A California records retention schedule for employers sets the minimum time each category of business and employment document must be preserved before it can be destroyed. The short version: most payroll and personnel records should be held for at least four years, employment tax records for four, Cal/OSHA injury logs for five, toxic exposure and related medical records for the duration of employment plus thirty years, tax returns and supporting documentation for seven, and corporate governance documents permanently. California’s periods almost always run longer than the federal floor, and when they overlap, the longest applicable period controls.
Quick-Reference Retention Periods
- Articles of incorporation, bylaws, stock books, board minutes: permanent
- Contracts and leases: four years after expiration or termination
- General accounting ledgers and bank statements: four years (seven is common practice)
- Tax returns and supporting documentation: seven years
- Cost-basis records for property and equipment: ownership period plus seven years after disposal
- Payroll and wage statement records: four years
- Personnel files (including applicants not hired): four years after separation or decision
- Form I-9: three years after hire or one year after termination, whichever is later
- Employment tax records (W-4, 941, deposits): four years
- Cal/OSHA Form 300, 300A, and 301: five years after the covered calendar year
- Toxic exposure and related medical records: duration of employment plus thirty years
Payroll and Wage Records
Labor Code Section 1174 requires employers to keep payroll records showing hours worked, wages paid, and piece-rate information for at least three years. Itemized wage statement records under Labor Code Section 226 carry the same three-year minimum.1California Legislative Information. California Labor Code Section 226 Federal rules under the Fair Labor Standards Act require three years for basic payroll and two years for supplemental records like time cards.2U.S. Department of Labor. Fact Sheet 21 – Recordkeeping Requirements Under the FLSA
Three years is the statutory floor, but four years is the defensible floor. California’s statute of limitations for wage claims based on a written agreement runs four years, and an employee can file with the Labor Commissioner going back that far. If payroll records only cover the past three, there is a one-year gap in which a claim can be brought and the employer has no documentation to answer it. This is where most compliance failures surface.
Personnel Files and Hiring Records
California law requires employers to maintain a copy of each employee’s personnel records for at least three years after termination.3California Department of Industrial Relations. Personnel Files and Records The Fair Employment and Housing Act effectively extends this. FEHA gives employees three years to file a discrimination or harassment complaint with the Civil Rights Department, and Government Code Section 12946 requires preservation of records relevant to any filed complaint until the matter is fully resolved.4California Legislative Information. California Government Code 12946 Because a complaint filed late in that window will push well past three years during investigation, standard practice is four years after separation for personnel files, hiring records, performance reviews, and termination documents.
The same four-year window applies to records for applicants who were never hired: resumes, interview notes, and job applications. A rejected candidate who later files a discrimination charge forces the employer to prove the decision was lawful, and that proof lives in those files.
At the federal level, the EEOC requires personnel records for one year (or one year after involuntary termination), and ADEA requires payroll records for three years.5U.S. Equal Employment Opportunity Commission. Recordkeeping Requirements California’s periods are longer and therefore control.
Form I-9
Every employer must retain a completed Form I-9 for each employee. The formula is three years after the date of hire or one year after employment ends, whichever is later.6U.S. Citizenship and Immigration Services. 10.0 Retaining Form I-9 For an employee who worked less than two years, keep the form three years from hire; for an employee who worked longer, keep it one year from termination. Early destruction is a common finding in immigration audits.
Leave and Medical Information
Records of leave taken under the California Family Rights Act should follow the four-year personnel retention guideline. Federal FMLA regulations set a three-year floor for covered employers.7eCFR. 29 CFR Part 825 Subpart E – Recordkeeping Requirements Any document containing medical information, whether from a leave request, a fitness-for-duty certification, or an accommodation discussion, belongs in a separate confidential file, not the general personnel folder. Mixing the two creates liability under both state and federal privacy rules.
Tax and Employment Tax Records
The Franchise Tax Board generally has four years after a return is filed to issue a proposed deficiency assessment, with longer windows for substantial income omissions and no limit at all for fraud or unfiled returns.8Franchise Tax Board. MAP 4 SOL and Waivers The IRS runs on a three-year baseline with the same extensions.9Internal Revenue Service. Topic No. 305, Recordkeeping Because the longest non-fraud window across both systems reaches seven years, holding returns and supporting records (receipts, invoices, depreciation schedules, profit and loss statements) for seven years is the practical standard.
Cost-basis records are a separate category. Documents establishing the basis of property or equipment must survive for the entire time the asset is owned, plus the seven-year retention period after it is sold or disposed of. Equipment purchased in 2019 and sold in 2030 means purchase records kept until at least 2037.
