HR Compliance Checklist for Small Businesses: 2026 Edition
The essential HR compliance obligations every small business needs to have covered — from hiring through offboarding — and the areas most often overlooked.
Why Small Business Compliance Keeps Getting Harder
The HR compliance burden on small businesses has grown substantially over the past decade, and it continues to expand. States are legislating more aggressively — pay transparency, bereavement leave, predictive scheduling, noncompete restrictions, expanded family and medical leave — while federal requirements remain baseline obligations that don't go away.
For fractional HR consultants, the compliance checklist is one of the most consistently valuable deliverables you can provide. Many small business owners genuinely don't know what they don't know. They've been doing things a certain way for years, assuming someone would have told them if there was a problem. The audit that surfaces those gaps — before a complaint surfaces them — is often the most important thing you do for a new client.
Hiring Compliance
Job postings. If you're in Colorado, California, New York, Washington, Illinois, Massachusetts, or other states with pay transparency laws, salary ranges are required in job postings. Requirements vary by employer size and geography. Posting a remote role without a salary range is increasingly noncompliant in multiple states simultaneously.
Offer letters. Oral offers are binding in many states. Written offer letters should clearly state at-will employment (in states that recognize it), title, start date, and compensation — and avoid language that could be construed as a promise of continued employment.
Background checks. Federal FCRA requirements apply to all employers using third-party background check services. State requirements layered on top — including ban-the-box laws in more than 35 states and localities — add complexity. Sending the required adverse action notices is one of the most commonly missed steps.
I-9 verification. Required for every new hire within three business days of start date. Remote hire I-9s require an authorized representative or E-Verify enrollment. The most common error is incomplete section 2 documentation — specifically, failing to examine physical documents (originals only) or accepting expired documents.
New hire reporting. All states require new hire reporting to the state directory of new hires within specific timeframes (typically 20 days). This is often missed for part-time and short-tenure employees.
Employment Policies
Employee handbook. A missing or outdated employee handbook is one of the most common findings in HR audits. Handbooks should be reviewed and updated annually — at minimum, any time your state passes major employment legislation. Key policies: at-will employment statement, anti-harassment and anti-discrimination, FMLA and leave policies, pay practices, social media, and technology use.
Harassment and discrimination policy. Required in several states as a standalone policy with specific content. California, New York, and Illinois have detailed requirements. Every employer should have one regardless of state requirements — it's your first line of defense in any employment claim.
Pay practices. Wage statement requirements (what must appear on a pay stub) vary significantly by state. Pay frequency requirements also differ. California and New York have some of the most specific requirements and enforce them actively.
Leave Compliance
FMLA. Applies to employers with 50+ employees within 75 miles of the worksite. Employees with 12 months of service and 1,250 hours worked in the last year are eligible. FMLA administration is frequently mishandled — including failure to identify FMLA-qualifying situations, failure to provide required notices, and interference with FMLA rights.
State family and medical leave. Many states have their own family and medical leave laws with different thresholds, benefit amounts, and administration requirements. California, New York, New Jersey, Massachusetts, Washington, Colorado, Connecticut, Oregon, and others have paid leave programs. Multi-state employers need to manage federal and state leave obligations simultaneously.
Other leave obligations. Bereavement leave, jury duty, military leave, voting leave, crime victim leave — the list of mandatory leave types varies by state and grows regularly. A leave law audit is one of the most valuable things you can do for a multi-state client.
Wage and Hour Compliance
Minimum wage. More than 30 states and dozens of localities have minimum wages above the federal $7.25. If you have employees in multiple jurisdictions, you need the right rate applied in each.
Exempt vs. nonexempt classification. The FLSA salary basis test requires that exempt executive, administrative, and professional employees earn at least $684/week. Many states have higher thresholds. The duties test is the other common failure point — many employers classify employees as exempt based on title rather than actual job duties.
Overtime. Nonexempt employees must receive 1.5x pay for hours over 40 in a workweek. California has daily overtime requirements. Some states have different calculation rules.
Meal and rest breaks. Federal law doesn't require meal or rest breaks, but most states do. Requirements vary by shift length, industry, and employee type. Not providing legally required breaks is one of the easier wage claims to establish.
Workplace Posting Requirements
Federal law requires a set of posters to be displayed in a conspicuous location in the workplace: FLSA, FMLA, OSHA, Equal Employment Opportunity, NLRA, and others. State law adds additional required postings, which vary by state and are updated periodically.
Remote workforces complicate posting requirements — electronic distribution of required notices is permitted in some circumstances but not all. The DOL has issued guidance on electronic posting that merits review for employers with distributed workforces.
Offboarding Compliance
Final pay timing. Most states have specific requirements for when final pay must be delivered, and many distinguish between voluntary resignations and terminations. California requires immediate payment upon termination. Missing these deadlines creates wage claim exposure.
COBRA notices. Required within 14 days of qualifying event for group health plans. Applies to employers with 20+ employees on more than 50% of typical business days in the prior calendar year. State mini-COBRA laws often cover smaller employers.
Unemployment claims. Timely and accurate responses to unemployment claims affect your unemployment insurance tax rate. Failure to respond timely often results in a default finding that the former employee is eligible — even if the separation was for cause.
The list above is not exhaustive — employment law compliance spans federal, state, and local requirements that shift regularly. The value you provide as a fractional HR consultant is staying current across all of this so your clients don't have to, and identifying the gaps before they become problems.
A structured HR audit is the most efficient way to assess a client's compliance posture across all of these areas at once. For deeper treatment of specific areas: FMLA Administration Guide, I-9 Compliance: Common Mistakes, Multi-State Employment Compliance, and Pay Transparency Laws by State.
Know your compliance score? Take the free HR Health Score → — 10 questions, instant result out of 100, your top 3 compliance gaps identified. No login required.