FirstHR

New York Retirement Mandate: Secure Choice or a 401(k)

New York Secure Choice explained: who must register, the staged deadlines, how the state auto-IRA works, and when your own 401(k) is the better call.

Nick Anisimov

Nick Anisimov

FirstHR Founder

Benefits
13 min

New York Retirement Mandate

What New York requires from an employer with no retirement plan of its own: who registers, the staged deadlines, how the state auto-IRA behaves once it is running, why you are never the fiduciary, and the case for sponsoring a 401(k) instead

A friend who runs a print shop outside Rochester forwarded me a letter from New York State with an access code printed on it and asked whether it was a scam. It was not. It was the state telling him that because he had never set up a retirement plan, he now had a registration deadline and a payroll job attached to it.

What surprised him was how little the state actually wanted. No contribution. No plan document. No investment decisions. What it wanted was a payroll deduction, taken from employees who did not opt out and remitted on time, and a roster kept up to date.

This covers what the New York retirement mandate requires of an employer with no plan of its own: who registers and when, what happens if you miss it, exactly how the auto-IRA behaves once it is running, and the case for skipping the state program and sponsoring a 401(k) instead. I build the people and records tooling for businesses without an HR department at FirstHR, and FirstHR is an onboarding and HR platform rather than a payroll or retirement provider. This is general information, not tax or legal advice.

TL;DR
New York Secure Choice requires private employers with at least ten New York employees, at least two years in business, and no qualified retirement plan to register and run payroll deductions into state-facilitated Roth IRAs. The default rate is 3 percent of gross pay. You never contribute, never sign a plan document, and are never the plan fiduciary.

What New York Secure Choice Is

New York Secure Choice is the state retirement savings program for private-sector employees whose employer offers no plan at all. If you are covered, you register, you deduct, and you remit. That is the entire scope of what the state asks of you.

Definition
New York Secure Choice Savings Program
A state-facilitated automatic enrollment payroll deduction Roth IRA program created by Article 43 of the New York General Business Law and overseen by the New York Secure Choice Savings Program Board, chaired by the Commissioner of Taxation and Finance. Covered employers register, distribute the state informational materials, and remit employee payroll deductions. The employer makes no contribution, adopts no plan document, and is not a fiduciary over the program.

Section 1301 of the statute describes it in one line: a retirement savings program in the form of an automatic enrollment payroll deduction IRA. The board may delegate development and implementation to the Department of Taxation and Finance, which is why the correspondence arrives from the tax authority rather than from a labor agency.

The design point that matters most for an employer sits in Section 1313. A participating employer is not establishing or maintaining the payroll deduction IRA, is not a fiduciary over the program, and bears no responsibility for its administration, investment, or investment performance (New York General Business Law Article 43). Hold on to that sentence. It is the difference between this and running a plan.

Who Has to Register

Three conditions have to be true at the same time. Section 1300 defines a covered employer as one that employed at least ten employees in New York at all times during the previous calendar year, has been in business at least two years, and has not offered a qualified retirement plan in the preceding two years.

10
employees in New York throughout the previous calendar year, the coverage test
2
years in business before the mandate can reach you
3%
of gross pay, the default employee contribution rate
30
days an employee has to opt out before any deduction begins

All three conditions do real work. A business that crossed the headcount threshold in June is not covered on that basis, because the statutory test looks at the whole of the previous calendar year rather than a snapshot. A company in its first eighteen months sits outside the mandate no matter how many people it employs.

An employee, for this purpose, is anybody aged eighteen or older who earned wages working for the employer in New York during the calendar year. There is no hours test and no tenure test, which is why the question of whether part-time staff count has the same dull answer here as it does in every other state program.

The statute applies whether the enterprise is for profit or not, so nonprofits are inside it on the same terms. Treat the mandate as one of the statutory obligations that attaches to payroll rather than as a benefits decision you get to weigh.

The Registration Deadlines

New York staged the registration deadlines by employer size and all of them have now passed. A covered employer that has not registered or certified an exemption is late rather than early, which changes what the sensible next move looks like.