Employment tax records (Forms W-4 and 941, state and federal deposits, fringe benefit documentation) carry a federal four-year retention from the date the tax becomes due or is paid, whichever is later.9Internal Revenue Service. Topic No. 305, Recordkeeping A blanket four-year rule for everything payroll-related keeps this aligned with the wage records above.
Cal/OSHA Injury Logs and the 30-Year Exposure Rule
Cal/OSHA splits workplace health records into two very different tiers.
The Form 300 (Log of Work-Related Injuries and Illnesses), Form 300A (Annual Summary), and Form 301 (Incident Report) must be kept for five years following the end of the calendar year they cover.10Legal Information Institute. Cal. Code Regs. Tit. 8, 14300.33 – Retention and Updating This is not just storage. If an injury worsens or produces additional lost workdays during that five-year window, the Form 300 must be updated. Logs filed away and forgotten tend to turn up inaccurate during inspections.
Records of employee exposure to toxic substances or harmful physical agents, together with any associated medical records, carry the longest mandatory period in California employment law: the duration of employment plus thirty years. Occupational diseases like mesothelioma and chemical-related cancers can appear decades after the exposure that caused them, and the exposure record is often the only way to reconstruct what happened. One narrow exception: if an employee worked less than one year, the thirty-year retention does not apply as long as the medical records are given to the employee at separation.11California Code of Regulations. Title 8, Section 3204 – Access to Employee Exposure and Medical Records
Corporate, Contract, and Accounting Records
Articles of incorporation, bylaws, stock certificate books, and board meeting minutes are permanent records. They establish the company’s legal existence and governance under the California Corporations Code, and there is no point at which discarding them is safe.12California Secretary of State. Records Management Handbook – Chapter 5
Contracts and leases should be kept at least four years after expiration or termination, matching the statute of limitations for breach of a written contract under Code of Civil Procedure Section 337. For agreements involving real property or ongoing royalties, the clock does not start until the last obligation is settled. General ledgers, journals, bank statements, and accounts documentation share the four-year floor, though many businesses extend accounting records to seven years so they align with the tax retention schedule.
When to Stop Destroying: Litigation Holds
Every retention schedule has a built-in override. The moment litigation is reasonably anticipated, routine destruction stops. The duty to preserve begins before a lawsuit is filed. A demand letter, a regulatory investigation, or a workplace incident likely to generate a claim all trigger a litigation hold directing that potentially relevant documents and electronic data be preserved.
Failure to preserve is treated by California courts as misuse of the discovery process. Sanctions range from monetary penalties to issue sanctions that establish facts against the destroying party, evidentiary sanctions that exclude favorable evidence, and terminating sanctions that dismiss claims or strike defenses. Juries may also be instructed that they can infer the destroyed evidence was unfavorable to the party that destroyed it. Electronic records receive the same treatment as paper.
A hold remains in place until legal counsel confirms the matter is fully resolved, appeals included. Lifting it early is functionally identical to never having issued one.
Destroying Records at the End of the Retention Period
Once a retention period expires and no hold applies, destruction is required for records containing personal information. California Civil Code Section 1798.81 requires businesses to take “all reasonable steps” to dispose of customer records containing personal information so the data cannot be read or reconstructed.13California Legislative Information. California Civil Code 1798.81 The California Privacy Rights Act layers on a storage-limitation rule: businesses may not retain personal information longer than is reasonably necessary for the disclosed purpose.14California Legislative Information. California Civil Code Section 1798.100 At the federal level, the FACTA Disposal Rule requires any business holding consumer report information (credit reports, background checks, tenant screening results) to use reasonable measures that prevent unauthorized access, including shredding, burning, or pulverizing paper and destroying or erasing electronic media.15eCFR. 16 CFR Part 682 – Disposal of Consumer Report Information and Records
Cross-cut shredding is the standard for paper; strip-cut can be reassembled. For digital media, NIST Special Publication 800-88 outlines clearing, purging, and physical destruction methods for different media types, with cryptographic erasure or physical destruction required for solid-state and flash media that cannot be degaussed.16National Institute of Standards and Technology (NIST). NIST SP 800-88r2 Guidelines for Media Sanitization17Internal Revenue Service. Media Sanitization Guidelines
Keep a certificate of destruction for every batch, identifying the record type, the date range, the method, and the date of destruction. If a retention decision is ever questioned in litigation or an audit, that certificate shows the destruction followed policy rather than targeting inconvenient documents. A third-party destruction vendor with its own certification process adds another layer of defensibility.