FirstHR

Payroll Deductions: The Employer's Guide

Every payroll deduction needs legal authority: a statute, a court order, or written consent. What you may withhold, and what you must document.

Nick Anisimov

Nick Anisimov

FirstHR Founder

Payroll•
•
25 min

Payroll Deductions

Not what comes out of a paycheck, but by what authority. The three sources, the documents behind each one, and the order when there is not enough money to go around

Every guide to payroll deductions tells you the same thing: there are mandatory ones and voluntary ones, pre-tax ones and post-tax ones, here is a list, here is how the arithmetic works. All true, all useful, and all of it skips the question that actually determines whether you are breaking the law: by what authority are you taking this money?

This guide answers that question, from the angle nobody covers: what payroll deductions are, the three sources of authority, what a valid written authorization actually has to contain, the document behind each individual deduction, and the priority order when there is not enough gross pay to satisfy everything.

The question matters because a payroll deduction is a legal act, not an arithmetic operation. Somebody earned that money, and you are removing part of it before they ever see it. That requires authority, and it can come from exactly three places: a statute compels you, a court orders you, or the employee signed something. There is no fourth. Take anything outside those three and you are withholding wages without authorization, which in many states carries a penalty considerably larger than the amount you took.

I build FirstHR, which is not a payroll processor. Your payroll system performs these deductions; what it cannot do is prove you were entitled to make them. That proof is a document, and it lives somewhere, and this article is largely about whether you can find it. General information, not legal advice, and deduction law is unusually state-specific.

TL;DR
A payroll deduction needs legal authority, and there are only three sources: a statute (income tax, Social Security at 6.2 percent, Medicare at 1.45 percent), a court or agency order, or the employee's signed authorization, which many states require in advance and which is safe practice everywhere. When pay runs short, taxes come out first and voluntary deductions last.

What Payroll Deductions Are

A payroll deduction is any amount an employer withholds from an employee's gross pay before handing over what remains. What separates a lawful one from an unlawful one is not the amount and not the purpose. It is whether you had the right to take it.

Definition
Payroll Deduction
A payroll deduction is an amount withheld by an employer from an employee's gross wages, reducing the amount paid out as net pay. Deductions are classified along two independent axes. By authority, a deduction is either statutory (required by law, such as income tax and FICA, the Social Security and Medicare taxes), involuntary (compelled by a court or agency order, such as a garnishment or tax levy), or voluntary (authorized by the employee, such as a health premium or retirement contribution). By tax treatment, a deduction is either pre-tax, reducing the wages subject to income tax, or post-tax, providing no tax benefit. Every lawful deduction has an answer to both questions. A deduction lacking any source of authority is an unlawful withholding of wages.

Note the structure of that definition, because it is the whole article. Two independent questions. Mandatory versus voluntary is a question about authority. Pre-tax versus post-tax is a question about tax. They are not the same axis and a deduction has a position on each. A traditional 401(k) contribution is voluntary and pre-tax. A garnishment is involuntary and post-tax. Confusing the two axes is why so many explanations of this topic feel muddled.

Payroll deduction, payroll deductions, deduction meaning

Same thing, singular or plural. What is worth separating is payroll deduction from payroll tax, because they are used interchangeably and are not the same.

A deduction comes out of the employee's money. A payroll tax includes the portion you pay on top, out of your own pocket, which never touches their wages and appears nowhere on their pay stub. Your matching 6.2 percent of Social Security is a payroll tax and is not a deduction from anybody.

The distinction between the two is not pedantry: it is the difference between money you are holding on someone else's behalf and money that is simply a cost of employing them.

The Three Sources of Authority

Every deduction you make rests on one of three sources of authority: a statute, a court or agency order, or the employee's written agreement. Before the money comes out, you should be able to say which one gives you the right to take it.

