Timesheets and working time records: what you must keep
No regulation says "keep timesheets". Several say things you cannot prove without one — that nobody averaged over 48 hours, and that everybody was paid at least the minimum wage for the time they actually worked.
Summarise with AI
Key takeaways
- The Working Time Regulations require adequate records showing the 48-hour weekly average is being complied with, plus records of any opt-outs
- Minimum wage compliance is a rate, so the hours record matters as much as the pay record — and NMW records must be kept for six years
- Unpaid working time is the usual cause of an accidental underpayment: handovers, security checks, opening up and travel between sites
- Approval is the control that matters — an unapproved timesheet is a claim, not a record
What the law actually requires
Three separate obligations converge on the same piece of data. None of them prescribes a format, which is why employers so often satisfy one and fail another.
| Obligation | What it needs from the hours record |
|---|---|
| Working Time Regulations | Adequate records showing the 48-hour average is complied with, plus opt-outs and night work |
| National Minimum Wage | Enough to prove the rate paid for the time worked — kept for six years |
| Holiday records | Annual leave and holiday pay records, kept six years — in force since 6 April 2026 |
| PAYE | Pay and deductions, kept three years from the end of the tax year |
The middle row is the demanding one, and the reason is subtle: minimum wage is not a pay figure, it is a rate. You cannot demonstrate a rate with pay data alone. Hours are half the evidence, and they have to be the hours actually worked rather than the hours that were scheduled.
The 48-hour average, opt-outs and night work
Workers cannot be required to work more than an average of 48 hours a week, normally averaged across a 17-week reference period. An individual can opt out, but the opt-out has to be in writing, genuinely voluntary, and it can be withdrawn on notice. A blanket opt-out buried in a contract everyone signs is not an opt-out anyone should rely on.
Averaging is why a rota alone is not enough
A 17-week average cannot be computed from a published rota, because the published rota is a plan. Somebody covered a shift, somebody stayed late, somebody's hours were cut on a quiet Tuesday. The average that matters is built from what happened — see UK rota laws for the limits, rest breaks and the 11-hour daily rest rule.
Night work carries its own limit and a health assessment obligation, so you need to know who actually worked nights rather than who was pencilled in for them. Where staff rotate through night cover — the pattern in most continental and four-on-four-off arrangements — that distinction is not academic.
Working time that never reaches the timesheet
The most common minimum wage failure is not a low rate. It is a fair rate applied to an incomplete count of hours. If someone is at your disposal carrying out their duties, that is working time, whether or not it falls between the two numbers printed on the rota.
- Handovers at the start or end of a shift.
- Security or bag checks staff cannot leave without completing.
- Opening up and closing down — cashing up, alarms, waiting for a taxi service to arrive.
- Mandatory training and briefings, including those done from home.
- Travel between sites during the working day.
- Time spent putting on required uniform or protective equipment on site.
Ten unpaid minutes a shift sounds trivial. Across a 40-hour week it is roughly an hour, which is a two-and-a-half percent cut in the effective hourly rate — enough to take a rate set just above the National Minimum Wage below it. The free minimum wage checker does that arithmetic for a real shift pattern.
It compounds, too: holiday pay for anyone whose earnings vary is built on a 52-week average of those same hours, so an undercount in the timesheet becomes an undercount in the holiday pay, and the arrears run across both.
Approving timesheets properly
Approval is where a claimed hour becomes a recorded one. Treated as a formality, it is the weakest link in the chain; treated as a real check, it is the only point at which errors are cheap to fix.
The things worth looking for are consistent across shift-based businesses: missed clock-outs producing implausible shift lengths, breaks recorded that were not taken, shifts covered by someone other than the person rostered, and overtime that nobody remembers authorising. Each is trivial to correct in the same week and expensive to reconstruct three months later.
Where the clock-in itself is verified — a fixed kiosk on site, GPS geofencing for mobile teams, or photo proof — approval becomes a review of exceptions rather than a re-entry of everything. Location data is personal data under UK GDPR, so tell staff plainly what is captured and why, and capture it at the clock-in moment rather than continuously.
From approved hours to payroll
The last risk is in the handover. Hours that are re-keyed into payroll acquire a second chance to be wrong, and the figures you submit under RTI should reflect the hours actually worked, not the hours originally planned.
RosterElf's time and attendance records the clock-ins, rota scheduling holds what was planned so the variance is visible, and the Xero integration sends approved timesheets straight through with your pay rules applied — which also means the six-year minimum wage evidence is a by-product of running payroll rather than a separate filing exercise.
Record the hours that were actually worked
Verified clock-ins, exception-based approval, and a clean export to Xero — with the working time and minimum wage evidence kept as you go.
This guide summarises UK working time and record-keeping obligations in general terms and is not legal or payroll advice. What counts as working time can turn on the facts of an arrangement. Check GOV.UK or Acas, or take advice, before relying on it in an individual case. It does not constitute legal, HR, or professional advice and should not be relied on as a substitute for advice specific to your business, workforce, or circumstances.
Timesheet and working time record questions
- There is no rule that says "keep timesheets" by name, but there are several that can only be satisfied with an hours record: adequate working time records under the Working Time Regulations, and National Minimum Wage records proving the rate paid for the time worked. In practice that is a timesheet.
- Working time records need to be adequate to show compliance. National Minimum Wage records must be kept for six years, annual leave and holiday pay records for six years since 6 April 2026, and payroll records for three years from the end of the tax year — see how long to keep employee records.
- Workers cannot be required to work more than an average of 48 hours a week, normally averaged over 17 weeks. They can opt out in writing, individually and voluntarily, and can withdraw the opt-out with notice. Our rota laws guide covers the limits and rest rules.
- Yes. Night work carries its own limit and a health assessment obligation, so you need to be able to show who worked which nights and how much. A rota alone will not do it if the actual hours differed from the plan.