Tax Record Keeping in Sri Lanka: What to Keep, How Long

Nobody reads Chapter X. It sits in the back half of the Inland Revenue Act, past the rates and the reliefs and everything people actually look up, under the heading "Record Keeping and Information Collection." It's two pages. And it quietly imposes a duty on far more people than realise they have one.

Here's the short version. If you're in business or investment activity, or you're required to file a return, the law says you must keep records. Not "should." Must. For five years from the date of each transaction, sometimes longer. And there's a per-day penalty attached if you don't.

This is what tax record keeping in Sri Lanka actually requires: who it catches, what counts as a record, how long each thing has to survive, and the cases where the five-year clock doesn't stop when you expect it to.

Who actually has to keep tax records in Sri Lanka?

Section 120(1) is the operative provision, and the important part is the second half of the first line:

Two separate groups are caught, and most coverage only mentions the first. Running a business or holding investments is the obvious one.

The second catches people. If you're required to make a return, the duty applies to you, whether or not you run anything. A salaried employee who files because they have rental income on the side is required to make a return. So the duty applies to them in full, not just to the rental part of their affairs. That's a much wider net than "businesses keep books," and it's worth checking whether you're inside it. If you're unsure whether you have a filing obligation at all, our guide to filing your first tax return in Sri Lanka walks through who has to file.

The standard matters too. Records must be "sufficient to record all transactions and to ascertain the gains and profits made or the loss incurred." That's an outcome test, not a format test. The question isn't whether you kept a particular form. It's whether someone could reconstruct your position from what you kept.

What counts as a tax record?

The Act answers this directly, which is unusually helpful of it. Section 120(10) defines source documents:

Note "include." It's an open list, and the catch-all does real work: any document which relates to an element of a transaction.

Two entries surprise people. Diaries are named explicitly, which matters if your work is time-based and your diary is the only evidence of what you did and when. And bookings, so for anyone taking client appointments, your booking system is a tax record, not just an admin tool.

Section 120(5) then adds a second layer on top of your accounts:

"In addition to the records and accounts referred to in subsections (1) and (2), a taxpayer shall also retain source documents and underlying documentation utilized in the creation of the records and accounts."

So a tidy spreadsheet isn't enough on its own. You keep the summary and the things it was built from. If you've written "Rs. 48,000, printing, March" in a ledger, the invoice behind that line is a separate retention obligation.

Here's how the main document types map onto what they prove:

How long do you have to keep tax records in Sri Lanka?

Five years. But the detail that trips people up is what the five years runs from.

Not five years from the end of the year of assessment. Not five years from the date you filed. Five years from the date of the transaction itself.

So every document has its own expiry date, and they don't expire together. An invoice dated April 2021 and one dated March 2022 fall out of the window almost a year apart, even though both sit in the same tax year's paperwork.

Most people handle this by rounding up. Keep everything from a year of assessment until the last transaction in it has cleared five years, then review the whole year at once. That errs on the side of keeping things longer, which is the safe direction to err in.

When does the five-year clock not stop?

This is the part the brief version of the rule leaves out, and it's the part that matters most. Section 120(6) has a second limb:

So five years is a floor, not a ceiling. To know when you're actually clear, you need to know when the assessment window closes. There are three answers.

In the normal case, 30 months. Section 135(2)(b)(i) lets an Assistant Commissioner amend an assessment "within thirty months of... the date that the self-assessment taxpayer filed the self-assessment return." That's two and a half years, comfortably inside the five-year floor. So for a return that's been filed, is honest, and has never been amended, 120(6)(a) is the binding constraint and 120(6)(b) adds nothing.

One caveat worth knowing. If your assessment has already been amended once, a further window opens to amend it again. For years of assessment from April 1, 2023 onward, Section 135(3A) sets that as the later of the ordinary 30 months or one year from the notice of the amended assessment, and where that extra year is what's relied on, Section 135(4) limits the Department to revisiting the alterations it already made. For earlier years, Section 135(3) runs to the later of four years from filing or one year from that notice. So if you've had an assessment amended, don't assume a flat five years is your outer limit.

