HR Rules and Regulations: A Guide for US Small Businesses
HR rules and regulations for US small businesses. 12 federal laws, employee thresholds, state rules, and compliance checklist for 5-50 employees.
HR Rules and Regulations
What every US small business must follow
I was 14 months into running my company when an employee asked me a question I could not answer: "Are we required to give overtime pay?" I had 9 employees, all salaried, and I genuinely did not know whether the overtime rules applied to us. Two hours of research later, I discovered that the Fair Labor Standards Act applies to virtually all employers, that "salaried" does not automatically mean "exempt" from overtime, and that three of my employees were likely misclassified as exempt when they should have been earning overtime. I had been violating federal law since their start dates.
That was not the only HR rule I did not know about. I had not completed I-9 forms within the required three-business-day window for my first four hires. I did not have a written anti-harassment policy, which California (where two of my employees worked) requires. I had no new-hire reporting filed with the state, which every state requires within 20 days of hire. I was running a company, making payroll, signing clients, and completely unaware that a body of employment law applied to me from the moment I hired my first employee.
This guide covers the HR rules and regulations that every US small business with 5 to 50 employees must follow: the 12 federal laws that form the baseline, the employee thresholds where new laws kick in, the state-level rules that often go beyond federal requirements, the documents you must collect during onboarding, the policies you need in writing, the records you must keep, and what happens when you get it wrong. At FirstHR, we built onboarding workflows and document management around these requirements so that the compliance basics (I-9, W-4, policy acknowledgments, training records) happen automatically during onboarding instead of being discovered retroactively like I discovered them.
What Are HR Rules and Regulations?
HR rules and regulations are the body of federal, state, and local laws that govern the employment relationship. They cover every stage of the employee lifecycle: how you hire (anti-discrimination, background checks, I-9 verification), how you pay (minimum wage, overtime, pay frequency), how you manage (workplace safety, accommodation, leave), and how you separate (final pay, COBRA, recordkeeping).
The critical point for small business owners: most of these laws apply from your first hire. The common belief that employment laws only apply to "big companies" is incorrect. The FLSA, OSHA, IRCA (I-9), NLRA, EPA, and USERRA apply to virtually all employers. Title VII, ADA, and GINA apply at 15 employees. ADEA at 20. FMLA at 50. And state laws often apply at lower thresholds than federal. The complete HR guide covers the full scope of HR responsibilities that these rules create.
The 12 Federal HR Laws Every US Employer Must Know
These 12 laws form the federal baseline for employment compliance. Every US employer must understand which ones apply to their business based on employee count, and what each law requires.
Fair Labor Standards Act (FLSA)
The FLSA establishes minimum wage ($7.25/hour federal; many states are higher), overtime pay (1.5x regular rate after 40 hours per workweek), child labor protections, and recordkeeping requirements. It applies to virtually all employers. The most common FLSA violation at small businesses: misclassifying employees as "exempt" from overtime when they do not meet the duties test. Being salaried does not automatically make someone exempt. The employee must also perform executive, administrative, professional, computer, or outside sales duties as defined by DOL regulations, and must earn at least the salary threshold ($43,888/year in 2024). The HR processes guide covers how to build wage compliance into your payroll process.
Title VII of the Civil Rights Act
Title VII prohibits employment discrimination based on race, color, religion, sex (including sexual orientation and gender identity per the 2020 Bostock decision), and national origin. It applies to employers with 15 or more employees. It covers hiring, firing, promotions, compensation, and all terms and conditions of employment. Small businesses that grow past 15 employees often do not realize they have crossed the threshold where Title VII applies.
Americans with Disabilities Act (ADA)
The ADA prohibits discrimination against qualified individuals with disabilities and requires employers to provide reasonable accommodations unless doing so would cause undue hardship. It applies at 15+ employees. A "reasonable accommodation" might include modified work schedules, assistive technology, physical workplace modifications, or restructured job duties. The employer must engage in an interactive process with the employee to determine appropriate accommodations. The employee file organization guide covers why ADA-related documents must be stored separately from personnel files.
