FirstHR

New York Retirement Mandate: Secure Choice or a 401(k)

New York Secure Choice explained: who must register, the staged deadlines, how the state auto-IRA works, and when your own 401(k) is the better call.

TL;DR
New York Secure Choice requires private employers with at least ten New York employees, at least two years in business, and no qualified retirement plan to register and run payroll deductions into state-facilitated Roth IRAs. The default rate is 3 percent of gross pay. You never contribute, never sign a plan document, and are never the plan fiduciary.
Category
Updated
Oct
28
2026
Reading time
13min

A friend who runs a print shop outside Rochester forwarded me a letter from New York State with an access code printed on it and asked whether it was a scam. It was not. It was the state telling him that because he had never set up a retirement plan, he now had a registration deadline and a payroll job attached to it.

What surprised him was how little the state actually wanted. No contribution. No plan document. No investment decisions. What it wanted was a payroll deduction, taken from employees who did not opt out and remitted on time, and a roster kept up to date.

This covers what the New York retirement mandate requires of an employer with no plan of its own: who registers and when, what happens if you miss it, exactly how the auto-IRA behaves once it is running, and the case for skipping the state program and sponsoring a 401(k) instead.

I build the people and records tooling for businesses without an HR department at FirstHR, and FirstHR is an onboarding and HR platform rather than a payroll or retirement provider. This is general information, not tax or legal advice.

My TeamPam BeeslyFull-timeJim HalpertFull-timeRyan HowardPart-time
Core HR
Your team's records in one place
A profile and documents for each person, and the org chart built from them.
Start free trial7-day free trial, no credit card

What New York Secure Choice Is

New York Secure Choice is the state retirement savings program for private-sector employees whose employer offers no plan at all, built on individual retirement accounts (IRAs) that the employees own. If you are covered, you register, you deduct, and you remit. That is the entire scope of what the state asks of you.

Definition
New York Secure Choice Savings Program
A state-facilitated automatic enrollment payroll deduction Roth IRA program created by Article 43 of the New York General Business Law and overseen by the New York Secure Choice Savings Program Board, chaired by the Commissioner of Taxation and Finance. Covered employers register, distribute the state informational materials, and remit employee payroll deductions. The employer makes no contribution, adopts no plan document, and is not a fiduciary over the program.

Section 1301 describes it in one line: a retirement savings program in the form of an automatic enrollment payroll deduction IRA. The board may delegate development and implementation to the Department of Taxation and Finance, and it did so by resolution in January 2022, which is why the program sits with the tax department rather than a labor agency.

The design point that matters most for an employer sits in Section 1313. A participating employer is not establishing or maintaining the payroll deduction IRA, is not a fiduciary over the program, and bears no responsibility for its administration, investment, or investment performance (New York General Business Law Article 43). Hold on to that sentence. It is the difference between this and running a plan.

Who Has to Register

Three conditions have to be true at the same time. Section 1300 defines a covered employer as one that employed at least ten employees in New York at all times during the previous calendar year, has been in business at least two years, and has not offered a qualified retirement plan in the preceding two years.

10
employees in New York throughout the previous calendar year, the coverage test
2
years in business before the mandate can reach you
3%
of gross pay, the default employee contribution rate
30
days an employee has to opt out before any deduction begins

All three conditions do real work. A business that crossed the headcount threshold in June is not covered on that basis, because the statutory test looks at the whole of the previous calendar year rather than a snapshot. A company in its first eighteen months sits outside the mandate no matter how many people it employs.

An employee, for this purpose, is anybody aged eighteen or older who earned wages working for the employer in New York during the calendar year. There is no hours test and no tenure test, which is why the question of whether part-time staff count has a dull answer here: they do.

The statute applies whether the enterprise is for profit or not, so nonprofits are inside it on the same terms. Treat the mandate as one of the statutory obligations that attaches to payroll rather than as a benefits decision you get to weigh.

The Registration Deadlines

New York staged the original registration deadlines by employer size, and all three have now passed. According to the New York Secure Choice employer help center (September 2026), newly eligible employers, meaning businesses that became eligible after those deadlines, must register by November 18, 2026.

Employer size bandDeadline to register or certifyCurrent status
Thirty or more employeesMarch 18, 2026Passed
At least fifteen employees, fewer than thirtyMay 15, 2026Passed
At least ten employees, fewer than fifteenJuly 15, 2026Passed
Newly eligible employersNovember 18, 2026Upcoming

The New York Secure Choice Savings Program Board notifies employers it believes are covered when it is time to register. That notice carries a unique access code, which you use together with your federal employer identification number (EIN) to complete registration or certify an exemption on the program site.

