Table of Contents
Why Record Retention Matters to Your Puerto Rico Business
Maintaining proper business records is not optional in Puerto Rico. Federal law, Puerto Rico law, and industry-specific regulations all impose strict requirements on what documents you must keep, how long you must keep them, and how you must store them. Failure to comply with these requirements exposes your business to penalties, loss of tax benefits, regulatory sanctions, and litigation disadvantages. Whether you operate a small service business, manage a real estate portfolio, or run a financial services firm, understanding and implementing a sound record retention policy is fundamental to legal compliance and operational stability.
This guide covers the primary record retention obligations that apply to businesses operating in Puerto Rico, the specific timeframes you must observe, and practical steps to implement a compliant retention system.
General Business Records and Puerto Rico Requirements
Puerto Rico law requires businesses to maintain records that document their financial transactions, operational decisions, and compliance activities. The Puerto Rico Commercial Code and related statutes establish baseline requirements for record preservation. These requirements apply regardless of whether you maintain records in physical or digital form.
The fundamental obligation is to keep records that accurately reflect your business operations. This includes accounting records, ledgers, journals, invoices, receipts, contracts, correspondence, and any documents that support your financial statements. Puerto Rico's tax authority, the Department of the Treasury (Departamento de Hacienda), expects businesses to maintain complete and organized records that allow for verification of reported income, deductions, and tax liability.
For most general business records, Puerto Rico law requires retention for a minimum of five years from the date of the transaction or the date the record was created. This five-year period aligns with the statute of limitations for tax assessments under Puerto Rico tax law. However, certain categories of records require longer retention periods, and some require shorter periods depending on their nature and regulatory context.
The five-year baseline applies to accounting records, general correspondence, contracts, purchase orders, sales records, payroll records, and employee files. If your business is subject to audit by the Department of the Treasury, you must be able to produce these records upon request. Failure to maintain adequate records can result in the tax authority making assessments based on estimates rather than actual documentation, which typically results in higher tax liability and penalties.
Tax Records and the Department of the Treasury
The Department of the Treasury imposes specific record retention requirements for businesses filing tax returns in Puerto Rico. These requirements are more stringent than general business record requirements and carry significant consequences for non-compliance.
All records supporting your tax return must be retained for five years from the date you file the return or the date the return is due, whichever is later. This includes documentation of income, deductions, credits, and any adjustments claimed on your return. The Department of the Treasury can assess additional taxes within three years of filing, but in cases of substantial underreporting of income or fraud, the assessment period extends to six years or longer.
If you claim Act 60 tax incentives, record retention requirements become even more critical. Businesses benefiting from Act 60 export services exemptions, individual investor tax rates, or other incentive programs must maintain detailed records demonstrating their eligibility and compliance with program requirements. The Department of the Treasury conducts focused audits of Act 60 beneficiaries, and inadequate documentation can result in loss of tax benefits, retroactive tax assessments, and penalties. For Act 60 participants, you should retain all records supporting your incentive claim for the entire period you receive benefits, plus five additional years after the benefits end.
Specific tax records that require careful retention include income statements, balance sheets, depreciation schedules, inventory records, records of capital expenditures, documentation of business expenses, records of charitable contributions, records of business use of vehicles and equipment, and any correspondence with the Department of the Treasury.
Payroll and Employment Records
Puerto Rico labor law requires businesses to maintain detailed payroll and employment records for all employees. These requirements are enforced by the Department of Labor and Human Resources (Departamento del Trabajo y Recursos Humanos) and carry penalties for non-compliance.
Payroll records must be retained for a minimum of five years and must include the employee's name, position, rate of pay, hours worked, wages paid, deductions, and dates of employment. Businesses must also maintain records of all payroll taxes withheld and remitted to the government. These records must be available for inspection by labor department officials and must be produced if an employee files a wage claim or if the business is subject to a labor audit.
Employment records beyond payroll also require retention. Personnel files should include the employment application, offer letter, signed employment agreement, performance evaluations, disciplinary records, training documentation, and records of any workplace accommodations or leave taken. These records should be retained for at least five years after the employee's termination date. If an employee files a claim for wrongful termination, discrimination, or wage theft, you will need to produce these records to defend your position.
