New York’s not-for-profit organizations — from neighborhood community groups to large regional hospitals and educational institutions — are subject to a distinct set of records retention requirements that reflect their unique governance structure, regulatory environment, and accountability obligations. New York nonprofit records retention requirements under the Not-for-Profit Corporation Law (N-PCL), the Internal Revenue Code, and applicable state charitable regulatory rules require organizations to retain certain records for periods ranging from three years to permanently. When those retention periods expire, documents must be disposed of securely — particularly when they contain sensitive donor information, personnel data, or financial records.
For not-for-profit organizations operating across New York City, Long Island, Westchester County, and the Hudson Valley, understanding what records must be retained, for how long, and how they must ultimately be destroyed is both a governance obligation and a practical necessity. Board members, executive directors, and finance staff at New York nonprofits need a clear framework for managing the records lifecycle — from creation through retention to secure disposal. This guide provides that framework, with practical guidance on implementing a compliant records management program.
Key Records Retention Requirements for New York Not-for-Profits
New York’s Not-for-Profit Corporation Law and the IRS requirements for tax-exempt organizations together establish a comprehensive retention framework for nonprofits. The New York Nonprofit Revitalization Act of 2013 specifically addressed records retention, requiring not-for-profit corporations to have a written records retention and disposition policy. Key retention periods include:
- Permanent retention: Articles of incorporation, bylaws and amendments, board meeting minutes, annual reports to the state Attorney General, IRS determination letter, audited financial statements, tax returns (Form 990), and real property deeds and contracts.
- Seven years: General financial records, grant agreements, personnel records for former employees, accounts payable and receivable records, contracts, and insurance policies.
- Six years: Bank reconciliations, canceled checks, expense reports, and payroll records (under New York Labor Law).
- Three years: Correspondence (general), donor acknowledgment letters, grant applications (rejected), and routine operational records.
Donor records present a particular challenge for nonprofits. While there is no single statutory retention period for donor records, most nonprofit governance advisors recommend retaining donor records for a period that covers potential estate claims, charitable gift annuity obligations, and pledge fulfillment — which may extend to seven years or longer depending on the nature of the gift and the donor’s circumstances.
The Required Written Records Retention Policy
The New York Nonprofit Revitalization Act requires not-for-profit corporations to adopt a written records retention and disposition policy. This policy must be reviewed and approved by the board of directors and must specify the minimum retention period for each category of organizational records. The policy should also address the organization’s procedures for authorized destruction of records that have passed their retention period.
A well-structured records retention policy for a New York nonprofit should include:
- A records retention schedule mapping each category of record to its required retention period
- Identification of who is responsible for managing each category of records and overseeing destruction
- Procedures for suspending normal destruction when litigation is pending or reasonably anticipated
- A description of the approved destruction method for records containing sensitive information (secure shredding)
- A requirement for documenting destruction events (Certificate of Destruction)
Having this policy in place is not merely a legal requirement — it also demonstrates organizational maturity and good governance, which can support the organization’s credibility with funders, donors, and regulatory agencies. Your compliance program should include periodic review and board approval of the retention policy, typically on a biennial basis.
Donor Records and Privacy Obligations
Donor records — including giving histories, contact information, wealth screening data, and correspondence about major gifts — are among the most sensitive records that nonprofits maintain. While donors generally understand that the organization they support will retain records of their giving, they expect that those records will be handled with discretion and destroyed securely when no longer needed.
New York’s SHIELD Act requires businesses and organizations — including nonprofits — to implement reasonable safeguards for private information. Donor records that include Social Security numbers (sometimes used for gift substantiation or planned giving documentation), financial account information, or other private information must be protected throughout their lifecycle, including at disposal. Placing donor records in a recycling bin or dumpster — even after they have passed their retention period — does not meet this standard.
