FirstHR

HR Rules and Regulations: A Guide for US Small Businesses

HR rules and regulations for US small businesses. The 12 federal laws, employee thresholds, state rules, and a practical compliance checklist.

Nick Anisimov

Nick Anisimov

FirstHR Founder

Core HR•
•
22 min

HR Rules and Regulations

What every US small business must follow

I was 14 months into running my company when an employee asked me a question I could not answer: "Are we required to give overtime pay?" I had 9 employees, all salaried, and I genuinely did not know whether the overtime rules applied to us. Two hours of research later, I discovered that the Fair Labor Standards Act applies to virtually all employers, that "salaried" does not automatically mean "exempt" from overtime, and that three of my employees were likely misclassified as exempt when they should have been earning overtime. I had been violating federal law since their start dates.

That was not the only HR rule I did not know about. I had not completed I-9 forms within the required three-business-day window for my first four hires. I did not have a written anti-harassment policy, which California (where two of my employees worked) requires. I had no new-hire reporting filed with the state, which every state requires within 20 days of hire. I was running a company, making payroll, signing clients, and completely unaware that a body of employment law applied to me from the moment I hired my first employee.

This guide covers the HR rules every US small business must follow: the 12 federal laws, the employee thresholds where new obligations switch on, the state rules that go further, the onboarding documents you must collect, the policies you need in writing, the records you must keep, what getting it wrong costs, and a checklist to audit yourself against.

At FirstHR we built onboarding workflows and document management around those requirements, so the compliance basics (the I-9 and W-4 on the first-day task list, signed policy acknowledgments, training records) happen during onboarding instead of being discovered retroactively, the way I discovered mine.

TL;DR
HR rules and regulations are the federal, state, and local laws that govern hiring, pay, safety, leave, and recordkeeping. Twelve federal laws form the baseline, switching on at different employee counts: some from the first hire, others at 15, 20, or 50. Penalties start at $288 per missing I-9, so I-9 verification, overtime classification, and state rules come first.

What Are HR Rules and Regulations?

HR rules and regulations are the body of federal, state, and local laws that govern the employment relationship. They cover every stage of the employee lifecycle: how you hire (anti-discrimination, background checks, I-9 verification), how you pay (minimum wage, overtime, pay frequency), how you manage (workplace safety, accommodation, leave), and how you separate (final pay, COBRA health coverage, recordkeeping).

Definition
HR Rules and Regulations
HR rules and regulations are the employment laws imposed by federal, state, and local government that define the legal requirements employers must meet when hiring, compensating, managing, and terminating employees. They include wage and hour laws (FLSA), anti-discrimination laws (Title VII, ADA, ADEA), workplace safety standards (OSHA), employment verification requirements (IRCA/I-9), leave entitlements (FMLA), labor relations rules (NLRA), and recordkeeping obligations. Compliance is not optional: once a law covers you, violations carry civil penalties, back-pay liability, and private lawsuit exposure, however small the business.

The critical point for small business owners: many of these laws apply from your first hire. The common belief that employment laws only apply to "big companies" is incorrect.

The FLSA, OSHA, IRCA (I-9), EPA (equal pay), and USERRA (military service) apply to virtually all employers, and the NLRA reaches most private-sector employers whatever their headcount. Title VII, ADA, and GINA (genetic information) apply at 15 employees, ADEA at 20, and FMLA at 50. State laws often apply at lower thresholds than federal laws.

The Compliance Gap
According to Gallup (2018), only 12% of employees strongly agree their organization does a great job onboarding new employees. Onboarding is where most compliance requirements are triggered: I-9 completion, W-4 collection, new-hire state reporting, policy acknowledgments, and harassment training. When onboarding is disorganized, compliance is the first casualty.

The 12 Federal HR Laws Every US Employer Must Know

These 12 laws form the federal baseline for employment compliance: the core set of human resource laws that shape every employment decision you make. Which ones apply to your business depends mostly on your employee count, so each section below says who is covered as well as what the law requires.

