Which States Have Mandatory Retirement Plans?

Most small business owners find out about their state retirement mandate the same way: a letter arrives with an access code and a deadline, and it looks enough like junk mail to sit unopened for a month. The obligation was already live. The letter was the second or third notice.

The reason this catches people is that it is a genuinely new category of employment law. There is no federal requirement to offer a retirement plan, so for decades the correct answer to do I have to offer retirement benefits was simply no. That answer is now wrong in fifteen states, and the thresholds have been dropping fast enough that businesses which were safely exempt two years ago are covered today.

This guide covers which states have active mandates, the thresholds and deadlines, what the penalties actually look like when assessed per employee, and the part most guides skip entirely: what happens when your team is spread across several states. I build FirstHR for companies with five to fifty employees, which is precisely the band these mandates now target. This is general information rather than legal advice, and because these programs change constantly, verify anything here against your state's official program site before acting.

The Short Answer

Fifteen states currently have auto-IRA programs open to all eligible employers, meaning the mandate is live and enforceable today: California, Colorado, Connecticut, Delaware, Illinois, Maine, Maryland, Minnesota, Nevada, New Jersey, New York, Oregon, Rhode Island, Vermont, and Virginia.

Several more states have enacted programs that have not yet opened, a few offer voluntary programs with no mandate attached, and one city has approved its own. Sorting them properly matters, because a state appearing on a list of programs is not the same as a state where you owe something. For context on where this sits among everything you are already required to provide, the statutory benefits guide covers the mandatory baseline.

Per Georgetown University's Center for Retirement Initiatives, 22 states and 3 cities have now enacted programs, with 17 of the state programs fully open to eligible employers and workers. That tracker is the single best place to check current status, and it is updated far more often than any vendor guide.

What State-Sponsored Retirement Plans Actually Are

A state-sponsored retirement plan is a savings program created by a state for private-sector workers whose employers do not offer one, and in almost every case the mechanism is an auto-IRA rather than anything resembling a 401(k).

The design is deliberate. By keeping the employer out of contributions, investment selection, and plan sponsorship, these programs are structured to sit outside the federal framework that governs employer-sponsored plans. That is why your obligations are administrative rather than fiduciary, and why the burden on you is genuinely lighter than sponsoring a plan yourself.

Mechanically, most programs share the same shape: automatic enrollment after a short waiting window, a default contribution rate in the low single digits as a percentage of pay, automatic annual escalation up to a ceiling, Roth treatment by default, and the ability for employees to change their rate or opt out entirely. The details differ by state, and the differences are meaningful enough that you should read your own state's rules rather than a summary.

Which States Have Mandates, and What Each Requires

The states below have live mandates. The threshold column is the point at which a business becomes covered, and it is the number that has moved most in recent years.

Two patterns are worth extracting from that table. First, thresholds only move downward. Every amendment in recent years has expanded coverage rather than narrowing it, which means the correct assumption for a growing business is that you will eventually be covered even if you are not today. Second, most states now run an annual onboarding wave for newly eligible employers rather than a one-time rollout, so crossing the threshold mid-year creates a deadline you have to know about.

How Deadlines Actually Work

The registration deadline structure confuses employers because it works differently depending on when you became covered, and the difference determines whether you have a date or a rolling obligation.

If your state ran launch waves and they are complete, which is the case in California, Connecticut, Maine, Maryland, Nevada, New Jersey, Oregon, and Virginia, there is no future date to wait for. The obligation is already live for any covered employer, and a business that never registered is not early, it is late.

If your state is mid-rollout, which currently applies to Minnesota and Rhode Island, your deadline depends on your headcount band. Minnesota runs five waves from June 2026 through June 2028, with the largest employers first. Rhode Island runs three waves from October 2026 through October 2028. Larger employers in these states face nearer deadlines than smaller ones.

If you become newly eligible, either by growing past the threshold or by starting a business, most states assign you to an annual cycle. Colorado uses May 15, Oregon uses July 31, and others have their own recurring date. This is the case most likely to be missed, because it fires from your own growth rather than from a program milestone.

Who Is Covered, and Who Is Exempt

Three conditions have to be true simultaneously for a mandate to apply to you, and failing any one of them means you are outside it.

First, you have employees working in a mandate state. Second, you meet that state's employee threshold, counted by that state's own rule, which may or may not include part-time staff depending on the state. Third, you do not already offer a qualifying retirement plan.

That third condition is the exemption, and it is broader than most owners realize. A 401(k), 403(b), SIMPLE IRA, SEP IRA, or a pooled employer plan generally satisfies it. You do not need an expensive or elaborate plan to be exempt; you need a qualifying one. Several states also add their own conditions, such as Illinois and Colorado requiring that a business have been operating for at least two years before the mandate attaches.

Being new is worth a specific note, because the mandate can attach earlier than expected. Colorado and Illinois require two years of operation before coverage begins, but several states have no such grace period, so a business hiring its first employee in one of those states can be covered almost immediately. Worth being explicit about what else does not exempt you: having a plan you are thinking about setting up, offering benefits other than retirement, being small, or having employees who would all opt out anyway. None of those are exemptions, and the last one in particular trips up employers who reason that participation would be near zero so registration is pointless. The obligation attaches to the employer regardless of employee behavior.

The Remote Workforce Problem

This is the gap in nearly every guide on this subject, and it is the one that produces the most expensive surprises at small companies.