Age Discrimination in Employment Act (ADEA)
The ADEA protects employees and job applicants aged 40 and older from discrimination based on age. It applies at 20+ employees. It covers hiring, firing, promotions, layoffs, compensation, benefits, job assignments, and training. At small businesses, ADEA violations most commonly arise in hiring (job postings that indicate age preference) and layoffs (disproportionately targeting older workers).
Family and Medical Leave Act (FMLA)
FMLA provides eligible employees with up to 12 weeks of unpaid, job-protected leave per year for qualifying medical and family reasons: serious health conditions, birth or adoption of a child, caring for a family member with a serious health condition, and qualifying military exigencies. It applies to employers with 50+ employees within 75 miles. Most small businesses under 50 employees are not covered by FMLA, but many states have their own family leave laws that apply at lower thresholds.
Occupational Safety and Health Act (OSHA)
OSHA requires employers to provide a workplace free from recognized hazards that are causing or are likely to cause death or serious physical harm. It applies to virtually all employers. OSHA recordkeeping requirements (maintaining a log of work-related injuries and illnesses) apply to employers with 11+ employees, with exemptions for certain low-hazard industries. The document management guide covers how to maintain safety records alongside other HR documents.
Immigration Reform and Control Act (IRCA)
IRCA requires every US employer to verify the identity and employment authorization of each person they hire by completing Form I-9. The I-9 must be completed by the end of the employee's third business day. IRCA also prohibits discrimination based on citizenship status and national origin in hiring, firing, and recruiting. I-9 penalties are among the most commonly assessed against small businesses because the form is frequently completed late, completed incorrectly, or not completed at all. The compliance onboarding guide covers the specific I-9 timeline and requirements.
National Labor Relations Act (NLRA)
The NLRA protects employees' rights to organize, form unions, bargain collectively, and engage in "concerted activity" (discussing wages, working conditions, or workplace concerns with coworkers). It applies to virtually all private-sector employers regardless of size. The most common NLRA issue at small businesses: social media policies or employee handbook provisions that prohibit employees from discussing wages or working conditions. These provisions are often unenforceable under the NLRA.
Equal Pay Act (EPA)
The EPA requires equal pay for equal work regardless of sex. Jobs do not need identical titles but must require substantially equal skill, effort, and responsibility under similar working conditions. It applies to virtually all employers. Pay differences are allowed only when based on seniority, merit, quantity or quality of production, or a factor other than sex.
Additional Federal Laws
| Law | What It Covers | Applies At |
|---|---|---|
| USERRA | Protects employees who serve in the military from employment discrimination and guarantees reemployment rights | All employers |
| Pregnancy Discrimination Act (PDA) | Prohibits discrimination based on pregnancy, childbirth, or related medical conditions (amendment to Title VII) | 15+ employees |
| GINA | Prohibits discrimination based on genetic information, including family medical history | 15+ employees |
| COBRA | Requires continuation of group health coverage after qualifying events (job loss, reduced hours) | 20+ employees |
| WARN Act | Requires 60 days advance notice of plant closings and mass layoffs | 100+ employees |
Employee Thresholds: When Each Law Kicks In
Different federal laws apply at different employee counts. As your business grows, new compliance obligations activate at specific thresholds. This table shows when each major law begins to apply.
| Employee Count | Laws That Apply | Key New Obligations |
|---|---|---|
| 1+ employees | FLSA, OSHA, IRCA (I-9), NLRA, EPA, USERRA, EPPA, federal tax withholding | Minimum wage, overtime, I-9 for every hire, workplace safety, equal pay, new-hire state reporting |
| 11+ employees | OSHA recordkeeping (Form 300 log) | Maintain a log of work-related injuries and illnesses (with industry exemptions) |
| 15+ employees | Title VII, ADA, GINA, PDA | Anti-discrimination protections (race, sex, disability, genetics, pregnancy), reasonable accommodations, EEO-1 reporting |
| 20+ employees | ADEA, COBRA | Age discrimination protections, health insurance continuation rights |
| 50+ employees | FMLA, ACA employer mandate | 12 weeks unpaid leave, offer affordable health coverage or pay penalty |
| 100+ employees | WARN Act, EEO-1 reporting (mandatory) | 60-day notice for mass layoffs, annual EEO-1 report to EEOC |
The most critical transition for small businesses is the jump from 14 to 15 employees. At 15, Title VII and ADA apply, which means the business must have anti-discrimination policies, a process for handling accommodation requests, and awareness that discrimination complaints can now be filed with the EEOC. Many small businesses cross this threshold without realizing the compliance landscape has changed. The organizational structure guide covers how growth changes the HR requirements at each stage.