FLSAFair Labor Standards Act: minimum wage ($7.25 federal), overtime (1.5x after 40 hours), child labor rules, recordkeeping. Applies to virtually all employers.
Title VIIProhibits employment discrimination based on race, color, religion, sex, or national origin. Covers hiring, firing, promotions, compensation, and all terms of employment. Applies at 15+ employees.
ADAAmericans with Disabilities Act: prohibits discrimination against qualified individuals with disabilities. Requires reasonable accommodations. Applies at 15+ employees.
FMLAFamily and Medical Leave Act: up to 12 weeks unpaid, job-protected leave for qualifying medical and family reasons. Applies at 50+ employees; an employee qualifies only where 50 work within 75 miles.
OSHAOccupational Safety and Health Act: requires employers to provide a workplace free from recognized hazards. Recordkeeping requirements at 11+ employees. Applies to virtually all employers.
IRCAImmigration Reform and Control Act: requires Form I-9 verification of employment eligibility for every new hire. Section 1 on the first day, Section 2 within three business days. Applies to all employers.

Fair Labor Standards Act (FLSA)

The FLSA establishes minimum wage ($7.25 an hour federally; many states are higher), overtime at 1.5 times the regular rate after 40 hours in a workweek, child labor protections, and recordkeeping duties. It applies to virtually all employers, and it carries no employee-count threshold of any kind.

A common FLSA violation at small businesses is misclassifying employees as exempt from overtime when they do not meet the duties test. Being salaried does not make someone exempt. The employee must also perform executive, administrative, professional, computer, or outside sales duties and, in most cases, be paid at least $684 a week, or $35,568 a year, on a salary basis.

The salary threshold stands. A 2024 Department of Labor rule raised it to $844 a week in July 2024 and scheduled $1,128 for January 2025, but a federal court vacated the rule in November 2024. A final rule in May 2026 restored the regulation's earlier text, so anyone budgeting against $1,128 is planning around a threshold that never took effect.

Title VII of the Civil Rights Act

Title VII prohibits employment discrimination based on race, color, religion, sex (including sexual orientation and gender identity per the Supreme Court's 2020 Bostock decision), and national origin. It covers hiring, firing, promotions, compensation, and all terms and conditions of employment.

Coverage begins at 15 or more employees for each working day in each of 20 or more calendar weeks in the current or preceding calendar year.

The 20-week test matters: a seasonal spike to 16 people for a month does not trigger coverage, and a business that sits at 15 all year does. Small businesses that grow past the line often do not notice they have crossed it.

Still Using Spreadsheets for Onboarding?
Automate documents, training assignments, task management, and track onboarding progress in real time.
See How It Works

Americans with Disabilities Act (ADA)

The ADA prohibits discrimination against qualified individuals with disabilities and requires employers to provide reasonable accommodations unless doing so would cause undue hardship (significant difficulty or expense). It applies at 15+ employees. A "reasonable accommodation" might include modified work schedules, assistive technology, physical workplace modifications, or restructured job duties.

Agreeing on an accommodation is a conversation, not a decision. The employer has to engage in an interactive process with the employee to work out what would actually help, and any medical paperwork that process generates lives on separate forms in a separate confidential file, never in the main personnel folder.

Age Discrimination in Employment Act (ADEA)

The ADEA protects employees and job applicants aged 40 and older from discrimination based on age. It applies at 20+ employees. It covers hiring, firing, promotions, layoffs, compensation, benefits, job assignments, and training. At small businesses, ADEA violations can arise in hiring (job postings that indicate age preference) and in layoffs (disproportionately targeting older workers).

Family and Medical Leave Act (FMLA)

FMLA provides eligible employees with up to 12 weeks of unpaid, job-protected leave per year for qualifying medical and family reasons: serious health conditions, birth or adoption of a child, caring for a family member with a serious health condition, and qualifying military exigencies.

FMLA coverage starts at 50 or more employees in 20 or more workweeks of the current or preceding year. An employee then qualifies only after 12 months of employment and 1,250 hours in the past year, at a site where the employer has 50 employees within 75 miles.

Most small businesses under 50 employees are not covered by FMLA, but many states have their own family leave laws that apply at lower thresholds.

Occupational Safety and Health Act (OSHA)

OSHA requires employers to provide a workplace free from recognized hazards that are causing or are likely to cause death or serious physical harm. It applies to virtually all employers. OSHA recordkeeping requirements (maintaining a log of work-related injuries and illnesses) apply to employers with 11+ employees, with exemptions for certain low-hazard industries.

