The HR Compliance Checklist for Small Businesses

Compliance starts before someone's first day. These are the items that apply to every new hire.

• Collect a completed Form I-9 for every employee. Federal law requires a verified I-9 confirming work authorization within three business days of the start date. Missing or incorrect I-9s carry per-form penalties.
• Report every new hire to your state. Most states require new-hire reporting within about 20 days for child-support enforcement. Your payroll provider can usually automate this.
• Classify each worker correctly. Decide employee versus independent contractor, and exempt versus non-exempt, before the first paycheck. Misclassification is the single most common and most expensive small-business HR mistake.
• Provide required new-hire notices. Several states require wage-theft prevention notices, pay-rate notices, or paid-leave notices at hire. Confirm what each state you employ in requires.
• Set up a personnel file system. Keep employment records, signed documents, and I-9s organized and retained for the legally required periods. Store I-9s separately from the main personnel file.

The Fair Labor Standards Act and state wage laws drive most wage-and-hour liability. These are the non-negotiables.

• Confirm overtime eligibility for every role. Non-exempt employees must receive overtime at 1.5x for hours over 40 in a workweek. Confirm each exempt classification actually meets the legal duties and salary tests, not just the job title.
• Meet federal and state minimum wage. Pay at least the higher of the federal, state, or local minimum wage for every hour worked. Several cities set their own higher minimums.
• Track hours accurately for non-exempt staff. Maintain accurate records of hours worked. Reliable timekeeping is your defense in any wage dispute or audit.
• Follow your state's final-pay rules. Each state sets its own deadline for issuing a departing employee's final paycheck. Missing it is a common and avoidable violation.
• Handle deductions correctly. Only make payroll deductions that are legally permitted and properly authorized. Improper deductions can trigger wage claims.

Payroll compliance is mechanical but unforgiving. Each state where you have an employee adds its own obligations.

• Register in every state where you employ someone. A remote hire in a new state usually triggers state payroll-tax registration there. Hiring across state lines without registering is a frequent surprise.
• Withhold and deposit payroll taxes on time. Federal and state income tax, Social Security, and Medicare must be withheld and deposited on schedule. Late deposits carry penalties.
• Carry workers' compensation insurance. Most states require workers' comp coverage once you have employees, sometimes from the first one. Requirements vary by state and industry.
• Pay state unemployment insurance. Register for and pay state unemployment insurance tax in each state where you have employees.
• Issue W-2s and 1099s on time. Provide W-2s to employees and 1099s to qualifying contractors by the federal deadline each year.

Some policies and notices are legally required; others are strongly advisable because they create a documented, consistent basis for decisions.

• Display required workplace posters. Federal and state law require certain labor-law notices be posted, or provided digitally for remote teams.
• Maintain an anti-harassment policy. Many states require a written anti-harassment policy, and several mandate periodic harassment-prevention training. Confirm your states' rules.
• Put leave policies in writing. Document policies for any leave you are legally required to provide, including state paid sick leave and applicable family or medical leave.
• Keep an employee handbook current. A handbook is not always legally required, but it sets expectations and gives you a consistent, documented basis for decisions. Review it at least annually.
• Honor anti-discrimination obligations. Federal anti-discrimination laws apply at different employee-count thresholds, and many states apply theirs to smaller employers. Know which apply to you.

Compliance does not end when someone leaves. Documentation and clean exits protect the company.

• Retain records for the required periods. Different records carry different retention requirements: payroll, I-9s, tax, and personnel files each have their own. Keep them for the legally mandated time.
• Document performance and discipline. Keep contemporaneous, factual records of performance issues and disciplinary steps. This documentation is your defense if a termination is challenged.
• Run terminations consistently and lawfully. Follow a consistent process, deliver final pay on your state's schedule, and handle benefits continuation notices where required.
• Provide required separation notices. Some states require specific notices at separation, such as unemployment-benefit information. Confirm what each state requires.
• Secure data on exit. Recover company property and revoke access to systems and data promptly when employment ends.