Colorado Record Retention Law: Schedules, Storage, and Disposal

Colorado’s record retention requirements vary by document type, running from three years for basic wage records to permanent retention for corporate governance documents. Employers, tax filers, healthcare providers, banks, lenders, brokers, and notaries each operate under their own timelines, and when multiple rules apply to the same record, the longest one controls. The list below covers the categories most businesses actually deal with.

Retention Periods at a Glance

Wage records under the Colorado Wage Act and COMPS Order: 3 years after wages were due
Employment records under the Colorado Employment Security Act: 5 years
Form I-9: 3 years after hire or 1 year after separation, whichever is later
Income and gift tax records: 4 years from return due date or tax payment
Sales and other non-income tax records: 3 years
Corporate meeting minutes, bylaws, shareholder lists: permanent
Unclaimed property holder records: 10 years after report filing or due date
Adult medical records: 7 years after last treatment
Minor patient medical records: until age 25
Core state-chartered bank records: permanent
Consumer loan records: 4 years after final entry
Private education loan files: 6 years after credit obligation ends
Real estate transaction files: 4 years from closing or listing expiration
Notary journals: 10 years after last recorded act

Employment and Payroll Records

Two Colorado statutes set overlapping deadlines. The Colorado Wage Act and the Colorado Overtime and Minimum Pay Standards Order (COMPS Order) require employers to keep specific wage records for at least three years after wages were due, including each employee’s name, address, occupation, hire date, daily hours worked, pay rates, gross and net wages, withholdings, and pay-period dates. If a wage claim is pending, those records must be held for the duration of the claim regardless of the three-year clock.¹

The Colorado Employment Security Act runs longer. It requires employers to keep work records open for inspection and retain them for at least five years, supporting audits by the Division of Unemployment Insurance that examine payroll data, cash-disbursement records, and payments to workers not classified as employees.²

For most employers, holding payroll and wage records for five years satisfies both statutes. Federal law adds Form I-9 on top: keep it for three years after hire or one year after separation, whichever is later. Short-tenured workers usually trigger the three-year-from-hire calculation; longer-tenured workers usually trigger the one-year-after-separation date.³

Tax Records

Colorado’s tax retention windows are shorter than the seven-year advice that circulates online. For income and gift taxes, taxpayers must keep books, accounts, and records necessary to determine liability for four years following the return due date or the payment of the tax. The Department of Revenue holds filed income tax returns for the same four years before destruction may be authorized.⁴

Sales tax and other non-income tax records only need to be kept three years. Oil and gas production tax records follow the same three-year rule.⁴

These are floors. If you’re under audit or expect a dispute, hold everything until the matter is fully resolved. Federal returns follow separate IRS rules.

Corporate Records

The Colorado Business Corporation Act requires every corporation to permanently retain shareholder and board meeting minutes, records of actions taken without a meeting, and records of board committee actions. Articles of incorporation, bylaws, all amendments in current form, and a shareholder list must also be kept.⁵

Permanent means what it says. These documents have no scheduled destruction date and must remain available for shareholder inspection as long as the entity exists.

Medical and Healthcare Records

Under the Colorado Medical Board’s Policy 40-07, adult patient records should be retained for at least seven years after the last date of treatment. Minor patient records should be held for seven years after the patient reaches the age of majority, meaning until the former patient turns 25.

Providers in institutional or agency settings may rely on the agency’s record-keeping system rather than maintain duplicate personal files, provided that system meets regulatory standards. Licensed psychologists, physicians, and other individual providers must also meet the record-content requirements of their licensing boards. HIPAA imposes its own federal floor for certain records.

Financial and Lending Records

State-chartered banks must permanently retain core records including stockholder and director meeting minutes, capital stock ledgers, the general ledger, and daily statements of condition. The Banking Board classifies all other bank records and prescribes retention periods for each class, ranging from a specified term of years to permanent.⁶

Institutions regulated by the FDIC, CFPB, or other federal agencies may follow federal schedules where those impose longer retention.

Consumer lenders operate under the Colorado Consumer Credit Code, which sets a four-year retention period. Records for any given loan need not be preserved beyond four years after the final entry relating to that loan. For revolving credit accounts, the four-year clock starts from the date of each individual entry rather than from account closure.⁷

Private education creditors have a longer obligation: at least six years after the credit obligation ends.⁸

Real Estate Transaction Records

Licensed brokers and brokerage firms must retain transaction files for four years from the consummation date of the transaction, or from the expiration date of any listing contract that does not result in a closing. Files may be kept in paper or electronic form as long as they remain available for inspection by the Colorado Real Estate Commission.⁹

Sales files must include the purchase contract, listing agreement, and all executed documents. Property management files require the management agreement and three-way reconciliations for all trust accounts, including supporting journals, ledgers, and reconciled bank statements. Copies of public records, title commitments, and lender-required disclosures are not required after closing.¹⁰

Brokers remain personally responsible for their transaction files even if they change brokerages. The Commission also recommends, though does not require, retaining relevant text messages and emails.⁹

Notary Journals and Unclaimed Property

Notaries must retain their journals of notarial acts for ten years after the last recorded act. When a commission expires, is revoked, or the notary resigns, the journal still has to be held for the full ten years, and the notary must tell the Secretary of State where it is located.¹¹

Businesses required to file reports under the Revised Uniform Unclaimed Property Act must keep records for ten years after the later of the date the report was filed or the last date a timely report was due. The state administrator may prescribe a shorter period by rule; absent that, ten years is the default.¹²

Can You Keep Records Electronically?

