A California records retention schedule for employers sets the minimum time each category of business and employment document must be kept before it can be destroyed, and in California the safe rule is to follow the longest applicable period across state and federal law. That usually means state law controls. Payroll runs four years, personnel files four years after separation, tax records seven, Cal/OSHA injury logs five, toxic exposure records the length of employment plus thirty years, and core corporate documents forever. Destroying too early exposes you to penalties and lost audit defenses; keeping everything forever inflates storage costs and privacy risk under the CPRA.
Quick Reference Schedule
- Articles of incorporation, bylaws, stock books, board minutes: permanent
- Contracts and leases: four years after expiration or final performance
- General accounting records: four years minimum, seven years recommended
- Tax returns and supporting documentation: seven years
- Property and asset cost-basis records: life of the asset plus seven years after disposal
- Payroll and wage statement records: four years
- Personnel files: four years after termination
- Applicant records (resumes, interview notes): four years
- CFRA/FMLA leave records: four years
- Form I-9: three years after hire or one year after termination, whichever is later
- Employment tax records (W-4, 941, deposits): four years
- Cal/OSHA Forms 300, 300A, 301: five years after the covered calendar year
- Toxic exposure and related medical records: duration of employment plus 30 years
Employment and Payroll Records
California’s employment recordkeeping rules almost always exceed the federal floor, so build the schedule around state law and the federal periods will take care of themselves.
Payroll and Wage Statements
Labor Code Section 1174 requires employers to keep payroll records showing hours worked, wages paid, and piece-rate information for at least three years. Wage statement records under Labor Code Section 226 carry the same three-year minimum.1California Legislative Information. California Labor Code Section 226 The Fair Labor Standards Act lines up closely, requiring basic payroll records for three years.2U.S. Department of Labor. Fact Sheet 21 – Recordkeeping Requirements Under the FLSA
Extend to four years anyway. California’s statute of limitations for wage claims based on a written agreement is four years, and an employee can file with the Labor Commissioner going back that far. Three-year records leave a gap where you cannot defend the fourth year. This is where employers most often get caught.
Personnel Files
California requires personnel records to be maintained for at least three years after termination.3California Department of Industrial Relations. Personnel Files and Records The Fair Employment and Housing Act pushes that number higher in practice. FEHA gives employees three years to file a discrimination or harassment complaint with the Civil Rights Department, and Government Code Section 12946 requires preservation of all records relevant to any filed complaint until the matter is fully resolved.4California Legislative Information. California Government Code 12946 A complaint filed near the end of that window can extend investigation into a fourth year, so retain personnel files, hiring records, performance reviews, and termination documentation for at least four years after separation.
The same four-year floor applies to applicants who were never hired. Resumes, interview notes, and job applications need to survive long enough to defend a rejected candidate’s discrimination claim. Federal EEOC rules require only one year for these records, but California’s longer periods control.5U.S. Equal Employment Opportunity Commission. Recordkeeping Requirements
Leave and Medical Records
CFRA leave records follow the same four-year guideline. Federal FMLA regulations require three years for covered employers.6eCFR. 29 CFR Part 825 Subpart E – Recordkeeping Requirements Any document containing medical information, whether from a leave request, a fitness-for-duty certification, or an accommodation file, has to be stored in a separate confidential file. Mixing medical records into the general personnel folder creates liability under both state and federal privacy rules.
Form I-9
Keep a completed Form I-9 for each employee for three years after the date of hire or one year after employment ends, whichever is later.7U.S. Citizenship and Immigration Services. 10.0 Retaining Form I-9 For employees who work less than two years, that means three years from hire. For longer-tenured employees, one year from termination. Destroying I-9s too early is one of the most common findings in immigration audits.
Employment Tax Records
Separate from payroll, the IRS requires employers to keep employment tax records (W-4s, 941s, tax deposits, fringe benefit documentation) for at least four years after the tax becomes due or is paid, whichever is later.8Internal Revenue Service. Topic No. 305, Recordkeeping A blanket four-year rule for everything payroll-adjacent is the simplest compliant approach.
Cal/OSHA Injury Logs and Exposure Records
Cal/OSHA recordkeeping splits into two very different retention periods.
The Form 300 log of work-related injuries and illnesses, the Form 300A annual summary, and the Form 301 incident report must be kept for five years following the end of the calendar year they cover.9Legal Information Institute. Cal. Code Regs. Tit. 8, 14300.33 – Retention and Updating This is not passive storage: if an injury worsens or produces additional lost workdays during those five years, the Form 300 has to be updated. Cal/OSHA inspectors check for that.