State-Level HR Rules You Cannot Ignore
Federal law sets the floor. State law often sets a higher standard. In many areas of employment law, the state requirement is stricter than the federal requirement, and when federal and state law conflict, the employer must follow whichever is more favorable to the employee.
| Area | Federal Rule | Common State Additions |
|---|---|---|
| Minimum wage | $7.25/hour (FLSA) | 30+ states have higher minimums. CA $16.50, WA $16.66, NY $16.50 (NYC), CO $14.81 (2025 rates). Some cities add local minimums above the state. |
| Anti-harassment training | Not required by federal law | CA, NY, IL, CT, DE, ME require anti-harassment training. CA: 2 hours for supervisors, 1 hour for all employees, every 2 years. |
| Paid sick leave | Not required by federal law | 15+ states and many cities require paid sick leave. Accrual rates, caps, and usage rules vary significantly. |
| Pay transparency | Not required by federal law | CO, CA, NY, WA, IL require salary ranges in job postings. Requirements vary by state. |
| Final paycheck timing | Next regular payday (FLSA) | CA: immediately upon termination. Many states require within 24-72 hours for involuntary termination. |
| New-hire reporting | Required within 20 days (federal) | Some states require reporting sooner (e.g., within 15 days). All 50 states have new-hire reporting requirements. |
| At-will exceptions | Employment at-will is the default | MT is the only state without at-will employment. Many states have public policy, implied contract, or good faith exceptions. |
| Family/medical leave | FMLA at 50+ employees | CA (CFRA), NY (PFL), WA (PFML), OR, CO, CT, MA and others have state leave laws that apply at lower thresholds. |
The practical implication: if you have employees in multiple states, you must comply with the employment laws of each state where employees work, not just the state where the business is headquartered. A company headquartered in Texas with employees in California must follow California wage, leave, and training requirements for those California employees. The compliance hub covers state-by-state requirements in detail.
Onboarding Compliance: Documents You Must Collect
The first few days of employment trigger the most time-sensitive compliance requirements. Missing these deadlines carries immediate penalties, not just future risk.
| Document | Required By | Deadline | Penalty for Non-Compliance |
|---|---|---|---|
| Form I-9 | IRCA (federal) | Section 1 on Day 1; Section 2 by end of third business day | $281-$2,861 per form (first offense) |
| Form W-4 | IRS (federal) | Day 1 (before first payroll) | Employer must withhold at Single/0 rate until received |
| State tax withholding form | State tax authority | Day 1 (before first payroll) | Varies by state |
| New-hire reporting | State (all 50 states) | Within 20 days of hire (some states sooner) | State-specific penalties |
| E-Verify (if required) | Federal/state | Within 3 business days of hire | Loss of government contracts; state-specific penalties |
| Direct deposit authorization | Employer policy | First week (before first payroll) | No legal penalty, but payroll processing issues |
| Signed offer letter | Best practice | Before Day 1 | No legal penalty, but lack of documentation creates risk |
| Employee handbook acknowledgment | Best practice (required in some states for specific policies) | First week | Inability to enforce policies if not acknowledged |
Research from the Work Institute shows that 20% of turnover happens within the first 45 days. Compliance paperwork during onboarding is not just a legal requirement; it is the employee's first impression of how organized and professional your company is. When onboarding is chaotic (forms arriving late, documents unsigned, training skipped), new hires draw conclusions about how the company operates. The onboarding checklist covers the complete task list for the first 90 days.
