California Business Record Retention Requirements: The Complete 2026 Guide by Industry

How long do you have to keep your business records? It's one of the most common compliance questions California business owners ask — and one of the most consequential to get wrong. Keep records too long and you're paying for unnecessary storage. Destroy them too early and you face fines, litigation exposure, and regulatory penalties.

‍

California has some of the most specific record retention requirements in the country — and they layer on top of federal requirements that apply everywhere. This guide covers every major industry's retention obligations in plain English, with the specific laws cited. It's designed as a reference you can bookmark and return to.

‍

Important: This guide is for informational purposes only. Your specific retention obligations may vary based on your industry, company structure, and applicable contracts. Consult a California attorney or compliance professional for advice specific to your situation.

‍

Why Record Retention Matters More in California

‍

California's regulatory environment is more demanding than most states. The California Consumer Privacy Act (CCPA) and its amendment CPRA impose specific requirements on how long personal data can be retained. California's Labor Code has stricter wage and hour recordkeeping requirements than federal law. California's Medical Information Act (CMIA) has patient record retention requirements that go beyond HIPAA. In almost every industry, California either has its own rules or applies the most stringent interpretation of federal requirements.

‍

At the same time, California's expensive commercial real estate market makes unnecessary paper storage a real financial cost — not just a compliance risk. Digitizing records that have hit their retention limit and then destroying originals is the right answer in almost every case. Read about the real cost of paper storage for Southern California businesses.

‍

Healthcare & Medical Practices

‍

Patient Medical Records

‍

California's Medical Information Act (CMIA) is the primary state law governing patient record retention. Requirements by patient type:

•  Adult patients: Minimum 10 years from the last date of treatment or service

•  Minor patients: Until the patient reaches age 28 (10 years after the age of majority)

•  Deceased patients: Minimum 10 years from the date of death

‍

HIPAA's federal minimum of 6 years is superseded by California's stricter 10-year requirement for most records. Our HIPAA-compliant medical records scanning service is specifically designed for California healthcare providers.

‍

Medical Practice Business Records

‍

•  Medicare/Medicaid cost reports and related records: 5 years

•  Billing records and claims: 7 years from the date of service

•  HIPAA authorizations and disclosures: 6 years from creation or last effective date

•  Business associate agreements: 6 years

‍

Legal Practices

‍

Client Files and Case Records

‍

California's Rules of Professional Conduct (Rule 1.15) and State Bar guidelines govern attorney record retention. The State Bar recommends (but does not mandate) minimum retention periods:

‍

•  Active client files: Retain until matter concludes plus minimum 5 years

•  Significant civil litigation files: Minimum 5 years after final disposition

•  Criminal matter files: Minimum 7 years, longer for felony matters

•  Estate planning documents (wills, trusts): Permanent or until superseded and client notified

•  Financial and billing records: Minimum 5 years

‍

Trust Account Records

‍

California Rule of Professional Conduct 1.15(a) requires attorneys to maintain trust account records for at least 5 years after the client relationship ends. Trust account bank statements, canceled checks, and ledgers must all be retained for this period. Our legal document scanning service serves law firms throughout Southern California with HIPAA-compliant handling protocols.

‍

Real Estate, Escrow & Title

‍

Escrow Records

‍

California's Financial Code (Section 17300 et seq.) and the Department of Financial Protection and Innovation (DFPI) govern escrow record retention:

‍

•  Closed transaction files: Minimum 7 years from transaction close

•  Unclosed or cancelled transactions: Minimum 3 years from last activity

•  Trust account records and reconciliations: Minimum 7 years

•  Escrow officer license records: Duration of license plus 4 years

‍

For escrow companies, document scanning costs can typically be charged directly to the transaction — making digitization effectively cost-neutral. Read our guide for escrow companies going paperless.

‍

Real Estate Broker Records

‍

California's Bureau of Real Estate (CalBRE, now DRE) requires real estate brokers to retain:

•  Transaction files (listings, purchase agreements, closing docs): 3 years from close of escrow or transaction date

•  Property management records: 3 years from termination of management agreement

•  Trust fund accounting records: 3 years

‍

Read our detailed guide to California DRE document retention requirements for a complete breakdown.