Records related to workplace safety, including incident reports, injury logs, safety training documentation, and OSHA-equivalent compliance records, must be retained according to Puerto Rico occupational safety regulations. Generally, these records should be kept for five years following the end of the year in which the incident occurred.
Financial Institution and Banking Records
If your business operates as a financial institution, holds client funds, or maintains trust accounts, record retention requirements are substantially more demanding. Banks, credit unions, investment firms, and other financial service providers operating in Puerto Rico must comply with federal banking regulations, Puerto Rico banking law, and industry-specific rules.
Financial institutions must retain customer account records, transaction records, loan documentation, and compliance records for extended periods. Customer identification records and beneficial ownership documentation must be retained for five years after the account is closed. Transaction records must be retained for five years. Loan files, including applications, appraisals, promissory notes, and payment records, must be retained for the life of the loan plus five years after payoff or charge-off.
If your business handles client funds or operates as a fiduciary, you must maintain separate accounting records for each client or trust account. These records must clearly show all deposits, withdrawals, earnings, and expenses attributable to each account. Commingling of client funds with business funds is prohibited, and inadequate record-keeping can result in regulatory sanctions and civil liability. For more information on compliance obligations for financial service providers, see our banking and securities compliance page.
Real Estate and Property Records
Businesses that own, manage, or invest in real property in Puerto Rico must maintain comprehensive property records. These records should include the original deed, title insurance policy, property tax assessments, property tax payment records, mortgage documents, property insurance policies, maintenance and repair records, and records of any improvements or capital expenditures made to the property.
Property records should be retained for the entire period you own the property, plus five years after sale or disposition. If you claim depreciation deductions on rental property or business property, you must maintain records supporting the basis, acquisition date, and depreciation calculations for the life of the property plus five years after disposition. The Department of the Treasury frequently challenges depreciation claims, and inadequate documentation can result in disallowance of deductions and back taxes.
If you own property subject to a mortgage or other lien, maintain records of all payments made, including principal and interest portions. If you refinance property, retain the original loan documents along with refinancing documents. Property management records, including tenant leases, rent payment records, maintenance expenses, and property tax bills, should be retained for five years after the property is sold or the lease terminates.
Contract and Legal Records
All contracts entered into by your business should be retained for the duration of the contract plus five years after termination or expiration. This includes service agreements, supply contracts, employment agreements, lease agreements, partnership agreements, and any other binding commitments. Contracts should be stored in a manner that allows quick retrieval if a dispute arises.
Retain all correspondence related to contract performance, including emails, letters, and memoranda discussing contract terms, performance issues, or disputes. If a contract dispute results in litigation, you will need to produce all communications related to the contract to support your position. Failure to maintain contract documentation can result in loss of evidence and unfavorable judgments in commercial litigation.
Legal opinions, compliance memoranda, and internal legal analysis should also be retained. While attorney-client privileged communications may be protected from disclosure, you should maintain these records in a secure location and clearly mark them as privileged to preserve the protection.
Digital Records and Electronic Storage
Puerto Rico law permits businesses to maintain records in electronic form, provided the electronic records are accurate, complete, and retrievable. Email, digital documents, cloud storage, and electronic accounting systems are acceptable methods of record retention, but you must implement controls to ensure the integrity and security of electronic records.
If you maintain records electronically, implement a backup system to prevent loss of data due to hardware failure, malware, or other technical issues. Maintain backup copies in a separate physical location or with a cloud service provider that maintains redundant backups. Establish a document retention policy that specifies which records are maintained electronically, how long they are retained, and when they are deleted or archived.
Electronic records must be maintained in a format that allows for easy retrieval and review. If you use accounting software, tax preparation software, or document management systems, ensure that the system maintains an audit trail showing when records were created, modified, and accessed. This audit trail is important if the Department of the Treasury questions the authenticity or accuracy of your records.
