ATLAS/BRIEFINGLaw, organized for consequential decisions.

EMP-05 Employment & Workforce Workforce Audits & Exposure Federal + state overlay

Payroll Records and Wage-Hour Audits: What Investigators Examine

Recordkeeping is the one wage-hour obligation that has no good-faith defense: either the record exists or it does not. This brief sets out what must be kept, for how long, and what an investigator does with it.

Technical diagram marking this brief's subject

Briefing in 60 seconds

  1. FLSA section 11(c) and 29 CFR Part 516 require specified payroll records to be kept three years, with wage-computation records kept two years.
  2. A Wage and Hour investigation typically reviews records, interviews employees privately, and can seek back wages plus an equal amount in liquidated damages.
  3. Missing or unreliable time records shift the practical burden: employees may prove hours by reasonable inference rather than by documentation.
  4. Federal retention is a floor. Several states require longer retention, and other federal statutes impose their own separate periods.

Controlling variables

Documents
Whether contemporaneous time records exist for every nonexempt worker decides whether the employer or the employee carries the practical burden on hours.
Jurisdiction
State wage statutes set their own retention periods and pay-statement content rules; New York's six-year period is far longer than the federal floor.
Status
Exempt classification removes the duty to record daily hours but not the duty to keep identifying, pay-basis, and total-wage records.
Timing
The limitations period is two years, or three for willful violations, which fixes how far back an investigator can reach for back wages.
Procedural posture
Whether the matter is an agency investigation, a private collective action, or a self-audit changes what may be produced and what should be preserved.

General legal information about United States law. Not legal advice, not representation, and no attorney–client relationship is created by reading it. Rules differ by jurisdiction and change — verify against the official sources listed below.

Wage-hour exposure is usually decided by paper, not by argument. The Fair Labor Standards Act imposes the duty at 29 U.S.C. § 211(c), which requires covered employers to make, keep, and preserve records of wages, hours, and other conditions of employment. The detail lives in 29 CFR Part 516.

There is no prescribed form and no required timekeeping technology. What matters is that the listed data exists, is accurate, and is still there when someone asks.

What the recordkeeping rule actually requires

For every nonexempt employee, the regulation identifies a specific list of items. Employers routinely have most of them and are missing one or two — usually the ones that were never part of the payroll vendor's default export.

  • Full name and any identifying symbol or number used in place of the name on time or payroll records.
  • Home address, including ZIP code.
  • Date of birth, if the employee is under 19.
  • Sex and occupation.
  • The time of day and day of week on which the employee's workweek begins.
  • Regular hourly rate of pay for any week in which overtime is worked, the basis on which wages are paid, and the amount and nature of payments excluded from the regular rate.
  • Hours worked each workday and total hours each workweek.
  • Total daily or weekly straight-time earnings.
  • Total overtime premium pay for the workweek.
  • Total additions to and deductions from wages for each pay period.
  • Total wages paid each pay period, the date of payment, and the pay period the payment covers.

Two items produce most of the failures. The workweek definition is frequently undocumented, which makes overtime impossible to verify because overtime is computed per workweek rather than per pay period. And the itemization of additions and deductions is often incomplete — the same records that decide whether a deduction survived the free and clear test described in our brief on wage deductions and expense reimbursement.

For employees treated as exempt, the duty is narrower but not absent. The employer still keeps the identifying data, the basis on which wages are paid, and total wages per period. It does not have to record daily hours. That narrower record becomes a liability if the exemption is later challenged, because the employer then has no hours data to rebut the employee's estimate.

The retention split, and the statutes that override it

Part 516 divides records into two retention classes. Payroll records, collective bargaining agreements, sales and purchase records, and certain certificates and notices are kept three years. The underlying records on which wage computations are based — time cards, work-time schedules, wage-rate tables, and records of additions to and deductions from wages — are kept two years.

Federal retention periods that apply to the same employment file, by source of the obligation
Record categoryPeriodSource of the duty
Payroll records, CBAs, sales and purchase recordsThree yearsFLSA recordkeeping regulations
Time cards, schedules, wage-rate tables, deduction recordsTwo yearsFLSA recordkeeping regulations
Employment tax recordsFour years after the tax is due or paidInternal Revenue Service employment tax rules
Payroll records under the age-discrimination statuteThree yearsADEA recordkeeping regulations
Personnel and employment records generallyOne year from creation or from the personnel actionEEOC recordkeeping regulations
FMLA leave and payroll recordsThree yearsFMLA regulations
State wage-payment recordsVaries; six years in New York, commonly three or four elsewhereState wage-payment and wage-theft statutes

Verify before relying: The federal periods are minimums. Where an employer operates in multiple states, the practical retention policy should follow the longest applicable period rather than the FLSA floor, and a preservation obligation in litigation overrides every schedule in the table.

How a Wage and Hour investigation runs

Section 11(a) gives the Department of Labor authority to investigate and gather data, enter and inspect premises and records, and question employees. An investigation may begin from a complaint, from a directed enforcement initiative in a targeted industry, or from a referral by another agency. The Department does not disclose whether a complaint prompted the visit, and complainant identity is protected.

  1. Opening conference

    The investigator identifies the scope — the establishments, the period, and the classifications under review — and requests records. Ask what statute and what period are covered, and put the answer in writing.

  2. Records review

    Payroll registers, time records, pay statements, deduction authorizations, job descriptions, handbooks, and the posted notices required by regulation. Investigators reconcile hours to pay and look for patterns rather than isolated errors.

  3. Employee interviews

    Conducted privately, on or off site, with current and sometimes former employees. Interviews test whether the records reflect actual practice — pre-shift work, work through unpaid meal breaks, off-the-clock messaging, and unrecorded travel.

