, 2026, means records must be kept until at least April 30, 2030. If the tax was paid late on June 15, 2026, the clock does not start until June 15, and the retention deadline pushes to June 15, 2030. Late payments quietly extend your recordkeeping obligations.

When Four Years Isn’t Enough

The four-year rule assumes normal filings. Three situations extend it, and two of them extend it indefinitely.

No return filed. If you never filed an employment tax return for a period, keep those records indefinitely. There is no statute of limitations when no return exists, so the IRS can assess tax at any time.¹

Fraudulent return. A return filed with intent to evade tax carries no assessment deadline either.⁵ Records connected to that return should be kept permanently.

Substantial understatement. When a taxpayer omits more than 25% of gross income, the IRS has six years instead of the normal window to pursue the shortfall.⁵ If there is any chance of a significant understatement, six years is the safer target.

Department of Labor Requirements Under the FLSA

The Fair Labor Standards Act imposes its own retention rules. The DOL is not looking at your tax deposits; it is checking whether you paid employees correctly. It has no jurisdiction over W-2s or tax withholding.⁶ But the wage and hour data the DOL wants often sits in the same files as your tax records.

Three Years for Basic Payroll Records

The FLSA requires employers to preserve basic payroll records for at least three years from the last date of entry.⁷ Those records include employee names, addresses, occupations, sex, date of birth (if under 19), pay rates, total wages paid each pay period, and payment dates.⁸

The three-year category also covers collective bargaining agreements, employment contracts relied on for FLSA exemptions, and written agreements about overtime or tip calculations. For those documents, the clock runs from the last effective date rather than the last entry date.⁷ Records explaining pay differences between men and women doing the same work must also be kept three years, in support of the Equal Pay Act.⁹

Two Years for Supporting Documents

A shorter two-year period applies to the working documents behind wage calculations: time cards, work schedules, wage rate tables, and records of additions to or deductions from wages.¹⁰ The two-year clock starts from the last date of entry on the document.

Time records are where overtime disputes get settled. If an employee says they worked 50 hours in a week and you say 40, the time card is your evidence. If the records are gone when a complaint lands, the DOL tends to credit the employee’s version.

Documents With Longer Clocks

Several documents commonly filed with payroll have retention rules from other agencies, and those rules often impose the longest requirement in the folder.

Form I-9

Keep each Form I-9 for three years after the date of hire or one year after employment ends, whichever is later.¹¹ For an employee hired January 1, 2025, and terminated June 30, 2026, three years from hire is January 1, 2028, and one year from termination is July 1, 2027. The later date, January 1, 2028, is your deadline. For short-tenured employees, the three-year-from-hire date almost always controls.

ERISA Benefit Plan Records

If you sponsor a retirement plan or welfare benefit plan, ERISA requires records supporting plan filings to be kept for at least six years after the filing date. That covers Form 5500 filings, nondiscrimination test results, financial reports, employee communications, and fidelity bond documentation. Plan documents themselves — adoption agreements, amendments, summary plan descriptions, determination letters — must be maintained as long as they remain relevant to determining benefits that are or may become due.¹²

The six-year ERISA requirement frequently becomes the controlling retention period for the whole benefits section of an employee’s file, outlasting both the IRS and FLSA rules.

Garnishments and Levy Orders

Wage garnishments, child support orders, and IRS tax levies fall under the FLSA’s three-year retention requirement as part of basic payroll documentation.¹³ Keep the court order or levy notice alongside records of amounts withheld and remitted. When the garnishment comes from an IRS levy, the four-year employment tax period applies to the tax-related portion.

Independent Contractor Records

Payments to independent contractors do not involve payroll withholding, but they still create recordkeeping obligations. The IRS advises keeping each W-9 for four years in case of questions from the worker or the IRS. The same four years applies to copies of Form 1099-NEC and the supporting documentation behind each payment.

The real risk is reclassification. If the IRS or a state agency later treats a contractor as an employee, you will need the contract, invoices, and evidence of how the work was performed to defend the original classification. Four years from the last payment is the minimum, and six is safer given the broader audit windows that can apply.

State Rules Often Set the Real Deadline

Federal rules set the floor, not the ceiling. Many states require payroll records to be kept for five or six years, exceeding both the IRS four-year and FLSA three-year periods. These longer windows typically match the state’s statute of limitations for wage claims, which can run longer than the federal equivalent.

