IOLTA Rules by State: 50-State Reference Guide
The definitive state-by-state guide to IOLTA trust account rules, reconciliation requirements, and record retention for all 50 states and D.C. Updated for 2026.
Disbo Team
Mar 9, 2026
Introduction: Why a 50-State Reference Matters
If you are an attorney who holds client funds, you are subject to IOLTA rules. But which rules? That depends on where you are licensed, and in some cases where your client's matter is pending -- and the answer is different in every state.
IOLTA programs exist in all 50 states, Washington D.C., and the U.S. Virgin Islands. While the foundational principles are consistent -- segregate client funds, maintain accurate records, reconcile regularly, disburse promptly -- the specific requirements vary significantly from state to state. Reconciliation frequency, record retention periods, approved financial institutions, interest remittance procedures, overdraft notification rules, and audit programs all differ by jurisdiction.
For solo practitioners and small firms, understanding the rules of your home state may be sufficient. But for firms with attorneys licensed in multiple states, firms handling matters across state lines, or attorneys who have relocated, the patchwork of state-specific rules creates real compliance exposure. A reconciliation practice that is compliant in Texas may be deficient in New Jersey. A record retention policy that meets California's requirements may fall short in New York.
This guide provides a comprehensive reference for IOLTA rules across all 50 states and D.C. It is designed to be a working reference -- the page you bookmark and return to whenever you need to verify a specific state's requirements.
How to Use This Guide
Each state entry below covers the same core categories: the administering IOLTA organization, reconciliation frequency requirements, record retention periods, approved financial institution rules, overdraft notification requirements, notable unique provisions, and any active or upcoming audit programs. This guide covers the most operationally significant rules -- the ones that affect how you manage your trust account day to day. It does not replace reading your state's actual rules, which should always be your primary reference for compliance decisions.
California
Administering Organization: The State Bar of California / California IOLTA Program.
Reconciliation: Monthly three-way reconciliation required.
Record Retention: Five years minimum.
Approved Financial Institutions: Must be an eligible financial institution approved by the State Bar.
Overdraft Notification: Banks must notify the State Bar of any overdraft or dishonored instrument on a trust account.
Unique Provisions: California launched the Client Trust Account Protection Program (CTAPP) in late 2025. CTAPP requires all California attorneys who hold client funds to certify their trust account practices annually and subjects them to random CPA audits. Early audit data from 2025-2026 shows staggering noncompliance rates -- 83% of audited firms had noncompliant trust account journals, and 89% had noncompliant client ledgers. CPA audits under CTAPP cost firms $5,000-15,000 each. CTAPP represents the most aggressive proactive trust account oversight program in the country and is being watched by bar associations nationwide as a potential model for adoption.
Audit Program: CTAPP random CPA audits (active as of 2025). California attorneys should treat CTAPP compliance as an immediate priority.
Florida
Administering Organization: The Florida Bar Foundation.
Reconciliation: Monthly three-way reconciliation required. Florida is among the strictest states in requiring documented monthly reconciliation.
Record Retention: Six years minimum.
Approved Financial Institutions: Must be held at a Florida Bar-approved financial institution.
Overdraft Notification: Banks must report overdrafts and dishonored items to The Florida Bar.
Unique Provisions: Florida has a large personal injury bar and high trust account transaction volumes. The Florida Bar actively investigates trust account irregularities and has a history of significant disciplinary actions for trust account violations. Florida requires detailed records of all trust account transactions including the source and purpose of every deposit and the payee and purpose of every disbursement.
Audit Program: Florida conducts audits in connection with bar complaints and overdraft notifications. No random audit program comparable to California's CTAPP.
Texas
Administering Organization: Texas IOLTA (administered by the Texas Access to Justice Foundation).
Reconciliation: Monthly reconciliation required.
Record Retention: Five years minimum.
Approved Financial Institutions: Must be held at an eligible financial institution participating in the Texas IOLTA program.
Overdraft Notification: Trust account overdraft notification to the State Bar of Texas is required.
Unique Provisions: Texas has a growing attorney population of approximately 100,000 active lawyers. The State Bar of Texas has been increasing its focus on trust account oversight in recent years. Texas requires that IOLTA accounts bear interest at rates comparable to non-IOLTA accounts at the same institution.
Audit Program: Audits conducted in response to complaints and overdraft notifications. No proactive random audit program currently.
New York
Administering Organization: IOLA Fund of the State of New York (note: New York uses 'IOLA' -- Interest on Lawyer Account -- rather than 'IOLTA').
Reconciliation: Monthly reconciliation required.
Record Retention: Seven years minimum -- one of the longest retention requirements in the country.
Approved Financial Institutions: Must be held at a banking institution authorized by law to do business in New York and insured by the FDIC.