Secure shredding of donor records at the end of their retention period is both a SHIELD Act obligation and a donor relations best practice. Many donors — particularly major donors who have disclosed detailed financial information in connection with planned gifts — appreciate knowing that their information will be securely destroyed when no longer needed. Certified shredding services provide the documentation (Certificate of Destruction) that you can reference if a donor ever asks how their information was handled.
Board Records and Corporate Governance Documents
Board meeting minutes, committee reports, resolutions, and other corporate governance documents occupy the permanent retention category — they must be kept indefinitely. However, working papers, draft documents, and preliminary materials generated in preparation for board meetings do not necessarily have the same retention requirements and may be destroyed once the final document has been approved and retained.
Organizations should establish clear guidelines about which documents in the board governance context are considered permanent records (final minutes, signed resolutions) versus which are temporary working documents (draft agendas, preliminary committee reports) that may be destroyed after their purpose is served. When temporary governance documents are destroyed, they should still be shredded if they contain sensitive financial or personnel information discussed in the board context.
For organizations that conduct board meetings in person and generate paper records — agendas, board packets, financial reports — a recurring shredding service can provide convenient disposal of working documents at the conclusion of each meeting cycle.
Personnel Records and Former Employee Files
Not-for-profit organizations employ staff like any other employer, and they are subject to the same New York labor law record retention requirements that apply to for-profit businesses. This includes the six-year payroll record retention requirement under New York Labor Law § 195. Additionally, nonprofit organizations that receive government grants may have additional record retention requirements imposed by the granting agency — often for five to seven years from the end of the grant period.
Former employee personnel files should be retained for an appropriate period (typically six to seven years from termination) and then securely shredded. These files typically contain Social Security numbers, direct deposit banking information, W-4 forms, and other sensitive personal information that must be protected at disposal. Placing former employee files in recycling without shredding creates identity theft risks for the individuals involved and potential SHIELD Act liability for the organization.
New York Shredding serves not-for-profit organizations throughout New York City, Long Island, Westchester, and the Hudson Valley. We understand the compliance and governance obligations that nonprofits face and can provide the certified document destruction services and documentation your organization needs. Contact us to request a free quote, or check our service coverage area.
Grant-Funded Programs and Records Retention: Special Considerations for New York Nonprofits
Not-for-profit organizations that receive government grants — from federal agencies, New York State, New York City, or other governmental sources — are subject to additional records retention requirements imposed by the grant terms and conditions. Federal grants typically require retention of financial and programmatic records for three to five years from the end of the grant period, though some grant programs impose longer requirements. State and city grants in New York may have their own retention specifications.
For nonprofits managing multiple grant-funded programs, tracking the applicable retention period for each program’s records can be complex. Records generated under a federal grant may need to be retained longer than the organization’s general retention schedule would require. Creating a grant-specific records log — identifying which records belong to which grant program, the applicable retention requirement, and the earliest destruction date — is a best practice that simplifies year-end retention reviews.
When grant records are ultimately destroyed — after all applicable retention periods have expired and no audit or investigation is pending — they should be shredded if they contain sensitive financial information, personally identifiable information about program participants, or other sensitive data. Many grant-funded human services programs, for example, generate client records containing health, income, immigration, and family information that must be protected at disposal. A certified shredding service with documented chain of custody provides the protection these records require and the documentation your organization needs if a grantor ever inquires about your records management practices. Contact New York Shredding to learn more.
Why New York Businesses Choose New York Shredding
For over a decade, New York Shredding Document Destruction, Inc. has helped businesses across New York City, Long Island, Westchester, and the Hudson Valley protect their sensitive information through certified, HIPAA-compliant shredding services. Our industrial-grade shredding equipment, locked on-site consoles, and Certificate of Destruction give your business the proof it needs for any compliance audit.
Whether you need scheduled shredding, a one-time purge, or hard drive destruction, we serve all five boroughs and surrounding areas with fast, reliable service. Request a free quote today and get your office on a shredding schedule that keeps you protected year-round.
Ready to get started? Contact New York Shredding for a free quote, or explore our full range of shredding services.