How Long Must an FFL Keep Form 4473 Records?

Ask a room full of FFL dealers how long they need to keep Form 4473 records and you'll get a range of answers. "Five years." "Ten years." "Forever." The correct answer — 20 years for electronically retained forms and 20 years for paper — is less well-known than it should be, and the consequences of premature destruction are serious.

The Current Federal Requirement

Under federal law (18 U.S.C. § 923(g)(1)(A)) and ATF regulations (27 CFR § 478.129), a licensed dealer must retain each Form 4473 for a period of not less than 20 years after the date of sale or transfer. This 20-year requirement took effect with changes to federal law — prior requirements were shorter, which is why some dealers still reference outdated retention periods.

If a transfer was denied or the transaction was not completed, the Form 4473 must still be retained for 5 years from the date the form was completed.

What "Retain" Actually Means

Retention isn't just keeping the forms somewhere. The ATF requires that records be maintained in a manner that allows them to be retrieved and produced for inspection. Forms stuffed in an unlabeled box in a storage unit technically satisfy the retention requirement but practically guarantee problems during an inspection if the IOI can't locate specific records efficiently.

The ATF requires that bound book entries and 4473s be organized so that a specific transaction can be located based on the serial number of the firearm. A disorganized records system that technically contains all required forms can still result in a violation finding if the IOI determines the records aren't reasonably accessible.

Electronic Retention

FFLs may retain Form 4473 records electronically, but only if the system meets specific ATF requirements. Electronic records must be retrievable by name, date, and firearm serial number. The system must be capable of producing a legible paper copy of any record on demand. Electronic storage does not eliminate the 20-year retention requirement — it just changes the medium.

Out-of-Business Records

When an FFL goes out of business, the disposition of records depends on whether the license is being transferred or terminated.

If the business closes entirely, all records must be submitted to the ATF Out-of-Business Records Center in Martinsburg, WV within 30 days of the license expiration or surrender. This includes all Form 4473s, bound books, and other required records. Failure to submit out-of-business records is a federal violation.

If the business is sold and the buyer obtains their own FFL, the records transfer to the new licensee, who then assumes responsibility for retention.

Common Retention Mistakes

• Destroying forms at 5 or 10 years — based on outdated requirements or misremembered rules
• Losing forms during a move or renovation — records must be maintained even if your physical location changes
• Failing to retain denied transaction forms — the 5-year rule for incomplete transactions is frequently overlooked
• Not organizing records for retrieval — keeping the forms but making them practically inaccessible
• Failing to submit records when going out of business — one of the most serious retention violations

Best Practice: Over-Retain

Given the consequences of premature destruction, the simplest approach is to retain all Form 4473 records indefinitely. Storage is cheap. The cost of a violation finding — or worse, an obstruction issue related to a trace request — is not. If you're using an electronic system, ensure it's backed up regularly and that backups are also retained for the required period.