Every paid tax preparer who signs a federal return carries a statutory obligation to retain records of that return for at least three years. The governing authority is IRC Section 6107(b). The penalty for failing to comply is imposed under IRC Section 6695(d): $60 per failure, up to $31,500 per return period (2026 amounts, subject to annual inflation adjustment; verify current figures at IRS.gov). The math is simple. A preparer with 525 clients who discards records too early faces the full seasonal cap in one examination.
What is less simple is knowing precisely when the clock starts, what extends it, how digital storage satisfies the rule, and what state regulators add on top of the federal floor. This guide answers each of those questions in the order a working preparer needs them. It covers federal law under Sections 6107 and 6695, extended retention triggers for international and employment tax returns, electronic retention under Revenue Procedure 98-25, California CTEC requirements, WISP integration, disaster recovery, and a practical retention checklist.
This guide is informational and does not constitute legal or tax advice. All penalty amounts, statutory citations, and regulatory guidance should be verified at IRS.gov and with the applicable state authority before you rely on them for compliance decisions.
The Governing Rule: IRC Section 6107(b)
IRC Section 6107(b) requires any person who is a tax return preparer with respect to a return or claim for refund to retain, for the period ending three years after the close of the return period, either (1) a completed copy of each return or claim for refund, or (2) a record listing the name and taxpayer identification number of each taxpayer for whom a return or claim was prepared.
The rule covers the signing preparer on the return, not the firm as an entity. If you hold a PTIN and sign returns, Section 6107(b) applies to you directly. A firm may maintain centralized records on behalf of its preparers, but the statutory obligation runs to the individual who signed.
The statute gives preparers a choice between two retention formats: a copy of the complete return, or a name-and-TIN list. The copy is the more defensible option because it eliminates disputes about what was on the return. The list is the minimum. Best practice holds the full return plus supporting documentation, as covered in the checklist section below.
The obligation also applies to the principal member of a firm that employs preparers. Under IRC Section 6107(b), the firm's responsible party must maintain a record of each signing preparer and the returns they signed during the return period. Firms with employed or contracted preparers carry this secondary retention obligation on top of the individual preparers' obligations.
How the Three-Year Period Is Calculated
The three-year clock does not run from the date the return was filed. It runs from the close of the "return period," a defined term under IRC Section 6060(c). The return period is the twelve-month period ending June 30 of the year following the calendar year in which the return is filed.
Concrete example: 2022 return filed August 2023
A client's 2022 Form 1040 is filed on extension in August 2023. The return is filed in 2023, so the return period is the twelve months ending June 30, 2024. The preparer must retain the copy or client list until three years after June 30, 2024. The retention obligation expires June 30, 2027.
Note that the return period is tied to the calendar year in which the return is filed, not the tax year the return covers. A 2022 return filed in April 2023 falls in the same return period as a 2022 return filed in October 2023: both are filed in calendar year 2023, both land in the July 2023 to June 2024 return period, and both carry a June 30, 2027 retention expiration.
The practical implication: if you batch-purge records annually, the safe approach is to count three full return periods from the most recent year in the batch. Do not purge a 2022 return's records in early 2026 simply because three years have passed since the filing date. Confirm the return period close date before any purge.
Extended Retention Triggers
Three circumstances push the effective retention obligation well past the Section 6107(b) three-year minimum. In each case, best practice is to treat the extended assessment period as the floor for your supporting documentation, not just the statutory copy-or-list.
Fraud and willful understatement: no statute of limitations
When a return involves fraud or a willful attempt to evade tax, the IRS has no time limit to assess. IRC Section 6501(c)(1). The Section 6107(b) three-year obligation still governs the preparer's minimum statutory retention, but a preparer who suspects fraud, who prepared a return later determined to involve fraud, or whose own conduct is under scrutiny has a practical interest in retaining the full file indefinitely. There is no safe harbor for destroying records in a fraud case.
