Payroll Records Retention 2026: How Long HR Must Keep Pay Stubs, Timecards & W-2s

Payroll Records Retention Requirements for HR in 2026

If your HR team can't produce a timecard from three years ago, a single Department of Labor (DOL) audit or unpaid-overtime lawsuit can cost your company six figures — plus liquidated damages equal to the unpaid wages. Federal law doesn't just recommend record-keeping; it requires it under five overlapping statutes: the FLSA, IRS Code, ERISA, EEOC/ADEA, and IRCA (I-9).

This 2026 guide gives HR managers, payroll administrators, and small business owners the exact retention schedule — by document type, by law, and by minimum years — plus what to do when state law requires longer.

The Master Payroll Retention Schedule (2026)

| Document | Minimum Retention | Governing Law |

|---|---|---|

| Timecards, work schedules, wage rate tables | 2 years | FLSA 29 CFR § 516.6 |

| Payroll records, W-2s, W-4s, pay stubs | 4 years | IRS § 6001 / Reg 31.6001-1 |

| Employment records (hire, fire, promotion) | 1 year (3 years if federal contractor) | EEOC / Title VII |

| Age-related records (40+ employees) | 3 years | ADEA |

| I-9 forms | 3 years after hire OR 1 year after termination (whichever is later) | IRCA |

| 401(k), pension, ERISA plan documents | 6 years (some indefinitely) | ERISA § 107 & § 209 |

| FMLA leave records | 3 years | 29 CFR § 825.500 |

| OSHA injury logs (Form 300) | 5 years | 29 CFR § 1904.33 |

| Unemployment tax records | 4 years | FUTA |

Rule of thumb: When laws overlap, keep the longest. A W-2 covered by both IRS (4 yrs) and ERISA-linked deferrals (6 yrs) should be kept 6 years minimum.

1. FLSA Requirements: The 2-Year and 3-Year Rule

The Fair Labor Standards Act (29 CFR Part 516) creates a split retention rule that trips up most HR teams:

Keep for 3 years:

• Payroll records (name, SSN, address, occupation)
• Total hours worked each workweek
• Straight-time and overtime earnings
• Additions to and deductions from wages
• Collective bargaining agreements
• Certificates for exempt employees

Keep for 2 years:

• Timecards and piece-work tickets
• Wage rate tables
• Work schedules
• Records of additions/deductions explanations

Learn more in our FLSA overtime exemption guide.

2. IRS Payroll Tax Records: The 4-Year Rule

Under IRS Publication 15 (Circular E) and 26 CFR § 31.6001-1, employers must keep all employment tax records for at least 4 years after the tax becomes due or is paid, whichever is later:

• Forms W-2, W-3, W-4, 941, 940, 1099-NEC
• Employer Identification Number (EIN)
• Amounts and dates of wage, annuity, and pension payments
• Fair market value of in-kind wages
• Employees' names, addresses, SSNs, and occupations
• Copies of returns filed and confirmation numbers

Why 4 years matters: The IRS statute of limitations for assessing additional employment tax is generally 3 years, but extends to 6 years if income is understated by 25%+. Best practice: keep 7 years to cover fraud audits.

3. ERISA & 401(k) Records: The 6-Year Rule

ERISA § 107 requires plan administrators to keep records supporting Form 5500 filings for at least 6 years. ERISA § 209 requires records used to determine benefits to be kept indefinitely — or until the participant's benefit fully vests and is distributed.

Keep permanently:

• Original 401(k) plan documents and amendments
• Summary Plan Descriptions (SPDs)
• Enrollment forms and beneficiary designations
• Vesting schedules
• Loan and hardship withdrawal records

4. I-9 Forms: The "3 or 1" Rule

Under the Immigration Reform and Control Act (IRCA), every I-9 must be retained for the later of:

• 3 years after the date of hire, OR
• 1 year after the date of termination

Example: An employee hired Jan 1, 2020 and terminated Jan 1, 2026 → keep I-9 until Jan 1, 2027 (1 year after termination is later than 3 years after hire).