If the notice went to an old address or straight to a previous bookkeeper, request a replacement code rather than waiting for a second letter. The program resends the code by email, and nothing about the obligation pauses while the envelope is missing.

If you were due under the original deadlines and have not registered or certified an exemption, you are late rather than early, with no runway left. Register now, start the enrollment clock, and treat the retirement mandate as one line on a longer list of New York employer requirements rather than as a project with a future start date.

Everyone in one list, with who they report to
Position, department, type, manager and status for each person. People who have left move to a separate list.

Certifying Out If You Already Have a Plan

If you already sponsor a qualified retirement plan you are exempt, but exemption is a status you claim rather than one the state works out for you. Section 1300 lists what counts: plans qualified under sections 401(a), 401(k), 403(a), 403(b), 408(k), 408(p), or 457(b) of the Internal Revenue Code.

In plain terms that is a 401(k), a 403(b), a SEP IRA under 408(k), and a SIMPLE IRA under 408(p). It does not include an informal payroll deduction arrangement you set up with a local advisor, and it certainly does not include an intention to start a plan next year.

The certification runs through the same portal as registration, with the same access code and EIN. Employers who toss the notice because they know they have a plan miss what it is for: the program sends its notices to employers it believes are covered, and only a certification puts the exemption on record.

Warning
You Cannot Drop a Plan to Join the Program
Section 1310 of the General Business Law is explicit: an employer that offers a qualified retirement plan shall not terminate that plan for the purposes of participating in the program. If your 401(k) suddenly looks expensive next to a state IRA that costs you nothing, that exit is not available on those terms. Terminating a plan has its own rules and its own consequences, and doing it in order to land in the state program is the single reason the statute rules out by name.

What Missing the Deadline Costs

New York has not published a penalty schedule. Section 1304 gives the Secure Choice Savings Program Board authority to determine employee rights and the enforcement of penalties, and the board has not yet converted that authority into a public dollar figure.

That does not mean there is no penalty. It means the amount is not knowable in advance, and an unknown penalty is harder to plan around than a published one.

Other states show the shape enforcement usually takes. California applies a fine per eligible employee that escalates the longer noncompliance continues after a final notice, under California Government Code 100033, which turns a filing failure into a number that scales with headcount. Read the New York silence as unfinished rather than lenient.

The second exposure is quieter and far more certain. Employee contributions belong to the employee from the moment they are withheld. Deducting and then failing to remit on schedule is a wage handling failure, and it sits alongside the rest of your payroll deduction obligations rather than in some separate program-only category.

How the Auto-IRA Actually Works

Once you register, the program does the enrolling. Employees you add to the roster are automatically enrolled into a Roth IRA in their own name at a default rate of 3 percent of gross pay, and they get thirty days to opt out or change that before a single dollar moves.

The account is a Roth IRA
Article 43 defines IRA as a Roth IRA, so contributions come out of pay after tax and the account belongs to the employee from day one. It travels with them when they leave you.
The default rate is 3 percent of gross pay
An employee who never fills anything in contributes 3 percent. Anyone can move that to as little as 1 percent or as high as their pay and the federal IRA limits allow.
Thirty days before any money moves
Deductions cannot begin until the thirtieth day after enrollment. That window is when the employee opts out, picks a different rate, or chooses investments, and the program talks to them directly.
Escalation is opt in, not automatic
An employee can elect a 1 percent annual increase that applies each January until the rate reaches 10 percent. Somebody who does nothing stays at 3 percent for as long as they work for you.
Source: New York General Business Law Article 43 and New York Secure Choice program materials. The opt in escalation is the detail most worth checking twice, because several other state programs escalate savers automatically.

The escalation detail is where New York differs from several other state programs, and it is the easiest thing on this page to get backwards. Savings rate increases here are elected by the employee, not applied automatically. Someone who ignores every message from the program stays at 3 percent indefinitely.

Because the account is a Roth IRA rather than a workplace plan, federal IRA rules govern the ceiling. The limit is $7,500 for 2026 across every IRA an individual holds, or $8,600 from age 50, and higher earners are phased out of Roth contributions entirely on modified adjusted gross income (Internal Revenue Service).

Section 1310 adds two timing rules that matter operationally. Deductions cannot begin until the thirtieth day after an employee has been enrolled. And people who opt out are not gone for good: the program must designate an open enrollment period at least once a year in which previous decliners can enroll, and it lets savers re-enroll at any time.

