Personnel document retention is more than keeping an employee’s file in a locked cabinet. Employers must know which records to retain, how long to keep them, where to store them, who can access them and when they can be securely destroyed.
The challenge is that there is no single retention period for every employee document. Federal rules vary by record type. For example, the EEOC generally requires personnel and employment records to be retained for one year, while the Fair Labor Standards Act requires most payroll records to be retained for at least three years. Form I-9 records must generally be retained for the later of three years after the employee’s hire date or one year after employment ends.
Arizona employers have additional obligations. Arizona law requires employers to retain payroll records showing hours worked, wages paid and earned paid sick time for four years. Arizona also requires employers to use E-Verify and retain the verification record for the duration of employment or at least three years, whichever is longer.
A well-designed document retention program helps reduce legal risk, protect employee privacy and make HR administration more efficient.
Why document retention matters
Employee records contain highly sensitive information, including Social Security numbers, bank details, immigration documents, medical information, compensation data and performance records.
Keeping records too long increases privacy and cybersecurity risk. Destroying records too soon can make it difficult to respond to an audit, wage claim, discrimination charge or employee request.
A compliant retention program should help an employer:
- Meet federal and state recordkeeping obligations.
- Respond quickly to EEOC, DOL, USCIS or state agency inquiries.
- Demonstrate accurate payroll and timekeeping practices.
- Protect medical, financial and immigration information.
- Apply consistent retention and destruction rules.
- Prevent unauthorized access to confidential records.
- Preserve documents when litigation or an investigation is reasonably anticipated.
The most important principle is to create a retention schedule by record category, rather than treating every document in an employee’s file the same way.
Key federal retention periods
The following table provides a practical overview of common federal requirements. These are minimum periods for the records described; a longer period may apply under another law, contract, benefit plan, state requirement or legal hold.
| Record category | General federal requirement | Practical compliance approach |
|---|---|---|
| Personnel and employment records | The EEOC generally requires covered private employers to retain personnel and employment records for one year from the date the record was created or the personnel action occurred, whichever is later. Involuntary termination records should generally be kept for one year from the termination date. This includes applications, hiring records, promotions, transfers, discipline, performance records and termination documents. | Many employers adopt a longer internal period, such as employment plus four years, particularly when operating in Arizona. |
| Payroll records | The FLSA generally requires payroll records to be retained for at least three years. Records used to calculate wages, such as time cards, work schedules, wage-rate tables and deductions, generally must be retained for at least two years. | Keep payroll, timekeeping and wage-support records together for at least the longest applicable period. |
| Employment tax records | The IRS generally recommends retaining employment tax records for at least four years after the tax becomes due or is paid, whichever is later. | Keep payroll tax filings, wage reports and supporting records for at least four years. |
| Form I-9 | Retain Form I-9 for three years after the employee’s hire date or one year after employment ends, whichever is later. | Store I-9 forms separately from ordinary personnel records and limit access. |
| FMLA records | Covered employers must retain required FMLA records for at least three years. Medical certifications and medical histories must be kept as confidential medical records in separate files from ordinary personnel records. | Create a separate leave and medical-record repository with restricted access. |
| Medical and exposure records | Where OSHA’s medical and exposure-record standard applies, employee medical records generally must be retained for the duration of employment plus 30 years, while exposure records generally must be retained for 30 years. | Confirm whether the employee’s role, workplace or exposure creates additional OSHA obligations. |
| Benefits and compensation systems | The EEOC states that employee benefit plans and written seniority or merit systems should be retained for the period the plan or system is in effect and for at least one year after it ends. | Coordinate retention with the benefits provider, plan administrator and legal advisers. |
| EEOC charge or litigation records | When an EEOC charge or related lawsuit is filed, relevant records must be retained until the matter reaches final disposition. | Immediately suspend routine deletion for relevant documents. |
These periods should not be treated as permission to destroy records automatically. A claim, investigation, subpoena, audit, lawsuit or anticipated legal dispute can require records to be preserved beyond the normal schedule.
Arizona-specific requirements
Four-year payroll and sick-time records
Arizona employers must retain payroll records showing:
- Hours worked for each day.
- Wages paid.
- Earned paid sick time paid to employees.
The retention period is four years. Arizona law also permits an employee or the employee’s designated representative to inspect and copy payroll records relating to that employee.
Failure to maintain these records can create a rebuttable presumption that the employer did not pay the required minimum wage or earned paid sick time. For this reason, Arizona employers should retain timekeeping, payroll and paid-time-off records in a format that can be searched and produced efficiently.
E-Verify records
Arizona law requires employers to verify the employment eligibility of employees through E-Verify after hiring. Employers must retain the verification record for the duration of employment or at least three years, whichever is longer.
This requirement should be managed alongside, but separately from, the federal Form I-9 process. Employers should avoid storing I-9 forms and E-Verify information in an unrestricted personnel folder.
USCIS allows I-9 forms to be stored on paper, electronically or in a combination of formats. Electronic systems must include controls that protect the integrity and accuracy of the forms, prevent unauthorized changes or deletion, maintain an audit trail and permit the employer to produce the forms for inspection. Employers must generally be able to present I-9 forms within three business days of an inspection request.
Arizona data security and breach response
Arizona’s data-breach law applies to businesses that own, maintain or license unencrypted and unredacted computerized personal information. If an investigation determines that a security breach occurred, the affected individuals generally must be notified within 45 days after that determination, subject to statutory exceptions and law-enforcement requirements.