Toxic exposure records carry the longest mandatory retention in California employment law. Records of employee exposure to toxic substances or harmful physical agents, along with any associated medical records, must be kept for the duration of employment plus thirty years.10California Code of Regulations. Title 8, Section 3204 – Access to Employee Exposure and Medical Records Occupational diseases like mesothelioma or chemical-related cancers can surface decades after the exposure that caused them, and without the record no one can reconstruct what happened.
One narrow exception: if an employee worked less than one year, the thirty-year requirement doesn’t apply, provided you give the medical records to the employee at separation.10California Code of Regulations. Title 8, Section 3204 – Access to Employee Exposure and Medical Records For every other worker, plan on storage that outlasts most businesses.
Tax Records
The Franchise Tax Board normally has four years after a return is filed (or the original due date, whichever is later) to issue a proposed deficiency assessment. That window stretches to six years if the taxpayer omits more than 25 percent of gross income, and there is no time limit at all for fraudulent or unfiled returns.11Franchise Tax Board. MAP 4 SOL and Waivers
The IRS follows a similar pattern: three years general, six years for the same 25-percent omission, no limit for fraud or failure to file.8Internal Revenue Service. Topic No. 305, Recordkeeping California also allows a seven-year claim period for bad debts and certain erroneous recovery deductions under Revenue and Taxation Code Section 19312.11Franchise Tax Board. MAP 4 SOL and Waivers
The longest non-fraud window across both systems is seven years, so retain tax returns and supporting documentation (receipts, invoices, depreciation schedules, profit and loss statements) for seven years as the practical standard. Property and asset records need longer treatment. If you use a document to establish cost basis, keep it for as long as you own the asset plus the retention period after you sell or dispose of it. Equipment bought in 2019 and sold in 2030 needs purchase records preserved until at least 2037.
Corporate and Contract Records
Foundational corporate documents are permanent. Articles of incorporation, bylaws, stock certificate books, and board meeting minutes must be preserved for the life of the business and any successor entity under the California Corporations Code. There is no point at which these become safe to discard.12California Secretary of State. Records Management Handbook – Chapter 5
Contracts, leases, and related financial agreements should be kept for at least four years after they expire or terminate, matching California’s statute of limitations for breach of a written contract under Code of Civil Procedure Section 337. If a contract involves real property or ongoing royalties, the clock doesn’t start until the last payment or obligation is settled. General accounting records like ledgers, journals, and bank statements follow the same four-year floor, though extending to seven years is common so the accounting file matches the tax file.
Litigation Holds Override the Schedule
The retention schedule pauses the moment litigation becomes reasonably foreseeable. That duty attaches before a lawsuit is filed. A demand letter, a regulatory investigation, or a workplace incident that plausibly leads to a claim all trigger it. The business must issue a litigation hold directing that potentially relevant documents and electronic data be preserved, and routine destruction under the schedule stops for those records.
Sanctions for failing to preserve are severe. California courts treat destruction of potentially relevant evidence as misuse of the discovery process, with penalties ranging from monetary fines to issue sanctions, evidentiary sanctions, and terminating sanctions that dismiss a claim or strike a defense outright. A jury can also be instructed to infer that destroyed evidence was unfavorable to the party that destroyed it. Electronic records get the same treatment as paper.
The hold stays in place until counsel confirms the matter is fully resolved, including appeals. Lifting it early is functionally the same as never issuing one.
Destroying Records at the End of the Schedule
Once the retention period expires and no hold applies, secure destruction is required for anything containing personal information. California Civil Code Section 1798.81 requires businesses to take “all reasonable steps” to dispose of customer records containing personal information so the data cannot be read or reconstructed.13California Legislative Information. California Civil Code 1798.81 The California Privacy Rights Act adds a storage-limitation rule: businesses may not keep personal information longer than is reasonably necessary for the purpose it was collected.14California Legislative Information. California Civil Code Section 1798.100 Federally, the FACTA Disposal Rule requires businesses holding consumer report information (credit reports, background checks, tenant screening results) to use reasonable measures such as shredding, burning, or pulverizing paper and destroying or erasing electronic media so the data cannot be reconstructed.15eCFR. 16 CFR Part 682 – Disposal of Consumer Report Information and Records
Cross-cut shred paper rather than strip-cut, since strip-cut output can be reassembled. For digital media, follow NIST Special Publication 800-88 sanitization methods, and note that degaussing works on traditional hard drives but not on solid-state drives or flash media, which need cryptographic erasure or physical destruction.16Internal Revenue Service. Media Sanitization Guidelines
Keep a certificate of destruction for every batch. It should identify the record type, the date range covered, the destruction method, and the destruction date. If your schedule is ever questioned in litigation or an audit, that certificate is your evidence that destruction followed policy instead of targeting inconvenient documents. Using a third-party destruction vendor with its own certification adds another layer of defensibility.