How to Have Employees Clock In and Out: Records, Rounding, and Penalties

Federal law lets you decide how employees clock in and out, so long as the method produces complete, accurate records of the hours they actually work. The Fair Labor Standards Act requires that recordkeeping for every non-exempt employee, but it doesn’t dictate whether you use a wall-mounted punch clock, a phone app, a biometric scanner, or a paper sheet passed around the break room.¹ The freedom is the point, and the trap. You pick the system; you also carry the legal risk when it undercounts.

Pick a Method That Fits Your Operation

The Department of Labor has spelled this out: employers may use a time clock, assign a timekeeper, or let workers record their own time.¹ The four methods most employers choose from, roughly from simplest to most controlled:

Paper time sheets. Employees write their start and end times on a form and sign each entry. Cheap to set up, easy to mess up. Handwriting is illegible, edits after the fact are hard to detect, and someone has to total the hours by hand.
Mechanical punch clocks. A wall unit stamps the date and time on a card. Harder to falsify than a handwritten entry, but you still calculate hours manually and store the physical cards.
Digital time-tracking software. Employees log in through a computer, tablet, or phone app. The platform totals shifts, flags overtime, and pushes data to payroll. Many include GPS geofencing so a clock-in only registers at the work site.
Biometric systems. Fingerprint, facial, or iris readers verify identity at clock-in and virtually eliminate buddy punching. They also come with legal baggage: several states require written consent, a written retention policy, and a schedule for destroying the data. Check your state’s biometric privacy law before installing one.

The more automation, the less manual oversight you need. No technology, though, removes your duty to check the output. If a digital system quietly shaves 15 minutes off every shift for a month, you write the back-pay checks.

What Each Time Record Has to Contain

The FLSA’s recordkeeping rule, 29 CFR 516.2, requires you to maintain a specific set of information for every non-exempt worker.² For the timekeeping side of that record, what your clock-in system needs to capture or feed into is:

Full name as used for Social Security purposes, plus any payroll identifier.
The time of day and day of the week when the employee’s workweek begins.
Hours worked each workday and total hours worked each workweek.
The regular rate of pay in any week overtime is owed, and the basis of pay.
Straight-time earnings and overtime premium pay, tracked separately.
Additions to and deductions from wages each pay period.
Total wages paid each pay period, the payment date, and the period covered.

One point worth clearing up: federal timekeeping rules do not require you to record a Social Security number. The regulation asks for the employee’s full name “as used for Social Security recordkeeping purposes,” which is a reference to the name format, not the number.² You need the SSN for tax filings, but that’s the IRS asking, not the FLSA.

When the Clock Should Start and Stop

This is where most timekeeping mistakes happen. The FLSA requires payment for all hours worked, and “hours worked” often stretches beyond the scheduled shift. Train supervisors and employees on what counts, or your records will be wrong before they ever reach payroll.

Pre-Shift and Post-Shift Activities

Activities integral to the main job are compensable even before or after the productive work starts. Changing into required protective gear, booting up mandatory software, or washing off hazardous materials at the end of a shift count as work time when they are closely tied to the job’s core duties. A normal commute and ordinary activities like hanging up a coat do not. The dividing line is whether the activity is “indispensable to the performance of the productive work.”³ If gear-up counts, the clock-in has to happen before it, not after.

Unauthorized Overtime

If an employee works overtime you didn’t approve, you still have to pay for it. The DOL is unambiguous: a policy that overtime won’t be paid unless authorized in advance “will not impair the employee’s right to compensation for compensable overtime hours that are worked.”⁴ Discipline the employee for violating policy if you need to. You cannot withhold the pay.

Waiting Time

An employee required to show up at a set time and stand ready to work, with no work available for reasons beyond their control, is “engaged to wait” and must be paid.³ An employee who voluntarily arrives early and sits in the break room is not on the clock.

Meal and Rest Breaks

The FLSA does not require you to offer meal periods or rest breaks at all.⁵ Many states do, so check your state law. When breaks happen, federal rules decide whether they’re on the clock.

Rest breaks of 5 to 20 minutes count as hours worked and must be paid.⁵ Employees should not clock out for coffee, bathroom, or snack breaks, and your system should not deduct that time automatically.

A meal break of 30 minutes or more is generally unpaid, but only if the employee is completely relieved from duty for the purpose of eating a regular meal. An office worker required to eat at their desk in case the phone rings is still on duty. A factory worker who must stay at the machine while eating is still on duty. Both situations make the meal period compensable. The employee doesn’t have to be free to leave the premises, as long as they’re genuinely free from all work duties.⁶ If your system auto-deducts 30 minutes for lunch, make sure the deduction matches reality. Auto-deductions are a frequent source of wage claims when employees work through lunch or get called back before 30 minutes have passed.