Employer size bandDeadline to register or certifyCurrent status
Thirty or more employeesMarch 18, 2026Passed
At least fifteen employees, fewer than thirtyMay 15, 2026Passed
At least ten employees, fewer than fifteenJuly 15, 2026Passed
Newly covered employersOn notification from the programRolling

The New York Secure Choice Savings Program Board notifies employers it believes are covered when it is time to register. That notice carries a unique access code, which you use together with your federal employer identification number to complete registration or certify an exemption on the program site.

If the notice went to an old address or straight to a previous bookkeeper, request a replacement code rather than waiting for a second letter. Nothing about the obligation pauses while the envelope is missing, and the program will keep matching you against payroll filings in the meantime.

The practical consequence of the last deadline having gone is that there is no runway left. Register now, start the enrollment clock, and treat the retirement mandate as one line on a longer list of New York employer requirements rather than as a project with a future start date.

Certifying Out If You Already Have a Plan

If you already sponsor a qualified retirement plan you are exempt, but exemption is a status you claim rather than one the state works out for you. Section 1300 lists what counts: plans qualified under sections 401(a), 401(k), 403(a), 403(b), 408(k), 408(p), or 457(b) of the Internal Revenue Code.

In plain terms that is a 401(k), a 403(b), a SEP IRA under 408(k), and a SIMPLE IRA under 408(p). It does not include an informal payroll deduction arrangement you set up with a local advisor, and it certainly does not include an intention to start a plan next year.

The certification runs through the same portal as registration, with the same access code and EIN. Employers who bin the notice because they know they have a plan keep receiving notices, because the state is matching against filings rather than against your recollection of what you sponsor.

You Cannot Drop a Plan to Join the Program
Section 1310 of the General Business Law is explicit: an employer that offers a qualified retirement plan shall not terminate that plan for the purposes of participating in the program. If your 401(k) suddenly looks expensive next to a state IRA that costs you nothing, that exit is not available on those terms. Terminating a plan has its own rules and its own consequences, and doing it in order to land in the state program is the single reason the statute rules out by name.
Still Using Spreadsheets for Onboarding?
Automate documents, training assignments, task management, and track onboarding progress in real time.
See How It Works

What Missing the Deadline Costs

New York has not published a penalty schedule. Section 1304 gives the Secure Choice Savings Program Board authority to determine employee rights and the enforcement of penalties, and the board has not yet converted that authority into a public dollar figure.

It is worth being precise about what that does and does not mean. It does not mean there is no penalty. It means the amount is not knowable in advance, which is a worse position to plan around than a published number rather than a more comfortable one.

Other states show the shape enforcement usually takes. California applies a fine per eligible employee that escalates the longer noncompliance continues after a final notice, under California Government Code 100033, which turns a filing failure into a number that scales with headcount. Read the New York silence as unfinished rather than lenient.

The second exposure is quieter and far more certain. Employee contributions belong to the employee from the moment they are withheld. Deducting and then failing to remit on schedule is a wage handling failure, and it sits alongside the rest of your payroll deduction obligations rather than in some separate program-only category.

How the Auto-IRA Actually Works

Once you register, the program does the enrolling. Employees you add to the roster are automatically enrolled into a Roth IRA in their own name at a default rate of 3 percent of gross pay, and they get thirty days to opt out or change that before a single dollar moves.

The account is a Roth IRA
Article 43 defines IRA as a Roth IRA, so contributions come out of pay after tax and the account belongs to the employee from day one. It travels with them when they leave you.
The default rate is 3 percent of gross pay
An employee who never fills anything in contributes 3 percent. Anyone can move that to as little as 1 percent or as high as their pay and the federal IRA limits allow.
Thirty days before any money moves
Deductions cannot begin until the thirtieth day after enrollment. That window is when the employee opts out, picks a different rate, or chooses investments, and the program talks to them directly.
Escalation is opt in, not automatic
An employee can elect a 1 percent annual increase that applies each January until the rate reaches 10 percent. Somebody who does nothing stays at 3 percent for as long as they work for you.
Source: New York General Business Law Article 43 and New York Secure Choice program materials. The opt in escalation is the detail employers most often assume works the other way, because several other state programs escalate savers automatically.