This makes secure storage particularly important for employee records containing:
- Social Security numbers.
- Financial account information.
- Driver’s license or identity-document details.
- Health or medical information.
- Employment eligibility documents.
Arizona employers should maintain a written incident-response process, identify who is responsible for investigating a suspected breach and confirm that HR vendors have appropriate security controls.
How to organize employee records
A common mistake is to keep every employee document in one large personnel file. A better approach is to use separate, clearly labelled record groups.
1. General personnel file
This may include:
- Offer letters and employment agreements.
- Job descriptions.
- Policy acknowledgements.
- Performance evaluations.
- Promotion and compensation documentation.
- Training records.
- Disciplinary notices.
- Resignation and termination documents.
2. Payroll and timekeeping file
This should include:
- Time records.
- Pay rates.
- Payroll registers.
- Overtime calculations.
- PTO and sick-time records.
- Wage deductions.
- Payroll tax records.
- Bonus and commission calculations.
3. Confidential medical and leave file
Keep medical information separate from the ordinary personnel file. This may include:
- Accommodation requests.
- Medical certifications.
- FMLA documentation.
- Fitness-for-duty records.
- Workers’ compensation medical information.
- Medical restrictions.
Managers should receive only the information they need to administer work restrictions or accommodations—not the employee’s diagnosis or full medical documentation.
4. Form I-9 and E-Verify file
Store these records separately so they can be retrieved for an inspection without exposing unrelated employee information. This also limits access to sensitive identity and immigration documents.
5. Recruitment and background-check file
Keep applications, interview notes, reference checks, screening reports and candidate communications in a controlled recruitment repository. Access should be limited to employees involved in hiring or compliance activities.
6. Benefits file
Maintain benefit elections, plan notices, enrollment records and related communications in an appropriately restricted benefits system.
Secure storage for paper and electronic records
Paper records
Paper records should be stored in locked cabinets or a restricted-access records room. Employers should also:
- Use a sign-out process for files removed from storage.
- Prohibit unattended files on desks, printers or meeting-room tables.
- Store medical and I-9 records in separate locked locations.
- Restrict keys and access cards to authorized personnel.
- Maintain a backup or scanned copy where appropriate.
- Use a secure off-site storage provider when necessary.
- Shred documents using a cross-cut process when the retention period ends.
Electronic records
Electronic records should be managed through an HRIS software or document-management system with:
- Role-based access controls.
- Multi-factor authentication.
- Encryption in transit and at rest.
- Unique user accounts rather than shared passwords.
- Audit logs showing who viewed, changed or downloaded a record.
- Automated retention reminders.
- Secure backups and disaster-recovery procedures.
- Regular access reviews after promotions, transfers and terminations.
- Vendor contracts addressing confidentiality, security and data deletion.
- A documented process for correcting errors without deleting the original audit trail.
Sensitive information should not be stored casually in email inboxes, personal cloud drives, text messages or collaboration platforms. If an employee document must be sent electronically, use an approved secure system and confirm that the recipient is authorized to receive it.
Retention, legal holds and disposal
A retention schedule should identify:
- The record category.
- The retention period.
- The event that starts the retention clock.
- The system or location where the record is stored.
- The person responsible for the record.
- The approved destruction method.
The starting event is not always the same. For example, the retention period for a payroll record may begin with the relevant pay period, while an involuntary termination record may be retained from the termination date. An I-9 retention calculation uses both the hire date and the employment end date.
Before destroying records, HR should confirm that no legal hold applies. A hold should suspend routine destruction when the business receives or anticipates:
- An EEOC or DOL complaint.
- A wage or sick-time claim.
- A demand letter.
- A subpoena.
- A government audit.
- A workplace investigation.
- A workers’ compensation dispute.
- A lawsuit or threatened litigation.
Paper records should be cross-cut shredded or destroyed by a vetted records-management provider. Electronic records should be securely deleted in accordance with the system’s retention controls, including relevant copies where practical. Employers should maintain a destruction log showing the record category, date, method and approving person. Destruction records should never be used to conceal, alter or remove documents subject to a legal hold.
How Focus HR takes this off your plate
Building and maintaining a compliant retention program is a lot to manage on top of running a business—separate storage systems, different clocks for different record types, access controls, legal holds, secure disposal. Getting any one of these wrong carries real risk.
Focus HR handles this for its clients as part of its HR, payroll and benefits services, including:
- Setting up and maintaining a retention schedule across personnel, payroll, I-9, medical and leave records.
- Applying federal requirements under the EEOC, DOL, USCIS, IRS, FMLA and OSHA correctly by record type.
- Meeting Arizona-specific requirements for payroll, earned paid sick time and E-Verify records.
- Storing sensitive records—medical, I-9, financial—separately with appropriate access controls.
- Managing legal holds so records aren’t destroyed when a claim, audit or investigation is pending.
- Responding to employee or agency requests for payroll and personnel records.
- Securely and properly disposing of records once retention periods lapse.
Focus HR, powered by OneDigital, has helped more than 500 Arizona small businesses manage HR, payroll and benefits since 2003, with a local team based in Tucson.
Ready to strengthen your personnel-records process? Talk to Focus HR about handing off your retention program, or seek professional advice when a claim, audit or legal hold arises in the meantime.
This article provides general educational information and is not legal advice. Retention obligations can vary by industry, employer size, employee classification, government-contract status, benefit plan and the facts of a particular dispute. Arizona employers should consult qualified employment counsel before finalizing or changing a retention policy.
