FLSA Payroll Retention Rules and Payroll Record Retention Requirements
Wondering how long to keep time cards, pay stubs, and W-2s? The Fair Labor Standards Act says three years for payroll records, but state law often asks for more—and knowing which clock applies is the first step to audit-ready compliance.
Keeping the right records for the right length of time isn't just a legal checkbox—it's your best defense if a wage claim comes in or the tax agency asks questions.
FLSA requires 3-year retention of payroll records
Under the Fair Labor Standards Act, employers must retain payroll records for three years. This retention period applies to core documents including hours worked, wage rates, total wages paid, deductions taken, and pay period dates. When a federal auditor walks in, the payroll register is the first document they ask for. It tells the story of hours, wages, and deductions.
Within that three-year requirement sits a separate FLSA standard for time records: the Department of Labor requires employers to keep time cards, schedules, and daily or weekly timesheets for at least two years. This shorter timeline covers the documentation of hours, but the summarized payroll data must remain accessible for the full three years. The practical result: keep everything for three years and both requirements are met.
Federal law sets floor; state requirements may exceed it
The FLSA's three-year rule is the federal minimum, but many states impose longer retention periods for payroll records. California, for example, requires four years for wage and hour records, while some states tie retention to the statute of limitations for wage claims — which can run five years or more. Before you file anything away, check your state's labor department rules to confirm which clock applies.
Here's why this matters: if a wage dispute lands in court and you can't produce your time records, you lose the ability to show what you actually paid and when. Keep the records and you have the facts on your side.Keeping complete records for the longer of federal or state timelines protects you in audits and disputes alike.
IRS Tax Document Retention and Federal Payroll Retention Requirements
The IRS has its own retention timeline for payroll records, and it doesn't perfectly align with the FLSA's three-year minimum. For most payroll tax filings — Forms 941 (quarterly wage and tax reports), W-2s, and W-3s (annual wage transmittals) — the IRS requires three years of retention. This standard covers the time window during which the IRS can audit a return, and it applies to the wage records, withholding reports, and reconciliation worksheets that support those filings.
But the clock extends under certain conditions. If the IRS identifies substantial underreporting of income — defined as more than 25% of the reported gross income — the agency can reach back six years. And for employment tax records tied to disputes or specific guidance scenarios, seven-year retention is often recommended to cover longer audit windows and statute-of-limitations questions.
Because the same wage data feeds both FLSA compliance and IRS audits, HR teams must track both timelines. A payroll register that proves you met minimum wage also proves you calculated withholding correctly. The quarterly 941 reconciliation worksheet that balances your federal deposits also documents the gross pay, tips, and taxable fringe benefits that underpin your W-2 totals.
Documents to Retain for IRS Audits
- All filed W-2s and W-3s, along with the backup payroll registers and tax deposit records that support the totals
- 941 quarterly filings and the reconciliation worksheets that tie each quarter's deposits to the reported wages and taxes
- Electronic or paper backup files that show how each employee's year-end totals were calculated, including adjustments for bonuses, corrections, or retroactive pay
By aligning your retention schedule to cover both the FLSA's three-year baseline and the IRS's extended windows, you protect your business from both wage-and-hour disputes and tax audits with a single, organized archive.
State Overrides & Multi-State Complications
Federal law sets the floor, but state agencies often raise it. While the FLSA and IRS both use a three-year baseline for most payroll records, many states impose longer retention periods that take precedence over federal minimums. California requires four years of payroll records, New York extends that to six, and Illinois holds employers to four years as well. If your business operates in any of these states—or in others with stricter rules—you're bound by the longer timeline, not the federal one.
For businesses with employees in multiple states, the practical rule is simple: retain records for the longest period required by any state where you employ workers. If you have staff in both New York and Tennessee, your retention policy must satisfy New York's six-year requirement across the entire organization. Building separate state-by-state policies is possible in theory but risky in practice—most HR teams find it safer and simpler to apply a single retention standard company-wide.