HR Policies Every Small Business Needs
Federal law does not require an employee handbook, but specific policies are required by federal or state law depending on your employee count and state. Beyond legal requirements, written policies protect the business by documenting expectations and providing evidence that employees were informed of workplace rules.
| Policy | Legally Required? | Why You Need It |
|---|---|---|
| Anti-harassment / Anti-discrimination | Required in CA, NY, IL, CT, DE, ME; recommended everywhere | Defines prohibited conduct, reporting procedures, and consequences. Essential defense in harassment claims. |
| Equal Employment Opportunity (EEO) | Required for federal contractors; recommended for all | States your commitment to non-discrimination. Sets the baseline for all employment decisions. |
| At-will employment | Not required but strongly recommended | Establishes that either party can end the employment relationship at any time. Protects against implied contract claims. |
| Paid time off / Leave | PTO not required federally; sick leave required in 15+ states | Defines accrual, usage, carryover, and payout rules. Prevents disputes about available leave. |
| Overtime and timekeeping | Required to maintain records (FLSA); policy recommended | Defines how hours are recorded, who approves overtime, and how overtime is calculated. |
| Workplace safety | Required to communicate safety rules (OSHA) | Defines safety procedures, reporting obligations, and emergency protocols. |
| Social media and technology use | Not required, but important for NLRA compliance | Sets boundaries while preserving employee NLRA rights to discuss working conditions. |
| Drug and alcohol | Required in some industries and states | Defines testing policies, prohibited conduct, and consequences. Must comply with state marijuana laws. |
The company policy guide covers each of these policies in detail, including how to write, distribute, and get acknowledgment for each one. The employee self-service guide covers how to make policies accessible to employees through a portal where they can read and acknowledge them.
Recordkeeping Requirements
| Record Type | Required By | Retention Period | What to Keep |
|---|---|---|---|
| Payroll records | FLSA | 3 years | Hours worked, wages paid, overtime, deductions, pay dates |
| Employment records | EEOC / Title VII / ADA / ADEA | 1 year after termination (EEOC) or 3 years (ADEA) | Application, resume, offer letter, personnel actions, termination records |
| I-9 forms | IRCA | 3 years after hire or 1 year after termination (whichever is later) | Completed Form I-9 with supporting documents noted |
| Tax records | IRS | 4 years after tax due date | W-4, W-2 copies, payroll tax returns, 1099s |
| Benefits records | ERISA | 6 years | Plan documents, enrollment forms, COBRA notices |
| Safety records | OSHA | 5 years (30 years for exposure records) | Injury/illness log (Form 300), incident reports, safety training records |
| Medical records | ADA | Duration of employment + 1 year | Accommodation requests, FMLA documentation, medical certifications (stored separately) |
The safe default: keep all records for 7 years after the employee's last day. This covers the longest common federal retention period, the IRS audit window, and the statute of limitations for most employment claims. Organizations with strong onboarding see 82% better retention (Gallup), and part of strong onboarding is capturing every required record at the right time so nothing is missing when you need it. The HR report guide covers how recordkeeping feeds into your quarterly compliance reporting.
The Cost of Non-Compliance
| Violation | Penalty Range | How It Happens |
|---|---|---|
| I-9 violations (paperwork) | $281-$2,861 per form (first offense) | I-9 not completed, completed late, or completed incorrectly |
| I-9 violations (knowingly hiring unauthorized) | $698-$5,579 per worker (first offense) | Employer knows or should know the worker is not authorized |
| FLSA overtime violations | Back pay + equal amount in liquidated damages + attorney fees | Misclassifying non-exempt employees as exempt from overtime |
| FLSA minimum wage violations | Back pay + liquidated damages (up to 2x) for 2-3 years | Paying below federal or state minimum wage, including tipped employees |
| Title VII / ADA discrimination | $50,000-$300,000 per claim (caps vary by employer size) | Discrimination in hiring, firing, promotion, or terms of employment |
| OSHA serious violation | $16,131 per violation | Failing to correct recognized hazards in the workplace |
| FMLA violation | Back pay + benefits + attorney fees + liquidated damages | Denying eligible leave, retaliating against employee for taking leave |
| State wage violations | Varies: often 2x-3x unpaid wages + penalties | Violating state minimum wage, overtime, or pay timing requirements |
The numbers are not abstract. A 25-employee company that has never completed I-9 forms for any employee faces potential penalties of $7,025 to $71,525 (25 forms at $281-$2,861 each). A company that misclassifies 5 employees as overtime-exempt for two years faces back-pay liability plus liquidated damages that can reach six figures. These penalties apply regardless of intent: "I did not know" is not a defense. The HR automation guide covers how to automate the compliance tasks that prevent these violations.
