HR Best Practices: The 7 Practices Every Business Needs
HR best practices explained: the 7 practices every business needs, how they change by company size, and how to implement them without a dedicated HR team.
HR Best Practices
The 7 practices that matter most, and how to implement them at any company size
HR best practices are the standardized approaches to managing people that consistently produce better outcomes. The problem with most guides on this topic is that they are written for companies with HR departments. They describe practices like "implement a 360-degree feedback system" or "build an employer value proposition framework" that assume you have a dedicated HR team to run them.
This guide takes a different approach. It covers the 7 human resources best practices that matter most for businesses building their HR foundation, with specific guidance for companies that do not have a dedicated HR person. These are the practices that prevent the most common HR failures: inconsistent onboarding, missing compliance documents, scattered employee records, and the general chaos that emerges when a growing company treats HR as something to figure out later.
What Are HR Best Practices?
The academic origin of the concept traces to Jeffrey Pfeffer's research identifying practices that correlated with organizational performance: employment security, selective hiring, self-managed teams, high compensation contingent on performance, extensive training, reduced status distinctions, and information sharing. These principles remain valid, but they were observed in large organizations with dedicated HR functions.
For a company with 10 to 50 employees, the practical question is different. It is not "which sophisticated practices maximize organizational performance?" It is "which practices prevent the most damage when no one is dedicated to HR full-time?" The answer is more operational than strategic: make onboarding consistent, keep documents signed and organized, track compliance deadlines, and give employees a way to see the org chart and update their own information.
The 7 HR Best Practices That Matter Most
These seven practices are listed in priority order. If you can only implement three, start with the first three. They cover the highest-risk compliance areas and the highest-impact retention levers.
Notice what is not on this list: performance management systems, 360-degree feedback, employee engagement surveys, compensation benchmarking tools, or applicant tracking systems. Those are valuable practices for companies with 50+ employees and dedicated HR staff. For a business under 50, they are premature. Get the seven foundations right first. Add sophistication as you grow.
Practice 1: Structured Onboarding
Structured onboarding means every new hire goes through the same process: compliance paperwork completed on time, training assigned and tracked, check-ins scheduled at Day 7, 30, 60, and 90, and a clear set of expectations for their first three months. The structure does not need to be complex. It needs to be consistent.
Organizations with strong onboarding see 82% better new hire retention (Gallup). Research from the Work Institute shows that 20% of turnover occurs within the first 45 days. Structured onboarding directly addresses this: the difference between a new hire who stays and one who leaves in month two is almost always the quality of their first two weeks.
A platform like FirstHR automates the workflow: AI-generated onboarding plans, e-signature for compliance documents, task assignments with deadlines, and check-in reminders that fire automatically.
Practice 2: Clean Documentation
Every employee should have a complete file with signed documents: offer letter, I-9 (completed by end of Day 3), W-4, signed employee handbook acknowledgment, emergency contact form, and any state-required forms. These are not optional paperwork. They are legal requirements, and missing any of them creates exposure during audits, investigations, or litigation.
The most common gaps: I-9s completed late or with Section 2 missing, handbook acknowledgments that were emailed but never signed, W-4s from the hire date that were never updated, and emergency contacts that do not exist on file. An HR audit will surface these gaps.
Record Retention and File Separation: The Part Everyone Gets Wrong
Clean documentation has two halves. Collecting the documents is the half everyone knows about. Keeping them for the right length of time, in the right place, is the half that shows up in audits. Different laws set different clocks on the same employee, and the safe approach is to keep each record for the longest applicable period rather than trying to run separate schedules.