If you never filed, there is no time limit at all. Section 133(5) is one line: "A default assessment may be made at any time." The Assistant Commissioner can assess whenever, on whatever evidence is available and to the best of their judgment. Read with 120(6)(b), the records stay relevant indefinitely.

If fraud or gross or wilful neglect is in play, same answer. Section 135(2)(a) permits amendment "in the case of fraud, or gross or wilful neglect by, or on behalf of, the taxpayer, at any time."

That's worth sitting with, because the instinct runs the other way. People with a gap in their filing history assume time and a clean desk will solve it. Under Section 133(5), time doesn't run, and the clean desk removes the only thing that could have helped.

Can you close the assessment window early?

There's now one route that shuts the amendment window before 30 months are up. It's new, and it's narrow.

The Inland Revenue (Amendment) Act, No. 11 of 2026, certified on 3 June 2026, added a new subsection 135(7). From the year of assessment commencing April 1, 2025, an individual who meets three conditions gets finality:

"(7) ...where an individual, for any year of assessment... has (a) filed a return of income and declared the tax payable... in an amount not less than one hundred and twenty per centum of the tax payable on the taxable income for the year of assessment immediately preceding the current year of assessment; (b) paid the full amount of tax without claiming a tax refund; and (c) furnished an affidavit stating that no fraud, evasion, or willful default has been committed... such return shall be accepted as filed, and no amended or additional assessment shall be made on such return under this section for the current year of assessment."

All three conditions, together. Declare at least 120% of last year's tax, pay it in full without claiming a refund, and swear the affidavit. Miss one and the ordinary 30-month window applies.

It's also worth being clear on what "under this section" means in that closing line. The protection is against amended or additional assessments under Section 135. It says nothing about a default assessment under Section 133, though that's academic here, since qualifying for 135(7) requires you to have filed in the first place.

What happens if you don't keep records?

There's a specific penalty for this, and it's a daily one.

A thousand rupees a day compounds quietly. Three months of continuing failure is roughly Rs. 90,000, for paperwork rather than for any underpaid tax.

But there's a genuine safe harbour in the same section, and it's more generous than most penalty provisions in the Act:

Read that carefully. The Commissioner-General shall issue a warning notice first, and complying within the stated time means no penalty is due at all. This isn't a remission you apply for. Comply in time and the liability doesn't arise.

So the practical risk isn't being fined out of nowhere. It's getting a warning notice and being unable to comply, because the records genuinely don't exist and can't be reconstructed in the time given. That's the scenario to protect against.

Section 120(3) separately lets the Commissioner-General direct how you keep records going forward where proper books aren't being kept, and notes this is "in addition to prosecution for an offence." For the wider picture, we've covered the penalty changes in the 2026 IRA amendments separately.

Where do your records have to be kept, and in what language?

Three constraints here, and the first one catches people who've moved their bookkeeping online.

They must be in Sri Lanka. Section 120(1) says records must be kept and maintained "in Sri Lanka." Section 120(4) narrows it further: records "shall be kept at the place of business or investment activity of the person unless the Commissioner-General approves of them being kept at some other place." So keeping records somewhere other than your place of business is possible, but it's by approval, not by default.

They must be in Sinhala, Tamil, or English. Section 120(9) requires that "financial statements, invoices, books of original entry, and all written communications between the Department and the taxpayer shall be in Sinhala, Tamil or English with amounts and values to be provided in Sri Lankan currency as well." Section 120(8) adds that if you've prepared records in another language, you provide a translation at your own expense on request.

That currency point catches freelancers with foreign clients. Your invoices may be in USD or EUR, and that's fine, but the values need to be available in Sri Lankan rupees as well. If you're not sure which rate applies to a given receipt, we've covered exchange rates for foreign income in detail.

