Florida Records Retention Requirements and Schedules

Florida records retention requirements range from three years for routine tax and payroll documents to permanent preservation for core corporate records, with longer schedules built into the rules for healthcare, real estate, insurance, and government agencies. There is no single Florida statute that sets one blanket period for every business; the answer depends on the type of record, the industry, and whether you are a private entity or a public one.

Quick Retention Periods by Record Type

Federal tax returns and supporting records: at least 3 years from filing; 6 years if you underreported income by more than 25 percent; 7 years for worthless-securities or bad-debt losses; indefinitely if no return was filed or the return was fraudulent.
Employment tax records: at least 4 years from the date the tax was due or paid, whichever is later.
Payroll records (federal wage-and-hour): at least 3 years from the last date of entry.
Corporate articles, bylaws, and meeting minutes: permanent.
Shareholder communications, annual financial statements, audit reports: 3 years.
Private medical records: 5 years from the patient’s last contact.
Public hospital patient records: 7 years after the last entry, or until a minor patient turns 24, whichever is later.
Real estate brokerage records: 5 years, with an extension if the file becomes evidence in litigation.
Insurance administrator agreements: duration of the agreement plus 5 years.
Adjuster claim records: 5 years after the adjustment is completed.

General Business, Tax, and Payroll Records

Most private businesses in Florida follow federal rules for tax and employment records, because no state statute imposes a general retention schedule on private-sector documents. The IRS baseline is three years from the filing date of the return, which matches the standard audit window. That period stretches to six years if you failed to report more than 25 percent of your gross income, and to seven years if you claimed a loss from worthless securities or bad debt. If you never filed or filed a fraudulent return, there is no time limit, so those records should be kept indefinitely.¹

Employment tax records have their own rule. Keep them for at least four years from the date the tax was due or paid, whichever comes later.¹

General payroll records fall under federal wage-and-hour regulations, which require preservation for at least three years from the last date of entry. The clock runs from the last payroll entry for that employee, not from the termination date, though the two are usually close.²

Corporate Records

Florida’s Business Corporation Act tells for-profit corporations exactly what to keep. Some records have no expiration and should be treated as permanent: the current articles of incorporation, bylaws, minutes of all shareholder and board meetings, and records of any actions the board or shareholders took without a formal meeting.³

Other corporate documents carry a three-year minimum. Written communications sent to all shareholders (or all shareholders of a particular class) within the past three years must be available, along with annual financial statements and any related audit reports for the last three fiscal years.³

Healthcare Records

Licensed physicians and other private healthcare practitioners must keep a patient’s medical records for at least five years from the date of the patient’s last contact, under Chapter 456. When a practice closes, the practitioner must notify patients about how to access their records and arrange for a custodian to hold the files for the remainder of the retention period.⁴

Public hospitals and other public health care facilities work under a longer schedule. General Records Schedule GS4 requires patient medical records for seven years after the last entry. For minor patients, the retention period runs until the later of seven years after the last entry or the patient’s 24th birthday. If a child’s last treatment happens at age 10, the hospital must hold those records for 14 more years, not seven.⁵

A boundary worth flagging: the federal HIPAA Privacy Rule does not set its own retention period for medical records. State law controls how long you keep them. HIPAA does require covered entities to safeguard patient information the entire time they hold it, and through the disposal process itself.⁶

Real Estate Brokerage Records

Licensed real estate brokers must preserve all books, accounts, and records tied to their brokerage business for at least five years. The clock starts from whichever comes later: the date the broker receives any funds, or the date any party signs a listing agreement, purchase offer, rental management agreement, lease, or other contract engaging the broker’s services.⁷

If a brokerage record becomes evidence in litigation, the broker must keep it for at least two years after the civil action concludes, including any appeals, with the five-year minimum as a floor. A file that enters litigation in year four must be kept until at least two years after the case ends, even if total retention runs to seven or eight years.⁷

Insurance and Adjuster Records

Insurance administrators have a dual retention trigger. The written agreement between an administrator and an insurer stays in the official records of both parties for the full duration of the agreement plus five years after it ends.⁸

Independent and public adjusters have a separate obligation. All records related to a particular claim or loss must be kept at the adjuster’s place of business for at least five years after the adjustment is completed, and must be available for inspection by the Department of Financial Services during business hours.⁹

Government and Public Agency Records

State agencies, counties, and municipalities operate under a different framework. Chapter 119 requires every public official to maintain and preserve records created or received during official business, and the Division of Library and Information Services within the Department of State publishes General Records Schedules that assign minimum retention periods to virtually every category of government document.¹⁰

These schedules are floors, not ceilings. A public agency may keep records longer than the schedule requires but can never shorten the period. When records reach the end of their retention window, disposal still requires compliance with the Division’s process, and each record must be identified against an appropriate General Records Schedule or an individual schedule before it is destroyed.¹¹

Litigation Holds Override Your Schedule

Any retention schedule becomes irrelevant the moment litigation is reasonably anticipated. The duty to preserve kicks in, and routine destruction of potentially relevant records must stop. This applies before a lawsuit is filed. A credible threat letter, a government investigation notice, or an internal discovery of wrongdoing can each trigger the duty.