FBAR and international information returns: six-year assessment period
For clients with foreign financial accounts, foreign income, or foreign entity interests, several assessment periods extend beyond the standard three years. The IRS has six years to assess tax on a return that omits more than 25 percent of gross income attributable to foreign financial assets (IRC Section 6501(e)(1)(A)). FinCEN's FBAR rules carry their own six-year statute of limitations for civil penalties. Preparers who sign returns with foreign income components, Forms 5471, 8938, 3520, or FBAR-related schedules should retain supporting documentation for at least six years from the return period close.
Employment taxes: four-year assessment period
The IRS has four years from the date employment taxes were due or paid (whichever is later) to assess additional tax under IRC Section 6501(b)(2). Preparers who sign Forms 941, 940, or W-2 packages for employer clients should retain records related to those returns for at least four years from the end of the applicable return period. Payroll tax discrepancies can surface years after a filing season closes; the longer assessment window warrants the longer retention window.
Statutory Minimum vs. Best-Practice Standard
Section 6107(b) sets the floor. The floor is a copy of the return or a name-and-TIN list. Nothing in the statute requires you to retain the client's source documents, the engagement letter, or the notes from your client meeting. The floor is narrow.
The practical standard is considerably wider. A preparer who retains only the statutory minimum has no defense when a client disputes a position taken on the return, when the IRS questions a deduction, or when a malpractice claim surfaces two years after filing. The documents that protect you are not the ones the statute mandates; they are the ones that show you gathered complete information, asked the right questions, and made defensible professional judgments.
Best-practice retention for each client engagement includes all of the following, held for at least three years from the return period close (longer where extended triggers apply):
- A complete copy of the signed return as filed, including all schedules and attachments
- The signed engagement letter, which establishes the scope of services and the client's responsibilities
- Due diligence worksheets for any credits subject to preparer due diligence requirements (EITC, CTC/ACTC, AOTC, head-of-household)
- Copies of source documents provided by the client: W-2s, 1099s, K-1s, receipts for deductible expenses, Social Security cards for newly added dependents
- Notes or written records from client meetings, including questions asked and the client's responses where a judgment call was made
- All written correspondence with the client related to the return, including emails and portal messages
- E-file acknowledgment records and IRS acceptance confirmations
- Any amended return or superseding filing, with documentation of why the amendment was made
Circular 230 also imposes record-keeping duties on practitioners who represent clients before the IRS. Those obligations are distinct from but parallel to the Section 6107(b) preparer retention requirements; a practitioner subject to both should ensure their retention system satisfies the more demanding standard. See the Circular 230 guide for the full practitioner standard.
The Section 6695 Failure-to-Retain Penalty
IRC Section 6695(d) imposes a civil penalty for failure to comply with the Section 6107(b) retention requirement. As of 2026, the penalty is $60 for each failure to retain or make available the required copy or client list, subject to a maximum of $31,500 per return period. These amounts are adjusted for inflation annually; verify the current figures at IRS.gov before each filing season.
The penalty applies per return, per period. A preparer who fails to retain records for 525 or more clients in a single return period hits the $31,500 maximum regardless of how many additional failures occurred in that period. A preparer with 100 failures in one period faces $6,000. A preparer with 200 faces $12,000. The cap does not reduce the per-return penalty below the maximum; it simply limits the total for each return period.
The penalty is separate from and in addition to any other penalty that might apply to the same return. A preparer who fails EITC due diligence and also fails the retention requirement on the same return faces both the Section 6695(g) due diligence penalty and the Section 6695(d) retention penalty. See the tax preparer penalties guide for the full Section 6695 penalty schedule.
A reasonable cause exception exists but is narrow. A preparer who can demonstrate that the failure to retain records was due to events outside their control and that they acted in good faith may avoid the penalty. Loss of records in a natural disaster, for example, may qualify. Routine discard of records because a filing season has passed does not. Documenting your retention system and your actual retention practices is the only way to support a reasonable cause argument if one becomes necessary.