Every lawful deduction traces to exactly one of these. There is no fourth.
A statute says you mustStatutory deductions
Federal income tax, driven by the Form W-4 they signed at hire
Social Security and Medicare, the two halves of FICA
State and local income tax, where the state has one
State disability or paid leave premiums, in the states that mandate them
No consent needed and none possible. The employee cannot opt out and neither can you. Failing to withhold these is not a favor to the employee, it is a liability you have created for yourself.
A court or agency orders you toInvoluntary deductions
Child support, arriving as an Income Withholding Order
An IRS or state tax levy
A creditor garnishment from a court judgment
Federal student loan administrative wage garnishment
The employee's opinion is irrelevant and so is yours. These arrive as legal documents with deadlines, and ignoring one makes you personally liable for the amount you failed to withhold.
The employee agreed in writingVoluntary deductions
Health, dental, and vision premiums
401(k) or Roth contributions, health savings (HSA) and flexible spending (FSA) accounts
Union dues, charitable giving, commuter benefits
Repayment of an employer loan or advance
This is the one small employers get wrong. Many states require a signed authorization before a voluntary deduction, and some, such as North Carolina, want it to name the amount and the reason. Getting that signature first is the safe practice everywhere, because a verbal yes is almost impossible to prove when a wage claim arrives.
If you are taking money out of somebody's pay and you cannot say which of these three rows it sits in, stop. That is not a deduction. That is an unauthorized withholding of wages, and in many states it carries a penalty of its own.

The third row is where small businesses get into trouble, and they get into it with the best of intentions. An employee says yes to something in a conversation. You start deducting. Nobody objects, because nobody minds. And in the many states that require a signed authorization, you have been making an unauthorized wage deduction for eight months without either of you noticing, because there a verbal yes is not authority and the absence of a complaint is not consent.

Deductions a Statute Requires

Statutory deductions are the ones nobody has any choice about, including you. They come out of every paycheck, and no consent is sought because none is relevant.

6.2%
Social Security, up to the 2026 wage base of $184,500
1.45%
Medicare, on every dollar, with no cap at all
0.9%
Additional Medicare, above $200,000, with no employer match

Per IRS Topic 751, the combined employee FICA rate is 7.65 percent, and you match that out of your own funds. Social Security stops for the year once the employee hits the wage base. Medicare never stops, which is why the two lines diverge on a high earner's stub late in the year.

The Additional Medicare Tax is the odd one out. Per IRS guidance, you withhold it once the employee's wages pass $200,000 in a calendar year, whatever their filing status says, and there is no employer match on it the way there is on regular Medicare.

Federal income tax is the fourth statutory deduction and it is the one with a document behind it. It is driven entirely by the employee's Form W-4 read against the current withholding tables, which live in IRS Publication 15-T rather than in Publication 15 where employers often go looking for them.

No W-4 Does Not Mean No Withholding
The mistake a first-time employer makes, and it is an understandable one. If a new hire has not returned their W-4, the answer is not to withhold nothing until they do. Per IRS Topic 753, you withhold as if the employee were single or married filing separately with no other entries on step 2, 3, or 4 of the form, and you keep chasing it. There is no separate penalty rate to reach for. Withholding nothing because you lack a form is not a neutral act of patience. It is a failure to withhold, and the liability for that lands on you rather than on the employee who did not fill in their paperwork.

Deductions a Court Orders

Involuntary deductions are the ones a court or agency orders: child support, tax levies, creditor garnishments, and federal student loan garnishment. They arrive in the mail as legal documents, with deadlines, and they are not requests.

TypeArrives asCap on disposable earningsThe trap
Child supportAn Income Withholding Order, on a standard federal formUp to 50 or 60 percent, plus 5 percent more where over twelve weeks in arrearsIt outranks almost everything else, and missing the start deadline makes you liable for the amount
IRS or state tax levyIRS Form 668-W or a state equivalentNot capped by the ordinary garnishment rules. An IRS levy runs on its own exemption table; a state levy follows that state's own rulesEmployers apply the 25 percent creditor rule to an IRS levy. That rule does not apply to it at all
Creditor garnishmentA court order, following a judgmentThe lesser of 25 percent of disposable earnings, or the excess over 30 times the federal minimum wageFrequently gets nothing, because the levels above it already used up the cap
Federal student loanAdministrative wage garnishment, no court judgment neededGenerally up to 15 percent of disposable earningsIt does not require a court order, which surprises employers who are waiting for one

The two rows that behave unlike the others are the levy and the student loan. An IRS wage levy takes everything above an exempt amount set by Publication 1494, so the 25 percent rule never enters it. Administrative wage garnishment for a defaulted federal student loan reaches up to 15 percent of disposable pay with no court judgment at all.