If your business operates in the blockchain or cryptocurrency space, record retention requirements are particularly important. Maintain detailed records of all transactions, including the date, amount, parties involved, and business purpose of each transaction. Maintain records of wallet addresses, private key management, and any security measures implemented to protect digital assets. For guidance on compliance obligations for blockchain and cryptocurrency businesses, see our blockchain compliance page.
Industry-Specific Record Retention Requirements
Certain industries are subject to additional record retention requirements beyond the general five-year requirement. These industry-specific requirements often impose longer retention periods or require retention of specialized documentation.
Insurance companies and insurance agents must retain policy files, claims documentation, and underwriting records for extended periods. Generally, policy files should be retained for the life of the policy plus five years after cancellation or expiration. Claims files should be retained for five years after claim closure.
Healthcare providers must maintain patient medical records for a minimum of five years after the last patient encounter, and in some cases longer depending on the patient's age and the nature of the treatment. Prescription records must be retained for at least three years.
Construction companies must maintain project files, including contracts, change orders, invoices, payment records, and safety documentation, for at least five years after project completion. If the project involves public funds or government contracts, retention requirements may be longer.
Import and export businesses must maintain customs documentation, including bills of lading, commercial invoices, packing lists, and certificates of origin, for five years. If your business imports or exports goods subject to tariffs or trade restrictions, maintain detailed records of all shipments and compliance with trade regulations.
Implementing a Record Retention Policy
A sound record retention policy is the foundation of compliance. Your policy should identify the categories of records your business maintains, specify the retention period for each category, describe how records are stored and protected, and establish procedures for secure destruction of records when the retention period expires.
Document your retention policy in writing and communicate it to all employees who handle business records. Ensure that employees understand which records must be retained, how long they must be retained, and the consequences of failing to maintain records. Assign responsibility for record retention to a specific person or department, and establish procedures for monitoring compliance with the policy.
Your retention policy should address both paper and electronic records. For paper records, establish a secure storage location that protects records from damage, theft, and unauthorized access. For electronic records, implement access controls, encryption, and backup procedures to protect data integrity and security.
Establish a schedule for reviewing and updating your retention policy. As your business grows or changes, your record retention needs may change. If you add new business lines, enter new markets, or become subject to new regulations, update your retention policy accordingly.
When the retention period for a record expires, establish a secure destruction procedure. For paper records, use a document shredding service or incineration to ensure complete destruction. For electronic records, use data wiping software or secure deletion methods to ensure that deleted files cannot be recovered. Document the destruction of records, including the date, method, and records destroyed.
Consequences of Non-Compliance
Failure to maintain required business records exposes your business to significant legal and financial consequences. The Department of the Treasury can assess penalties for failure to maintain adequate tax records. If you cannot produce records supporting deductions or income reported on your tax return, the tax authority can disallow the deductions or adjust your reported income based on estimates.
In litigation, failure to maintain records can result in adverse inferences, where the court assumes that missing records would have supported the opposing party's position. If you cannot produce contracts, correspondence, or other documents relevant to a dispute, the court may rule against you based on the missing evidence.
Labor disputes often turn on the availability of payroll records, employment agreements, and performance documentation. If you cannot produce records showing that you paid an employee the required wage or that you complied with leave requirements, you may be liable for back wages, penalties, and attorney fees.
Regulatory agencies can impose fines and sanctions for failure to maintain required records. If you operate a business subject to banking, insurance, or other regulatory oversight, inadequate record-keeping can result in regulatory enforcement actions, loss of licenses, and civil penalties.
Next Steps
Record retention compliance is not a one-time task. It requires ongoing attention, proper systems, and regular review. If your business does not currently have a documented record retention policy, or if you are uncertain whether your current practices comply with Puerto Rico requirements, a free initial evaluation with an experienced business law attorney can help you assess your compliance status and identify gaps in your record retention practices.
Christian M. Frank Fas, Esq. has over 20 years of experience advising Puerto Rico businesses on compliance obligations, including record retention requirements. During a free initial evaluation, we can review your current record retention practices, identify compliance risks, and recommend specific steps to bring your business into compliance with Puerto Rico law.
Schedule your free initial evaluation today to discuss your record retention obligations and develop a compliant retention policy for your business.