| Record | Minimum retention | Clock starts |
|---|---|---|
| Form I-9 | 3 years after date of hire, or 1 year after employment ends, whichever is later | Hire date and termination date, both |
| Payroll records: hours worked, wages paid, pay dates | 3 years under the FLSA | Date of the record |
| Records used to compute pay: time cards, schedules, wage rate tables | 2 years under the FLSA | Date of the record |
| Employment action records: applications, offers, promotions, demotions, terminations | 1 year under EEOC rules; 1 year from the termination date for involuntary separations | Date of the personnel action |
| FMLA records for covered employers | 3 years | Date of the leave or record |
| OSHA Forms 300, 300A and 301 | 5 years following the year the record covers | End of the covered calendar year |
| Employment tax records | At least 4 years after the tax is due or paid, whichever is later | Tax due or payment date |
| Benefit plan records supporting Form 5500 | 6 years under ERISA | Filing date |
Retention has one override worth knowing before you ever need it. Once a charge, lawsuit, audit or investigation is filed or reasonably anticipated, the ordinary schedule stops applying and you must preserve everything relevant until the matter is finally resolved. Routine deletion that happens after that point is a separate problem from whatever the original claim was about, and a harder one to explain.
Separation matters as much as duration. Three categories should never sit in the general personnel file. Medical information must be kept in a separate confidential file under the ADA, and that category is broader than most founders expect: it includes FMLA medical certifications, accommodation requests and supporting documentation, workers' compensation records, and anything from a health plan enrollment that discloses a condition. Genetic information, including family medical history, gets the same treatment under GINA. Form I-9s belong in their own file so that an immigration audit can be answered by producing exactly the requested records and nothing else. Investigation files should also stay separate from the personnel file of either party involved.
Both halves come down to one document you probably do not have: a written schedule naming each category of record, which file it belongs in, who may open it, and the date it becomes eligible to destroy. Keep it with the records rather than in your head, because the person who needs it during an audit or an inspection request may not be you. A fill-in tracker that computes each record type's destruction date, with the destruction log that goes beside it, is in the record retention guide; the register that stops deletion once a charge or lawsuit is open is in the file organization guide.
Practice 3: Single Source of Truth (HRIS)
A single source of truth means one place where every employee record lives: name, title, department, start date, manager, compensation, signed documents, training completion, and emergency contact. When someone asks "how many employees do we have in California?" or "did this person sign the updated handbook?", the answer should take seconds, not hours.
For companies under 10 employees, a spreadsheet works. Beyond 10, a dedicated HRIS prevents the errors, gaps, and version-control problems that spreadsheets create.
Practice 4: Clear Org Structure
Every employee should be able to see who reports to whom. This is not about creating bureaucracy. It is about answering three questions that new hires and current employees should never have to guess at: who is my manager, who do I go to for decisions, and how does my work connect to the rest of the team.
A visual org chart accomplishes this. It does not need to be complex. At a 15-person company, it is a single diagram showing the founder, 2 to 3 leads or managers, and everyone else. The value is in making it visible and keeping it current.
Practice 5: Employee Self-Service
Employee self-service means giving employees the ability to update their own information without going through the founder or office manager: home address changes, emergency contacts, tax withholding updates, and access to their own signed documents and training records. This reduces the administrative burden on whoever handles HR and gives employees ownership of their own data.
At a 25-person company, this eliminates dozens of routine requests per month. The founder does not need to be the intermediary for address changes. The employee logs in, updates their information, and the HRIS records the change.
Practice 6: Training and Development
Start with compliance training where your state requires it (anti-harassment training is mandatory in California, New York, Illinois, Connecticut, Delaware, Maine, and several other states). Add role-specific onboarding training for each position. Then, as you grow, add professional development opportunities that keep employees engaged and building skills.
Training does not require a learning management system or a dedicated L&D team. It requires the ability to assign training modules, track completion, and verify that required training was completed on time.