Immigration Reform and Control Act (IRCA)

IRCA requires every US employer to verify the identity and employment authorization of each person they hire by completing Form I-9. The employee signs Section 1 no later than their first day of work for pay, and the employer completes Section 2 within three business days of the date employment begins.

IRCA also prohibits discrimination based on citizenship status and national origin in hiring, firing, and recruiting. The I-9 penalties weigh heavily on small businesses, because the form is so often completed late, completed incorrectly, or never completed at all, and each individual counts as a separate violation.

National Labor Relations Act (NLRA)

The NLRA protects employees' rights to organize, form unions, bargain collectively, and engage in "concerted activity" (discussing wages, working conditions, or workplace concerns with coworkers). It reaches most private-sector employers whatever their headcount, because the National Labor Relations Board's jurisdiction turns on annual business volume rather than employee count.

A common NLRA issue at small businesses is a social media policy or employee handbook provision that prohibits employees from discussing wages or working conditions. Provisions like that are often unenforceable under the NLRA.

Equal Pay Act (EPA)

The EPA requires equal pay for equal work regardless of sex. Jobs do not need identical titles but must require substantially equal skill, effort, and responsibility under similar working conditions. It applies to virtually all employers. Pay differences are allowed only when based on seniority, merit, quantity or quality of production, or a factor other than sex.

Additional Federal Laws

Three more laws complete the twelve: the Uniformed Services Employment and Reemployment Rights Act (USERRA), the Pregnancy Discrimination Act (PDA), and the Genetic Information Nondiscrimination Act (GINA). COBRA and the WARN Act are not among the twelve, but they start to matter as your headcount grows.

LawWhat It CoversApplies At
USERRAProtects employees who serve in the military from employment discrimination and guarantees reemployment rightsAll employers
Pregnancy Discrimination Act (PDA)Prohibits discrimination based on pregnancy, childbirth, or related medical conditions (amendment to Title VII)15+ employees
GINAProhibits discrimination based on genetic information, including family medical history15+ employees
COBRARequires continuation of group health coverage after qualifying events (job loss, reduced hours)20+ employees
WARN ActRequires 60 days advance notice of plant closings and mass layoffs100+ employees

Employee Thresholds: When Each Law Kicks In

Different federal laws apply at different employee counts, so new obligations switch on as your business grows. This table shows when each major law begins to apply, including three laws the sections above do not cover: the Employee Polygraph Protection Act (EPPA), the Pregnant Workers Fairness Act (PWFA), and the Affordable Care Act (ACA) employer mandate.

Employee CountLaws That ApplyKey New Obligations
1+ employeesFLSA, OSHA, IRCA (I-9), NLRA, EPA, USERRA, EPPA, federal tax withholdingMinimum wage, overtime, I-9 for every hire, workplace safety, equal pay, new-hire state reporting
11+ employeesOSHA recordkeeping (Form 300 log)Maintain a log of work-related injuries and illnesses (with industry exemptions)
15+ employeesTitle VII, ADA, GINA, PDA, PWFAAnti-discrimination protections (race, sex, disability, genetics, pregnancy), reasonable accommodations, and accommodations for pregnancy and childbirth
20+ employeesADEA, COBRAAge discrimination protections, health insurance continuation rights
50+ employeesFMLA, ACA employer mandate12 weeks unpaid leave, offer affordable health coverage or pay penalty
100+ employeesWARN Act, EEO-1 Component 160-day notice for plant closings and mass layoffs, annual EEO-1 report to EEOC

The most critical transition for small businesses is the jump from 14 to 15 employees. At 15, Title VII and the ADA apply, which means the business needs anti-discrimination policies, a process for handling accommodation requests, and awareness that discrimination charges can now be filed with the Equal Employment Opportunity Commission (EEOC).

The 100+ employees row trips people up. EEO-1 reporting, the annual workforce demographics report, does not start at 15 the way Title VII coverage does: the Component 1 collection is mandatory for private employers with 100 or more employees, so most small businesses never file it at all.

The EEOC also lists federal contractors with 50 or more employees, but the Department of Labor regulation behind that requirement is rescinded effective October 26, 2026.