Two things to internalize about this category. First, the cap is a percentage of disposable earnings, not of net pay. Those are different numbers. Disposable earnings is the higher of the two, and applying the cap to net pay means under-withholding and being pursued by the creditor for the shortfall.

Disposable earnings have a definition, and the list of what it subtracts is shorter than people expect. Per the Department of Labor (DOL) in Fact Sheet 30, they are what is left after legally required deductions: federal, state, and local taxes, Social Security, Medicare, unemployment insurance tax, and withholding for an employee retirement system where the law requires it. A health premium and a 401(k) deferral come out later and do not reduce the base.

Second, you cannot fire someone over a single garnishment. The Consumer Credit Protection Act bars discharging an employee because their wages were garnished for any one debt, however many collection actions were brought to collect it. The protection does not reach a second, separate debt, but the first one is covered, and terminating over it is its own violation.

The defense against every trap in that table is a record made on the day the order arrives, while the envelope is still in your hand. The type, the dates printed on its face, and what else was already running for that employee are the facts the priority rules turn on later, and nobody can reconstruct them a year afterwards.

The intake sheet for that record lives in the garnishment guide, alongside the answer deadline that carries the real liability. Neither is strictly a deduction question, but both decide what you are allowed to deduct.

Still Using Spreadsheets for Onboarding?
Automate documents, training assignments, task management, and track onboarding progress in real time.
See How It Works

Deductions the Employee Agreed To

Voluntary deductions are everything else: health premiums, retirement, union dues, charitable giving, commuter benefits, the repayment of a loan you made them. These exist only because the employee said yes, and the entire question is what form that yes took.

That yes is your authority. It is the only thing standing between a lawful deduction and a wage claim, and a great many small employers are relying on a yes that would not survive being asked about.

What worked for me
We ran a small charitable drive. People were enthusiastic, several said to just take it out of their pay, and we did, and I felt good about it. What I did not have was a signed anything. Not one form. I had a meeting where people had nodded, and an assumption that because it was for a charity and because they had wanted to, it was fine. It was not fine. In the many states that require written authorization, deducting for charitable giving without it is a textbook unauthorized wage deduction, and the fact that the money went somewhere admirable is not a defense, because the violation is taking the money without authority, not what you did with it afterwards. Nobody complained and nothing happened. That is luck, not compliance, and the difference between those two things is invisible right up until it is not.

The 401(k) deduction

A 401(k) deduction is a deferral the employee elects and you execute, so the signed deferral election is your authority and the plan document sets the boundaries. The IRS caps the employee side: elective deferrals are limited to $24,500 for 2026, with a catch-up of $8,000 for employees 50 and over, and $11,250 instead at ages 60 through 63.

Two things about it trip up small employers. The first is that the deferral lowers the income tax base but stays inside the Social Security and Medicare base, as the IRS states directly, so raising a contribution lowers the income tax line on the stub and leaves the FICA lines where they were.

The second is that the money stops being yours almost as soon as you withhold it. Under 29 CFR 2510.3-102, deferrals become plan assets once they can reasonably be segregated from your general account. A plan with fewer than 100 participants gets a safe harbor, a rule that settles the question for you: deposit within seven business days of the payday and it counts as timely.

What a Valid Authorization Looks Like

A valid authorization is written and signed, obtained before any money comes out, specific as to purpose and amount, genuinely voluntary, clear about how to revoke it, and retrievable later. The requirements vary by state, but they converge enough that following the strict version everywhere is simply easier than tracking the differences.