Which Training Is Actually Mandatory
The distinction that matters here is between training you should provide and training a state will fine you for skipping. Harassment prevention is the main mandated category, and the rules differ on three axes: which employers are covered, who has to be trained, and how often. The table below covers the states with the clearest standing requirements. Requirements change, several cities layer their own rules on top, and this is an area worth re-checking each year rather than assuming last year's answer holds.
| State | Covered employers | What is required |
|---|---|---|
| California | 5 or more employees | 2 hours for supervisors and 1 hour for all other employees, every 2 years, and within 6 months of hire or promotion |
| New York | All employers | Annual interactive training for every employee, using or exceeding the state model program |
| Illinois | All employers | Annual training for all employees, with supplemental requirements for restaurants and bars |
| Connecticut | 3 or more employees for all-employee training; smaller employers must train supervisors | 2 hours of training, generally within 6 months of hire, with periodic supplemental training |
| Maine | 15 or more employees | Training within one year of hire, with additional content for supervisors |
| Delaware | 50 or more employees | Interactive training for employees within one year of hire and every 2 years, with additional supervisor training |
Outside harassment prevention, mandatory training is driven by hazard rather than headcount. OSHA standards require training tied to what the work actually involves: hazard communication for anyone working with chemicals, bloodborne pathogens where exposure is reasonably anticipated, personal protective equipment, and emergency action plans. A software company has almost none of this. A restaurant, a clinic or a shop with a forklift has quite a lot of it, and the obligation applies from the first employee regardless of company size.
Whatever the source of the requirement, the practice is the same: assign, track and retain proof of completion. Training that happened but cannot be evidenced is, in an audit or a claim, indistinguishable from training that never happened.
Practice 7: Baseline Compliance
Baseline compliance means knowing which employment laws apply at your headcount, tracking the associated deadlines, and maintaining the required records. At its simplest: complete I-9s by Day 3, file state new hire reports within 20 days, post required labor law posters, retain records for the required periods, and know which new obligations activate at 15, 20, 50, and 100 employees.
Research from SHRM estimates the average cost of replacing one employee at over $4,700, which means compliance practices that prevent turnover-causing errors pay for themselves quickly.
Offboarding Done Cleanly
Offboarding is not an eighth practice. It is the tail end of practices 2 and 7, and it is where documentation and compliance get tested under time pressure, because most of the obligations trigger within days of the last conversation. A separation handled well takes about an hour of preparation. Handled badly, it produces a wage claim, an unemployment charge, and a former employee who tells everyone.
| Step | What it involves | Timing |
|---|---|---|
| Final pay | Wages owed and, depending on the state and your policy, accrued unused vacation or PTO. Some states require payment on the day of an involuntary separation; others allow the next regular payday, and several treat quits and discharges differently | Set by the employee's state, not your payroll calendar |
| COBRA notice | Notify the plan administrator of the qualifying event, which then issues the election notice; the former employee gets a 60-day election window | Employer notifies within 30 days; the administrator's election notice follows on its own clock |
| Unemployment claim response | Respond to the state notice with accurate, specific information about the separation | Within the state's deadline, typically measured in days; late or inadequate responses can cost you |
| Access and equipment | Revoke system access timed to the conversation, recover hardware, transfer file ownership and shared accounts | Same day |
| Records | Move the file to terminated status. Do not purge it; several retention clocks run from the termination date | Same week |
| Exit interview | Ask what would have kept them and what the role was actually like. Take written notes and read them across separations for patterns | Within the last week, or by phone shortly after |
One rule deserves separate attention because it is easy to trip over. If you offer severance in exchange for a release of claims from an employee who is 40 or older, the Older Workers Benefit Protection Act sets the terms of a valid waiver: the employee must be given at least 21 days to consider the agreement, or 45 days when the separation is part of a group program, plus written disclosure of the job titles and ages of everyone selected and not selected in the decisional unit. The employee also has 7 days after signing to revoke, and the payment cannot be made before that window closes. Get any of those elements wrong and you have paid the severance while the release remains unenforceable.
What to Delegate (and Why That Is Fine)
| Function | Why It Is Not on the 7 List | What to Do Instead |
|---|---|---|
| Payroll | Requires tax calculations, direct deposit infrastructure, and regulatory filings that specialized providers handle better | Use a dedicated payroll provider |
| Benefits administration | Requires carrier negotiations, plan design, and enrollment management | Use a benefits broker or PEO for group rates |
| Performance management | Most companies under 25 employees do better with informal quarterly conversations than formal review systems | Hold quarterly 1-on-1s with written notes. Formalize when the team exceeds 25-30. |
| Recruiting / ATS | Job posting and applicant tracking tools are specialized and separate from core HR operations | Post on 2-3 job boards, use a simple spreadsheet or free ATS for tracking |
| Compensation benchmarking | Requires market data and analytical tools that are overkill for small teams | Check 2-3 salary data sources annually when hiring. Formal benchmarking starts at 50+ employees. |
Delegating these functions is not a failure. It is a prioritization. A founder who spends 10 hours setting up a performance management system when they have not completed I-9s for half their team is solving the wrong problem.