What worked for me
I created a simple spreadsheet that listed every compliance obligation and the employee count where it activated. When we were at 12 employees, I could see exactly what would change at 15. That gave us three months to prepare: writing an anti-discrimination policy, training managers on accommodation requests, and updating our employee handbook. The alternative (finding out about Title VII after someone files a complaint) would have cost significantly more than three months of preparation.

State-Level HR Rules You Cannot Ignore

Federal law sets the floor, and state law often sets a higher standard. Where federal and state law conflict, the employer must follow whichever is more favorable to the employee.

AreaFederal RuleCommon State Additions
Minimum wage$7.25/hour (FLSA)30 states and DC sit above the federal floor. CA $17.40 (now $16.90), WA $17.73 (now $17.13), and CO $15.71 (now $15.16) from January 1, 2027; NY keeps $17.00 in New York City on that date. Some cities add local rates well above the state.
Anti-harassment trainingNot required by federal lawCA, CT, DE, IL, ME and NY mandate training. CA: 2 hours for supervisors and 1 hour for everyone else at employers with 5 or more employees, every 2 years.
Paid sick leaveNot required by federal law17 states and DC require paid sick leave, 3 more (IL, ME, and NV) require paid leave usable for any purpose, and many cities add their own. Accrual rates, caps, and usage rules vary significantly.
Pay transparencyNot required by federal lawCA, CO, CT, DC, HI, IL, MA, MD, ME, MN, NJ, NY, VA, VT, and WA require a pay range in the job posting itself; NV and RI require one after an interview or on request. DE joins the posting states on September 26, 2027. Thresholds vary by state.
Final paycheck timingNo federal deadline; the FLSA is silentCA: all wages due immediately on discharge. TX: within 6 days of an involuntary separation. Every deadline comes from state wage payment law.
New-hire reportingRequired within 20 days (federal)Some states require reporting sooner (e.g., within 15 days). All 50 states have new-hire reporting requirements.
At-will exceptionsEmployment at-will is the defaultMT requires good cause for discharge once an employee finishes the probationary period. The other 49 states presume at-will, with public policy, implied contract, and good faith exceptions that vary from state to state.
Family/medical leaveFMLA at 50+ employeesCA (CFRA), NY (PFL), WA (PFML), OR, CO, CT, MA and others have state leave laws that apply at lower thresholds.

The minimum wage and paid sick leave rows change most years, so treat them as lookups rather than memory. The Department of Labor keeps a consolidated state minimum wage table that is the fastest way to confirm a current rate, and a Congressional Research Service report from April 2026 sets out which states mandate paid sick leave.

There is no federal deadline for final pay at all. The Department of Labor states plainly that employers are not required by federal law to hand over a final paycheck immediately, and everything from same-day to next-payday comes from state wage payment statutes instead.

If you have employees in more than one state, you must follow the employment laws of each state where they work, not just the state where the business is headquartered. A company headquartered in Texas with employees in California must follow California wage, leave, and training requirements for those California employees.

Companies Using FirstHR Onboard 3x Faster
Join hundreds of small businesses who transformed their new hire experience.
See It in Action

Onboarding Compliance: Documents You Must Collect

The first few days of employment trigger the most time-sensitive compliance requirements, and nearly all of them sit inside the new hire paperwork you hand over on Day 1. Missing a legal deadline carries immediate penalties, not just future risk.

DocumentRequired ByDeadlinePenalty for Non-Compliance
Form I-9IRCA (federal)Section 1 on Day 1; Section 2 by end of third business day$288-$2,861 per individual
Form W-4IRS (federal)Day 1 (before first payroll)Withhold as single with no other entries until it arrives
State tax withholding formState tax authorityDay 1 (before first payroll)Varies by state
New-hire reportingState (all 50 states)Within 20 days of hire (some states sooner)Up to $25 per unreported hire where the state charges one
E-Verify (if required)Federal/stateBy the third business day after the first day of employmentLoss of government contracts; state-specific penalties
Direct deposit authorizationEmployer policyFirst week (before first payroll)No legal penalty, but payroll processing issues
Signed offer letterBest practiceBefore Day 1No legal penalty, but lack of documentation creates risk
Employee handbook acknowledgmentBest practice (required in some states for specific policies)First weekInability to enforce policies if not acknowledged

Research reported by SHRM (2017) shows that up to 20% of all employee turnover happens within the first 45 days on the job. That is the same window in which nearly every deadline in the table above falls, which is why paperwork and retention are not separate problems.