HR Compliance Checklist for Businesses with 5-50 Employees
| Category | Requirement | Status Check |
|---|---|---|
| Hiring | I-9 completed for every employee by end of third business day | Audit: pull 5 random I-9s and check completion dates |
| Hiring | W-4 collected before first payroll for every employee | Audit: verify W-4 on file for each current employee |
| Hiring | New-hire reporting filed with state within 20 days of each hire | Check with payroll provider: is this automated? |
| Wages | All employees properly classified as exempt or non-exempt | Review: does each exempt employee meet BOTH the salary threshold AND duties test? |
| Wages | Overtime paid at 1.5x for all non-exempt employees working 40+ hours/week | Review payroll records for the past 3 months |
| Wages | Minimum wage meets or exceeds federal AND state/local requirements | Check current rates for every state where employees work |
| Policies | Anti-harassment policy in place (required in CA, NY, IL, CT, DE, ME) | Verify: is the policy signed by every employee? |
| Policies | Employee handbook distributed and acknowledged | Audit: does every employee have a signed acknowledgment on file? |
| Safety | Workplace safety poster displayed (OSHA, FLSA, EEOC) | Physical check: are required posters current and visible? |
| Safety | OSHA 300 log maintained (11+ employees, with exemptions) | Verify: is the log current for this calendar year? |
| Records | Personnel, medical, and I-9 files stored separately | Audit: are medical documents in the personnel file? (They should not be) |
| Records | Records retained for required periods (7 years recommended) | Verify: do you have a retention schedule? |
| Training | Anti-harassment training completed (required in some states) | Check: when was the last training? Is it within the required cycle? |
| Benefits | COBRA notice provided to departing employees (20+ employees) | Verify: is this part of your termination checklist? |
Run this checklist quarterly. A quarterly review takes about 2 hours and catches compliance gaps before they become violations. The core HR guide covers the broader system that supports ongoing compliance. SHRM recommends integrating compliance reviews into the regular HR rhythm rather than treating compliance as an annual event.
Common HR Compliance Mistakes
| Mistake | Why It Happens | The Fix |
|---|---|---|
| Assuming employment laws do not apply to small businesses | Belief that 'we are too small for HR rules' | FLSA, OSHA, IRCA, NLRA, and EPA apply from your first hire. Compliance starts at employee #1. |
| Not completing I-9s on time | Founder does not know the 3-business-day rule | Build I-9 completion into your Day 1 onboarding workflow. No exceptions. |
| Misclassifying employees as exempt from overtime | Assumes 'salaried' means 'exempt' | Review each position against BOTH the salary threshold AND the duties test. When in doubt, classify as non-exempt. |
| No written policies when state law requires them | Does not check state-specific requirements | Review your state labor department website annually. Many states require anti-harassment, sick leave, and pay transparency policies. |
| Medical information in the personnel file | Does not know about ADA separation requirement | Store medical records (FMLA, ADA, drug tests) in a separate confidential file. Never in the main personnel file. |
| Not updating for state law changes | Sets up compliance once and forgets about it | Review state employment law updates in Q4 annually. Subscribe to your state labor department email alerts. |
| No new-hire state reporting | Does not know the requirement exists | Every state requires new-hire reporting within 20 days. Most payroll providers automate this. Verify yours does. |
| Ignoring the 15-employee threshold | Business grows past 14 without updating compliance posture | Track your FTE count. At 15, Title VII and ADA apply. Update policies, train managers, and document your EEO commitment. |
The root cause behind all of these mistakes is the same: the small business owner did not know the rule existed. Unlike tax law (where accountants provide guidance) or contract law (where attorneys flag issues), employment law compliance has no natural advisor at small businesses. There is no HR department to monitor changes. There is no compliance officer to conduct audits. The founder is the compliance department, and they are also doing sales, product, and operations. The small business HR guide covers how to build the minimum HR infrastructure that prevents compliance gaps. The HR technology guide covers how to choose tools that automate the most error-prone compliance tasks.
