HR Record Retention Requirements: What to Keep and for How Long

Managing employee records is a key responsibility for HR professionals. With the ever-evolving landscape of HR record retention requirements in the US, it’s essential to know what documentation needs to be retained and for how long to avoid legal complications. From employment contracts to payroll records, each document has its own retention period dictated by federal and state law. Non-compliance carries real consequences—including fines, audit exposure, and increased liability in employment disputes. In this guide, we outline the critical HR record retention requirements to help HR teams stay compliant and organized.

Types of Documents to Retain

There are several categories of employee records that HR teams must retain. These include:

• Personal and employment information: Resumes, job applications, offer letters, employment contracts, and I-9 forms.
• Payroll and compensation records: W-2s, W-4s, pay stubs, overtime records, and salary change history.
• Timekeeping documents: Timesheets, attendance records, and remote work logs.
• Benefits records: Health insurance enrollment, COBRA notices, retirement plan elections, and leave requests.
• Performance evaluations: Annual reviews, disciplinary actions, performance improvement plans, and promotions.
• Termination records: Resignation letters, termination notices, severance agreements, and exit interview summaries.

Each category has its own retention timeline. Maintaining a comprehensive document matrix that maps record types to required retention periods—and assigns ownership for each—is the foundation of a compliant records management program.

Federal Record Retention Requirements

Federal laws govern the retention of various employee records and set the national baseline for HR compliance. Key requirements from major federal agencies include:

• EEOC (Equal Employment Opportunity Commission): Personnel and employment records must be kept for at least one year after creation or after the action they relate to. For organizations with 100 or more employees, EEO-1 reports must be retained for one year. In the event of a charge filed, records must be preserved until the charge is resolved.
• Department of Labor (DOL) — FLSA: Payroll records, time cards, collective bargaining agreements, and wage calculation records must be retained for at least three years. Records used to compute wages must be kept for two years.
• IRS: Employment tax records (including W-2s, W-4s, and quarterly filings) must be retained for at least four years after the tax is due or paid, whichever is later.
• OSHA: Work-related injury and illness records (Form 300 logs) must be retained for five years.
• ERISA: Employee benefit plan records must be retained for at least six years from the date of filing.

State-Specific Record Retention Requirements

In addition to federal mandates, many states impose their own—often more stringent—record retention requirements. HR teams must know the rules for every state in which they employ workers:

• California: Employment records must generally be retained for three years. Payroll records must be kept for three years under California Labor Code, and wage statements for three years. California’s broad statute of limitations for employment claims means longer retention is often prudent.
• New York: Wage and hour records must be retained for six years under New York Labor Law. Personnel records and performance evaluations should be kept for at least three years post-employment.
• Illinois: Employers must retain payroll records for three years and timekeeping records for five years under the Illinois Wage Payment and Collection Act.
• Texas: Retention requirements largely align with federal standards, but HR teams should verify requirements specific to Texas Workforce Commission rules.

How to Organize and Store Employee Records

Organizing employee records effectively is a vital part of HR management. Best practices include:

• Use a cloud-based platform like Treegarden to digitize and securely store employee records in a centralized, access-controlled database with full audit logging.
• Implement a written document retention policy that specifies what to keep, where, for how long, and who is responsible for each category.
• Enforce role-based access controls so that sensitive records are only accessible to authorized personnel.
• Encrypt records at rest and in transit, and perform regular security audits of your document storage systems.
• Back up all digital records regularly and test restoration procedures to ensure data integrity.

Document Destruction and Archiving

When the retention period for a document expires, it must be destroyed securely or moved to a clearly designated archive. Improper destruction—such as throwing printed records in an unsecured bin—can itself create liability. Required steps include:

• Review your document retention policy annually and update it to reflect regulatory changes.
• Use certified shredding services (with a certificate of destruction) for paper documents containing PII or sensitive employment data.
• Implement automated deletion schedules for digital records that have reached the end of their retention period.
• Maintain a destruction log documenting what was destroyed, when, and by whom—this log should itself be retained for several years.
• Hold destruction of any record related to ongoing or threatened litigation until legal hold is formally released.

Common Mistakes to Avoid

HR teams routinely make preventable errors in record management. To stay compliant, avoid these pitfalls:

• Applying a single retention period to all records instead of using a document-specific retention schedule.
• Retaining records past their required period without a documented business justification, which creates unnecessary data liability.
• Storing documents in unsecured shared drives, email folders, or physical filing systems without access controls.
• Failing to train HR staff and managers on what records they create, how to store them, and what they must not delete.
• Not updating the retention policy when employment law changes—particularly in dynamic states like California and New York.