Compliance paperwork is also the new hire's first impression of how the company runs. When forms arrive late, documents sit unsigned, and training gets skipped, people draw conclusions about the rest of the operation, and those conclusions are usually right.

HR Policies Every Small Business Needs

Federal law does not require an employee handbook, but specific policies are required by federal or state law depending on your employee count and state. Beyond legal requirements, written policies protect the business by documenting expectations and providing evidence that employees were informed of workplace rules.

PolicyLegally Required?Why You Need It
Anti-harassment / Anti-discriminationTraining mandated in CA, CT, DE, IL, ME and NY; CA and NY also require a written prevention policyDefines prohibited conduct, reporting procedures, and consequences. Essential defense in harassment claims.
Equal Employment Opportunity (EEO)Required for federal contractors; recommended for allStates your commitment to non-discrimination. Sets the baseline for all employment decisions.
At-will employmentNot required but strongly recommendedEstablishes that either party can end the employment relationship at any time. Protects against implied contract claims.
Paid time off / LeavePTO not required federally; paid sick leave required in 17 states and DC, any-purpose paid leave in 3 moreDefines accrual, usage, carryover, and payout rules. Prevents disputes about available leave.
Overtime and timekeepingRequired to maintain records (FLSA); policy recommendedDefines how hours are recorded, who approves overtime, and how overtime is calculated.
Workplace safetyRequired to communicate safety rules (OSHA)Defines safety procedures, reporting obligations, and emergency protocols.
Social media and technology useNot required, but important for NLRA complianceSets boundaries while preserving employee NLRA rights to discuss working conditions.
Drug and alcoholRequired in some industries and statesDefines testing policies, prohibited conduct, and consequences. Must comply with state marijuana laws.

Recordkeeping Requirements

There is no single retention period for employee records. Each agency sets its own clock: the FLSA wants payroll records for 3 years, the EEOC wants personnel records for 1 year from the action, the IRS wants employment tax records for 4 years, and OSHA wants exposure records for 30 years.

Record TypeRequired ByRetention PeriodWhat to Keep
Payroll recordsFLSA3 yearsHours worked, wages paid, overtime, deductions, pay dates
Employment recordsEEOC / Title VII / ADA / ADEA1 year from the record or personnel action (1 year from the termination date for involuntary terminations); 3 years for ADEA payroll recordsApplication, resume, offer letter, personnel actions, termination records
I-9 formsIRCA3 years after hire or 1 year after termination (whichever is later)Completed Form I-9 with supporting documents noted
Tax recordsIRS4 years after the fourth-quarter return is filedW-4, W-2 copies, payroll tax returns, 1099s
Benefits recordsERISA6 years from the filing datePlan documents, enrollment forms, COBRA notices, Form 5500 support
Safety recordsOSHA5 years for the injury log; 30 years for exposure recordsInjury/illness log (Form 300), incident reports, safety training records
Medical recordsADA (confidentiality); FMLA (retention)1 year from the record or personnel action; 3 years for FMLA documentationAccommodation requests, medical certifications, FMLA paperwork, all on separate forms in a separate confidential file

The safe default: keep all records for 7 years after the employee's last day, which comfortably clears every employee record retention period in the table above except exposure records. That covers the longest common federal period, the IRS audit window, and the statute of limitations on most employment claims.

Exposure records need their own file. Anything covering a toxic substance or a harmful physical agent runs 30 years under the OSHA access standard, so it cannot sit in the personnel folder you clear out every few years.

The Cost of Non-Compliance

Employment penalties are assessed per form, per worker, or per pay period, which is why one overlooked process multiplies across the whole payroll instead of costing a single flat fine. The federal amounts below are the ones in force for 2026: that year's inflation adjustment was cancelled, so the January 2025 figures still stand.

