Payroll Recordkeeping Compliance

Federal payroll recordkeeping compliance involves satisfying concurrent requirements from multiple agencies — the DOL, IRS, SSA, and EEOC — each with their own specific mandates for what records must be maintained, for how long, and in what form. The FLSA requires comprehensive records for non-exempt employees covering identification information, hours worked, wage rates, total earnings, and deductions, retained for three years (with time records kept for two years). IRS employment tax record requirements mandate retention of Forms W-2, W-4, 940, and 941 and supporting tax deposit documentation for at least four years. FUTA wage records must reconcile to annual Form 940 filings. Records supporting benefit plan contributions, deferred compensation, and qualified plan administration must satisfy ERISA's six-year retention requirement. For employers subject to OFCCP oversight, compensation records are part of affirmative action compliance obligations with their own retention schedules. I-9 employment eligibility verification records must be retained for three years from hire or one year from separation. COBRA and HIPAA notices related to benefits have their own recordkeeping dimensions that payroll often manages. The practical challenge is that these requirements overlap with each other — the same payroll register may satisfy FLSA, IRS, and state requirements simultaneously — requiring a records management system that can organize and retrieve records by regulatory purpose, not just chronologically. Regular compliance audits of recordkeeping practices are the most reliable way to ensure all applicable requirements are continuously met.

The IRS generally requires employers to retain employment tax records for at least four years after the later of the tax due date or the date the tax was actually paid. This four-year minimum applies to records supporting Forms 940, 941, 943, 944, and 945, including W-4 forms, pay stubs, payroll journals, time records supporting wages paid, documentation of fringe benefits and their tax treatment, records of taxable and non-taxable expense reimbursements, and EFTPS payment confirmation records. However, many payroll and tax professionals recommend retaining records for seven years rather than the four-year minimum because the IRS has three years from the filing date to initiate an audit (extending to six years if substantial underreporting is alleged), and various state tax agencies have longer audit windows that may require producing federal records for cross-reference. Records supporting charitable contribution deductions, net operating loss carryforwards, and certain other tax positions should be retained even longer because they have basis in prior years that affects current returns. The practical advice for most employers is to establish a seven-year retention minimum for payroll tax records, with permanent retention for corporate tax returns and summary records that may be needed to reconstruct payroll history for benefit calculations, pension determinations, or legal proceedings that arise years after the fact. Electronic storage satisfying IRS requirements reduces the cost of long-term record retention significantly.

FLSA-compliant payroll records for non-exempt (hourly) employees must contain a specific set of data elements required by the DOL's regulations under 29 CFR Part 516. Required information includes personal data (full name, Social Security Number, home address with zip code, date of birth if under 19, sex, and occupation), workweek designation (the time and day the workweek begins), time records (hours worked each day and total hours each workweek), wage information (pay basis and rate such as hourly or piece rate; total straight-time earnings; total overtime premium earnings), payroll data (total additions or deductions from wages each pay period; net wages paid; date of payment; and the pay period covered by each payment). The supporting records used to compute these entries — time cards, sign-in sheets, time and attendance system reports, work schedules — must be retained for two years, while the payroll records themselves are retained for three years. The FLSA does not mandate a specific format for these records — any system that accurately captures all required data elements satisfies the requirement. Critically, accurate records of actual hours worked (not just scheduled hours) are required: employers who record scheduled hours rather than actual hours worked are non-compliant with the FLSA and vulnerable to wage claims for any unrecorded time. For piece-rate, commission, or tipped employees, additional specific information about the basis of pay calculation must be documented in the payroll records.

State payroll recordkeeping requirements overlay federal requirements and in many cases are more stringent, creating jurisdiction-specific compliance obligations for every state in which an employer has employees. Most states require retention of payroll records for periods ranging from three to seven years — with some states requiring the longer period to align with their state-specific statutes of limitation for wage claims, which may extend beyond the FLSA's two-year standard. Many states require employers to maintain detailed wage payment records including the employee's rate of pay, hours worked, gross wages, all deductions itemized by type, and net wages paid — paralleling FLSA requirements but sometimes including additional elements like accrued paid leave balances. California's recordkeeping requirements are among the most extensive: the Labor Code requires that payroll records be made available for inspection or copying by the employee or the Labor Commissioner upon request within 21 days, and records must include specific information about piece-rate pay if applicable. New York similarly requires detailed records accessible to the state's Department of Labor. Some states have specific requirements for how records must be stored (secure locations, restricted access) and how long electronic records must be retrievable. Multi-state employers benefit from identifying the most comprehensive state requirements applicable to their workforce and applying them uniformly across all locations — creating a single higher standard that satisfies all jurisdictions simultaneously rather than maintaining jurisdiction-specific archives.

When a government agency initiates a payroll audit or investigation — whether through the IRS, DOL Wage and Hour Division, state labor department, or another regulatory body — proper records management becomes critical to both compliance and legal strategy. The first step upon receiving any notice of audit or investigation is to engage legal counsel and implement a litigation hold that suspends the normal records retention schedule, preventing any records relevant to the audit period from being destroyed even if their scheduled retention date has passed. The second step is identifying and securing all payroll records for the audit period — payroll registers, time records, W-2s, tax filings, benefit deduction records, and employee classification documentation — before the auditor arrives to ensure completeness and prevent gaps that could be interpreted adversely. When producing records, providing only what is specifically requested and clearly organized reduces audit scope expansion and demonstrates organized compliance rather than scrambling. Maintaining a log of all records produced, when they were provided, and to whom creates an accurate record of the production process. Avoid destroying any records after an investigation has commenced — destruction of records during an active investigation can constitute obstruction and dramatically worsen the organization's legal exposure. Following the investigation, review the audit findings to identify systemic recordkeeping gaps and implement corrective procedures that prevent similar issues in future audit periods. Aurora Training Advantage's payroll compliance training prepares practitioners to navigate these scenarios with confidence.