Tools for Tracking Retention

Managing record retention at scale is impossible without the right tooling. Treegarden offers document management capabilities that allow HR teams to set automated retention timers, receive alerts when records approach expiration, and maintain centralized audit trails. By integrating document management into your core HR platform, teams eliminate the risk of manual tracking errors and ensure that compliance obligations are met consistently across every record type and every jurisdiction.

Electronic Records, Digital Signatures, and Legal Validity

The transition from paper-based HR records to electronic systems has accelerated dramatically since 2020, and most US organisations now manage the majority of their employment documentation in digital form. This shift offers significant operational advantages — easier retrieval, better access controls, lower storage costs, and simpler disaster recovery — but it also introduces legal questions about the validity of electronic records and signatures that HR teams must understand and address.

The legal framework for electronic records in the US is established primarily by the Electronic Signatures in Global and National Commerce Act (E-SIGN, 2000) and the Uniform Electronic Transactions Act (UETA), adopted by most states. Together, these laws establish that electronic signatures have the same legal force as handwritten signatures and that electronic records satisfy requirements for written documentation — provided that certain conditions are met. The most important conditions are that all parties consent to electronic transactions, that the electronic signature can be attributed to the signing party, and that the record can be retained and accurately reproduced.

Not all electronic signature solutions meet these legal standards equally. Simple typed names at the bottom of an email do not provide the same evidentiary strength as signatures captured through a dedicated e-signature platform (DocuSign, Adobe Sign, HelloSign) that logs the signer's IP address, timestamp, and email verification. For high-stakes employment documents — offer letters, non-disclosure agreements, non-compete agreements, separation agreements — using a purpose-built e-signature platform creates a more legally defensible record than informal electronic acknowledgements.

Data backup and business continuity planning for electronic HR records require specific attention. If your HRIS goes offline, is subject to a data breach, or the vendor goes out of business, you need access to your employment records. Negotiate data export rights and backup frequency requirements into your HRIS contract before signing. Maintain your own encrypted backups of critical employment records (signed contracts, termination documentation, FMLA records) in a system you control, not solely in a vendor-managed platform. The retention obligation is yours, not your vendor's — treat data custodianship accordingly.

Records Management During Litigation and Investigations

When litigation, regulatory investigation, or internal investigation is reasonably anticipated or already underway, HR's records management obligations change significantly. Legal hold requirements supersede normal retention and destruction policies — meaning that records that would ordinarily be destroyed on schedule must be preserved until the legal matter is resolved. Failure to implement legal holds and preserve relevant records can constitute spoliation of evidence, resulting in sanctions, adverse inference instructions to juries, or direct liability that exceeds the underlying claim.

Legal holds should be implemented immediately upon receiving notice of litigation (service of process, demand letter, or EEOC charge filing) or upon learning information that makes litigation reasonably foreseeable. The hold should be issued in writing by counsel, distributed to all individuals and systems that may contain relevant records, and acknowledged by each recipient. HR's role is to identify which records are potentially relevant — employment files, performance records, communication logs, payroll data — and ensure that automatic destruction processes are suspended for those records.

Electronic discovery (eDiscovery) in employment litigation frequently requires producing large volumes of HR records in specific formats within tight timeframes. Organisations with well-organised, accessible electronic records systems — where documents can be searched, filtered, and exported by date range, employee, and document type — respond to discovery requests significantly more efficiently and at lower legal cost than those with disorganised paper or poorly indexed electronic archives. Investing in records management infrastructure before litigation occurs is far less expensive than the discovery cost penalties that disorganised records impose.

Internal investigations — triggered by harassment complaints, EEOC charges, whistleblower reports, or policy violations — create their own records management complexities. Investigation materials, including interview notes, witness statements, and findings reports, carry both confidentiality obligations (protecting the privacy of complainants and witnesses) and preservation obligations (supporting the organisation's defence if the matter proceeds to litigation). Work with employment counsel to establish a standard protocol for investigation records: where they are stored, who has access, how long they are retained, and under what circumstances they must be disclosed.

Frequently Asked Questions

How long do I need to keep employee records in the US?

Federal law requires employee records to be kept for at least one to three years, depending on the type of document. Some states require longer retention periods.

Are there specific HR record retention requirements for payroll documents?

Yes, payroll records must be retained for at least three years. W-2 and tax forms should be kept for at least four years to meet IRS requirements.

What happens if I fail to comply with HR record retention laws?

Failure to comply can result in legal penalties, fines, and increased liability in the event of an employment dispute or audit.

Can I store employee records electronically?

Yes, as long as the digital records are secure, accessible, and meet the legal requirements for retention and authenticity.

How can I streamline record retention for HR compliance?

Use an ATS like Treegarden to automate document management, track retention periods, and ensure secure storage of employee records.