Professional liability insurance for tax preparers does not typically cover IRS preparer penalties. The Section 6695(d) penalty runs to the preparer, not to the client, and most E&O policies exclude statutory preparer penalties from coverage. See the guide to tax preparer E&O insurance for what your policy does and does not cover.
Electronic vs. Paper Retention
Revenue Procedure 98-25 established that the IRS accepts electronically maintained business records in lieu of paper originals, provided the electronic records meet format requirements. Under that guidance, the IRS will accept machine-sensible records that are legible, reproducible, and accessible to IRS personnel on request without requiring the preparer to translate or reconstruct them.
Readers should verify whether Rev. Proc. 98-25 has been superseded or supplemented by later guidance before relying on it. IRS guidance on electronic records has developed since 1998; checking IRS.gov for current Rev. Proc. status before implementing a digital retention system is prudent.
Scan-and-destroy policies
A scan-and-destroy policy converts paper originals to digital images, then discards the paper. This is generally permissible under Rev. Proc. 98-25 and is common practice for tax offices operating with document management software. For a scan-and-destroy workflow to be defensible, the digital images must meet three conditions: legibility (readable without special tools or interpretation), reproducibility (printable or transmittable to the IRS in a standard format), and accessibility (retrievable on demand during the retention period without specialized software that may become unavailable).
A fourth practical condition applies beyond the strict regulatory standard: the image must accurately capture the original. A scan that cuts off a signature, omits a page, or distorts figures is not a reliable substitute for the original. Quality-control steps at the time of scanning, not at the time of retrieval, are the only way to catch these errors.
Format and access requirements
The IRS does not mandate a specific file format for electronic retention. PDF, TIFF, and standard document management formats are widely used and generally accepted. The practical requirement is that if the IRS issues a records request during an examination, you can produce the requested documents promptly, in a readable format, without requiring the examiner to obtain proprietary software or hardware.
Proprietary practice management platforms that store records in closed formats create a platform-dependency risk. If the platform changes its export options or goes out of business during your retention period, you may lose access to records you are legally required to produce. A local or cloud backup in an open, non-proprietary format (PDF for images, CSV or standard spreadsheet formats for data) mitigates this risk. See the virtual tax office setup guide for more on building a paperless office with compliant storage.
State-Level Retention Requirements
Most states that impose preparer obligations tie their retention requirements to the federal standard or adopt it by reference. A state that mandates three years from the return due date or filing date is functionally aligned with the Section 6107(b) framework, though the calculation method may differ in edge cases. Preparers licensed in multiple states should verify each state's specific language rather than assuming federal conformity.
California: CTEC requirements
California Tax Education Council (CTEC) regulations, under authority derived from California Business and Professions Code Section 22253, require registered tax preparers to retain copies of all tax returns prepared for compensation. The retention period is three years from the due date of the return or the date the return was filed, whichever is later. Where a return is filed on extension and the filing date exceeds the original due date, the clock runs from the actual filing date.
Verify the current CTEC retention requirements at CTEC.org before each filing season. California's retention rule can produce a different expiration date than the federal Section 6107(b) calculation for extended returns. A California preparer managing the compliance correctly must track both clocks and retain records until the later expiration date is passed.
Other states with material retention provisions
Oregon's Licensed Tax Consultant and Licensed Tax Preparer programs under the Oregon Board of Tax Practitioners impose record retention requirements on licensees. Iowa's CE requirement for preparers at the 10-plus-return threshold is accompanied by conduct and retention standards. Maryland's Board of Individual Tax Preparers imposes record-keeping rules on registered preparers. New York's NYTPRIN registration framework includes record retention obligations for registered preparers.
The safest approach for preparers practicing in regulated states is to maintain the full-documentation best-practice standard (not just the statutory minimum copy or list) for the longer of the federal and state retention periods. This produces one unified retention system rather than a state-by-state tracking problem.
