How Long Should You Keep Important Records?

Records retention guide for Massachusetts businesses and residents. Specific timelines for tax returns, medical files, business contracts, employee records and personal documents. With practical disposal timing.

“How long do I need to keep this?” is the question that turns into a basement full of paper after 30 years. The answer varies dramatically by record type. Some records can be tossed within a year. Others need permanent retention. Getting the timing right protects you from both audit penalties (destroying too soon) and identity theft exposure (holding too long). This guide covers Massachusetts and federal retention rules across personal, business and medical records.

Personal Records Retention

For Massachusetts residents managing personal paperwork at home.

Tax returns: 7 years from filing date. The IRS can audit returns up to 7 years back in cases involving substantial errors. Keep the return itself plus all supporting documentation (W-2s, 1099s, deduction receipts). After 7 years, destroy via professional shredding.

Bank and credit card statements: 1 year for routine statements. Longer if needed for tax support or disputed transactions. Most banks offer electronic access to historical statements making physical retention unnecessary past 1 year.

Pay stubs: Until you receive your year-end W-2 and confirm the totals match. Then destroy.

Medical bills and EOBs: 3 to 7 years for active treatment. Useful for tax deduction support and insurance dispute resolution. Permanent retention recommended for major procedures or ongoing conditions.

Insurance policies: Retain through the policy term plus the claim period. For homeowners and auto, typically 1 to 3 years past policy end. Life insurance permanent.

Mortgage documents: Permanent retention for the original closing documents. After mortgage payoff, retain for 7 years past payoff plus ownership records.

Investment statements: 7 years for routine statements. Permanent for purchase confirmations needed to establish cost basis on capital gains tax.

Wills, trusts, deeds, marriage and birth certificates: Permanent. Store originals in a safe deposit box or fireproof home safe with copies in your home filing.

Receipts: 1 year for routine purchases. Longer for warranty-related items. Permanent for major appliances and home improvements that affect basis.

Business Records Retention

For Massachusetts businesses, retention is driven by federal tax law, state requirements and industry-specific regulations.

Tax returns and supporting documentation: 7 years federal minimum. Some states longer. Massachusetts adds 3 years for state-specific tax records.

Financial statements, journals, ledgers: 7 years minimum. Many businesses retain permanently for historical reference and IPO preparation.

Customer contracts and agreements: 7 years past contract expiration plus any applicable warranty period.

Vendor invoices and AP records: 7 years for tax support.

Customer invoices and AR records: 7 years.

Bank statements and reconciliations: 7 years.

Articles of incorporation, bylaws, board minutes: Permanent.

Stock records and shareholder communications: Permanent for capitalization records, 7 years for routine communications.

Insurance policies: Through policy period plus claim resolution period, typically 7 years.

Audit reports: Permanent retention recommended.

For public companies and SEC-regulated firms, additional retention applies under SOX and SEC Rule 17a-4. Consult your legal and audit counsel for specific obligations.

Employee Records Retention

HR records carry their own retention rules under federal and Massachusetts employment law.

Employee personnel files: Duration of employment plus 7 years post-termination for most documentation.

I-9 employment eligibility forms: 3 years from hire date or 1 year from termination, whichever is longer.

Payroll records, time cards, wage rate schedules: 3 years federal minimum (FLSA), 4 years state.

Tax-related employment records (W-2s, W-4s): 4 years.

EEOC-related records: 1 year for failed-applicant materials, longer for selected employees.

Benefit plan records (ERISA): 6 years from filing date, longer for some materials.

Workers comp claims: Permanent for serious claims.

Training records: Duration of employment plus 3 to 7 years depending on training type.

Background check results: See our FACTA guide. Typically 5 years for non-selected candidates, longer for hires.

Medical Records Retention (Massachusetts)

Massachusetts has specific medical records retention rules.

Adult patient medical records: 7 years from last patient encounter (state minimum).

Pediatric patient records: 7 years past last encounter or until age 25, whichever is later.

HIPAA documentation (BAAs, training, breach assessments): 6 years from creation or last effective date.

Billing and claims records: 7 years for tax and Medicare audit purposes.

Controlled substance records (DEA): 2 years federal minimum, often kept 7 for combined compliance.

X-ray films: 5 years state minimum. Some specialties longer (mammography, pediatrics).

For medical practices building a HIPAA-compliant disposal program, see our HIPAA shredding requirements guide.

When to Destroy: Building a Disposal Calendar

Records held past their required retention become liabilities. The practical answer is to build a disposal calendar that pulls aged-out records on a recurring schedule.

For personal records: an annual February cleanout after the new tax year is filed. Pull all records that aged past their retention window. Bring to professional shredding. Drop-off service works perfectly for this.

For business records: quarterly cleanouts triggered by your fiscal calendar. Year-end financial close, March-April for tax records, mid-year for HR cycle records, end-of-fiscal-year for project files.

For medical practices: monthly or quarterly cleanouts coordinated with your scheduled shredding service. Records aging out of retention go directly into locked consoles for next pickup. See scheduled service.

For metro Boston residents and small businesses without a documented retention schedule, the practical starting point is one annual destruction event. Pull all paper that aged past its retention window during the year. Bring it to professional shredding. Keep the Certificate. Repeat next year. This simple discipline beats any complicated retention policy that never gets executed.

Building Your Retention Schedule Step by Step

Most metro Boston businesses do not have a formal records retention schedule until they need one. The need usually comes from an audit, an investigation or an unexpected document request. Building a retention schedule before that moment saves significant grief.

Step 1: Inventory record types. Walk through your office (literally and metaphorically) and list every category of paper your business produces. Tax records, contracts, HR files, customer correspondence, invoices, receipts. Each category needs its own retention rule.

Step 2: Map each category to applicable rules. IRS retention applies to tax records. FLSA applies to payroll. HIPAA applies to medical records. State law applies on top. Your retention period for any given record type is the LONGEST applicable rule.

Step 3: Document the schedule. Write it down. List each record category, the retention period, the trigger event (creation, last activity, contract end) and the destruction method. Sign off by management.

Step 4: Apply the schedule consistently. Train staff. Update the schedule when new record types appear. Review annually.

Step 5: Execute destruction on schedule. Records aging out get pulled and destroyed. Certificate of Destruction goes into your compliance file. Repeat at the next cycle.

For metro Boston businesses without a formal retention schedule, professional shredding service can be the catalyst for building one. We help clients map common record types to retention windows during onboarding so the destruction calendar makes sense from day one.

Industry-Specific Retention Notes

Beyond the universal rules, several industries have specific retention obligations.

Healthcare: See our HIPAA records retention guide for medical practice specifics.

Financial services: SEC 17a-4 retention applies to broker-dealers (3-6 years easily accessible, plus archival). FINRA, MSRB and similar bodies layer on top. See GLBA guide.

Public companies: SOX retention adds to standard rules. See SOX guide.

Legal practice: State bar rules govern client file retention, typically 5 to 7 years post-matter close. Trust account records often longer.

Real estate: Closing documents typically permanent for ownership records, 7 years for transactional documentation.

Records Retention FAQ

Time to Destroy What Aged Out?

Drop-off in Tewksbury or pickup at your location. Certificate of Destruction documents every event for your records.