How HR Best Practices Change by Company Size
| Employees | Which Practices Apply | Who Handles HR | Key Addition |
|---|---|---|---|
| 1-10 | Practices 1-3 (onboarding, documentation, basic records) | Founder + HR software | Nothing formal beyond basics. Spreadsheet may suffice for HRIS. |
| 10-20 | All 7 practices | Founder or office manager + HR software | Move to dedicated HRIS. Begin formal compliance tracking. |
| 20-35 | All 7 + start formalizing performance conversations | First part-time or fractional HR person | OWBPA applies at 20. Quarterly 1-on-1s become important. |
| 35-50 | All 7 + formal performance process + compensation benchmarking | First full-time HR generalist | FMLA applies at 50. Benefits administration becomes complex. |
| 50+ | Full HR function: all 7 + payroll integration + benefits + performance + analytics | HR team (generalist + specialist) | EEO-1 reporting at 100. WARN Act at 100. Multiple compliance layers. |
The practices do not change. The depth and formality increase. Onboarding at 8 employees is a checklist the founder runs through. Onboarding at 40 employees is an automated workflow with training modules, check-in scheduling, and completion tracking. The underlying practice (structured, consistent onboarding for every hire) is the same.
A 90-Day Implementation Plan
Implementing the practices in order is the advice. Here is what that looks like on a calendar for a company that currently has none of them, assuming roughly four hours of work per week from one person. The sequence is deliberate: the first month fixes what has legal exposure attached, the second builds the systems, and the third makes them durable.
| Weeks | What to do | Done when |
|---|---|---|
| 1–2 | Audit what exists. Build one row per employee and check off offer letter, I-9, W-4 and state withholding form, handbook acknowledgment, emergency contact. Note every gap | You have a written list of every missing document, by person |
| 3–4 | Close the gaps you can close. Missing I-9s cannot be backdated: complete them now and note the actual date. Reissue handbook acknowledgments. Confirm posters are current for every state you employ in | No unexplained blanks in the audit grid |
| 5–6 | Write the onboarding checklist for the next hire: preboarding paperwork, day one, week one, and check-ins at 7, 30, 60 and 90 days. Use it on the next person who starts | A single document someone else could run without you |
| 7–8 | Move employee records into one system. Set retention and file separation as you migrate: medical and I-9 records go to their own locations, not the general file | Any employee question is answerable in under a minute |
| 9–10 | Publish the org chart and turn on self-service so employees update their own address, contacts and withholding | Routine record-change requests stop arriving in your inbox |
| 11–12 | Assign required training, set the annual compliance calendar with its recurring dates, and schedule a quarterly review of headcount against the compliance thresholds | The next twelve months of obligations are already on a calendar |
Two failure modes account for most abandoned attempts at this. The first is starting with the most interesting practice rather than the most exposed one, which usually means building an org chart while half the team has no I-9 on file. The second is treating the audit in weeks one and two as optional. It is the least satisfying part of the plan and the only part that tells you what you are actually dealing with; every subsequent step is scoped by what that grid turns up.
How to Be an Effective and Efficient HR Professional
Effectiveness and efficiency pull in different directions, and knowing which one a task needs is most of the job. Effectiveness is doing the work that matters: the I-9 that is missing, the manager conversation nobody wants to have. Efficiency is doing the repeatable work in less time, which is what automation is actually for.
Three habits carry a small HR function. Batch the recurring administration into fixed blocks instead of answering it as it arrives. Write each process down the first time you run it, so the second time is faster and someone else can run the third. Keep every obligation on a list with a date attached, because remembered deadlines are the ones that get missed.
