Every New York business — whether a restaurant in Queens, a law firm in Midtown Manhattan, a medical practice on Long Island, or a retail chain in Westchester — is required by law to maintain certain records for defined periods of time. These requirements come from multiple sources: federal agencies like the IRS and the Department of Labor, New York State agencies, and industry-specific regulators. Knowing what records New York businesses must keep is only half the equation. The other half is knowing when those records have served their legal purpose and must be securely destroyed.
Too many New York businesses default to keeping everything forever — which sounds cautious but is actually counterproductive. Records retained beyond their required period create unnecessary storage costs, increase your exposure in civil litigation (older records can be subpoenaed even if they predate the relevant dispute), and amplify the consequences of a data breach. A disciplined records retention and destruction policy, backed by certified document shredding, is both a legal best practice and a smart business strategy.
Federal Record-Keeping Requirements for New York Businesses
Federal law imposes record-keeping requirements on nearly every business, regardless of size or industry. Here are the key federal requirements that affect most New York businesses:
- IRS tax records: The IRS generally recommends keeping tax records for 3 years from the filing date or the due date, whichever is later — this is the standard audit window. However, records should be kept for 6 years if you underreported income by more than 25%, and indefinitely if the IRS suspects fraud. Business tax records related to property should be kept until the statute of limitations expires on the year you disposed of the property.
- Payroll records (FLSA): The Fair Labor Standards Act requires employers to keep payroll records for at least 3 years, and records used to compute wages (timesheets, work schedules) for at least 2 years.
- I-9 Employment Eligibility Forms: Must be retained for 3 years from the date of hire or 1 year after termination, whichever is later.
- OSHA records: OSHA 300 logs and 301 incident reports must be kept for 5 years following the end of the calendar year they cover.
- ERISA employee benefit plan records: Pension and benefits records must generally be kept for 6 years.
- Corporate records: Meeting minutes, stock records, and corporate resolutions should be retained permanently (or for the life of the corporation).
Explore our compliance resources for additional guidance on industry-specific record retention requirements.
New York State Record-Keeping Requirements
New York State imposes record-keeping requirements that are often more stringent than their federal counterparts. New York employers and businesses must be aware of these state-specific obligations:
New York Labor Law: Employers must maintain payroll records — including employee name, address, dates of employment, rates of pay, and hours worked — for a minimum of six years. This is double the federal FLSA requirement of three years. New York’s six-year requirement reflects the state’s statute of limitations for wage claims.
New York State Tax Records: The New York State Department of Taxation and Finance generally follows federal guidelines but recommends retaining state tax records for at least 7 years — one year longer than the federal standard — because the state’s audit window can extend further in certain circumstances.
Workers’ Compensation Records: Under the New York Workers’ Compensation Law, records related to workers’ compensation claims must be maintained for significant periods — in some cases, up to 18 years for claims involving long-term or permanent disability. Consult with a New York employment attorney for guidance on specific claims.
New York City: NYC businesses may face additional requirements under local laws, including specific record-keeping obligations under the NYC Human Rights Law related to hiring and employment practices.
Industry-Specific Record Retention Requirements in New York
Beyond the baseline requirements that apply to all businesses, many industries face additional record-keeping mandates:
- Healthcare (HIPAA): Medical records must be retained for at least 6 years from the date of creation or the date when last in effect. New York State requires medical records to be retained for at least 6 years for adults, and until the patient’s 22nd birthday for minors — whichever is later.
- Financial Services (SEC/FINRA): Broker-dealers must retain certain records for 3–6 years depending on record type. Investment advisers have their own retention schedules under SEC Rule 204-2.
- Legal: The New York State Bar Association recommends retaining client files for a minimum of 7 years after the matter closes — though certain documents (wills, deeds) may need to be retained permanently or transferred to clients.
- Construction: Project contracts, change orders, and related records should be retained for the duration of the project plus 6 years (New York’s contract statute of limitations).
- Education: Student records are governed by FERPA and New York Education Law, with some records required to be retained permanently and others subject to specific destruction schedules.
If you’re unsure about the retention requirements for your industry, consult our compliance page or speak with a qualified attorney familiar with New York business law.
When and How to Safely Destroy Business Records in New York
Once your records have satisfied their required retention period, the obligation doesn’t end — it shifts. You are now required to destroy those records in a manner that protects the privacy of any individuals whose information they contain.
Under the New York SHIELD Act, businesses must implement “reasonable safeguards” to protect private information — including procedures for its secure disposal. Simply throwing old records in the recycling bin does not meet this standard. The FTC Disposal Rule (16 CFR Part 682) similarly requires businesses to take “reasonable measures” to protect against unauthorized access to consumer information when disposing of consumer report information.
The safest and most legally defensible way to destroy business records is through a certified document shredding company. New York Shredding provides:
- NAID AAA-certified secure shredding
- Certificate of Destruction documenting date, quantity, and method of destruction
- Locked, tamper-proof on-site consoles for secure interim storage
- Scheduled service programs and one-time purge options
Contact New York Shredding today to set up a records destruction schedule for your New York business.
Why New York Businesses Choose New York Shredding
For over a decade, New York Shredding Document Destruction, Inc. has helped businesses across New York City, Long Island, Westchester, and the Hudson Valley protect their sensitive information through certified, HIPAA-compliant shredding services. Our industrial-grade shredding equipment, locked on-site consoles, and Certificate of Destruction give your business the proof it needs for any compliance audit.
Whether you need scheduled shredding, a one-time purge, or hard drive destruction, we serve all five boroughs and surrounding areas with fast, reliable service. Request a free quote today and get your office on a shredding schedule that keeps you protected year-round.
Ready to get started? Contact New York Shredding for a free quote, or explore our full range of shredding services.