Under Federal Rule of Civil Procedure 37(e), a party that fails to take reasonable steps to preserve electronically stored information can face court sanctions. If information was lost and cannot be restored through additional discovery, the court can order measures to cure the prejudice. If the destruction was intentional, the court can issue an adverse inference instruction telling the jury to presume the missing evidence was unfavorable to the party that destroyed it.

Once you have any reason to believe a dispute is brewing, issue a written litigation hold to everyone who might possess relevant records. That hold overrides your normal retention and destruction schedules until the matter is fully resolved.

How to Dispose of Records at the End of the Period

Reaching the end of the retention period is not a green light to toss files in a dumpster. Any business that handles consumer information must comply with the federal FACTA Disposal Rule, which requires reasonable measures to prevent unauthorized access during disposal.¹²

For paper records containing consumer data, reasonable measures include burning, pulverizing, or shredding so the information cannot be read or pieced back together. For electronic media, the standard is destruction or erasure that makes data unrecoverable. Using a third-party destruction company is acceptable, but you need a written contract specifying how the material will be handled, and you should monitor compliance.¹²

HIPAA-covered entities must apply the same care to patient records being destroyed. Federal guidelines recommend cross-cut shredding for paper and physical destruction (shredding, pulverizing, or incinerating) for hard drives and other electronic storage media.¹³

Penalties for Non-Compliance

What happens if you destroy records too early depends on who you are and what went wrong.

Public Records Violations

A noncriminal infraction of Florida’s public records law brings a fine of up to $500. Willful and knowing violations escalate to a first-degree misdemeanor, punishable by up to one year in jail and a $1,000 fine. Violating the provisions governing certain exempt records under Section 119.105 is a third-degree felony, carrying up to five years in prison and a $5,000 fine.¹⁴

Tax and Information Return Penalties

Poor recordkeeping that produces incorrect or missing IRS information returns triggers penalties that scale with lateness and intent. For returns due in calendar year 2026, the per-return penalty is $60 if corrected within 30 days, $130 if corrected by August 1, and $340 after that date. Annual caps run from $239,000 for small businesses (gross receipts of $5 million or less) to $4,098,500 for larger ones. Intentional failures jump to $680 per return with no annual cap.¹⁵

Litigation Consequences

Even without a specific regulatory penalty, destroying records that should have been preserved for litigation can be devastating. Courts treat this as spoliation of evidence. A judge may order additional discovery or shift costs to the party that lost the evidence. At the severe end, the court can instruct the jury to assume the destroyed records contained information harmful to the party that destroyed them, which can effectively decide a case before deliberations begin.

Professional License Discipline

For licensed professionals, recordkeeping failures are professional misconduct. The relevant licensing board can impose administrative fines, require additional continuing education, suspend a license, or revoke it. A real estate broker who cannot produce transaction records during a Department of Business and Professional Regulation audit faces discipline whether or not the underlying transaction was improper. The missing records themselves are the violation.

1
Internal Revenue Service. How Long Should I Keep Records?
2
eCFR. 29 CFR Part 516 – Records to Be Kept by Employers
3
The Florida Legislature. Florida Statutes 607.1601 – Corporate Records
4
The Florida Legislature. Florida Statutes 456.057 – Ownership and Control of Patient Records
5
State of Florida. General Records Schedule GS4 for Public Hospitals, Health Care Facilities and Medical Providers
6
HHS.gov. Does the HIPAA Privacy Rule Require Covered Entities to Keep Patients Medical Records for Any Period of Time
7
The Florida Legislature. Florida Statutes 475.5015 – Brokerage Business Records
8
Justia Law. Florida Code 626.882 – Agreement Between Administrator and Insurer
9
The Florida Legislature. Florida Statutes 626.875 – Records of Adjusters
10
The Florida Legislature. Florida Statutes 119.021 – Custodial Requirements, Maintenance, Preservation, and Retention of Public Records
11
Florida Department of State. General Records Schedule GS1-SL for State and Local Government Agencies
12
eCFR. Part 682 – Disposal of Consumer Report Information and Records
13
Internal Revenue Service. Media Sanitization Guidelines
14
Florida Department of State. Records Management FAQ – Division of Library and Information Services
15
Internal Revenue Service. Information Return Penalties