‍

HR, Employment & Payroll

‍

California has some of the strictest employment recordkeeping requirements in the country, adding to and sometimes superseding federal FLSA and EEOC requirements:

‍

Payroll and Wage Records

‍

•  Payroll records (hours worked, wages paid, deductions): 3 years under California Labor Code; IRS recommends 4 years for tax records

•  W-2s, 1099s, and tax withholding records: 4 years

•  Garnishment records: Duration of garnishment plus 3 years

‍

Personnel Files

‍

•  Active employee personnel files: Duration of employment

•  Terminated employee files: Minimum 3 years from termination date under California FEHA

•  Job applications (for positions not filled): 2 years

•  Accident and injury records (OSHA 300 logs): 5 years

•  Drug test results: 1 year from the date of the test

‍

Benefits and Leave Records

‍

•  FMLA/CFRA leave records: 3 years

•  Health plan enrollment records: Duration of plan plus 6 years (ERISA)

•  401(k) and retirement plan records: Minimum 6 years under ERISA

‍

Financial, Accounting & Corporate Records

‍

Tax Records

‍

•  Federal and state tax returns: Minimum 7 years (3 years for standard audit window; 6 years if IRS suspects income underreporting by 25%+; 7 years for bad debt claims)

•  Supporting documentation (receipts, invoices, bank statements): Minimum 7 years

•  Employment tax records: 4 years from the date the tax was due or paid

‍

Corporate Records

‍

•  Articles of incorporation, bylaws, board minutes: Permanent

•  Stock records and shareholder agreements: Permanent

•  Annual reports: Minimum 7 years

•  Contracts and agreements: Duration of contract plus 3-7 years depending on type

•  Insurance policies (expired): 10 years (statute of limitations considerations)

‍

Accounts Payable and Receivable

‍

•  Vendor invoices and payment records: 7 years

•  Customer invoices and receipts: 7 years

•  Bank statements and cancelled checks: 7 years

‍

Film, Production & Entertainment (LA-Specific)

‍

Los Angeles's entertainment industry has specific document retention considerations. Film and production companies must retain:

•  Production cost reports and final cost reports: 7 years

•  Guild and union contracts (SAG-AFTRA, WGA, DGA, IATSE): Duration of agreement plus 4 years

•  Time cards and payroll records for cast and crew: 3-7 years

•  Distribution agreements and licensing contracts: Duration plus 7 years

•  Chain of title documents: Permanent (critical for future licensing and distribution)

‍

Digitizing and Destroying Records: How It Works

‍

Once records have reached the end of their retention period, California law allows for destruction — but the destruction must be documented and, for sensitive records, performed securely. Before destroying physical originals, many organizations digitize them first to create a permanent searchable archive of the record's existence even after the physical copy is gone. Learn about our complete document scanning and digitization process.

‍

For records containing personal information, California's CCPA and CPRA require that destruction be permanent and verifiable. Secure shredding with a certificate of destruction is the standard. For electronic records, secure deletion or overwriting is required.

‍

The right retention strategy isn't keeping everything forever — it's knowing exactly what you need to keep, for how long, and in what format. A searchable digital archive organized by retention category makes both compliance and destruction dramatically simpler.

‍

Building a Record Retention Policy for Your California Business

‍

Every California business with more than a handful of employees should have a written record retention policy. A proper policy covers:

•  Document categories and their specific retention periods

•  Who is responsible for managing each category

•  The process for transitioning from active to archived status

•  The procedure for scheduled destruction, including documentation

•  Litigation hold procedures — when a legal proceeding is anticipated, normal destruction schedules must be suspended

‍

Once your policy is defined, a professional document scanning company can help you categorize, digitize, and organize your existing archives to match your retention schedule. Contact us to discuss how we've helped businesses across Los Angeles, Orange County, San Diego, and the Inland Empire build organized, compliant digital archives.

‍

Ready to Build a Compliant Digital Archive? Talk to us HERE

‍

Turn Source Imaging provides professional document scanning with pickup and delivery throughout Southern California

‍