1
In writing, and signed
Electronic signature is generally fine and is genuinely better, because it is timestamped, retrievable, and does not live in a drawer. What is not fine is a verbal agreement, an email that says sure, or a nod in a meeting.
2
Obtained BEFORE the deduction
Not afterwards. An authorization signed after you have already taken the money does not retroactively legitimize it, and asking for one at that point tends to prompt exactly the question you did not want asked.
3
Specific as to the purpose
State the actual reason. A blanket authorization to deduct whatever the company decides is not specific and in several states is worth nothing at all.
4
Specific as to the amount
The dollar figure, or the exact percentage. Not a reference to the cost of things. The employee should be able to predict what will come out of their check before it does.
5
Genuinely voluntary
It cannot be a condition of getting or keeping the job. Coerced consent is treated as no consent, so presenting a voluntary deduction as mandatory leaves you with no real authorization at all.
6
Revocable, with the mechanism stated
Say how they cancel it and what happens to any outstanding balance if they do. Omit this and state law fills the gap, and some states let the employee withdraw the authorization whenever they choose, which is probably not what you intended.
7
Retrievable eighteen months later
The requirement nobody writes down and everybody fails. An authorization you cannot produce on the day a wage claim arrives is, in every practical sense, an authorization that does not exist.

North Carolina is a useful example of how specific a state can be. Per the NC Department of Labor, where the amount of a deduction is known in advance, the written authorization must be signed on or before the payday it applies to, must state the reason, and must state the actual dollar amount or percentage.

Where the amount is not known in advance, the employer owes a second document: written notice of the actual amount and of the employee's right to withdraw the authorization. For a cash shortage, an inventory shortage, or damage to company property, that notice goes out seven days before the payday the deduction lands on, unless the employee is separating.

Seven days of written notice of a specific amount, on top of a prior signed authorization, with the employee keeping a right to withdraw it. That is what one state requires to deduct forty dollars from a cash drawer. It is a fair indication of how seriously this is taken, and how casually most small employers approach it.

Common Payroll Deductions

Common payroll deductions fall into the same three groups as everything else here: taxes a statute requires, orders a court or agency issues, and benefits or repayments the employee signed up for. Here is the full inventory, sorted by the only thing that matters, which is where your authority comes from.

DeductionAuthorityTax treatmentAuthorization needed?
Federal income taxStatuteNot applicable. It is the taxNo. The W-4 directs the amount, not the right
Social Security and MedicareStatuteNot applicableNo, and the employee cannot opt out
State and local income taxStatuteNot applicableNo. State certificate directs the amount
Health, dental, vision premiumsEmployee consentPre-tax, IF under a Section 125 planYes. The signed benefit election is your authorization
Traditional 401(k)Employee consentPre-tax for income tax. NOT for FICAYes. The deferral election
Roth 401(k)Employee consentPost-tax. No current benefitYes. Same form, opposite tax treatment
HSA and FSAEmployee consentPre-taxYes
Commuter benefitsEmployee consentPre-tax, up to the monthly limitYes
Union duesEmployee consentPost-taxYes. A signed dues assignment from each employee, even under a union contract
Charitable givingEmployee consentPost-taxYes, and it is easy to start taking without one
Employer loan repaymentEmployee consentPost-taxYes, and get it signed when you advance the money
Uniforms, tools, equipmentEmployee consent, heavily restrictedPost-taxYes, and it still cannot breach the minimum wage floor
Child supportCourt orderPost-taxNo, and the employee cannot stop it
Tax levyAgency orderPost-taxNo
Creditor garnishmentCourt orderPost-taxNo

Read down the authorization column. Almost everything says yes. The deductions that need no authorization are the taxes and the court orders, and neither depends on a signature you have to go and get. Everything the employer actually chooses to do should rest on a document, and in many states must, and the document is the part that gets skipped.

Pre-Tax and Post-Tax

Pre-tax and post-tax is the second axis, and it is a question about tax rather than about authority. A pre-tax deduction comes out before income tax is calculated and lowers the wages subject to it, while a post-tax one comes out afterwards and saves no tax. Which of the two applies has nothing to do with whether you were allowed to take the money.

Pre-Tax Does Not Mean Pre-Every-Tax
The universal misunderstanding. Pre-tax does not mean pre-tax for the same taxes in every case. A traditional 401(k) deferral reduces the wages subject to income tax and does not reduce the wages subject to Social Security and Medicare, which are calculated on the full gross regardless. So an employee who increases their contribution sees their income tax withholding fall and their FICA stay exactly where it was. This looks like an error on the pay stub, it is entirely correct, and it is why W-2 Boxes 3 and 5 come out higher than Box 1 every January. A health premium taken through a Section 125 plan is the other case: that one does come out of the Social Security and Medicare base too.

