How Long to Keep Dental Employee Records
The federal minimums for the employee records a dental practice keeps — I-9s, payroll, OSHA training and medical files, HIPAA documentation and personnel files — plus the state rules layered on top.
There is no single retention clock for dental employee records — different rules cover different papers.
Form I-9s stay for three years after hire or one year after termination, whichever is later; payroll records for at least three years and time cards for at least two; bloodborne-pathogens training records for three years from the training date; employee medical records for at least employment plus 30 years; HIPAA documentation for six years.
Personnel records carry one-year minimums at covered employers, and California keeps personnel records longer after termination.
Rules vary by state and change
This guide explains federal rules and the state rules it names, as of the date above.
Employment law and dental-practice rules differ by state and are revised often, so confirm current requirements with your state dental board, labor agency or employment counsel before you act on them.
It is general information, not legal advice.
Personnel files: what goes in them
The personnel file is the folder for everything that is neither payroll nor a clinical chart: the job application and resume, the offer letter, copies of licenses and certifications, performance reviews, written coaching and discipline.
Several separate federal rules set minimum retention periods for pieces of this file — and they run on different clocks.
Under the ADEA, which covers employers with twenty or more employees on the working-day and calendar-week test the statute sets, job applications, resumes and other personnel records must be kept for 1 year from the date of the personnel action to which they relate.
Title VII, the ADA and GINA — covering employers with 15 or more employees — set a one-year minimum for applications, hiring, discharge and pay records: one year from the date the record was made or the personnel action occurred, whichever is later.
After an involuntary termination, those records stay for one year from the termination itself.
One override to remember: where a discrimination charge under Title VII, the ADA or GINA has been filed, all relevant personnel records must be preserved until final disposition of the charge.
The one-year schedule does not retire a file that is part of a live dispute.
California runs longer than the federal floor.
Employers there must keep a copy of each employee's personnel records for not less than three years after termination of employment.
The federal minimums at a glance
| Record | Keep for | Rule |
|---|---|---|
| Form I-9 | Three years after hire or one year after termination, whichever is later | 8 CFR 274a.2 |
| Payroll records | At least 3 years (FLSA); 3 years for covered employers (ADEA) | FLSA, 29 CFR 516.5; ADEA, 29 CFR 1627.3 |
| Time cards and wage-rate tables | At least 2 years | FLSA, 29 CFR 516.6 |
| Applications, resumes and personnel records | 1 year from the personnel action | ADEA, 29 CFR 1627.3 |
| Applications, hiring, discharge and pay records | One year from the record or the action, whichever is later | Title VII / ADA / GINA, 29 CFR 1602.14 |
| FMLA records (if FMLA-covered) | No less than three years | 29 CFR 825.500 |
| Bloodborne-pathogens training records | 3 years from the training date | 29 CFR 1910.1030 |
| Employee medical records | At least duration of employment plus 30 years | 29 CFR 1910.1030 / 1910.1020 |
| HIPAA documentation | Six years from creation or the date last in effect, whichever is later | 45 CFR 164.530 |
The sections below take each bucket in turn, with the state rules layered on top of the federal ones.
If you are building these files as you hire rather than untangling them afterward, the dental hiring hub collects the guides that feed them.
I-9 retention
Form I-9 retention runs on its own clock: three years after the date of hire or one year after employment ends, whichever is later.
For anyone employed longer than two years, the termination date controls — an assistant hired five years ago who resigns this year keeps the form alive for one year after leaving, because that outlasts three years after hire.
Keep current and former employees' forms together and retrievable.
Employers get at least three business days' notice before a government inspection of Forms I-9 — enough time to produce the file, but only if you know where every form sits, including the ones belonging to people who left years ago.
If the form side itself — completing it on time, fixing mistakes — is the open question, our Form I-9 guide walks through that process.
Payroll and time records
The FLSA requires employers to preserve payroll records for at least 3 years.
The ADEA has its own 3-year payroll file for covered employers — name, address, date of birth, occupation, pay rate and weekly compensation — which in practice the same payroll system produces.