WISP Integration: Record Retention as a Data Security Obligation
The FTC Safeguards Rule and IRS Publication 4557 require tax preparers to maintain a Written Information Security Plan (WISP). The WISP is not a separate system from your record retention practices; it is the governance document that describes how client data (including retained returns and supporting documents) is protected, accessed, and eventually destroyed.
A compliant WISP for a tax practice must address record retention directly in at least three respects:
- Encryption in storage: Retained records containing client TINs, financial data, and personally identifiable information must be encrypted at rest. A WISP that describes a retention system built on unencrypted local storage is noncompliant with the Safeguards Rule's technical safeguard requirements.
- Access controls: The WISP must specify who can access retained records, under what circumstances, and how access is logged. A solo preparer's access control policy is simpler than a firm's, but both must be documented. Shared passwords, unlogged remote access, and unmanaged cloud sharing are the most common gaps.
- Disposal procedures: When the retention period for a given return expires, the WISP must describe how records are destroyed. Paper records must be shredded, not placed in ordinary waste. Electronic records must be securely deleted or the storage media must be destroyed. A WISP that is silent on disposal leaves the preparer exposed at the back end of the retention cycle.
The connection between retention and the WISP runs in both directions: the retention system must be built to satisfy the WISP's security requirements, and the WISP must be written to address the retention system's actual design. A retention policy that does not match the actual system described in the WISP is a compliance gap in both. See the WISP data security plan guide for the full framework.
Disaster Recovery and Off-Site Backup
A retention system that exists only on a single local device is not a compliant retention system; it is a single point of failure. A hard drive crash, a ransomware attack, a fire, or a flood can destroy every retained return in your practice in an instant. The reasonable cause exception for destroyed records is narrow and requires evidence of the destruction event itself, which is difficult to produce when the records and the evidence of loss are gone together.
A compliant retention system requires at least two copies of retained records stored in physically or logically separate locations. Acceptable backup architectures include:
- Encrypted cloud backup: A cloud storage service with at-rest and in-transit encryption, access controls, and audit logging. The cloud backup should be treated as the off-site copy, not as the primary system. Major tax-specific document management platforms offer cloud storage with retention period controls built in.
- External encrypted drive stored off-site: An encrypted external hard drive rotated off-site (a bank safe deposit box or a second office location) provides a low-cost backup option for smaller practices. The drive must be encrypted; an unencrypted backup of client records stored off-site is a Safeguards Rule violation waiting to happen.
- Primary platform plus secondary export: Practice management platforms that retain original e-file records and transmittal acknowledgments (ATP's IRS-authorized e-file platform, for example, maintains transmittal records automatically) provide one layer. A periodic export of those records to a separate secure location provides the second.
The WISP is the right place to document your backup schedule, the encryption standard used, the location of off-site copies, and the procedure for testing backup integrity. Annual testing of backup restoration is a best practice that most small practices skip; it is also the only way to confirm that a backup will actually work when you need it.
Practical Retention Checklist
For each return you sign, evaluate this checklist at the end of the engagement and again at the start of each purge cycle.
