Week 1 · HR Compliance Series
The Complete Guide to HR Rules and Regulations for Small Businesses (2026)
HR rules and regulations aren't optional, but the 80% that actually applies to a company under 50 people comes from a surprisingly short list. This guide covers what applies at each headcount tier, the federal baseline, where state law diverges, the 2026 changes worth flagging, and how to audit yourself in a weekend.
On this page
Which HR rules apply to your business?
Federal HR obligations stack as you grow. The table below is the "start here" view — each row adds to the ones above it. State thresholds are often lower (California requires harassment training at just 5 employees), so treat this as a floor.
| Headcount | Adds these federal rules |
|---|---|
| 1 employee | FLSA, IRS payroll, state wage & hour, workers' comp, Form I-9, state new-hire reporting |
| 15+ | Title VII, ADA, GINA, PDA |
| 20+ | ADEA, COBRA |
| 50+ | FMLA, ACA employer mandate |
| 100+ | EEO-1 reporting, WARN Act |
The federal HR baseline every employer must follow
Wage & hour (FLSA)
- Federal minimum wage and overtime at 1.5× for non-exempt employees over 40 hours/week.
- Exempt vs non-exempt is a duties test plus a salary threshold — misclassifying salaried staff as exempt is the single most common FLSA violation.
- Owners and managers can be held personally liable for unpaid wages.
Anti-discrimination
- Title VII (race, color, religion, sex, national origin) — 15+ employees.
- ADA (disability) and GINA (genetic info) — 15+ employees.
- ADEA (age 40+) — 20+ employees.
- Equal Pay Act — applies to virtually all employers.
- Pregnant Workers Fairness Act (PWFA) — 15+ employees, in force since 2023 with 2024 final rule.
Workplace safety (OSHA)
- General duty clause: provide a workplace free of recognized hazards — applies to essentially all employers.
- OSHA 300 injury/illness log required for most employers with 11+ employees.
- Federal and state posters must be displayed where employees can see them.
Leave
- FMLA: 12 weeks unpaid, job-protected leave at 50+ employees within a 75-mile radius.
- USERRA: reemployment rights for military service — all employers.
- Jury duty leave: federally protected for federal jurors, plus state rules.
Immigration, benefits, and termination
- Form I-9 within 3 business days of hire; E-Verify where state or contract requires.
- ERISA governs benefit plans; COBRA continuation at 20+ employees.
- ACA employer mandate at 50+ full-time-equivalents.
- Federal has no rule on final-paycheck timing — states do, and some require same-day payout on involuntary termination.
State HR rules that catch small businesses off guard
- Paid sick leave: mandated in 18+ states, with different accrual and carryover rules.
- Pay transparency in job postings: CA, CO, NY, WA, IL, and a growing list — postings without a salary range now trigger fines.
- Salary history bans: prohibit asking candidates what they previously earned.
- Non-compete restrictions: CA, MN, ND, and OK broadly prohibit them; watch for federal FTC rule status.
- Mandatory harassment training: CA, CT, DE, IL, ME, NY, WA — thresholds and cadence vary.
- Employee-data privacy: CCPA/CPRA in California, plus a growing list of state privacy laws that reach HR files.
- AI-in-hiring rules: NYC Local Law 144, Colorado AI Act, Illinois AI Video Interview Act.
If you employ people in more than one state, assume every state has at least one rule you don't have in the state where you're headquartered.
The 2026 changes worth flagging
- FLSA salary threshold for exempt employees — track the current DOL rule status before running exemption audits.
- PWFA final rule now in enforcement — accommodations for pregnancy, childbirth, and related conditions.
- New state paid-family-leave programs coming online with employer contribution obligations.
- Pay-transparency requirements expanding to more states and more posting formats.
- State AI-in-hiring rules multiplying — audit any automated screening tool before renewing.
Recordkeeping and documentation requirements
| Record | Retention |
|---|---|
| Form I-9 | 3 years after hire or 1 year after termination (whichever is later) |
| Payroll (FLSA) | 3 years |
| Timekeeping data | 2 years |
| EEOC records | 1 year (2 years for terminations) |
| OSHA 300 logs | 5 years |
| FMLA records | 3 years |
| ERISA / benefits | 6 years |
| Medical files | Stored separately; OSHA exposure records for duration of employment + 30 years |
How to audit your HR compliance in a weekend
The weekend audit
- Saturday morning: gather your handbook, offer letters, I-9 binder, payroll register, and posters.
- Saturday afternoon: run the free audit — 27 questions, ~5 minutes, scored by category.
- Sunday morning: print the checklist and mark every gap the audit surfaced.
- Sunday afternoon: prioritize gaps by risk × cost, and put the top three on Monday's calendar.
Common mistakes small businesses make
- Misclassifying employees as 1099 contractors — see the W-2 vs 1099 checklist below.
- Treating every salaried worker as automatically exempt from overtime.
- No written handbook, or one that hasn't been updated since 2019.
- Skipping state-required harassment training because the federal law doesn't require it.
- No documented termination process — no PIP, no witness, no final-pay checklist.
- Missing or expired workplace posters (federal + state).
When to bring in help
Under 10 employees: HR software plus a template handbook is usually enough. Budget a call with employment counsel once a year.
10–50 employees: add fractional HR support, run the audit quarterly, and get counsel on retainer for termination decisions.
50+ employees: consider a PEO or in-house HR lead. FMLA, ACA, and state-specific rules become full-time work.
Frequently asked questions
What HR laws apply to a business with fewer than 15 employees?
FLSA (wage & hour), IRS payroll rules, workers' compensation, Form I-9, state wage/hour rules, state new-hire reporting, and OSHA's general duty clause. Most federal anti-discrimination laws (Title VII, ADA, GINA, PDA) don't kick in until 15+ employees, but many states apply equivalent protections at lower thresholds.
Do small businesses need an employee handbook?
Not legally required at the federal level, but strongly recommended. Several states effectively require written policies on harassment, leave, and pay transparency, and a handbook is the primary evidence you rely on in a wrongful-termination or discrimination claim.
What HR training is legally required in 2026?
Anti-harassment training is mandated in California, Connecticut, Delaware, Illinois, Maine, New York, and Washington (thresholds vary). OSHA-required training applies wherever the underlying standards apply, and industry-specific training (HIPAA, PCI, etc.) applies to regulated data.
How often should we review HR policies?
Annually at a minimum, plus any time a state you employ in changes a law or you cross a headcount threshold at 15, 20, 50, or 100 employees.
What's the penalty for HR non-compliance?
It ranges from a few hundred dollars per I-9 error to six-figure EEOC settlements. Under the FLSA, owners and managers can be held personally liable for unpaid wages — the corporate veil does not protect them.
Do remote employees follow the employer's state laws or their own?
The employee's state generally governs wage & hour, leave entitlements, and tax withholding. This is one of the most common traps for distributed teams — hiring in a new state means picking up that state's HR rules.
What's the difference between HR compliance and employment law compliance?
HR compliance is the operational side — policies, training, records, and processes. Employment law compliance is the underlying legal obligation. You need both: strong policies are worthless if you can't prove you followed them.
Related guides
HR Compliance Series · Week 1 of 4
- Week 1:The Complete Guide to HR Rules and Regulations for Small Businesses
- Week 2:Employment Law Compliance: What Every Employer Needs to Know in 2026
- Week 3:HR Compliance Training 101: Building a Program That Actually Sticks
- Week 4:The HR Compliance Checklist Every Small Business Should Use
Informational only — not legal advice. Consult employment counsel for your specific situation.