The shorter clock belongs to supplementary basic records — time cards and wage-rate tables — which stay on file for at least 2 years.
Where staff are paid hourly, this is the set that documents the hours behind each paycheck, so it is the first place a wage question looks.
If your practice is FMLA-covered — 50 or more employees on the working-day and workweek test the statute sets — FMLA records carry their own minimum: no less than three years.
California layers a state rule on top: payroll records showing daily hours and wages must be kept on file for not less than three years.
OSHA training and employee medical records
OSHA currently has no standards written specifically for dentistry — the general standards apply, and two of them set the long clocks for clinical staff.
The bloodborne pathogens standard requires training records to be kept for 3 years from the date on which the training occurred, and the record has to show more than attendance: the dates of the training sessions, the contents or a summary of them, the names and qualifications of the people conducting the training, and the names and job titles of everyone who attended.
A sign-in sheet alone does not capture those required fields.
Employee medical records run far longer: at least the duration of employment plus 30 years.
That is where hepatitis B vaccination status and exposure follow-up live, and the bloodborne pathogens standard and OSHA's general medical-record rule set the same employment-plus-30-years minimum.
Who needs the hepatitis B series and what the documentation must show is its own topic — our guide to hepatitis B records covers it.
Injury and illness logs are the partial exception: offices of dentists (NAICS 6212) are on OSHA's list of partially exempt industries, so you do not have to keep OSHA injury and illness records unless the government asks you to.
Partial exemption does not touch reporting — any work-related incident resulting in a fatality, in-patient hospitalization, amputation or loss of an eye must still be reported to OSHA.
HIPAA training documentation
HIPAA sets a six-year clock on its required documentation — the policies a covered entity operates under, with training documentation among them.
The six years run from the date the documentation was created or the date it was last in effect, whichever is later, so a policy you revise this year starts its own six years at the revision.
What the training has to cover and how to deliver it to a mixed clinical and front-office team is laid out in our guide to HIPAA training for dental staff.
HIPAA is not the only training paper with its own clock — state harassment-training records carry theirs.
California employers must keep documentation of harassment training for at least two years, including the names of the employees trained and the date of training.
New York City employers must keep records of employees' harassment training for three years.
Maine employers must keep a record of harassment training, including which employees received it.
Employee access to personnel files
Retention runs one way; access runs the other where state law says so.
California gives current and former employees a right to inspect their personnel records on a short deadline, and Illinois' Personnel Record Review Act creates inspection rights of its own.
In California, current and former employees may inspect their personnel records within 30 calendar days of the date the employer receives a written request — extendable by written agreement, but to no more than 35 days.
Illinois' Personnel Record Review Act applies to employers with 5 or more employees, excluding the employer's parent, spouse, child or other members of the employer's immediate family.
Under it, on a written request an employer must grant at least 2 requests to inspect in a calendar year and respond within 7 working days, with up to 7 more calendar days when needed.
A request that arrives through an attorney, or alongside a dispute, is a different matter from a routine inspection — route those to employment counsel.
What the deadlines reward is a file that is current and in one place: the practice that can produce a clean copy quickly rarely has to think about the clock.
Retention minimums, one line each
- Form I-9: three years after hire or one year after termination, whichever is later.
- Payroll records: at least 3 years under the FLSA and 3 years for covered employers under the ADEA; time cards and wage-rate tables: at least 2 years.
- Bloodborne-pathogens training records: 3 years from the training date — dates, content, trainer names and qualifications, attendee names and job titles.
- Employee medical records (hepatitis B status, exposure follow-up): at least the duration of employment plus 30 years.
- HIPAA documentation: six years from creation or the date last in effect, whichever is later.
- Personnel records: one year at federal-floor employers; not less than three years after termination in California.
- A discrimination charge under Title VII, the ADA or GINA freezes the calendar: preserve all relevant personnel records until final disposition.
Questions employers ask
Can I destroy records once the minimum retention period passes?