Store I-9s separately from personnel files — ICE audits get all I-9s but not unrelated HR data.

5. EEOC, ADEA & Federal Contractor Rules

• Title VII / ADA: 1 year from record-making or personnel action
• ADEA (40+ employees): 3 years for payroll; 1 year for applications
• OFCCP federal contractors: 2 years for most personnel records
• Under active litigation or charge: Retain until final disposition — do not destroy anything.

6. State-Level Extensions HR Must Track

Federal minimums are just the floor. Several states require longer:

• California: 3 years for payroll (Labor Code § 1174) + 3 years for itemized wage statements (§ 226) — but the 4-year statute of limitations for wage claims makes 4 years the practical minimum.
• New York: 6 years for payroll and hour records (Labor Law § 195).
• Illinois: 3 years under IWPCA.
• Washington & Oregon: 3 years.
• Massachusetts: 3 years.

When federal and state overlap, the longer period wins.

7. Electronic Records: What the DOL Accepts

Under 29 CFR § 516.1(a), electronic records are fully acceptable if they:

• . Are readable and reproducible on paper if requested
• . Are indexed for easy retrieval
• . Preserve original data integrity (no unauthorized alteration)
• . Include audit trails showing edits

Best-practice stack: Cloud HRIS (Gusto, ADP, Rippling, Paychex) + encrypted backup + version history + role-based access. Never rely on a single desktop spreadsheet.

8. Litigation Hold: When Retention Becomes Mandatory

The moment your company reasonably anticipates litigation — a demand letter, EEOC charge, DOL audit notice, or class action filing — routine destruction schedules must stop immediately for any potentially relevant records. Failure to preserve triggers spoliation sanctions (adverse inference, monetary penalties, or default judgment).

Issue a written litigation hold memo to HR, Payroll, IT (email, chat, HRIS admins), and direct supervisors of the affected employees.

9. Records You Should Actually Keep Forever

Even after minimums expire, keep these permanently:

• Executed employment contracts and NDAs
• Non-compete and severance agreements
• Stock option grants and equity vesting schedules
• Retirement plan documents (ERISA § 209)
• Records of workplace injuries with lifetime medical implications
• Trade secret and IP assignment agreements

10. HR Compliance Checklist for 2026

Print this and hand it to your payroll clerk:

• . Timecards and schedules — 2 years
• . Payroll registers and W-2s — 4 years (7 recommended)
• . I-9s — 3 years after hire OR 1 year after termination
• . 401(k) and ERISA docs — 6 years minimum (indefinitely for participants)
• . FMLA records — 3 years
• . OSHA logs — 5 years
• . Personnel files — 7 years post-termination (best practice)
• . Written retention policy signed by CEO
• . Annual audit of destruction log
• 0. Litigation hold procedure documented

Penalties for Failing to Keep Records

• FLSA violations: Up to $1,000 per willful violation + back wages + liquidated damages (double back pay)
• IRS failure to keep records: Presumption of correctness lost — IRS can estimate liability
• I-9 violations: $281 – $2,789 per form (2026 inflation-adjusted)
• ERISA: $110/day for missing plan records, capped per participant
• Class action wage suits: Missing timecards create an inference in favor of the plaintiff (Anderson v. Mt. Clemens Pottery, 328 U.S. 680)

Related HR & Payroll Guides

• US Payroll Guide 2026: Complete Employer Handbook
• Salaried Non-Exempt Overtime Pay (2026)
• How to Claim Unpaid Overtime From Your Employer
• FLSA Overtime Exemptions
• Paycheck Calculator (2026)

The Bottom Line for HR

Keep everything for 7 years by default. It's cheaper than fighting an audit, safer than spoliation, and simpler than tracking 12 overlapping retention clocks. Digitize, encrypt, back up, and document your retention policy in writing.

This article is general HR guidance, not legal advice. Consult an employment attorney or CPA for state-specific retention rules.