The escalation detail is where New York differs from several other state programs, and it is the easiest thing on this page to get backwards. Savings rate increases here are elected by the employee, not applied automatically. Someone who ignores every message from the program stays at 3 percent indefinitely.

Because the account is a Roth IRA rather than a workplace plan, federal IRA rules govern the ceiling. The limit is $7,500 for 2026 across every IRA an individual holds, or $8,600 from age 50, and higher earners are phased out of Roth contributions entirely on modified adjusted gross income (Internal Revenue Service).

Section 1310 adds two timing rules that matter operationally. Deductions cannot begin until the thirtieth day after an employee has been enrolled. And people who opt out are not gone for good, because the program designates an open enrollment period at least once a year in which previous decliners are asked again.

Your Job Is Payroll, Not Plan Sponsorship

Your obligations are administrative and they are short: register, hand out the state materials, keep the roster current, deduct at the rate each employee chose, and remit on time. Nothing on that list involves money of yours or a judgment call about investments.

1
Register with the access code
Set up the account with your EIN and the code the program sent, answer the questions about your payroll process, and invite whoever actually runs payroll to help. A bookkeeper or payroll representative can be added as an administrator.
2
Distribute the state informational materials
Section 1309 requires existing employees to receive them at least one month before you begin facilitating access, and new employees at the time of hiring. The materials include the opt-out form and the disclosure of what the program does.
3
Add employees and wait out the window
The program contacts them directly to explain the options. They have thirty days to opt out, change the savings rate, or pick investments. You do not chase them and you do not advise them.
4
Record the choices and start deductions
At the end of the window you record what each person selected and set the deduction accordingly. From here it behaves like any other post-tax payroll deduction.
5
Remit on the statutory schedule
Section 1311 requires contributions to reach the program on or before the last day of the month following the month in which the pay would otherwise have been made, or by a later deadline the board sets, which cannot fall after the due date for depositing the related withheld income tax.
6
Maintain the roster
Add new hires, mark leavers as terminated, and update rate changes when employees make them. This is the only permanent obligation the program creates, and it is the one that quietly slips.
You are not a fiduciarySection 1313 states it directly: a participating employer is not establishing or maintaining the payroll deduction IRA, is not a fiduciary over the program, and bears no responsibility for its administration, investment, or investment performance.
You never contributeThere is no employer contribution and no match. The program does not permit one. Every dollar remitted is the employee’s own wages, withheld at a rate the employee controls.
There is no plan document and no annual filingYou do not adopt a plan, you do not name a trustee, and there is no annual report to sign. Registration, a roster, and a remittance schedule are the whole of it.
This is the whole trade. The state took the plan sponsor role, and left you the payroll job.

The federal reason this stays off your books is a long-standing safe harbor. A payroll deduction IRA falls outside ERISA where employer involvement is limited to permitting the program to publicize itself, collecting contributions, and remitting them, without endorsement or contribution (29 CFR 2510.3-2).

That is why the state program produces no Form 5500 and why the duties that come with ERISA coverage never attach to you. It is also why you should not answer employee questions about which investment option to choose. Point them at the program and stay out of it.

Companies Using FirstHR Onboard 3x Faster
Join hundreds of small businesses who transformed their new hire experience.
See It in Action

Sponsoring Your Own 401(k) Instead

The alternative to registering is to become a plan sponsor, and the honest reason to do it is the ceiling. A 401(k) lets an employee defer $24,500 in 2026, with a further $8,000 from age 50 and $11,250 for ages 60 through 63, against $7,500 in an IRA.

For an owner who wants to save seriously, that gap is the whole argument. The state program caps you at the IRA limit and phases you out of Roth contributions above an income threshold, so the people with the most to save get the least out of it. A plan of your own does neither of those things.

What you take on in exchange is real and it is not just cost. A plan document, a recordkeeper, fiduciary responsibility for the investment lineup, an annual filing in most cases, and nondiscrimination testing that a small business with low participation fails more often than it expects.