There's a lighter regime for small businesses. Section 120(7) provides that "notwithstanding anything in any law, the Commissioner-General may specify a system of simplified record keeping for small businesses." That's an enabling power rather than a self-executing relief, so it depends on what the Commissioner-General has actually specified.

Does a photo of a receipt count?

This is the question everyone asks, and the honest answer is that the Act doesn't say.

Section 120 is specific about where records are kept and what language they're in. It's silent on format. No provision states that electronic copies satisfy the retention duty, and none states they don't.

What we can point to is indirect. Section 122(4)(f) gives an authorised officer, during an audit or search, the power to "operate any computer and take a record of any data stored within." So electronic records are squarely within reach of an inspection, which implies the Department expects to find them in that form. Sri Lanka's other tax statutes go further: both the VAT Act and the SSCL Act define records to include books of account "whether contained in a manual, mechanical or electronic format or combination thereof." Section 120 has no equivalent wording.

So here's the sensible position, stated as caution rather than as a ruling. Scanning beats losing the paper. But because the Act doesn't expressly bless digital-only retention, keep originals where the original is the thing that carries weight: withholding certificates, signed contracts, and anything a third party issued you as evidence of a payment. For routine receipts that only ever supported your own bookkeeping, a good scan carries much less risk.

If in doubt on a specific document type, put it to the IRD or your tax agent rather than assuming either way.

Which records deserve the most care?

Not everything in the pile carries equal weight. Some documents are irreplaceable and directly reduce your tax.

Withholding certificates are top of the list. Section 87(1) obliges a withholding agent to prepare and serve one on you, covering a calendar month and served within thirty days of that month's end. For employment income under Section 83, it covers the part of the year you were employed and must be served by 30 April of the following year, or within thirty days if you leave earlier. The 2026 amendment added Section 87(6): "A withholding agent shall serve a withholding certificate on a withholdee, free of any charge or payment."

They matter more than other documents because of Section 93(2)(b)(i), which requires a return of income to "have attached to it any withholding certificates supplied to the person under section 87 with respect to payments derived by the person during the year." Lose the certificate and you lose the straightforward route to evidencing a credit you're entitled to under Section 89(2). That's tax you've already paid, paid again. Our guide to withholding tax on professional fees covers how these credits work.

Expense receipts come next. They reduce taxable income and they're the first thing questioned in a review, especially for cash spending where the receipt is the only trace that exists. We've written separately on claiming cash expenses and what expenses freelancers can deduct.

Then bank statements, named in Section 120(10), which reconstruct almost everything else if a document goes missing. Banks won't always hold them as long as you're required to, so download your own copies rather than assuming you can request them in year four.

How do you make five years of paperwork manageable?

The obligation isn't unreasonable. The filing system most people use for it is.

A shoebox works fine for one year and fails at five, because retrieval is what actually bites. When a warning notice arrives with a compliance deadline, having the documents somewhere in the house isn't the same as producing them. Under Section 182(3), that difference is no penalty versus Rs. 1,000 a day.

Three habits do most of the work:

1. File by year of assessment, then by type. Retention decisions become annual rather than per-document, and everything relevant to one period sits together if it's queried.
2. Attach the document to the record it supports, when you record it. The invoice belongs with the expense line, not in a pile to be reconciled later. Working out which receipt supports which entry three years on is the expensive part.
3. Keep certificates and contracts separately, in original form. These are hard or impossible to replace, and they're the ones directly worth money to you.

The rule itself is simple enough to hold in your head. Five years from each transaction, longer if the assessment window is still open, and the window never closes on an unfiled year or on fraud or wilful neglect. Rs. 1,000 a day if you can't produce them, with a warning notice first.

What makes it manageable is deciding once how documents get filed, rather than deciding every time a receipt appears. Do that, and the five years takes care of itself.