Your Job Is Payroll, Not Plan Sponsorship

Your obligations are administrative and they are short: register, hand out the state materials, keep the roster current, deduct at the rate each employee chose, and remit on time. Nothing on that list involves money of yours or a judgment call about investments.

1
Register with the access code
Set up the account with your EIN and the code the program sent, answer the questions about your payroll process, and invite whoever actually runs payroll to help. That payroll representative can be a teammate, your bookkeeper, or your payroll provider.
2
Distribute the state informational materials
Section 1309 requires existing employees to receive them at least one month before you begin facilitating access, and new employees at the time of hiring. The materials include the opt-out form and the disclosure of what the program does.
3
Add employees and wait out the window
The program contacts them directly to explain the options. They have thirty days to opt out, change the savings rate, or pick investments. You do not chase them and you do not advise them.
4
Record the choices and start deductions
At the end of the window you record what each person selected and set the deduction accordingly. From here it behaves like any other post-tax payroll deduction.
5
Remit on the statutory schedule
Section 1311 requires contributions to reach the program on or before the last day of the month following the month in which the pay would otherwise have been made, or by a later deadline the board sets, which cannot fall after the due date for depositing the related withheld income tax.
6
Maintain the roster
Add new hires, mark leavers as terminated, and update rate changes when employees make them. This is the only permanent obligation the program creates, and it is the one that quietly slips.

Two things carry the whole obligation: knowing where each person sits in the thirty day window, and knowing that last month's money went out on time. Both fit in one file.

Secure Choice Roster and Remittance Log
ABCDEFGHI
1EmployeeHire dateState materials givenAdded to programWindow ends (30th day)Election recordedRate %Deduction startsStatus
2
3
4
5
6
7
8NoteElection: opt out, default rate, custom rate, or no response.
9NoteNo deduction may begin before the thirtieth day after the employee is enrolled.
10NoteSomebody who makes no election contributes at the default rate of 3 percent of gross pay.
11NoteRate increases are elected by the employee. Nothing on this sheet escalates on its own.
12NoteStatus: active, opted out, rate changed, terminated. Mark leavers the week they leave.
13NoteNew employees receive the state materials at the time of hiring, so add the row at onboarding.
You are not a fiduciary
Section 1313 states it directly: a participating employer is not establishing or maintaining the payroll deduction IRA, is not a fiduciary over the program, and bears no responsibility for its administration, investment, or investment performance.
You never contribute
There is no employer contribution and no match. The program does not permit one. Every dollar remitted is the employee’s own wages, withheld at a rate the employee controls.
There is no plan document and no annual filing
You do not adopt a plan, you do not name a trustee, and there is no annual report to sign. Registration, a roster, and a remittance schedule are the whole of it.
This is the whole trade. The state took the plan sponsor role, and left you the payroll job.

The federal reason this stays off your books is not the long-standing payroll deduction IRA safe harbor. That 1975 rule keeps an IRA arrangement outside ERISA, the federal law that sets fiduciary and reporting duties for employer plans, only where the employer contributes nothing and participation is completely voluntary (29 CFR 2510.3-2).

The Department of Labor said in 2016 that automatic enrollment fails that test even with an opt-out (Federal Register). What keeps a state program outside ERISA is that the state, not the employer, establishes and maintains it.

The Ninth Circuit held exactly that about California's program in 2021 (Howard Jarvis Taxpayers Association v. California Secure Choice), and Section 1313 writes the same point into New York law.

That is why the state program produces no Form 5500 and why the duties that come with ERISA coverage never attach to you. It is also why you should not answer employee questions about which investment option to choose. Point them at the program and stay out of it.

Departments
Dwight SchruteSales3 people
Darryl PhilbinWarehouse1 person
Kelly KapoorCustomer Service1 person
Core HR
Who works here and who does what
Profiles, departments and an org chart, with every change kept on record.

Sponsoring Your Own 401(k) Instead

The alternative to registering is to become a plan sponsor, and the honest reason to do it is the ceiling. A 401(k) lets an employee defer $24,500 in 2026, with a further $8,000 from age 50 and $11,250 for ages 60 through 63, against $7,500 in an IRA.

For an owner who wants to save seriously, that gap is the whole argument. The state program caps you at the IRA limit and phases you out of Roth contributions above an income threshold, so the people with the most to save get the least out of it. A plan of your own does neither of those things.

What you take on in exchange is real, and it is not just cost: a plan document, a recordkeeper, fiduciary responsibility for the investment lineup, an annual filing in most cases, and nondiscrimination testing that a small business with low participation fails more often than it expects.

