What is the retention period for payroll records and employee timesheets?

There is no single retention period for payroll records and employee timesheets. The right answer depends on which laws apply to your organization, and most employers must satisfy several overlapping requirements at once. The safe practice is to identify every rule that touches a given record and keep it for the longest applicable period.

Common Federal Baselines

Several federal frameworks set minimum retention periods that frequently govern payroll and time records:

• Wage and hour records. Under the federal Fair Labor Standards Act, employers must preserve core payroll records — such as wages paid, hours worked, and pay rates — for at least three years. Supporting documents used to compute pay, including time cards and timesheets, work schedules, and wage-rate tables, are generally retained for two years.
• Tax records. Employment tax records are typically kept for at least four years after the tax becomes due or is paid, whichever is later. This covers items like withholding records, returns, and proof of deposits.
• Equal employment records. Anti-discrimination rules administered by federal agencies impose their own minimums (often one year, longer in some contexts), and active litigation or a charge can extend the hold until the matter is resolved.

Because these periods differ, a single timesheet may be subject to a two-year wage rule and a four-year tax rule simultaneously. Retain it for the longer period.

How to Set Your Own Schedule

Federal minimums are a floor, not a ceiling. State wage, tax, and unemployment laws often require longer retention, and some industries or contracts add further obligations. A defensible retention schedule should:

• Map each record series to every law, regulation, and contractual duty that applies.
• Adopt the longest required period, then dispose consistently once it expires.
• Suspend disposition under a legal hold when litigation, audit, or investigation is reasonably anticipated.
• Document the rationale so disposal decisions are routine and auditable.

Avoid keeping records indefinitely “just in case.” Over-retention increases privacy risk, storage cost, and discovery burden, while inconsistent disposal undermines the defensibility of your program.

For broader context on building schedules that satisfy multiple authorities, see the compliance and standards topic hub. Always confirm current requirements with the governing agencies, since specific periods can change.