What records your housing society must keep — and for how long

Ask a committee what records the society keeps and you will usually get one of two answers: "everything is with the secretary" or "everything is in the cupboard". Both answers describe the same situation — nobody is sure — and it stays invisible until an audit, a dispute, or a committee handover asks for a specific document and the society cannot produce it.

A record nobody can produce is functionally the same as no record. Here is what an Indian housing society should actually be keeping, where the obligation comes from, and how long each thing needs to survive.

Where the obligation comes from depends on your state

There is no single all-India law that lists a housing society's registers. The obligation comes from whichever statute your association is registered under — and the two big patterns are worth understanding before any list.

Maharashtra prescribes the list. A cooperative housing society under the Maharashtra regime adopts model bye-laws, and those bye-laws simply enumerate the books: the register of members in form I and the list of members in form J (from the MCS Rules), cash book, general ledger, personal ledger, sinking fund register, investment register, nomination register, an audit rectification register in form O, separate minutes books for committee meetings and general body meetings, a property register, and — in the current model — a structural and fire audit register with lift inspection records. If your society is in Maharashtra, the honest answer to "what must we keep" is: open your registered bye-laws and read the maintenance-of-records chapter; the list is right there.

Most other states delegate it. Karnataka is the clearest example: the Karnataka Apartment Ownership Act, 1972 has no model bye-law and no prescribed register list. Section 16(3) simply allows an association's bye-laws to provide for "the audit and accounts and administration of the property" — which means your own registered bye-laws are the document that binds you. What a Karnataka association's books should show, we have covered in detail here.

The practical consequence: a society copying a record-keeping checklist off the internet is usually copying Maharashtra's. That is fine as a quality benchmark — the Maharashtra list is a good list — but your legal obligation is your own state's Act and your own registered bye-laws, and those are what an auditor or Registrar will hold you to.

The records every society needs, whatever the state

Statute aside, the same categories come up in every audit, every dispute and every handover. A society that maintains these is in good shape in any state:

Governance records

• Minutes of general body meetings — the AGM and any special general meetings. These are the society's constitutional memory: every levy, every budget approval, every rule traces back to a resolution here.
• Minutes of committee meetings — kept separately from the general body minutes, with decisions and dissent recorded.
• The registered documents themselves — bye-laws, and in apartment-Act states the Declaration/Deed of Declaration and any amendments. Committees are routinely surprised by what these actually say; read yours before an argument makes you.

Membership records

• Register of members — who owns what, from when, with share/interest details and transfers.
• Nominations — the register plus the underlying forms.

Money records

• Cash book and ledgers — every rupee in and out, by head. If the society runs on a spreadsheet, this is the part that breaks first.
• Vouchers, bills and receipts — the paper behind every ledger entry. An audit is largely the exercise of matching these to the books.
• Bank statements and reconciliations, investment/FD records, and the sinking fund's own schedule — reserves need their own trail, not a line inside general funds.
• Audited financial statements and the audit reports themselves.

Statutory and tax records

• GST registrations and returns where applicable, TDS challans and returns for contractor payments, income-tax filings (most associations file — bank interest is taxable even where member contributions are not; the budget guide covers why).

Operational records

• Contracts and AMCs (lift, security agency, housekeeping, STP), insurance policies, licences, structural/fire/lift inspection reports, and staff records.

How long to keep things — the periods that come from statute

Retention is where committees most want a single number, and where the honest answer is that different records carry different clocks. Four anchors are worth knowing:

GST records: six years, by statute. Section 36 of the CGST Act requires a registered person to retain books and records for 72 months from the due date of the annual return for that year — longer if an appeal, revision or investigation is pending, in which case one year after its final disposal. This binds only GST-registered societies (most small societies are not), but it is the clearest statutory retention clock in this list.

Income-tax records: the clock just changed. The Income-tax Act, 2025 came into force on 1 April 2026, and the rules notified under it prescribe retention of books and supporting documents for seven tax years from the end of the relevant tax year — the old rules said six years, measured from the assessment year. If an assessment is reopened, records stay until it concludes. This is the first year under the new framework, so have your CA confirm the period that applies to your association's filings rather than relying on an older checklist.

Personal data: a clock that runs the other way, from May 2027. The Digital Personal Data Protection Act, 2023 does not tell you to keep things — it tells you to stop keeping them once their purpose is served. A society holds a great deal of personal data: visitor entries with phone numbers and photographs, staff records, tenant KYC.

Timing matters here, and a lot of commentary gets it wrong. The DPDP Rules, 2025 were notified on 14 November 2025, and they set an eighteen-month phased compliance period — so the substantive duties (notice and consent, security safeguards, breach reporting, data-principal rights, and the retention-and-erasure obligations) become fully applicable around May 2027, not today. The Data Protection Board exists now and complaints can be filed, but a society reading "you are already in breach" is being told something that is not yet true.

What that buys you is roughly eighteen months to do it deliberately rather than in a panic: decide, head by head, which of your records are the society's institutional memory (keep long) and which are personal data collected for a transient purpose (keep only while that purpose lasts). "We keep everything forever" is a habit worth breaking well before the deadline, not after it.

Governance records: effectively permanent. No statute needs to say this — minutes books, registered bye-laws, the Declaration, the member register and audited statements are the society's institutional memory, and the cost of keeping them is nothing compared to the cost of a gap. Treat them as permanent.

For everything in the money category, the practical rule that satisfies every clock above: keep financial records at least eight years, and governance records forever. A society that follows that needs no debate about which statute's period applies to which paper.

The test that matters is retrieval, not storage

Every society technically "has" most of these records. The real question is the one a dispute or an audit asks: can you produce the specific record, this week? The minutes of the 2019 AGM that approved the levy. The voucher behind one plumbing payment. Proof of who was let in at the gate on a particular evening.

That is why the cupboard fails as a system. Paper records exist until the day they are needed, which is the day they cannot be found — and the person who knew where everything was hands over and moves on. The societies that pass this test are the ones whose registers, money and decisions live in a system the whole committee can see, where "producing the record" means searching, not excavating. That is the standard worth aiming at, whatever tools you use to reach it — moving off the cupboard-and-spreadsheet system is the first step.

The short version

1. Your obligation comes from your state's Act and your registered bye-laws — Maharashtra enumerates the registers; Karnataka and most others delegate the list to your own bye-laws.
2. Whatever the state: minutes (general body and committee), member register, cash book and ledgers, vouchers, bank and investment records, audited statements, contracts, and statutory filings.
3. GST records: 72 months from the annual return's due date (s.36, CGST Act). Income-tax: seven tax years under the new 2026 rules — confirm with your CA in this first year of the new Act.
4. Personal data will have a maximum life (DPDPA) — visitor logs, KYC and staff data cannot simply be kept forever. The Rules were notified on 14 November 2025 with an eighteen-month phased compliance window, so plan for May 2027.
5. Governance records are permanent. For money records, eight years satisfies every clock in this list.
6. The test is retrieval: a record you cannot produce is functionally the same as no record.

Sources

• Section 36, CGST Act 2017 — period of retention of accounts (CBIC)
• Model bye-laws of cooperative housing societies — Commissioner for Cooperation, Maharashtra
• The Karnataka Apartment Ownership Act, 1972 (India Code)
• Income-tax Act, 2025 comes into force from 1st April 2026 — Press Information Bureau
• The Digital Personal Data Protection Act, 2023 (India Code)
• DPDP Rules, 2025 notified — Press Information Bureau, 17 November 2025
• Digital Personal Data Protection Rules, 2025 — Ministry of Electronics and IT