  4. Computation

    The investigator computes back wages by employee and workweek. Where records are missing, computation rests on interviews and reasonable estimates, and the employer's ability to contest the number is limited.

  5. Final conference

    Findings are presented with a back-wage schedule. The employer may agree to pay under Department supervision, contest the findings, or negotiate the computation. Willful or repeated violations can carry civil money penalties beyond back wages.

Interviews are where a clean file goes wrong. If timekeeping policy says one thing and supervisors say another, the supervisors' version is the one that gets written down. The same interview-integrity problems described in our brief on workplace investigation scope and records apply here, with the added feature that the interviewer does not work for you.

What missing records actually cost

The FLSA remedy is back wages plus an additional equal amount as liquidated damages, unless the employer shows the violation was in good faith and based on reasonable grounds. The limitations period is two years, extended to three for a willful violation. Retaliation against an employee who complains or participates is separately prohibited.

The larger consequence of a missing record is evidentiary. The Supreme Court held in 1946 that where an employer has failed to keep proper records, an employee who shows work was performed without proper compensation may prove the amount by just and reasonable inference, and the burden shifts to the employer to negate the inference. In practice that means the employee's recollection becomes the starting number.

  • Rounding rules nobody validated. Rounding that is neutral in design but consistently favors the employer in operation produces a systemic shortfall across every affected worker.
  • Automatic meal deductions. A thirty-minute deduction applied whether or not the break was taken is one of the most common sources of collective-action exposure, and the records rarely show whether the break occurred.
  • Regular-rate errors. Nondiscretionary bonuses, shift differentials, and certain incentive payments must be folded into the regular rate before overtime is computed. The error is small per week and enormous across three years.
  • Purged systems after a vendor change. Payroll migrations routinely leave the prior platform's detail inaccessible. Export before you switch.
  • Deleting records after a claim surfaces. Routine deletion continuing past the point where a claim is reasonably anticipated is spoliation, and it converts a payment dispute into a credibility dispute.
  • Contractor files that were never kept at all. If a worker is later reclassified, there are no hours records for the entire engagement — the connection explored in worker misclassification audits and settlement options.

Running the audit before someone runs it for you

A self-audit is worth doing precisely because the questions are predictable. Pull one representative workweek per location and reconcile it end to end: scheduled hours, recorded hours, hours paid, regular rate as computed, overtime paid, deductions taken, and the pay statement the employee actually received. Then repeat for the heaviest overtime week in the period.

Where the reconciliation fails, fix the configuration before fixing individual paychecks, because a correction applied to one employee without changing the system generates the pattern an investigator looks for. If back wages are owed to a group, decide deliberately how to resolve them — a payment made without a valid release does not end the claim, and settlement of FLSA claims generally requires supervision by the Department or court approval.

Preservation first: The moment a wage claim, agency notice, or demand letter arrives, suspend deletion. A litigation hold that reaches payroll systems, timekeeping platforms, scheduling apps, and supervisor messaging is the first step, not the last.

Questions the desk gets

Do we have to use a time clock?

No. The regulation requires accurate records of hours worked, not a particular method of capturing them. Handwritten sheets, badge systems, mobile applications, and supervisor logs are all acceptable if they reflect actual hours. What fails is a schedule used as a substitute for a record. A schedule shows what was planned; it does not show the fifteen minutes before the shift or the call answered after it.

The investigator wants records going back four years. Do we have to produce them?

The recordkeeping regulation requires retention of payroll records for three years and computation records for two, and the recovery period is two years or three for willful violations. Requests reaching further should be clarified rather than refused outright — ask what statute and period the request rests on. If longer records exist because a state law or your own policy required them, they generally exist for practical purposes and their absence will be noticed.

Can we correct a classification error quietly going forward?

You can change the classification prospectively, and you often should. What the change does not do is resolve the prior period. A reclassification with no back-wage analysis is visible in the payroll data and invites a question about the preceding two or three years. Decide the backward-looking treatment at the same time as the forward-looking change, and document the reasoning.

Does a staffing agency's recordkeeping cover our obligation?

Not necessarily. Where a business and a staffing supplier are both treated as employers of the same worker, each can carry its own recordkeeping and payment obligations, and liability for minimum wage and overtime can be joint and several. Contractual allocation between the businesses does not bind the agency or the worker. The analysis is set out in joint employer liability.

Sequencing the work

Start with retention, because it is the only element that becomes unfixable with time. Confirm what each system holds, how long it holds it, and what happens on a vendor migration. Then confirm the data set against the Part 516 list rather than against the payroll vendor's report menu.

Next, test the accuracy of the hours themselves in a small sample, since that is what an interview will test. Last, address exposure: compute what a three-year look-back would produce for the most common error, and decide whether to correct, disclose, or reserve. Current federal guidance and computation methods are published by the Wage and Hour Division and its fact sheet library; employment tax record periods are separate and are described by the Internal Revenue Service. Related workforce obligations are collected on the Employment & Workforce desk.

Sources

  1. U.S. Department of Labor — Wage and Hour Division
  2. U.S. Department of Labor — Wage and Hour Division fact sheets
  3. Legal Information Institute — 29 U.S.C. § 211 (FLSA investigations and records)
  4. Legal Information Institute — 29 CFR Part 516 (records to be kept by employers)
  5. Internal Revenue Service — small business and self-employed employment tax records

Atlas Research Desk

ATLAS briefs are researched and edited by the Research Desk, an editorial organization — not attorneys acting for you. Method and limits: editorial method · source standards · corrections.