State tax agencies also maintain independent audit authority. They don't wait for the IRS to finish; they can request payroll records on their own schedule, often focusing on unemployment insurance contributions, state income tax withholding, and disability insurance records. Each state program carries its own retention rules, and they don't always align with payroll wage records. Missing a state-specific document during an audit exposes you to penalties that the IRS would never levy.
Mastering state requirements means knowing where your employees work, which state agencies have jurisdiction, and which retention period governs each record type. That knowledge closes the gap between federal compliance and state-level audit readiness, protecting your business from enforcement actions that arise because one state expected four years and you kept three.
Record Categories & Retention Timeline
Once you understand the baseline rules, the next step is mapping each document type to its retention timeline. This is the practical work of compliance: knowing which payroll records you're keeping, where they sit, and for how long they must remain accessible. Think of this as your payroll audit preparation checklist, organized by category and clock.
Payroll Registers and Wage Records: 3–7 Years
Your payroll register — the summary of gross pay, deductions, net pay, and employer taxes for each pay period — must be kept for three years under the FLSA and at least four years under IRS rules if it supports employment tax returns. Many states extend this to six or seven years. These records are your first line of defense in wage disputes and tax audits. If an employee claims unpaid overtime or a tax agency questions withholding, the register is the document that tells the story.
Time and Attendance Records: 2–6 Years
Time cards, electronic punch records, work schedules, and leave logs must be retained for two years under federal law, but the safe approach is three years to match the FLSA payroll standard. States like California and New York require four to six years. These records matter when disputes arise over hours worked, meal breaks, or overtime calculation. Without them, the law often sides with the employee's recollection.
Tax Forms and Reconciliation Worksheets: 3–7 Years
W-2s, Form 941 quarterly filings, state withholding returns, and the worksheets that reconcile them back to your payroll register should be kept for at least four years under IRS guidance, and longer if you filed amended returns or faced an audit. These documents prove you withheld and remitted the correct amounts, and they anchor every payroll tax conversation with federal and state agencies.
Employee I-9 and Immigration Records: 3 Years from Hire or 1 Year After Termination
Form I-9 and any E-Verify case documentation must be retained for three years from the date of hire or one year after the employee's termination, whichever is later. These are immigration compliance records, not payroll documents, but they often sit with HR and are subject to separate enforcement inspections. Missing or expired I-9s can result in penalties per form, not per audit.
Audit Readiness Checklist
Retention rules mean nothing if your records sit in file cabinets with no index, or digital folders labeled "Payroll 2022 Miscellaneous." When a state labor agency or the IRS requests documentation, you have days—not weeks—to produce organized, complete files. Audit readiness starts with a written retention policy that names every document type, assigns responsibility for storage, and commits to a specific timeline that meets FLSA, IRS, and your state's longest requirement.
Your policy document should list the retention period for each category: payroll registers (three to seven years depending on state law), time cards and schedules (minimum three years to satisfy both FLSA standards), W-2s and 941 forms (three years baseline, six if underreporting or disputes are in play), and I-9 forms (three years from hire or one year after termination). Date the policy, have a manager sign it, and train your payroll staff on where records live and how to retrieve them. This documentation proves intent to comply—a factor auditors weigh when deciding whether a record gap was negligence or honest oversight.
Establish a quarterly audit routine. Every three months, verify that payroll registers match time records, that W-2 totals reconcile to 941 quarterly filings, and that every employee file contains signed I-9s and tax withholding forms. Organize records in three dimensions: by employee name, by payroll period, and by document type. This structure lets you pull a single employee's wage history or reconstruct an entire pay period in minutes.
Digital record-keeping systems—payroll software with built-in archiving, cloud storage with version control—protect against loss and make retrieval instant. Store physical copies of signed forms (I-9s, state withholding certificates) in locked cabinets with a log of who accessed them and when. Agencies reviewing your retention practices look for consistency, accessibility, and proof that you treat compliance as a system. Not a scramble when the audit letter arrives.