Travel Between Job Sites

A normal commute from home to the workplace is not compensable, even in a company vehicle, as long as the travel is within the normal commuting area and subject to an employer-employee agreement. Travel during the workday is different. Time spent traveling between job sites during normal work hours counts as hours worked.⁷ If you send employees to multiple sites in a day, your clock-in system has to capture that travel or your totals will fall short. Some digital platforms handle it with geofenced sites and GPS tracking between them. On paper or a punch clock, employees need clear instructions to log departure from one site and arrival at the next.

Remote Workers

The FLSA applies identically to remote work. Hours performed at home or another off-site location must be tracked and paid whether or not the work was scheduled. The practical challenge is knowledge. You must pay for hours you knew about or should have known about through reasonable diligence. The DOL’s workable standard: set up a reasonable procedure for employees to report unscheduled hours, then pay for all reported time, even hours you didn’t authorize.⁸ If an employee fails to report extra hours through that system, you’re generally not required to comb server logs or device records to find the unreported time.

The catch: you cannot discourage accurate reporting, either in writing or through workplace culture. A policy that says “report all hours” combined with a manager who pressures people to underreport will not protect you. The reporting path has to be real and used.

Rounding Time Entries

Rounding is legal under 29 CFR 785.48, which permits rounding to the nearest 5 minutes, one-tenth of an hour, or quarter hour.⁹ Quarter-hour rounding is the most common approach and produces what employers call the seven-minute rule. Round to 15-minute increments, and an employee who clocks in 1 to 7 minutes early gets rounded forward to the scheduled start; 8 to 14 minutes early rounds back to the previous quarter hour. Same logic at clock-out.

The critical constraint: rounding must average out over time so employees are fully compensated for all hours actually worked.⁹ If your practice consistently shaves minutes in the employer’s favor, it violates the FLSA even when each individual rounding decision looks correct. Modern digital systems can track to the exact minute, and many employers have dropped rounding entirely to remove the litigation risk.

Missed Punches

Missed punches are inevitable. Someone forgets to clock in, gets pulled into a meeting on the way to the time clock, the app crashes. The legal principle doesn’t change. If the employee worked, you pay for the time. A missing clock-in record does not erase the obligation.

Build a correction process into whatever system you use. Most digital platforms let a supervisor manually enter or adjust an entry with an audit trail showing who changed what, and when. On paper, use a missed-punch form that requires both the employee’s and supervisor’s signatures. Keep the correction records with your regular time records.

If missed punches become chronic for one employee, treat that as a performance issue. You can discipline someone for failing to follow timekeeping procedures. You cannot refuse to pay for hours you know were worked, and you cannot use a missing clock-in as a reason to short a paycheck.

How Long to Keep the Records

Retention requirements come from 29 CFR Part 516. Core payroll records, including the data listed in 29 CFR 516.2, must be preserved for at least three years. Supplemental records like time cards, piece-work tickets, and wage rate tables must be kept for at least two years.¹⁰

Many states impose longer retention periods, often four to six years. The FLSA’s statute of limitations for willful violations runs three years, and state wage claims may reach further back. Default to the longer of federal and state requirements. Storage is cheap; reconstructing lost records during a wage audit is not.

Penalties for Getting It Wrong

The consequences of inaccurate time tracking come in layers.

Back pay is the first. If a DOL investigation or an employee lawsuit shows you underpaid workers because of bad records, you owe every dollar of unpaid wages. The FLSA also provides for liquidated damages equal to the back pay amount, effectively doubling what you owe.¹¹ These liquidated damages are presumed unless you can prove to a court that the violation was in good faith, a difficult standard when the underlying problem is sloppy recordkeeping.

For repeated or willful violations of the FLSA’s minimum wage or overtime provisions, the DOL can impose civil penalties of up to $2,515 per violation.¹² “Per violation” can mean per employee per pay period, so even a small workforce can generate serious exposure.

The most underappreciated risk is the burden of proof. When an employer’s records are incomplete or missing, courts typically accept the employee’s reasonable estimate of hours worked. Clean, complete time records are how you defend a wage claim. Getting the clock-in system right is not just compliance. It is the only evidence you’ll have when someone challenges what a paycheck reflects.

1
U.S. Department of Labor. Fact Sheet 21 – Recordkeeping Requirements Under the FLSA
2
GovInfo. 29 CFR 516.2 – Records to Be Preserved
3
eCFR. 29 CFR 790.7 – Preliminary and Postliminary Activities
4
U.S. Department of Labor. Fact Sheet 23 – Overtime Pay Requirements of the FLSA
5
U.S. Department of Labor. FLSA Hours Worked Advisor – Meal Periods and Rest Breaks
6
eCFR. 29 CFR 785.19 – Meal
7
U.S. Department of Labor. Travel Time
8
U.S. Department of Labor. Field Assistance Bulletin No. 2020-5
9
eCFR. 29 CFR 785.48 – Use of Time Clocks
10
eCFR. 29 CFR 516.5 – Records to Be Preserved
11
Office of the Law Revision Counsel. 29 USC 216 – Penalties
12
eCFR. 29 CFR Part 579 – Civil Money Penalties