How Long, and Where
Building a retention schedule for wage records, why claim windows should drive the period, and the migrations that destroy data quietly.
Set the retention period from the longest window in which somebody could ask, not from whatever the system defaults to. Wage records are asked for by former employees, by inspectors and by advisers, often years later, and a schedule built around storage convenience is a schedule that destroys the evidence before the question arrives.
The workflow in “How Long, and Where” becomes more reliable when captured time, approvals and later changes can be followed separately. For teams exploring dual n back training, this practical resource can provide useful operating context, while payroll rules, employee explanations and final decisions remain with accountable people.
Minimum periods differ by jurisdiction and by record type, and they are a question for somebody qualified in the place concerned. The practical work is deciding the actual period, writing it down, and surviving the system changes that happen in between.
For an independent reference relevant to “How Long, and Where”, consult the Singapore Ministry of Manpower working-hours guidance. Use it to test record quality, working-time definitions, access, retention and exception handling against the organisation’s real payroll process.
What drives the period
- Any statutory minimum for wage and hour records.
- The window in which a claim about pay could still be brought.
- Pension and benefit calculations that reach back further than either.
- Operational need: references, queries, reconstructing a history.
- Anything sector-specific.
The third is the one that extends the period beyond what most schedules assume, because a pension question can arrive decades later and the underlying pay records are what answer it.
Different periods for different records
A single period applied to everything is wrong in both directions, the same way it is for any other category of record.
Payroll outputs usually have a statutory minimum. Raw time data is often treated as less important and is arguably more important, because it is the only evidence of hours. Configuration history has no minimum at all and is what makes everything else interpretable.
Set three or four groups rather than one, and record the basis for each.
Where it lives
Inside the payroll or time system is the default and is the weakest option, because access to the record then depends on continuing to run — and pay for — that system.
An export in an open format, held separately, is what survives a vendor change. Most organisations have never produced one and discover the problem at the point of migration, when the old system is being switched off next month.
Migrations, which are where records die
- Identify every record type in scope before the migration is planned.
- Confirm which ones the new system will hold, and in what form.
- Export everything that will not migrate, in an open format.
- Verify the export by reading it back and reconciling a sample.
- Record where the archive is and who can reach it.
- Only then decommission anything.
Step four is the one that gets skipped under time pressure and is the only one that proves the others worked. An export nobody has opened is not an archive.
Raw data being purged for space
Time systems commonly purge detailed punch data after a short period — ninety days, a year — because it is bulky and nobody uses it.
That setting is a retention decision made by a system administrator on storage grounds, and it is almost never reviewed by anybody who knows what the data is for. Finding it is a ten-minute conversation and it is one of the highest-value conversations in this whole area.
Keeping it readable
A record that cannot be read is not kept. Proprietary exports, formats tied to a version, archives encrypted with a key nobody holds — each of these is a file that exists and answers nothing.
Test the archive once a year: pick a random week from three years ago and produce the raw times, the configuration and the pay record. If it takes more than an afternoon, the archive is not working.
Deleting on schedule
A retention schedule that is never acted on describes a practice the organisation does not have, which is worse than having no schedule. Wage records accumulate indefinitely, and the holding becomes harder to justify the longer it runs.
Running deletion needs the same discipline as any other record type: a fixed date, a list produced before anything is destroyed, a review, and a log of what went. The log is what distinguishes operating a policy from having lost things.
Holds when something is in prospect
Where a claim, a complaint or an inspection is in prospect, routine deletion of anything that might be relevant has to stop, and the instruction has to be specific about what is covered.
Wage records are the awkward case because the relevant material is spread across payroll, the time system and several operational systems owned by other people. A hold that reaches only payroll leaves the raw timestamps being purged on their default schedule, which is usually the data that matters most.
The schedule itself
One page: record type, period, basis, where it lives, who owns it, date of last review.
Six columns, four or five rows. It is a small document and almost no organisation has one for wage records specifically, which is why the answer to "how far back can you go" is usually a guess made by whoever happens to be asked.