ViolationPenalty RangeHow It Happens
I-9 violations (paperwork)$288-$2,861 per individualI-9 not completed, completed late, or completed incorrectly
I-9 violations (knowingly hiring unauthorized)$716-$5,724 per worker on a first orderEmployer knows or should know the worker is not authorized
FLSA overtime violationsBack pay + an equal amount in liquidated damages + attorney feesMisclassifying non-exempt employees as exempt from overtime
FLSA minimum wage violationsBack pay + an equal amount in liquidated damages, reaching back 2 years, or 3 if willfulPaying below federal or state minimum wage, including tipped employees
Title VII / ADA discrimination$50,000-$300,000 in compensatory and punitive damages, by employer size; back pay sits outside the capDiscrimination in hiring, firing, promotion, or terms of employment
OSHA serious violationUp to $16,550 per violationFailing to correct recognized hazards in the workplace
FMLA violationBack pay + benefits + attorney fees + liquidated damagesDenying eligible leave, retaliating against employee for taking leave
State wage violationsVaries: often 2x-3x unpaid wages + penaltiesViolating state minimum wage, overtime, or pay timing requirements

The numbers are not abstract. A 25-employee company that has never completed I-9 forms for anyone faces $288 to $2,861 for each individual, which is $7,200 to $71,525 across 25 people. A company that misclassifies 5 employees as overtime-exempt for two years faces back pay plus an equal amount in liquidated damages, which together can reach six figures.

Few of these penalties turn on intent. "I did not know" is rarely a defense, and the OSHA penalty schedule is a useful illustration of why: a serious violation can cost up to $16,550 whether the hazard was ignored or simply overlooked.

What worked for me
The compliance cost that most surprised me was not a penalty. It was the cost of fixing a misclassification after the fact. When I discovered that three employees should have been non-exempt (eligible for overtime), I owed back pay for all the overtime hours they had worked over the previous year. The total was roughly $18,000 in back pay alone. If they had filed a complaint instead of accepting the correction, liquidated damages would have doubled it. Compliance is cheaper than correction.

HR Compliance Checklist for Small Businesses

Treat this as an audit rather than a reading exercise. Each row names something you should be able to show within a few minutes, such as a document, a record, or a posting, and anything you cannot produce that fast is the gap to close first.

CategoryRequirementStatus Check
HiringI-9 completed for every employee by end of third business dayAudit: pull 5 random I-9s and check completion dates
HiringW-4 collected before first payroll for every employeeAudit: verify W-4 on file for each current employee
HiringNew-hire reporting filed with state within 20 days of each hireCheck with payroll provider: is this automated?
WagesAll employees properly classified as exempt or non-exemptReview: does each exempt employee meet BOTH the salary threshold AND duties test?
WagesOvertime paid at 1.5x for all non-exempt employees working more than 40 hours in a workweekReview payroll records for the past 3 months
WagesMinimum wage meets or exceeds federal AND state/local requirementsCheck current rates for every state where employees work
PoliciesAnti-harassment policy and training in place (training mandated in CA, CT, DE, IL, ME, NY)Verify: is the policy signed by every employee?
PoliciesEmployee handbook distributed and acknowledgedAudit: does every employee have a signed acknowledgment on file?
SafetyRequired federal posters displayed (OSHA and FLSA from the first hire; the EEOC poster once you are a covered employer)Physical check: are required posters current and visible?
SafetyOSHA 300 log maintained (11+ employees, with exemptions)Verify: is the log current for this calendar year?
RecordsMedical files kept apart from personnel files (required), and I-9s stored separately too (recommended)Audit: are medical documents in the personnel file? (They should not be)
RecordsRecords retained for required periods (7 years recommended)Verify: do you have a retention schedule?
TrainingAnti-harassment training completed (required in some states)Check: when was the last training? Is it within the required cycle?
BenefitsCOBRA notice provided to departing employees (20+ employees)Verify: is this part of your termination checklist?

Run this checklist quarterly. A quarterly review takes about 2 hours and catches compliance gaps before they become violations: think of it as a lightweight HR audit you run on yourself. Schedule the year's last pass for October, so you can act on state law changes taking effect on January 1 before they arrive.

Common HR Compliance Mistakes

The mistakes below are not the result of bad intent. Each one starts as a rule nobody mentioned until it had already been broken.