Two things soften that. A safe harbor design trades a mandatory, immediately vested employer contribution for automatic satisfaction of the main tests. And SECURE 2.0 gives small employers startup tax credits that can cover a meaningful share of the early administrative cost.

Which One Fits Your Business

Register for the state program if your goal is compliance at zero employer cost. Sponsor a 401(k) if you or your senior people want to save beyond the IRA limit, or if you want the plan to do recruiting work rather than only satisfy a statute.

QuestionNew York Secure ChoiceYour own 401(k)
Employer contributionNone permittedOptional, or required under a safe harbor design
Annual saver limitIRA limit: $7,500 for 2026, $8,600 from age 50$24,500 for 2026 plus catch-up amounts
Income limits on the saverRoth phase-out applies on modified AGINo income phase-out on deferrals
Who is the fiduciaryNot the employerThe employer
Plan document and annual filingNeitherPlan document, and Form 5500 in most cases
Nondiscrimination testingNoneYes, unless a safe harbor design applies
Direct cost to the employerPayroll administration onlyProvider fees, plus any contribution
Value as a hiring argumentAccess to an IRAA funded benefit employees compare across offers

Nothing locks you in. Section 1310 preserves the point explicitly: employers retain the option at all times to set up any type of employer-sponsored retirement plan. Registering this month and sponsoring a plan next year is a normal sequence, not a reversal.

The order I would suggest is unglamorous. Get compliant first, because the deadline has already gone and the exposure is running. Then decide about a plan on its own merits, with the contribution ceiling and the recruiting argument as the two questions that actually settle it.

Employees Who Work Outside New York

The mandate follows where the work happens, not where your office sits. The statutory test counts employees who earned wages working for you in New York, so a distributed team can put you inside one state mandate and outside another at the same time.

That is the position most growing companies reach without noticing, because the state programs run on separate registers, separate portals, and separate deadlines. Each one has to be handled on its own terms, and none of them tells you about the others.

Sponsoring a single 401(k) is the one move that answers all of them at once, since a qualified plan exempts you everywhere rather than state by state. That is an argument for a plan that has nothing to do with contribution limits and everything to do with not running four registrations.

Either way it interacts with the rest of your multi-state payroll work, because the deduction has to be configured per employee in the right jurisdiction and remitted to the right program on the right schedule.

Where Employers Get This Wrong

Five patterns, and the first one is the most common by a distance.

Assuming the notice is junk mail is first. The letter carries the access code you need, and treating it as marketing costs you the easy path to registering.

Having a plan and never certifying is second. Exemption is claimed, not inferred, and an uncertified employer stays on the noncompliant list no matter how good the plan is.

Believing the savings rate escalates on its own is third. In New York it does not. If you tell employees their contribution will rise automatically, you have told them something untrue about their own pay.

Advising employees on investment options is fourth, and it is the one that converts a payroll job into a liability. The statute keeps you out of the fiduciary role, and answering that question is how employers volunteer their way back into it.

Letting the roster drift is fifth. New hires who never get added and leavers who never get marked terminated turn a clean deduction file into a monthly reconciliation exercise nobody has time for.

What worked for me
The thing I would tell my friend in Rochester earlier is that the decision and the compliance are two separate jobs and they run on different clocks. He spent six weeks comparing the state program against a real plan, which was a reasonable thing to want to do, while the registration deadline sat unmoved in the background. Registering costs nothing and forecloses nothing. Get that done in an afternoon, then take as long as you like arguing about whether a 401(k) is worth it, because that question deserves proper thought and the deadline does not care that you are giving it any.
Key Takeaways
New York Secure Choice covers private employers with at least ten New York employees throughout the previous calendar year, at least two years in business, and no qualified retirement plan.
The staged registration deadlines have all passed, so a covered employer that has not registered or certified an exemption is late rather than early.
Employers who already sponsor a qualified plan are exempt but must certify the exemption in the portal, because the state matches against payroll filings rather than inferring it.
The employer never contributes, never signs a plan document, and is never a fiduciary over the program under Section 1313 of the General Business Law.
Employees are auto-enrolled into a Roth IRA at 3 percent of gross pay with thirty days to opt out, and any savings rate escalation is elected by the employee rather than applied automatically.
A 401(k) is the better answer when the IRA contribution ceiling is the binding constraint, or when one plan needs to satisfy several state mandates at once.

