The Complete HR Compliance Checklist (2026)

Running a small business means wearing a lot of hats. HR compliance probably isn’t the one you enjoy most — but it’s one you can’t afford to get wrong. A single missed form, an outdated policy, or a record-keeping gap can turn into a Department of Labor audit, a discrimination claim, or a fine that dwarfs whatever you saved by putting it off.

This checklist covers the federal requirements that apply to most small businesses in 2026, along with the documentation and policies that protect you when something goes sideways. Work through it once, fix what’s missing, then build it into your annual review cycle.

---

Hiring and Onboarding Compliance

Every new hire triggers a set of legal obligations. These aren’t optional, and the clock starts on day one.

Form I-9 (Employment Eligibility Verification). Federal law requires you to verify that every employee is authorized to work in the U.S. You must complete Section 1 with the employee on or before their first day, and complete Section 2 yourself within three business days of their start date. Keep I-9s for three years after the hire date or one year after employment ends, whichever is later. Store them separately from general personnel files — they’re subject to inspection without a warrant.

New Hire Reporting. Most states require employers to report new hires to a state agency within 20 days of their start date. This feeds into child support enforcement systems. The information required is usually just name, address, SSN, and hire date — but the deadline is firm.

W-4 Federal Withholding Form. Employees complete this on or before their first paycheck. Keep it on file; don’t submit it to the IRS unless asked. If an employee claims exempt, they need to re-certify each February.

State new hire paperwork. Depending on your state, this may include state withholding forms, disability insurance enrollment, or state-specific notices. If you have remote employees in multiple states, each state’s requirements apply to the employees working there.

---

Wage and Hour Compliance

The Fair Labor Standards Act (FLSA) governs minimum wage, overtime, and recordkeeping for most private employers. It applies to you regardless of how many employees you have.

Minimum wage. The federal floor is $7.25/hour, but most states (and many cities) have higher minimums. If your state minimum is higher, that’s the number that matters. Check your state’s rate annually — increases often take effect January 1.

Overtime. Non-exempt employees must receive 1.5x their regular rate for hours worked over 40 in a workweek. Whether an employee is exempt from overtime depends on their job duties and salary, not their job title. Misclassifying an employee as exempt is one of the most common — and costly — FLSA violations.

Proper classification: employee vs. contractor. If you’re using contractors to avoid employment taxes or benefits, make sure the classification holds up. The IRS and Department of Labor use different tests, but both look at behavioral control, financial control, and the nature of the relationship. Misclassification carries back taxes, penalties, and interest.

Required pay stub information. Most states require pay stubs to include gross wages, deductions itemized, and net pay. Some states have additional requirements. If you’re running payroll manually, double-check your state’s rules.

---

Workplace Policies and Required Notices

You’re not just required to follow the law — in many cases, you’re required to tell employees what the law says. Federal and state agencies mandate specific posters and written notices.

Required workplace posters. The U.S. Department of Labor requires you to display posters covering FLSA, FMLA (if you have 50+ employees), OSHA, EEO, and EPPA. These must be posted where employees can see them. If you have remote employees, you may also need to provide electronic versions. The posters are free to download from the DOL website.

Anti-harassment and anti-discrimination policy. Even if you’re not legally required to have a written policy (some states require it at certain headcounts), not having one is a serious liability. Your policy should define prohibited conduct, explain how employees can report issues, and state that retaliation is prohibited.

Paid sick leave policy. Over 20 states and numerous cities now mandate paid sick leave. Requirements vary widely — accrual rates, carryover rules, permissible uses, and notice requirements all differ. If you don’t have a written policy that meets your state’s rules, you’re likely already non-compliant.

At-will employment notice. In most states, employment is at-will by default. Stating this clearly in your offer letters and handbook prevents misunderstandings and reduces wrongful termination exposure.

---

Record-Keeping Requirements

HR compliance isn’t just about doing the right things — it’s about being able to prove you did them. Proper records are your only defense in an audit or lawsuit.

Personnel files. Keep a file for each employee containing their application, offer letter, performance reviews, disciplinary records, and termination documentation. Retain these for at least three years after termination; some states require longer.

Payroll records. FLSA requires you to keep payroll records for at least three years. These should include hours worked each day and week, total daily and weekly earnings, overtime pay, deductions, and pay dates.

Benefits records. If you offer health insurance, retirement plans, or other benefits, ERISA requires you to keep related records for six years.

Job postings and hiring records. Keep documentation of job postings, applications received, and your selection process for at least one year. If you’re subject to OFCCP regulations (federal contractors), the requirements are more extensive.

---

Annual Compliance Tasks

Some HR obligations recur on a schedule. Put these on your calendar so they don’t sneak up on you.

• ACA reporting (Forms 1094-C and 1095-C): Required if you have 50 or more full-time equivalent employees. Filed with the IRS in early spring; copies distributed to employees by January 31.
• OSHA 300 log posting: If you’re required to keep OSHA injury and illness records, you must post the summary (Form 300A) from February 1 through April 30 each year.
• State unemployment tax rate: Your SUTA rate can change each January based on your claims history. Verify with your state agency.
• Employee handbook review: Review and update at least annually. Laws change, and an outdated handbook can create more problems than no handbook at all.
• I-9 audit: Do an internal audit annually. Look for missing signatures, expired documents that weren’t re-verified, and employees on List A who were also asked for List B and C documents.

---

A Note on State-Specific Requirements

This checklist covers federal baseline requirements. Every state adds its own layer — and some states add several. If you have employees in California, New York, Illinois, or Washington, assume your compliance burden is significantly higher than this list reflects. Multi-state employers should verify requirements in each state where employees work, not just where the business is headquartered.

An HR platform that tracks state-by-state requirements can save you hours of research and reduce the risk of missing a state-specific rule.