MistakeWhy It HappensThe Fix
Assuming employment laws do not apply to small businessesBelief that 'we are too small for HR rules'FLSA, OSHA, IRCA, NLRA, and EPA apply from your first hire. Compliance starts at employee #1.
Not completing I-9s on timeFounder does not know the 3-business-day ruleBuild I-9 completion into your Day 1 onboarding workflow. No exceptions.
Misclassifying employees as exempt from overtimeAssumes 'salaried' means 'exempt'Review each position against BOTH the salary threshold AND the duties test. When in doubt, classify as non-exempt.
No written policies when state law requires themDoes not check state-specific requirementsReview your state labor department website annually. Many states require anti-harassment, paid sick leave, and pay transparency policies.
Medical information in the personnel fileDoes not know about ADA separation requirementStore medical records (FMLA, ADA, drug tests) in a separate confidential file. Never in the main personnel file.
Not updating for state law changesSets up compliance once and forgets about itReview state employment law updates in Q4 annually. Subscribe to your state labor department email alerts.
No new-hire state reportingDoes not know the requirement existsEvery state requires new-hire reporting within 20 days. Many payroll providers automate this. Verify yours does.
Ignoring the 15-employee thresholdBusiness grows past 14 without updating compliance postureTrack your headcount, part-timers included. At 15, Title VII and ADA apply. Update policies, train managers, and document your EEO commitment.

Nobody mentions these rules because, unlike tax law (where accountants provide guidance) or contract law (where attorneys flag issues), employment law compliance has no natural advisor at small businesses. There is no HR department to monitor changes and no compliance officer to run audits. The founder is the compliance department, on top of sales, product, and operations.

The way out is a routine: run the checklist above every quarter, and make I-9 completion part of every new hire's Day 1.

Key Takeaways
HR rules and regulations are federal, state, and local employment laws, and many of them apply from your first hire. FLSA, OSHA, IRCA, and EPA apply to virtually all employers regardless of headcount, and the NLRA reaches most private-sector employers.
12 core federal laws govern employment: FLSA (wages), Title VII (discrimination), ADA (disability), ADEA (age), FMLA (leave), OSHA (safety), IRCA (I-9), NLRA (labor), EPA (equal pay), USERRA (military), PDA (pregnancy), and GINA (genetics).
Employee thresholds trigger new obligations: 15+ activates Title VII and ADA, 20+ activates ADEA and COBRA, 50+ activates FMLA and the ACA employer mandate.
State laws often exceed federal requirements. Minimum wage, paid sick leave, anti-harassment training, pay transparency, and family leave are all areas where states frequently set higher standards.
The highest-risk compliance items for small businesses: I-9 completion ($288-$2,861 per individual), overtime classification (back pay plus liquidated damages), and anti-discrimination policies (compensatory and punitive damages capped at $50,000 to $300,000 by employer size).
Run a compliance checklist quarterly. A 2-hour quarterly review catches gaps before they become violations that cost thousands in penalties.

Frequently Asked Questions

What are HR rules and regulations?

HR rules and regulations are the federal, state, and local laws that govern how employers hire, manage, compensate, and terminate employees. They reach wage and hour questions (minimum wage, overtime, recordkeeping), anti-discrimination protections covering race, sex, age, disability and genetic information, workplace safety under OSHA, employment eligibility verification through Form I-9, leave entitlements such as FMLA, and how long records have to be kept. The defining feature is that they are external: unlike an internal policy, an employer does not get to opt out of one because it is inconvenient or because the company is small. The wage and hour, safety, and I-9 laws reach an employer from its first hire, others switch on at 15, 20, and 50 employees, and nearly every state layers on additional requirements, frequently at lower employee thresholds than the federal law it sits alongside. Where the two conflict, the employer follows whichever rule is more generous to the employee.

What are the main HR laws in the US?

Twelve federal statutes form the core: FLSA for wages and overtime, Title VII for discrimination, the ADA for disability, the ADEA for age, FMLA for family and medical leave, OSHA for workplace safety, IRCA for I-9 verification, the NLRA for labor relations and concerted activity, the Equal Pay Act, USERRA for military service, the Pregnancy Discrimination Act, and GINA for genetic information. They do not all switch on at the same moment. FLSA, OSHA, IRCA, the NLRA, the Equal Pay Act and USERRA reach an employer from its first employee. Coverage under Title VII, the ADA, GINA and the Pregnancy Discrimination Act begins at 15 employees, the ADEA picks up at 20, and FMLA waits until 50. COBRA and the WARN Act sit outside the twelve but matter at 20 and 100 employees respectively.

