How long do you have to keep payroll records and timesheets, and what rules set that period?

There is no single retention period for payroll records and timesheets. The right answer is driven by overlapping federal rules, plus any state and contractual requirements that apply to your organization. The practical approach is to identify every rule that touches a given record, then keep that record for the longest period any of them requires.

The main federal rules

Several federal authorities set minimum retention periods for employment and pay records:

• Fair Labor Standards Act (FLSA). The U.S. Department of Labor requires employers to keep basic payroll records for a minimum number of years, and to keep the underlying time and earnings records that support wage calculations for a shorter minimum period. These records include hours worked, wages paid, and the data used to compute them.
• IRS / tax rules. The IRS sets recordkeeping expectations for employment tax records, generally measured from the date the tax was due or paid. Tax records support filings, deductions, and any later examination.
• EEOC and anti-discrimination laws. Federal equal-employment rules require personnel and payroll records to be retained for a set period, with longer holds when a charge, complaint, or lawsuit is pending.

Because these periods differ, the same timesheet can be governed by more than one rule at once.

How to set your actual retention period

1. Map the applicable rules. List the federal, state, and contractual obligations that cover the record type.
2. Take the longest minimum. Your retention period must satisfy every rule, so the longest applicable minimum controls.
3. Add a legal-hold exception. If litigation, an audit, or an agency charge is reasonably anticipated, suspend disposition until the matter resolves, regardless of the schedule.
4. Document it in a retention schedule. A defensible, written schedule that cites its authorities is the foundation of consistent, lawful disposition.

Why this matters for governance

Treating payroll and time records under a single, citation-backed schedule is core information-governance practice. It lets you dispose of records consistently once obligations expire, while protecting records you are still legally required to hold. For broader context on building and defending retention schedules, see our information governance topic hub.

Always confirm current periods against the governing source, since specific durations are set by regulation and can change.