These mandates generally follow the employee's work location, not the employer's state of incorporation or the location of headquarters. For a business with everyone in one office, that distinction never surfaces. For a business that hired remotely, it means your compliance map has nothing to do with where you think your company is.

The headcount question compounds it. Each state counts employees under its own rule, and it is not always obvious whether the count is your total workforce or only your employees in that state. Getting this wrong in either direction has consequences: assume you are under the threshold and you miss a registration, assume you are over it everywhere and you do unnecessary work.

The resolution most distributed companies land on is a single qualifying plan covering the whole team. One 401(k) or SIMPLE IRA generally exempts you in every state at once, which converts an ongoing multi-state tracking problem into a single setup decision. That is a stronger argument for the private-plan route than any of the tax points usually cited, and it gets stronger with every state you add. The wider set of obligations that follow employees across state lines is covered in the remote work guide.

What the Employer Actually Does

The employer role in these programs is narrower than the word mandate suggests, and understanding the boundary is genuinely reassuring once you see it laid out.

The right column is the important one. You are not taking on plan sponsorship, you are not liable for investment performance, and you are not expected to advise anyone about whether to save. That deliberate narrowness is what keeps these programs outside the federal plan framework, and it means the ongoing burden is a payroll task rather than a governance responsibility.

Operationally, the recurring work looks like any other payroll deduction: withhold the elected percentage, remit it on schedule, and keep the roster current as people join and leave. If you already run payroll deductions for anything else, this slots into the same process rather than creating a new one, and the wider set of obligations attached to running payroll correctly sits in the payroll compliance guide.

Penalties for Noncompliance

Penalties vary by state, and the structural feature that matters more than any individual number is that they are assessed per eligible employee. That is what turns a forgotten letter into a serious number at a company with fifteen people.

California's figures come from its own program: per the CalSavers FAQ, an employer that without good cause fails to allow eligible employees to participate faces $250 per eligible employee if noncompliance extends 90 days or more after notice, and an additional $500 per eligible employee at 180 days or more. Illinois enforcement runs through the state revenue department rather than the program itself, which is worth knowing because it changes which agency the assessment arrives from.

State Program or Your Own 401(k)?

Every covered employer faces the same fork: enroll in the state program, or sponsor a qualifying plan and exempt yourself. Both satisfy the mandate. They are very different products.

The contribution ceiling is where the decision usually turns for owner-operators. Per the IRS, the 401(k) employee deferral limit rose to $24,500 for 2026 while the IRA limit rose to $7,500. If the founder wants to shelter meaningfully more than the IRA limit, the state program cannot do it and a private plan can, and that single fact decides the question for a lot of profitable small businesses.

Against that, the state program is genuinely the better answer for a business that cannot fund a match, does not want the administrative surface of sponsoring a plan, and operates in one state. It is not a consolation prize. It is a reasonable choice that delivers a real benefit at close to zero employer cost, and the small business employee benefits guide puts it in context alongside everything else you might offer.

How the Exemption Works in Practice

Having a qualifying plan exempts you from the mandate, but in most states it does not exempt you from telling the state that, and skipping that step is why compliant employers keep receiving notices.

The typical process: the state identifies you as a covered employer from your payroll tax filings, sends a notice with an access code, and expects you either to register or to log in and certify your exemption. Certifying takes a few minutes and generally requires the access code from the notice. Do nothing and you look identical to a noncompliant employer in the state's records, because from their side you are indistinguishable until you say otherwise.

Two operational points, and both are the kind of thing an HR audit is designed to surface. Exemption certification is frequently an annual step rather than a permanent one, so expect to repeat it. And if you terminate your plan, your exemption ends with it, which means the mandate reattaches at whatever the current threshold is rather than the one that applied when you first looked.

A Twenty-Minute Compliance Path

For a business with no HR person, here is the whole thing compressed into one sitting. It genuinely does not take longer than this for a straightforward case.

The most common outcome of this exercise is discovering that you are exempt and simply need to say so, which takes minutes. The second most common is discovering one state you had not thought about because of a single remote hire. Both are far better found now than found in a notice.

What Is Changing

This area moves faster than almost anything else in small business compliance, so a page like this is accurate on the day it is written and drifts from there. Three trends are worth tracking.

Thresholds keep falling. The direction of travel is unambiguous: states that started at 25 employees have moved to 10 or 5, and California now reaches employers with a single employee. Plan on eventually being covered rather than on remaining exempt.

New programs keep launching. Utah and Mississippi enacted programs in 2026, Philadelphia became the third city program in May 2026, and Hawaii and Washington have programs enacted but not yet open. Employers in those states have time, not immunity.

States are partnering to share infrastructure. Several programs now run on shared administration through multi-state arrangements, which has shortened launch timelines considerably. Practically, this means new states go from enacted to live faster than the early programs did, so the gap between hearing about a program and owing something under it is shrinking.

Given all that, treat any state-by-state summary, including this one, as a starting point rather than a final answer. The Georgetown tracker linked above is updated continuously, and each state program publishes its own current thresholds and deadlines. The broader picture of what employment law requires of you at this size is in the human resource laws guide.

Quick Self-Check

Six questions. Any uncertain answer is worth resolving this week rather than next quarter.

None of this needs an HR department. It needs a list of states, one lookup per state, and someone whose job it is to open the mail. The rest of the recurring benefits administration this sits inside is covered in the benefits administration guide, and the documentation obligations that come with sponsoring your own plan are in the summary plan description guide.

Frequently Asked Questions