State-level obligations generally cover state income tax withholding records, state unemployment insurance filings, and documentation for state-mandated leave programs. A W-2 is a federal form, but if your state requires six years of wage records, the W-2 stays in the file for six years.

Employers with workers in multiple states need a retention policy built around the longest requirement among all applicable jurisdictions. Running separate schedules by state is possible but operationally fragile. Most multi-state employers are better off picking the longest period they face and applying it across the board.

Electronic Storage

Both the IRS and DOL allow electronic storage, but saving a PDF somewhere is not enough. The IRS’s requirements under Revenue Procedure 97-22 still apply: an acceptable system must index, store, preserve, retrieve, and reproduce records, prevent unauthorized changes or deletion, run a quality assurance program, and produce legible hard copies on demand.¹⁴ The IRS cannot be locked out of any part of the system by third-party agreements or software restrictions.

The DOL’s standard is less prescriptive but requires that electronic records be available for inspection, copying, and transcription on request. Records on microfilm or in automated systems are acceptable if they produce clear, date-identifiable reproductions.¹⁵

What Happens When Records Are Missing

There is no single IRS fine labeled “failure to keep records.” The pain comes indirectly. Without records, you cannot substantiate your filings, and the IRS treats that the same as not filing or not paying correctly. The penalties that then apply include:

Failure to file on time: 5% of the unpaid tax per month, up to 25%¹⁶
Failure to pay on time: 0.5% of the unpaid amount per month, up to 25%¹⁶
Incorrect W-2s or other information returns: $250 per return, up to $3,000,000 per year, with reductions to $50 or $100 per return for early corrections and an increase to $500 or a percentage of the misreported amount for intentional disregard¹⁷
Interest on any unpaid balance from the original due date¹⁶

Willful failure to keep required records is a federal misdemeanor punishable by a fine of up to $25,000 ($100,000 for a corporation), up to one year in prison, or both.¹⁸ Criminal prosecution on that basis alone is rare, but the statute exists. On the DOL side, repeated or willful minimum wage or overtime violations carry civil penalties of up to $2,515 per violation.¹⁹ When an employer cannot produce time records to disprove a wage claim, the investigation effectively starts with the assumption that the employee is right.

Disposing of Records Safely

Once a record has passed every applicable retention deadline, it cannot simply go into a recycling bin. Payroll records contain Social Security numbers, addresses, bank account details, and wage information, and federal rules require reasonable measures to protect against unauthorized access during disposal.

Acceptable methods include shredding or pulverizing paper so it cannot be reconstructed, and destroying or erasing electronic media so the data cannot be recovered. If you hire a destruction vendor, check references, review security policies, or require certification from a recognized trade association.²⁰

Before destroying anything, confirm that no litigation hold, pending audit, or open investigation requires continued preservation. A record past its regulatory retention deadline can still be discoverable in a lawsuit, and destroying it after a hold has been issued creates far bigger problems than the cost of keeping it.

1
Internal Revenue Service. How Long Should I Keep Records
2
Office of the Law Revision Counsel. 26 U.S. Code 6001
3
Internal Revenue Service. Employment Tax Recordkeeping
4
Internal Revenue Service. Topic No. 753, Form W-4
5
Office of the Law Revision Counsel. 26 U.S. Code 6501
6
U.S. Department of Labor. Recordkeeping and Reporting
7
eCFR. 29 CFR 516.5
8
eCFR. 29 CFR 552.110
9
eCFR. 29 CFR 1620.32
10
U.S. Department of Labor. Fact Sheet 21: Recordkeeping Requirements Under the FLSA
11
USCIS. 10.0 Retaining Form I-9
12
DOL.gov. Recordkeeping in the Electronic Age
13
U.S. Department of Labor. Fact Sheet 21
14
IRS.gov. Revenue Procedure 97-22
15
eCFR. 29 CFR 825.500
16
Internal Revenue Service. Publication 15 (2026)
17
Office of the Law Revision Counsel. 26 USC 6721
18
Office of the Law Revision Counsel. 26 U.S. Code 7203
19
eCFR. Part 579
20
eCFR. 16 CFR 682.3