Two things soften that. A safe harbor design requires an employer contribution, fully vested when made in the traditional version, and in return you skip the annual nondiscrimination tests on deferrals and matching contributions.

SECURE 2.0 also raised the startup tax credit to 100 percent of eligible costs for employers with 50 or fewer employees who received at least $5,000 in pay, up to $5,000 a year for three years (Internal Revenue Service).

Which One Fits Your Business

Register for the state program if your goal is compliance at zero employer cost. Sponsor a 401(k) if you or your senior people want to save beyond the IRA limit, or if you want the plan to do recruiting work rather than only satisfy a statute.

QuestionNew York Secure ChoiceYour own 401(k)
Employer contributionNone permittedOptional, or required under a safe harbor design
Annual saver limitIRA limit: $7,500 for 2026, $8,600 from age 50$24,500 for 2026 plus catch-up amounts
Income limits on the saverRoth phase-out applies on modified AGINo income phase-out on deferrals
Who is the fiduciaryNot the employerThe employer
Plan document and annual filingNeitherPlan document, and Form 5500 in most cases
Nondiscrimination testingNoneYes, unless a safe harbor design applies
Direct cost to the employerPayroll administration onlyProvider fees, plus any contribution
Value as a hiring argumentAccess to an IRAA funded benefit employees compare across offers

Nothing locks you in. Section 1310 preserves the point explicitly: employers retain the option at all times to set up any type of employer-sponsored retirement plan. Registering now and sponsoring a plan later is a normal sequence, not a reversal.

The order I would suggest is unglamorous. Get compliant first, because the original deadlines have already gone and the exposure is running for anyone who missed them. Then decide about a plan on its own merits, with the contribution ceiling and the recruiting argument as the two questions that actually settle it.

Employees Who Work Outside New York

The mandate follows where the work happens, not where your office sits. The statutory test counts employees who earned wages working for you in New York, so a distributed team can put you inside one state mandate and outside another at the same time.

That is the position most growing companies reach without noticing, because the state programs run on separate registers, separate portals, and separate deadlines. Each one has to be handled on its own terms, and none of them tells you about the others.

Sponsoring a single 401(k) is the one move that answers all of them at once, since a qualified plan exempts you everywhere rather than state by state. That is an argument for a plan that has nothing to do with contribution limits and everything to do with not running a separate registration for each state program.

Whichever route you take, the mandate interacts with the rest of your multi-state payroll work, because the deduction has to be configured per employee in the right jurisdiction and remitted to the right program on the right schedule.

Where Employers Get This Wrong

Employers get this wrong in five ways, and the first is the one I would rule out before any of the others.

The first is assuming the notice is junk mail. The letter carries the access code you need, and treating it as marketing costs you the easy path to registering.

The second is having a plan and never certifying. Exemption is claimed, not inferred, and until you certify, the program has no record of the exemption, no matter how good the plan is.

The third is believing the savings rate escalates on its own. In New York it does not. If you tell employees their contribution will rise automatically, you have told them something untrue about their own pay.

The fourth is advising employees on investment options, and it is the one that converts a payroll job into a liability. The statute keeps you out of the fiduciary role, and answering that question is how employers volunteer their way back into it.

The fifth is letting the roster drift. New hires who never get added and leavers who never get marked terminated turn a clean deduction file into a monthly reconciliation exercise nobody has time for.

What worked for me
The thing I would have told my friend in Rochester earlier is that the decision and the compliance are two separate jobs and they run on different clocks. He spent six weeks comparing the state program against a real plan, which was a reasonable thing to want to do, while the registration deadline sat unmoved in the background. Registering costs nothing and forecloses nothing. Get that done in an afternoon, then take as long as you like arguing about whether a 401(k) is worth it, because that question deserves proper thought and the deadline does not care that you are giving it any.
Nick AnisimovNick Anisimov, FirstHR founder
Invite your team to FirstHR
4.7 on G2
Ryan HowardActive
Jim HalpertOn Leave
Key takeaways
1New York Secure Choice covers private employers with at least ten New York employees throughout the previous calendar year, at least two years in business, and no qualified retirement plan.
2The three staged registration deadlines have all passed, and newly eligible employers must register by November 18, 2026.
3Employers who already sponsor a qualified plan are exempt, and the program asks those it notifies to certify the exemption in the portal rather than inferring it.
4The employer never contributes, never signs a plan document, and is never a fiduciary over the program under Section 1313 of the General Business Law.
5Employees are auto-enrolled into a Roth IRA at 3 percent of gross pay with thirty days to opt out, and any savings rate escalation is elected by the employee rather than applied automatically.
6A 401(k) is the better answer when the IRA contribution ceiling is the binding constraint, or when one plan needs to satisfy several state mandates at once.