Overdraft Notification: Banks must notify the Lawyers' Fund for Client Protection of overdrafts on attorney trust accounts.
Unique Provisions: New York's seven-year retention requirement is notably longer than most states. New York also has strict requirements around the designation of signatory authority on trust accounts and requires attorneys to maintain a running reconciliation of trust account activity. New York's Disciplinary Rules require monthly reconciliation and detailed recordkeeping beyond what some other states mandate.
Audit Program: Audits conducted in connection with complaints and overdraft reports. The Attorney General's office may also investigate trust account matters.
New Jersey
Administering Organization: IOLTA Fund of the Bar of New Jersey.
Reconciliation: Monthly three-way reconciliation required.
Record Retention: Seven years minimum.
Approved Financial Institutions: Must be held at a New Jersey financial institution approved by the Supreme Court.
Overdraft Notification: Banks must immediately notify the Office of Attorney Ethics (OAE) of overdrafts.
Unique Provisions: New Jersey operates one of the oldest and most rigorous random audit programs in the country. The OAE conducts random trust account audits of attorneys selected by lottery -- not triggered by complaints or overdrafts. This means any New Jersey attorney who holds client funds can be audited at any time without cause. New Jersey's program has been cited as a model by the ABA and was one of the inspirations for California's CTAPP. New Jersey also requires attorneys to maintain records of all trust account transactions in a specific format prescribed by the Court Rules.
Audit Program: Random audit program operated by the OAE (long-standing, active). New Jersey attorneys should maintain audit-ready records at all times.
Illinois
Administering Organization: Lawyers Trust Fund of Illinois.
Reconciliation: Monthly reconciliation required.
Record Retention: Seven years minimum after completion of the matter.
Approved Financial Institutions: Must be held at an FDIC-insured financial institution in Illinois.
Overdraft Notification: Financial institutions must report overdrafts and returned items to the ARDC (Attorney Registration and Disciplinary Commission).
Unique Provisions: Illinois requires detailed individual client ledgers and monthly reconciliation reports. The ARDC conducts trust account investigations through its audit division and has the authority to conduct both complaint-driven and sua sponte investigations. Illinois has approximately 65,000 active attorneys, with the Chicago legal market accounting for the majority of trust account activity.
Audit Program: ARDC investigations; not a random lottery audit but the ARDC has broad authority to initiate reviews.
Pennsylvania
Administering Organization: Pennsylvania IOLTA Board.
Reconciliation: Monthly reconciliation required.
Record Retention: Five years minimum.
Approved Financial Institutions: Must be held at an eligible financial institution approved by the IOLTA Board.
Overdraft Notification: Banks must notify the Disciplinary Board of overdrafts on IOLTA accounts.
Unique Provisions: Pennsylvania requires that all IOLTA accounts be maintained at financial institutions that agree to remit interest to the IOLTA Board and to report overdrafts. Pennsylvania also requires attorneys to maintain contemporaneous records of all trust account deposits and disbursements.
Audit Program: Investigations triggered by complaints and overdraft notifications.
Georgia
Administering Organization: Georgia IOLTA Fund (administered by the Georgia Bar Foundation).
Reconciliation: Monthly reconciliation required.
Record Retention: Six years minimum.
Approved Financial Institutions: Must be held at an approved financial institution in Georgia.
Overdraft Notification: Banks must report overdrafts and dishonored instruments to the State Bar of Georgia.
Unique Provisions: Georgia has a growing legal market, particularly in the Atlanta metropolitan area, with a significant personal injury practice community. Georgia requires detailed trust account records including monthly reconciliation and individual client ledgers. The State Bar of Georgia has increasingly focused on trust account compliance education.
Audit Program: Complaint-driven investigations by the State Disciplinary Board.
Ohio
Administering Organization: Ohio Legal Assistance Foundation (OLAF).
Reconciliation: Monthly reconciliation required.
Record Retention: Five years minimum.
Approved Financial Institutions: Must be held at an IOLTA-eligible institution in Ohio.
Overdraft Notification: Banks must report trust account overdrafts to the Office of Disciplinary Counsel.
Unique Provisions: Ohio requires attorneys to maintain a record of each client's funds held in the IOLTA account, updated at least monthly. Ohio's OLAP (Ohio Lawyers Assistance Program) provides resources for attorneys dealing with practice management issues that may affect trust account compliance.
Audit Program: Investigations triggered by complaints, overdraft reports, and referrals.
Massachusetts
Administering Organization: Massachusetts IOLTA Committee (IOBA -- Interest on Bar Accounts -- program).
Reconciliation: Monthly three-way reconciliation required.
Record Retention: Six years minimum.