What to retain (minimum three years from return period close; longer where extended triggers apply)
- A complete copy of the signed return as filed, including all schedules and attached forms (satisfies the Section 6107(b) statutory minimum)
- The signed engagement letter establishing scope and client responsibility
- Due diligence worksheets for any return claiming EITC, CTC/ACTC, AOTC, or head-of-household status
- Copies of client-provided source documents: W-2s, 1099s, K-1s, receipts, mortgage interest statements, charitable contribution records, Social Security cards for newly listed dependents
- Written notes or intake records documenting client-provided information and your inquiry, particularly where a judgment call or unusual position was taken
- All correspondence with the client related to the return: emails, portal messages, letters
- E-file acknowledgment records and IRS acceptance or rejection codes
- Copies of any amended returns or superseding filings, with documentation of the reason for amendment
- For international returns: FBAR-related documentation, Forms 5471, 8938, or 3520 and supporting schedules (retain for six years)
- For employment tax returns: Forms 941, 940, and W-2 package documentation (retain for four years)
What can be discarded after the retention period
Once the applicable retention period has passed with no open examination, pending litigation, or state audit, the following materials may be securely destroyed per your WISP's disposal procedures:
- Paper originals that have been scanned to compliant digital copies (after confirming scan quality)
- Draft or superseded versions of returns that were replaced by a final signed version
- Preliminary workpapers that are duplicative of information captured in the final retained records
- Routine internal workflow notes that do not document a judgment call or a client inquiry
Do not purge records for any return period while an examination, audit, litigation, or open IRS inquiry involving returns from that period is pending. The retention period is a minimum, not a deadline. If any reason exists to believe records may be relevant to a future proceeding, hold them.
Verify All Regulatory Information at IRS.gov and Applicable State Authorities
Regulatory claims in this guide that require verification before you rely on them for compliance: (1) Section 6695(d) penalty amounts: $60 per failure, $31,500 season maximum cited as 2026 figures, subject to annual inflation adjustment; verify current amounts at IRS.gov. (2) Rev. Proc. 98-25 electronic records acceptance: verify whether this revenue procedure has been superseded or supplemented before relying on it at IRS.gov. (3) California CTEC retention: verify current requirements at CTEC.org and confirm the operative statutory citation in California Business and Professions Code Section 22253 or current CTEC guidance. (4) Extended assessment periods for fraud, FBAR, and employment taxes: cited from the Internal Revenue Code; verify no legislative changes apply to your situation. This guide is informational and does not constitute legal or tax advice. Consult a qualified tax professional or attorney for advice specific to your practice.
Frequently Asked Questions
How long do tax preparers have to keep records under federal law?
Under IRC Section 6107(b), a paid tax preparer must retain either a copy of each completed return or a list of clients' names and TINs for three years from the end of the return period. The return period is defined in IRC Section 6060(c) as the twelve-month period ending June 30 of the year following the calendar year in which the return was filed. For a 2022 return filed in August 2023, the return period ends June 30, 2024, and the retention clock expires June 30, 2027. Verify current requirements at IRS.gov.
What is the penalty for failing to retain tax return records?
Under IRC Section 6695(d), the failure-to-retain penalty is $60 per failure, with a maximum of $31,500 per return period (2026 amounts, subject to annual inflation adjustment). A preparer with 525 or more failures in one return period faces the full $31,500 cap. Verify current penalty amounts at IRS.gov before each filing season.
Does the IRS accept digital copies of retained tax returns?
Yes. Revenue Procedure 98-25 established that the IRS accepts electronically maintained records in lieu of paper, provided the records are legible, reproducible, and accessible on IRS request. Readers should verify whether Rev. Proc. 98-25 has been superseded or supplemented by later guidance at IRS.gov before implementing a digital retention system.
What triggers a longer retention period than three years?
Three circumstances extend the standard three-year period: (1) fraud or willful tax understatement, which carries no statute of limitations under IRC Section 6501(c)(1), requiring indefinite retention of the relevant records; (2) FBAR filings and certain international information returns, where the IRS assessment period extends to six years for omissions exceeding 25 percent of gross income attributable to foreign assets; and (3) employment tax returns, which carry a four-year IRS assessment period under IRC Section 6501(b)(2). Best practice is to retain full supporting documentation for the longer applicable period in each case.
What are California CTEC's retention requirements for registered preparers?
Under California Business and Professions Code Section 22253 and CTEC regulations, registered California tax preparers must retain copies of all returns prepared for compensation for three years from the due date of the return or the filing date, whichever is later. For extended returns where the filing date exceeds the original due date, the clock runs from the actual filing date. Verify current requirements at CTEC.org before each filing season, as this may produce a different expiration date than the federal Section 6107(b) calculation for the same return.