What HR rules apply to small businesses with fewer than 50 employees?

More than most owners expect. Below 50 employees an employer still has to meet the FLSA on wages, overtime and payroll recordkeeping, OSHA on workplace safety, IRCA on I-9 verification for every hire, the NLRA on employee organizing and wage discussions, the Equal Pay Act, USERRA, and the whole body of state employment law. Once the headcount reaches 15, Title VII, the ADA, GINA and the Pregnant Workers Fairness Act attach. At 20, the ADEA and COBRA attach. FMLA and the ACA employer mandate wait until 50. The trap is state law, which regularly starts lower than the federal equivalent: California anti-harassment training begins at 5 employees, and several states apply their discrimination statutes from the very first hire.

What documents must an employer collect from a new hire?

Four items are non-negotiable for a US employer. Form I-9 verifies employment eligibility, with Section 1 signed by the employee on their first day of work for pay and Section 2 completed by the employer within three business days. Form W-4 sets federal income tax withholding and should be in hand before the first payroll runs. Most states that levy an income tax add their own withholding form, though a few, Utah among them, work from the federal W-4. New-hire reporting goes to the state directory within 20 days of the hire date, and some states set a shorter window. Beyond those, most employers also collect a signed offer letter, emergency contact details, a handbook acknowledgment, signed policy acknowledgments for anti-harassment and confidentiality, direct deposit authorization, and benefits enrollment forms where benefits are offered.

What is the penalty for not having an I-9 on file?

A paperwork violation costs between $288 and $2,861 for each individual the violation involves, which means a missing or badly completed form is priced per person rather than per audit. Knowingly employing a worker who is not authorized carries a much steeper range: $716 to $5,724 per worker on a first order, rising to $8,586 to $28,619 per worker on a third or subsequent order. These figures are normally indexed for inflation each January, though the 2026 adjustment was skipped, so the amounts set in January 2025 are still the operative ones. Timing causes more of these than fraud does. Two separate clocks run: the worker's half of the form is due on day one, and the employer's half closes at the end of the third business day after employment starts.

Do small businesses need an employee handbook?

No federal law requires one. Several states nonetheless require written policies on particular subjects, so the handbook is usually the cheapest place to put them. California and New York each require a written harassment prevention policy; California, Connecticut, Delaware, Illinois, Maine and New York all mandate harassment prevention training that a handbook can document; and states with paid sick leave mandates expect the accrual and usage rules to be written down somewhere. Even with no legal trigger, a handbook earns its keep. It records what the rules are, proves the employee was told, and gives a manager something to point at instead of improvising. In a harassment claim, the existence of a distributed, acknowledged policy and a working complaint process is part of the employer's defense rather than a formality.

What is the difference between HR rules and HR policies?

Rules come from outside the business and policies come from inside it. An HR rule is a requirement imposed by federal, state or local law, and compliance is not a matter of preference: the FLSA requires overtime pay of 1.5 times the regular rate for hours beyond 40 in a workweek, whether or not the owner likes it. An HR policy is the employer's own operating procedure for working inside that requirement, such as a rule that overtime must be approved by a manager before it is worked. The law sets the floor and the policy sets the process. The distinction matters in a dispute, because a policy can be changed at will while a legal requirement cannot, and a policy that contradicts a legal requirement is unenforceable no matter how clearly it was communicated.

How often do HR rules change?

At the federal level, statutory change is rare and comes every few years, while agency regulations and enforcement positions from the DOL and EEOC move more often, and court decisions reinterpreting existing law arrive continuously. State law is where the real churn lives. Minimum wage rates, paid leave entitlements, pay transparency duties and harassment training requirements change most years, and many of them take effect on January 1, with another cluster on July 1 and the rest on other dates. The habit that actually holds is an annual review in the fourth quarter, timed so that anything landing on January 1 is handled before it arrives, plus email alerts from the labor department of every state where an employee actually works rather than only the state of incorporation.

Ready to transform your onboarding?

7-day free trial No credit card required
Start Your Free Trial