HR record-keeping requirements in Ireland
Reviewed by Mellow Editorial Team, HR & payroll content team
Employers in Ireland are legally required to keep specific employment records for defined periods — and failing to do so can result of fines, Revenue audits and employment tribunal difficulties. Here is what you must retain, for how long, and how to stay on the right side of the rules.
What the law actually requires
Several pieces of legislation create record-keeping obligations that overlap with each other. The main ones are:
- The Organisation of Working Time Act 1997 — requires records of working hours, rest periods, annual leave taken and pay related to leave.
- The Payment of Wages Act 1991 — requires that employees receive a payslip and that wage records are maintained.
- The National Minimum Wage Act 2000 — requires records sufficient to demonstrate compliance with the minimum wage.
- The Employment Equality Acts 1998–2015 — while not prescribing a specific format, these Acts create a practical need to retain records that show recruitment, promotion and pay decisions were non-discriminatory.
- GDPR and the Data Protection Acts 1988–2018 — impose obligations around how personal data in employment records is stored and eventually deleted.
Revenue also has its own requirements, separate from employment law, covering PAYE, PRSI and USC records.
How long must you keep records?
The general rule under the Organisation of Working Time Act is three years from the date the records were made. For Revenue purposes — including payroll records, tax deduction details and P30/P35 equivalents — the standard retention period is six years. Where both sets of rules apply to the same document, the safer approach is to retain it for six years.
There is no single statute that consolidates every retention period, so you will sometimes see different figures quoted. The practical default most employers and advisers use is six years for anything touching pay or tax, and three years for pure working-time records that have no Revenue dimension.
Records relating to a dispute, a Workplace Relations Commission (WRC) claim or litigation should be kept until the matter is fully resolved, regardless of normal retention windows.
Payroll records specifically
Because Ireland operates real-time payroll reporting — employers must submit payroll data to Revenue via ROS on or before each payday — your payroll system itself generates an audit trail. But the obligation does not end with transmission. You must also retain:
- Details of gross pay, taxable pay, tax credits applied, income tax deducted, USC deducted and PRSI (both the employee's ~4.1% Class A contribution and your employer's ~11.15% contribution).
- The basis on which each employee's tax was calculated — whether on an emergency basis, a cumulative basis or a Week 1/Month 1 basis.
- Payslips or equivalent records for each pay period.
- Records of any non-cash benefits, expenses payments or notional pay that formed part of the employee's remuneration.
With pension auto-enrolment under the My Future Fund scheme coming in from 2026, contribution records for that scheme will become an additional payroll record-keeping obligation for most employers.
Working time and leave records
Under the Organisation of Working Time Act, you must record each employee's:
- Daily and weekly working hours
- Rest breaks taken
- Annual leave accrued and taken
- Public holiday entitlements and how they were discharged
Employees are entitled to a minimum of four working weeks' annual leave per leave year. If an employee later disputes whether leave was granted, the burden of proof rests with the employer. In practice this means your records need to be specific enough to show dates, not just aggregate totals.
A WRC inspector has the power to request these records at any time. If you cannot produce them, a presumption can arise that the Act was breached.
Personal data and GDPR
Employment records contain personal data — names, PPS numbers, bank details, health information in the case of sick leave, and so on. GDPR requires that you:
- Have a lawful basis for processing each category of data (legal obligation or legitimate interests are the most common bases for standard employment records).
- Store records securely, with access limited to those who need it.
- Delete or anonymise records once the legitimate retention period has expired. Keeping records "just in case" beyond the relevant period is itself a GDPR risk.
- Provide employees with access to their own records on request under a Subject Access Request, typically within one month.
There is a tension between the six-year retention period for tax purposes and GDPR's data minimisation principle. The resolution is that a clear legal obligation (Revenue retention requirements) provides a valid basis for retention during that window — but once the window closes, the obligation to delete is real.
Practical steps to stay compliant
- Use a payroll system that timestamps submissions and stores payroll records in a retrievable format.
- Keep a separate HR file for each employee containing their contract, role changes, leave records and any correspondence related to their employment.
- Set a calendar reminder to review and purge records that have passed their retention period.
- If you use a third-party provider to process payroll, confirm in writing that they retain records on your behalf in a format you can access — and that you remain the data controller responsible for compliance.
- Document your record-keeping policy so that anyone in your team handling HR data knows what to keep, where to store it, and when to delete it.
---
Run HR and payroll in Ireland with Mellow
Mellow brings HR, payroll and 12 AI agents into one platform — built to handle Ireland properly, with payroll included, from £4 per employee per month. The AI agents don't just answer questions; they generate contracts, run cost estimates and draft letters for you.
[Start a free trial →](/register)