Nothing in these rules sets a destruction deadline — they state how long records must be kept, and several say so as minimums: payroll "at least 3 years", FMLA records "no less than three years", medical records "at least the duration of employment plus 30 years".
And a minimum does not retire a file tied to a live dispute: where a discrimination charge under Title VII, the ADA or GINA has been filed, relevant personnel records must be preserved until final disposition.
Decide destruction deliberately, and run anything unusual past employment counsel.
How long do I keep applications and resumes for candidates I did not hire?
The same one-year rules reach applications from candidates you did not hire, at covered employers.
The ADEA requires applications, resumes and other personnel records to be kept for 1 year from the date of the personnel action to which they relate — for a rejected candidate, that action is the hiring decision.
The Title VII, ADA and GINA rule reaches application and hiring records for one year from the record or the action, whichever is later.
And if a discrimination charge under those statutes follows, relevant personnel records must be preserved until final disposition.
Is there a separate retention period for background-check reports?
The sources behind this guide establish no fixed FCRA retention period for background-check reports, so there is no number to plan around here.
Once a report sits in the file of someone you hired, it is part of the hiring and personnel records covered by the one-year rules above at covered employers.
If you want a deliberate schedule for keeping or destroying reports, set it with employment counsel.
Do these retention rules cover associate dentists, or just my staff?
None of these retention rules sets a different period by role, so an associate dentist on payroll runs on the same I-9, payroll and personnel-file clocks as your hygienists and front-desk staff.
What does vary is the paperwork a role generates: an associate's licensing and credentialing documents raise their own questions, which are worth a pass with employment counsel rather than a guess.
Sources
- 8 CFR 274a.2 — Form I-9 retention (eCFR) (retrieved October 6, 2026)
- 29 CFR 516 — FLSA recordkeeping (eCFR) (retrieved October 6, 2026)
- 29 CFR 1627.3 — ADEA recordkeeping (eCFR) (retrieved October 7, 2026)
- 29 CFR 1602.14 — Title VII/ADA/GINA recordkeeping (eCFR) (retrieved October 7, 2026)
- 29 CFR 825.500 — FMLA recordkeeping (eCFR) (retrieved October 7, 2026)
- 29 CFR 1910.1030 — Bloodborne pathogens (eCFR) (retrieved October 7, 2026)
- 29 CFR 1910.1020 — Access to employee exposure and medical records (eCFR) (retrieved October 7, 2026)
- 29 CFR 1904.2 — OSHA recordkeeping partial exemptions (eCFR) (retrieved October 7, 2026)
- OSHA — 1904 Subpart B Appendix A, partially exempt industries (retrieved October 7, 2026)
- 45 CFR 164.530 — HIPAA privacy, documentation retention (eCFR) (retrieved October 6, 2026)
- California Labor Code 1174 (payroll records) (retrieved October 7, 2026)
- California Labor Code 1198.5 (personnel records) (retrieved October 7, 2026)
- 820 ILCS 40/1 — Illinois Personnel Record Review Act, coverage (retrieved October 7, 2026)
- 820 ILCS 40/2 — Illinois Personnel Record Review Act, inspection (retrieved October 7, 2026)
- OSHA — Dentistry (retrieved October 7, 2026)
- 2 CCR 11024 — California harassment training records (retrieved October 7, 2026)
- NYC Commission on Human Rights — Sexual harassment training (retrieved October 7, 2026)
- 26 M.R.S. 807 — Maine sexual harassment training and records (retrieved October 6, 2026)
- EEOC — Small Business Requirements (retrieved October 7, 2026)
- 29 U.S.C. 630 — ADEA coverage (Legal Information Institute) (retrieved October 7, 2026)
- 29 U.S.C. 2611 — FMLA coverage (Legal Information Institute) (retrieved October 7, 2026)
More hiring resources
Hiring into the file?
Post your opening on DentistryHires and start each hire's records on day one — the retention periods on this page are easiest to satisfy when the papers behind them were filed as they happened, not reconstructed years later.