Frequently Asked Questions
What are HR rules and regulations?
HR rules and regulations are the federal, state, and local laws that govern how employers hire, manage, compensate, and terminate employees. They cover areas including wage and hour (minimum wage, overtime), anti-discrimination (race, sex, age, disability), workplace safety (OSHA), employment eligibility verification (I-9), leave entitlements (FMLA), and recordkeeping. Every US employer must comply with federal laws, and most states add additional requirements on top of the federal baseline.
What are the main HR laws in the US?
The 12 main federal HR laws are: FLSA (wages and overtime), Title VII (anti-discrimination), ADA (disability), ADEA (age discrimination), FMLA (family and medical leave), OSHA (workplace safety), IRCA (I-9 employment verification), NLRA (labor relations), EPA (equal pay), USERRA (military service), PDA (pregnancy), and GINA (genetic information). Each law has a different employee-count threshold: some apply to all employers, while others kick in at 15, 20, or 50 employees.
What HR rules apply to small businesses with fewer than 50 employees?
Small businesses with fewer than 50 employees must comply with FLSA (wages, overtime, recordkeeping), OSHA (workplace safety), IRCA (I-9 for every hire), NLRA (employee organizing rights), EPA (equal pay for equal work), USERRA (military service protections), and state employment laws. At 15 employees, Title VII, ADA, and GINA kick in. At 20, ADEA applies. FMLA and ACA employer mandate do not apply until 50 employees. State laws often apply at lower thresholds than federal.
What documents must an employer collect from a new hire?
At minimum, every US employer must collect: Form I-9 (employment eligibility verification, due by end of third business day), Form W-4 (federal income tax withholding), state tax withholding form (varies by state), and direct deposit authorization (if applicable). Most employers also collect: signed offer letter, emergency contact information, signed employee handbook acknowledgment, signed policy acknowledgments (anti-harassment, confidentiality), and benefits enrollment forms if applicable.
What is the penalty for not having an I-9 on file?
I-9 penalties for first-time violations range from $281 to $2,861 per form. Repeat violations range from $561 to $5,722 per form. Knowingly hiring an unauthorized worker can result in penalties from $698 to $5,579 per worker for a first offense, up to $27,894 for repeat offenses. These amounts are adjusted annually for inflation. The I-9 must be completed by the end of the employee's third business day, not their first day.
Do small businesses need an employee handbook?
Federal law does not require an employee handbook. However, several states require employers to have written policies on specific topics (anti-harassment in CA, NY, IL, CT, DE, ME; paid sick leave in many states; equal employment opportunity). Even where not legally required, an employee handbook protects the business by documenting policies, setting expectations, and providing evidence that employees were informed of workplace rules. Most employment attorneys recommend a handbook for any business with 5 or more employees.
What is the difference between HR rules and HR policies?
HR rules are external requirements imposed by federal, state, and local law. Employers must comply regardless of their preferences. HR policies are internal guidelines created by the employer that define how the business operates within those legal requirements. For example, federal law (FLSA) requires overtime pay after 40 hours. The employer's policy might state that all overtime must be pre-approved by a manager. The law sets the floor. The policy sets the operating procedure.
How often do HR rules change?
Federal HR rules change through legislation (rare, every few years), regulatory updates from agencies like DOL and EEOC (annually), and court decisions that interpret existing laws (ongoing). State laws change more frequently, especially on minimum wage, paid leave, and anti-harassment training requirements. The practical recommendation: review your compliance posture at least annually (ideally in Q4 for changes effective January 1), and subscribe to updates from your state labor department and the DOL.