HR compliance isn't glamorous work. Nobody gets excited about updating I-9 procedures or auditing FLSA classifications. But it's the kind of work that, when ignored, turns into six-figure lawsuits and front-page headlines.
The regulatory landscape shifted significantly heading into 2026. New pay transparency laws, updated overtime thresholds, and expanded leave requirements affect employers in nearly every state. If your compliance playbook hasn't been refreshed since 2024, you're already behind.
This checklist covers the 15 most critical compliance steps every HR team should complete. It's based on current federal requirements, the latest state-level changes, and enforcement trends we've tracked across industries.
Steps 1-3: Employee Classification and Wage Compliance
Step one: audit every worker classification in your organization. The Department of Labor's updated guidelines narrowed who qualifies as an independent contractor. If you're relying on 1099 workers for ongoing, core business functions, review each arrangement against the economic reality test. Misclassification penalties start at $50 per instance and escalate quickly.
Step two: verify overtime exemption thresholds. The salary threshold for exempt employees increased in 2025, and some states set their own higher minimums. Cross-reference every exempt employee's salary against both federal and state requirements.
Step three: conduct a pay equity analysis. With pay transparency laws now active in over 20 states, employees have more visibility into wage gaps than ever before. Run a statistical analysis comparing compensation across gender, race, and age within equivalent job categories.
These first three steps catch the issues that generate the largest fines. The DOL collected over $274 million in back wages in 2025 alone. Don't contribute to the 2026 total.
Steps 4-6: Documentation and Record Keeping
Step four: update your employee handbook. At minimum, review policies on remote work, AI use in the workplace, social media conduct, and paid leave. State laws change annually, and your handbook needs to reflect current requirements.
Step five: audit I-9 forms for completeness. Immigration and Customs Enforcement ramped up worksite investigations by 30% in 2025. Every active employee should have a properly completed I-9 on file. Errors that seem minor can result in fines from $252 to $2,507 per form.
Step six: verify records retention compliance. Federal law requires keeping payroll records for three years and hiring records for one year. But many states mandate longer retention periods. California requires four years for most employment records.
Platforms like BambooHR and Rippling can automate record retention with built-in compliance timers. If you're still tracking this in spreadsheets, that's a problem worth solving this quarter.
Steps 7-10: Workplace Safety and Leave Management
Step seven: update your OSHA compliance program. If you have more than 10 employees, you need a written safety plan, regular training, and accurate injury logs. OSHA's new electronic submission requirements for establishments with 100+ employees took full effect.
Step eight: review your leave policies against current FMLA requirements and state leave laws. Thirteen states now have paid family leave programs, each with different eligibility rules and benefit calculations.
Step nine: verify ADA reasonable accommodation procedures. The EEOC issued updated guidance on accommodations for mental health conditions and remote work requests. Train managers on the interactive process.
Step ten: assess workplace violence prevention requirements. California's SB 553 set a precedent, and several states introduced similar bills. Even if your state doesn't mandate a written plan yet, creating one demonstrates good faith.
Steps 11-13: Benefits Compliance and Reporting
Step eleven: confirm ACA reporting accuracy. Applicable Large Employers must file Forms 1095-C for every full-time employee. The IRS penalty for failure to file hit $310 per form in 2026. Run a pre-filing audit to catch coding errors.
Step twelve: audit your benefits plans for ERISA compliance. This includes providing Summary Plan Descriptions within 90 days of enrollment, filing Form 5500 annually, and maintaining fiduciary standards for retirement plan management.
Step thirteen: review COBRA administration processes. Common mistakes include late notices, incorrect premium calculations, and failing to offer continuation coverage after qualifying events. ADP and Workday both handle this well for larger employers.
Benefits compliance is where most organizations have blind spots. The rules are dense, the penalties are severe, and the work often falls to generalist HR staff without specialized training.
Steps 14-15: Training and Continuous Monitoring
Step fourteen: complete mandatory training requirements. Anti-harassment training is now required in eight states, with specific hour and content mandates. Build a training calendar with automated reminders so nothing falls through the cracks.
Step fifteen: establish a continuous compliance monitoring process. Annual checklists aren't enough anymore. Regulations change mid-year, court decisions shift enforcement standards, and your workforce evolves. Assign a compliance owner who reviews regulatory updates monthly.
Rippling's compliance features automatically flag issues like expired certifications, overdue training, and policy acknowledgment gaps. BambooHR sends automated alerts when employee records need attention. Use these tools instead of relying on memory.
Compliance isn't a project with a finish line. It's an ongoing discipline. The organizations that treat it as routine work are the ones that avoid the headlines.