Frequently Asked Questions

Who has to register for New York Secure Choice?

A New York business has to register when three tests are all met. First, it had ten or more employees working in the state throughout the previous calendar year. Second, it has been in business for two years or longer. Third, it has not offered a qualified retirement plan during the past two years. These tests come from Section 1300 of the General Business Law. Nonprofits are not carved out, because the statute reaches an enterprise whether or not it operates for profit. The headcount includes anyone aged eighteen or older who was paid wages by the employer for work done in New York during the calendar year, and there is no minimum number of hours or length of service, so part-time and seasonal workers are counted just like full-time staff.

What are the New York Secure Choice registration deadlines?

All three of the original deadlines have passed, and each one depended on how many people you employ. Program materials gave March 18, 2026 to employers with thirty or more employees, May 15, 2026 to those with at least fifteen but fewer than thirty, and July 15, 2026 to those with at least ten but fewer than fifteen. Employers that became eligible after those waves get a later date, and the program gives newly eligible employers until November 18, 2026. If you belong to one of the original groups and have neither registered nor certified an exemption, you are overdue, so act now instead of waiting for another notice. The program notifies employers it believes are covered and sends a unique access code, which you enter together with your federal employer identification number in the program portal to register or to certify an exemption.

Does the employer have to contribute to the state program?

No. The program does not allow employer contributions at all, so there is no match and no nonelective contribution. Money in a New York Secure Choice account comes only from the employee’s own paycheck, at a rate the employee picks. Your cost is the payroll work: running the deduction and sending it to the program on time. That is the main structural difference from a 401(k), where you can add employer money. It also means the state program is a weaker recruiting tool than a matched plan, because what you are offering employees is access to an IRA rather than extra compensation.

What is the default contribution rate and can employees opt out?

The default is 3 percent of gross pay into a Roth IRA, and yes, employees can opt out at any time. Under Section 1310, anyone who makes no election is enrolled at that rate. Nothing can be withheld until the thirtieth day after enrollment, so every employee has a window to decline or customize before any money moves. Later, savers can raise or lower the rate, elect a 1 percent increase each January until they reach 10 percent, or stop contributing altogether. Opting out is not permanent either: a saver can re-enroll whenever they choose, and the statute guarantees an open enrollment window at least once a year for people who declined earlier.

What is the penalty for not complying with the New York retirement mandate?

New York has not published a penalty schedule. Section 1304 of the General Business Law gives the Secure Choice Savings Program Board authority over employee rights and the enforcement of penalties, but the board has not announced a public dollar amount. An unknown penalty is harder to budget for than a published one, so do not read the silence as leniency. California shows what enforcement can look like: its program fines employers per employee, with the amount rising the longer noncompliance continues after a final notice, under Government Code 100033. A separate problem is employee money. Withholding it and then failing to remit it on schedule is a wage handling failure in its own right.

How do I certify an exemption if I already have a retirement plan?

Use the same portal as registration, entering the same access code and federal employer identification number. A plan counts if it is qualified under section 401(a), 401(k), 403(a), 403(b), 408(k), 408(p), or 457(b) of the Internal Revenue Code, as Section 1300 lists them. In plain terms that covers a 401(k), a 403(b), a SEP IRA, or a SIMPLE IRA. The state does not work out your exemption for you, so a plan you have but never certify leaves the program with no record of it. One limit applies on the other side: Section 1310 bars an employer that offers a qualified plan from terminating it in order to take part in the state program.

Is a 401(k) better than the state program?

A 401(k) is better when you need room to save, and unnecessary when you do not. The state program stops at the federal IRA limit, which the IRS set at $7,500 for 2026 ($8,600 from age 50), and it phases higher earners out of Roth contributions based on income. A 401(k) allows an employee to defer $24,500 in 2026, with additional catch-up amounts from age 50, and lets you add an employer contribution. In exchange you take on a plan document, a recordkeeper, fiduciary duty over the investment lineup, nondiscrimination testing, and in most cases an annual Form 5500 filing. If you are an owner who wants to save seriously, that trade tends to pay off.

Make HR the easy part of running your business

Onboarding, e-signatures, training and core HR in one place. Up and running in 5 minutes.

  • 7-day free trial
  • No credit card required
  • Cancel anytime
4.7 on G2300+ companies trust FirstHR