The ceiling on efficiency is whatever only you can do. Judgment calls, investigations, and difficult conversations do not compress, so the aim is to buy time for them by making everything else routine. That is the case for systems in this article, and the skills side of the role sits in the HR manager guide.
Frequently Asked Questions
What are HR best practices?
HR best practices are the standardized approaches to managing people that consistently produce better outcomes across different organizations and industries. They cover the full employment lifecycle: how you hire, onboard, document, train, organize, comply with employment law, and manage departures. The specific practices that matter most depend on company size. A 15-person company needs different practices than a 500-person company, but the fundamentals (structured onboarding, clean documentation, compliance tracking) apply universally.
What are the 7 HR best practices?
The seven foundational HR best practices for growing businesses are: (1) structured onboarding with a repeatable 30-60-90 day process, (2) clean documentation with signed compliance paperwork for every employee, (3) a single source of truth for employee data (HRIS), (4) clear organizational structure visible to the whole team, (5) employee self-service for routine updates, (6) training and development starting with compliance training, and (7) baseline compliance tracking for federal and state employment laws. These seven cover the operational foundation. Payroll, benefits, and performance management are important but are typically handled by specialized tools or outsourced providers.
Does a small business need an HR department?
Most businesses under 40-50 employees do not need a dedicated HR department. They need HR practices: onboarding, documentation, compliance, and employee records management. These can be handled by the founder or office manager using HR software at a fraction of the cost of a full-time HR hire. The trigger for a dedicated HR person is not headcount alone. It is operational strain: when the founder spends more than 8-10 hours per week on HR tasks, when compliance deadlines are being missed, or when employee issues go unresolved.
What is the difference between HR practices and HR activities?
HR practices are the strategic approaches and policies that guide how an organization manages its people (for example, structured onboarding as a practice). HR activities are the specific tasks that implement those practices (for example, collecting the I-9 form, scheduling the Day 7 check-in, assigning training modules). Practices are what you decide to do. Activities are how you do it. A company can perform HR activities without having formalized HR practices, but this usually results in inconsistency and gaps.
What are common HR mistakes small businesses make?
The five most common mistakes: (1) No structured onboarding, leading to inconsistent first-week experiences and higher early turnover. (2) Missing or incomplete compliance documents, especially I-9s and handbook acknowledgments. (3) No centralized employee records, with data scattered across email, spreadsheets, and filing cabinets. (4) No visible org chart, creating confusion about reporting lines and decision authority. (5) Treating HR as something to deal with later, instead of building basic systems from the first hire.
How much does it cost to implement HR best practices?
For a business with 5-50 employees, the cost of implementing foundational HR practices through software is $98-200 per month (flat fee, not per employee). This covers onboarding workflows, document management, e-signature, employee database, org chart, training delivery, and compliance tracking. The alternative is a full-time HR generalist at $55,000-80,000 per year. Before that headcount threshold, software plus a fractional HR consultant for complex situations covers the same ground at roughly one-tenth the cost.
What HR practices are required by law?
Several HR practices are effectively required by federal and state law, even though the law does not use the term 'best practices.' These include: I-9 employment verification for every hire (IRCA), maintaining payroll records for 3 years (FLSA), providing a workplace free from recognized hazards (OSHA), not discriminating in employment decisions (Title VII at 15+ employees, ADA at 15+, ADEA at 20+), and providing family and medical leave (FMLA at 50+ employees). Additionally, many states require anti-harassment training, paid sick leave, and specific employment notices.
When should a company formalize its HR practices?
Immediately. Even a 5-person company should have basic HR practices: a consistent onboarding process, signed compliance documents for every employee, and a centralized place to store employee records. The formality increases with size: at 15 employees you need anti-discrimination policies, at 20 you need COBRA processes, at 50 you need FMLA tracking. But the foundational practices (onboarding, documentation, compliance) should exist from your first hire. They are easier to build early than to retrofit later.