Yes, in most cases. Colorado’s Uniform Electronic Transactions Act confirms that electronic records satisfy any state-law retention requirement as long as the electronic version accurately reflects the information in final form and remains accessible for later reference. This applies even when a law specifically calls for the “original” document. An electronic image of a check, for example, satisfies any law requiring retention of that check.¹³

Two limits apply. Any law enacted after May 30, 2002, can specifically prohibit electronic records for a particular purpose, and individual government agencies may set additional standards for records within their jurisdiction.¹³

The practical catch is retrieval. If your storage technology fails or a file format goes obsolete and you can’t produce readable copies on demand, you’re still liable. Real estate brokers, for instance, must produce transaction records electronically upon request regardless of any technical issues on their end.

Litigation Holds Override Normal Schedules

Routine retention rules stop applying the moment litigation is pending or reasonably foreseeable. At that point you have a duty to preserve any records relevant to the dispute. Destroying them can trigger sanctions from monetary penalties up to a default judgment.¹⁴

Courts can also instruct juries to draw an adverse inference against a party that destroyed evidence, letting jurors assume the missing records would have been damaging. A business that shreds files exactly on schedule but ignores a litigation hold can end up worse off than one that never had a retention policy at all. The preservation duty kicks in when you know or should know that litigation is likely and that the records are relevant.¹⁴

How to Dispose of Records

When the retention period ends, records containing personal information can’t simply be thrown out. Colorado requires every business that maintains paper or electronic documents with personal identifying information to develop a written disposal policy. When those documents are no longer needed, the business must shred, erase, or otherwise make the personal information unreadable.¹⁵

Businesses already regulated by a state or federal agency with its own disposal standards are considered compliant if they follow their regulator’s rules. Government agencies have a parallel obligation under a separate statute. The Colorado Attorney General has confirmed that the written-policy requirement applies to both paper and electronic formats.¹⁶

What Happens If You Don’t Comply

Colorado enforces retention rules through agency-specific penalties rather than a single mechanism, and the consequences vary sharply by industry.

Employers who fail to produce wage records on request by the Division of Labor face fines of at least $50 per day. Separate penalties of $250 per employee per month apply to pay-statement violations.¹

Businesses that lose or destroy tax records risk estimated assessments, where the Department of Revenue calculates what it believes you owe based on whatever information it has. Those estimates rarely favor the taxpayer.

The Division of Banking can impose disciplinary action on financial institutions that fail to maintain records as required by the Banking Code or board rules.⁶

Real estate professionals who don’t follow the Commission’s record-keeping mandates risk license suspension or revocation. The Commission can request production of transaction files at any time during the four-year retention period, and an inability to produce them is treated as a licensing violation.⁹

1
Colorado Department of Labor and Employment. INFO 3A Timing of Wage Payments and Required Record-Keeping
2
Department of Labor & Employment. Employer Audits
3
U.S. Citizenship and Immigration Services. Retaining Form I-9
4
Justia. Colorado Revised Statutes Title 39-21-113 – Reports and Returns
5
Justia. Colorado Revised Statutes Section 7-116-101 – Corporate Records
6
Justia. Colorado Revised Statutes Section 11-102-308 – Bank Records Preservation Reproduction
7
FindLaw. Colorado Revised Statutes Title 5 Section 5-2-304
8
Justia. Colorado Revised Statutes Section 5-20-211 – Record Retention Confidentiality
9
Division of Real Estate. Transaction File Requirements and Retention
10
Colorado Division of Real Estate. Transaction File Checklist and the Retention of Records
11
FindLaw. Colorado Revised Statutes Title 24 Section 24-21-519
12
Justia. Colorado Revised Statutes Section 38-13-404 – Retention of Records by Holder
13
Justia. Colorado Revised Statutes Section 24-71.3-112 – Retention of Electronic Records Originals
14
Colorado Judicial Branch. Terra Management Group LLC v Keaten – Opinion on Spoliation Sanctions
15
Justia. Colorado Revised Statutes Section 6-1-713 – Disposal of Personal Identifying Information Policy Definitions
16
Colorado Attorney General. Colorados Consumer Data Protection Laws FAQs for Businesses and Government Agencies