Approved Financial Institutions: Must be held at an approved Massachusetts financial institution.
Overdraft Notification: Banks must notify the Board of Bar Overseers of overdrafts.
Unique Provisions: Massachusetts uses the term 'IOBA' rather than 'IOLTA.' The Board of Bar Overseers actively investigates trust account complaints and has a reputation for strict enforcement. Massachusetts also requires attorneys to maintain detailed individual client ledgers and monthly reconciliation records. Boston's concentration of legal tech companies has made Massachusetts a hub for trust accounting innovation.
Audit Program: Complaint-driven investigations by the Board of Bar Overseers.
North Carolina
Administering Organization: North Carolina IOLTA (administered by the NC State Bar).
Reconciliation: Monthly reconciliation required.
Record Retention: Five years minimum.
Approved Financial Institutions: Must be held at a bank or savings institution authorized to do business in North Carolina.
Overdraft Notification: Banks must report overdrafts to the State Bar of North Carolina.
Unique Provisions: North Carolina has recently launched a random trust account audit program, making it one of the first states to follow California's lead in proactive trust account oversight. This is a significant development -- North Carolina attorneys who hold client funds should prepare for the possibility of an audit at any time. The North Carolina program signals a national trend toward proactive audit enforcement.
Audit Program: Random audit program (recently launched, active). North Carolina attorneys should treat this as an immediate compliance priority.
Other States: Quick Reference
The remaining states operate IOLTA programs with broadly similar structures. Key variations to be aware of include the following.
States with seven-year record retention: New York, New Jersey, Illinois, and a small number of others require seven-year retention compared to the more common five or six years. When in doubt, retain records for seven years.
States with mandatory IOLTA participation: The vast majority of states now require mandatory IOLTA participation for attorneys who hold nominal or short-term client funds. Only a handful of states still allow attorneys to opt out.
States with active or emerging audit programs: Beyond California (CTAPP) and New Jersey (OAE random audits), North Carolina has recently launched random audits, and several other states -- including Washington, Colorado, and Virginia -- have been publicly exploring enhanced trust account oversight programs.
States with unique approved institution requirements: Some states maintain specific lists of financial institutions approved for IOLTA deposits. Before opening an IOLTA account, always verify that your chosen bank is on your state's approved list.
States with specific interest rate requirements: Several states require that IOLTA accounts bear interest at rates comparable to or better than similarly situated non-IOLTA accounts. This affects which account types and institutions you can use.
This guide will be updated as additional states adopt enhanced oversight programs. The clear trend is toward more proactive enforcement -- the question for most states is not whether they will adopt audit programs, but when.
The National Trend: Why Proactive Audits Are Spreading
California's CTAPP program, New Jersey's longstanding random audit program, and North Carolina's recent launch of random audits represent a clear directional shift in bar association trust account oversight. The traditional model -- waiting for a complaint or an overdraft notification before investigating -- is being replaced by proactive, random audits that can identify compliance deficiencies before they cause client harm.
The ABA has publicly encouraged states to adopt proactive oversight models. Early data from California's CTAPP has been alarming -- the 83% and 89% noncompliance rates for trust account journals and client ledgers respectively suggest that passive oversight has allowed widespread noncompliance to persist undetected.
For attorneys nationwide, the implication is straightforward: even if your state does not currently have a random audit program, you should manage your trust account as if it does. The cost of retroactive compliance -- scrambling to reconstruct records and fix processes after receiving an audit notice -- is far higher than the cost of maintaining audit-ready practices from the start.
How to Stay Compliant Across Multiple Jurisdictions
Attorneys licensed in multiple states face the additional challenge of complying with the strictest applicable requirements. The practical approach is to default to the most conservative requirements across all jurisdictions where you are licensed. If one state requires seven-year retention and another requires five, retain for seven. If one state requires monthly reconciliation and another is silent, reconcile monthly. If one state requires specific client ledger formats, adopt those formats across all your trust accounts.
Using a trust accounting platform that supports multi-jurisdictional compliance -- with configurable retention periods, reconciliation schedules, and audit trail requirements -- significantly reduces the complexity of managing obligations across states. The alternative -- maintaining different compliance practices for different jurisdictions -- is a recipe for errors.
Key Takeaways
IOLTA rules are not uniform. The differences between states -- in retention periods, reconciliation requirements, audit programs, and approved institutions -- are real and consequential. Attorneys who assume their home state's rules apply everywhere, or who do not keep current with rule changes, are taking on avoidable compliance risk.
The national trend toward proactive audit enforcement means that the window for passive compliance -- 'I'll fix it if someone asks' -- is closing. The attorneys and firms that invest in audit-ready systems now will be the ones who navigate the coming wave of enhanced oversight without disruption.