Frequently Asked Questions

Who has to register for New York Secure Choice?

A private employer in New York meets the definition when three things are true at once. Section 1300 of the General Business Law covers a business that employed at least ten employees in the state at all times during the previous calendar year, has been in business for at least two years, and has not offered a qualified retirement plan in the preceding two years. Nonprofits are included; the statute applies whether the enterprise is for profit or not. An employee for this purpose is anyone aged eighteen or older who earned wages working for the employer in New York during the calendar year, with no hours threshold and no tenure threshold, so part-time and seasonal staff count the same as everybody else.

What are the New York Secure Choice registration deadlines?

New York staged them by employer size and all of them have now passed. Program materials set March 18, 2026 for employers with thirty or more employees, May 15, 2026 for those with at least fifteen and fewer than thirty, and July 15, 2026 for those with at least ten and fewer than fifteen. A covered employer that has not registered or certified an exemption is late rather than early, and the correct response is to register now instead of waiting for a further notice. The program notifies employers it believes are covered and sends a unique access code, which you use with your federal employer identification number to complete either action in the portal.

Does the employer have to contribute to the state program?

No, and the program does not permit it. Every dollar that reaches a New York Secure Choice account is the employee’s own wages, withheld at a rate the employee controls. There is no match, no nonelective contribution, and no cost to you beyond the payroll work of running the deduction and remitting it on time. This is the structural difference between the state program and a 401(k). It also explains why the program cannot function as a recruiting benefit in the way a matched plan does: from the employee point of view you have provided access to an IRA rather than money.

What is the default contribution rate and can employees opt out?

The default is 3 percent of gross pay into a Roth IRA, and yes, employees can opt out at any time. Section 1310 sets that default for anyone who does not make an election, and deductions cannot begin until the thirtieth day after an employee has been enrolled, which gives every person a window to decline or customize before money moves. Savers can change the rate later, elect a 1 percent annual increase that applies each January up to a ceiling of 10 percent, or stop contributing entirely. Someone who opts out is asked again during an open enrollment period the program designates at least once a year.

What is the penalty for not complying with the New York retirement mandate?

New York has not published a penalty schedule. Section 1304 gives the Secure Choice Savings Program Board authority to determine employee rights and the enforcement of penalties, and the board has not turned that authority into a public dollar figure. That is a worse planning position than a known number rather than a better one, because it means the exposure cannot be budgeted. Other state programs indicate the usual shape: California applies a per employee fine that escalates the longer noncompliance continues after a final notice, under Government Code 100033. Separately, deducting employee money and failing to remit it on schedule is a wage handling problem in its own right.

How do I certify an exemption if I already have a retirement plan?

Through the same portal you would use to register, with the same access code and federal employer identification number. Section 1300 lists the plans that qualify: those under sections 401(a), 401(k), 403(a), 403(b), 408(k), 408(p), or 457(b) of the Internal Revenue Code, which in plain terms covers a 401(k), a 403(b), a SEP IRA, and a SIMPLE IRA. Exemption is a status you claim rather than one the state infers, so employers who ignore the notice because they know they have a plan simply keep receiving notices. One prohibition applies in the other direction: Section 1310 says an employer offering a qualified plan shall not terminate it in order to participate in the program.

Is a 401(k) better than the state program?

It is better if you need the contribution ceiling, and unnecessary if you do not. The state program caps savers at the federal IRA limit, which the IRS set at $7,500 for 2026, or $8,600 from age 50, and phases higher earners out of Roth contributions on income. A 401(k) allows an employee to defer $24,500 in 2026 with further catch-up amounts from age 50, and it lets you add an employer contribution. What you take on is a plan document, a recordkeeper, fiduciary responsibility for the investment lineup, nondiscrimination testing, and in most cases an annual Form 5500. For an owner who wants to save seriously, that trade usually pays.

Ready to transform your onboarding?

7-day free trial No credit card required
Start Your Free Trial