HR Compliance

What HR compliance covers

HR compliance runs across the full employee lifecycle. The main areas are:

• Hiring: job ads, applications, interviews, assessments, background checks and offers must avoid unlawful discrimination and follow notice rules such as those under the Fair Credit Reporting Act. See employment discrimination for the core rules.
• Eligibility to work: Form I-9 for every hire within three business days of the start date, and E-Verify where required.
• Pay and hours: minimum wage, overtime, exempt classification, recordkeeping and final pay under the FLSA and state wage laws.
• Leave and benefits: FMLA, state paid leave, ACA reporting, COBRA, ERISA plan rules.
• Workplace conduct and safety: anti-harassment policy and training, OSHA, accommodation processes.
• Records and reporting: personnel files, EEO-1 for covered employers, retention schedules, privacy.
• Separations: final paychecks, WARN Act notice for qualifying layoffs, release agreements.

This page is informational. Rules vary by state, city and country, and specific situations need advice from employment counsel.

Which laws apply: thresholds by employee count

Many federal employment laws turn on headcount, which is why compliance obligations change as a company grows. A rough map of common federal thresholds:

• 1 or more employees: FLSA (for covered enterprises and employees), Equal Pay Act, Form I-9, NLRA for most private employers, OSHA.
• 15 or more: Title VII, the ADA, the Pregnant Workers Fairness Act and GINA.
• 20 or more: the ADEA and federal COBRA.
• 50 or more: FMLA (within 75 miles), ACA employer mandate (50 full-time equivalents).
• 100 or more: EEO-1 Component 1 reporting for private employers, and the WARN Act for qualifying plant closings and mass layoffs.

Federal contractors have extra obligations, including affirmative action programs enforced by the OFCCP above certain contract and headcount levels. States often apply similar rules at much lower thresholds, sometimes to employers with a single employee.

An HR compliance checklist

A short checklist we would run every year, and after any acquisition or new state expansion:

1. Post current federal and state labor law notices, physically and electronically for remote staff.
2. Audit a sample of I-9s for completeness and timing.
3. Review every job's exempt or non-exempt status against current duties and salary thresholds.
4. Check that timekeeping captures all hours worked, including pre-shift logins and after-shift wrap-up.
5. Confirm job ads and offer letters meet pay transparency and salary history rules in each location you hire.
6. Review background check workflows for FCRA disclosure, authorization and adverse action steps, plus any ban-the-box rules.
7. Update the employee handbook for new state laws on leave, scheduling and pay.
8. Confirm harassment training is completed where state law requires it.
9. File EEO-1 and other required reports on time.
10. Check record retention: what you keep, for how long, and what you destroy.

An internal HR audit is the structured version of this list, with sampling and documented findings.

Where high-volume employers slip

Compliance failures in high-volume hiring are rarely about not knowing the law. They come from scale and inconsistency. When a contact center runs 30 hiring classes a year across six states, small process drift multiplies.

The usual problem spots:

• Inconsistent screening. Different recruiters using different knockout questions or interview questions for the same role creates disparate treatment risk and makes defending decisions hard.
• Unpaid pre-shift time. Agents booting up systems before clocking in is one of the most common wage-and-hour claims against call centers.
• Late I-9s. A Monday start date for 40 people and a short-staffed onboarding team is a recipe for Section 2 completed late.
• Assessments without validation. Tests that screen out protected groups at higher rates need to be job-related and consistent with business necessity.
• Automated screening tools. Laws like New York City Local Law 144 require bias audits and notices for automated employment decision tools. Other states are adding rules.
• Recordkeeping for applicants. Federal regulations require employers to keep applications and hiring records for at least a year, longer for federal contractors in some cases.

Who owns compliance

In a small company, the HR generalist owns it with help from outside counsel and a payroll provider. In larger organizations it is shared: HR operations owns processes and records, talent acquisition owns hiring practices, payroll owns wage-and-hour mechanics, legal sets policy and handles claims, and managers are responsible for applying policy consistently on the floor.

The gap is usually at the handoffs. Write down who owns each item on the checklist above, and review it when roles change.

Common mistakes

• Copying a policy from another state. California, New York, Illinois and Washington often differ from federal rules in ways that matter.
• Relying on a vendor to be compliant for you. If your background check provider or assessment vendor gets it wrong, the employer is usually still liable.
• Training managers once. Most claims start with a manager's decision. Annual refreshers on interviewing, accommodation and discipline pay for themselves.
• Undocumented decisions. If you cannot show why a candidate was rejected or an employee was disciplined, assume a regulator will not take your word for it.