And one piece of plumbing a small employer may not know exists: a health premium is only pre-tax if it runs through a Section 125 cafeteria plan. Per IRS Publication 15-B, a health premium paid through such a plan sits outside income tax withholding, Social Security, and Medicare alike.

A premium deducted with no such plan behind it is post-tax. You and the employee both pay more tax than you need to, on money that is going to exactly the same place. Sorting it out is an hour with an accountant, and it is worth having.

How deductions show up on the W-2

The deductions you took all year reappear in January in the shape of the W-2, and the boxes disagree with each other on purpose. Box 1 is wages after the deductions that reduced the income tax base. Boxes 3 and 5 are Social Security and Medicare wages, which a traditional deferral never reduced.

Box 12 is where the individual amounts get named. Per the IRS instructions for Forms W-2 and W-3, code D is elective deferrals to a 401(k), code AA is designated Roth contributions, code W is HSA contributions including what the employee elected through a cafeteria plan, and code DD is the cost of employer-sponsored health coverage.

Code DD is the one to watch, because it is not a deduction at all. It reports what the coverage cost, your share included, purely for information. Every January somebody reads that number as money taken out of their pay, and the question lands on whoever runs payroll.

How to Calculate Payroll Deductions

Payroll deductions are calculated in a fixed order, because each step changes the base the next step runs on. Gross pay, then the pre-tax deductions, then the taxes, then any garnishment, then the post-tax voluntary items. What survives is net pay.

Your payroll system performs this sequence for you. The reason to know it anyway is that nearly every argument you will ever have about a paycheck turns out to be an argument about which base a number was calculated on.

StepWhat it is calculated onWhere the number comes from
1. Gross pay for the periodEverything earned in the period: wages, overtime, bonus, commission, tipsTime records and pay rates
2. Pre-tax deductionsGross payThe signed elections: deferral form, benefit election, HSA or FSA election
3. Federal income taxGross pay reduced by the pre-tax deductions that lower taxable wagesThe employee's W-4 read against the IRS withholding tables in Publication 15-T
4. Social Security and MedicareThe FICA wage base, which a traditional 401(k) deferral does not reduce6.2 percent to the annual wage base, 1.45 percent with no cap
5. State and local withholdingThe state's own definition of taxable wages, which does not always match the federal oneThe state withholding certificate and the state's tables
6. GarnishmentsDisposable earnings, meaning gross minus the legally required deductions. Not net payThe order itself, and the cap that applies to its type
7. Post-tax voluntary deductionsWhatever is left, in priority order until the money runs outThe signed authorization behind each one
8. Net payWhat remainsThe figure on the check, and the only one the employee reads

A worked example, from gross to net

Here is one biweekly paycheck run through that sequence. Gross pay of $2,400, a $150 health premium through a Section 125 plan, and 5 percent deferred to a traditional 401(k). The two tax-table lines are illustrative figures. Everything else is arithmetic you can check.

LineAmountCalculated on
Gross pay for the period$2,400.00Everything earned in the period
Health premium, Section 125$150.00The elected amount. It leaves the income tax base and the FICA base
Traditional 401(k) at 5 percent$120.005 percent of gross. It leaves the income tax base and stays in the FICA base
Wages subject to income tax$2,130.00$2,400 minus the $150 premium and the $120 deferral
Wages subject to FICA$2,250.00$2,400 minus the $150 premium only
Social Security at 6.2 percent$139.50The $2,250 FICA base
Medicare at 1.45 percent$32.63The $2,250 FICA base
Federal income tax$178.00The $2,130 base read against the withholding tables. Illustrative
State income tax$85.00The state's own definition of taxable wages. Illustrative
Union dues$25.00A signed dues authorization. Post-tax, so it changes no base at all
Net pay$1,669.87What is left once every line above has come out

The two base rows are the point of the exercise. Income tax runs on $2,130 and FICA runs on $2,250, because a Section 125 premium leaves both bases while a 401(k) deferral leaves only one.

What percentage of a paycheck goes to deductions

There is no average worth quoting, and quoting one to an employee is how you end up explaining why their check came out different. Only one part is fixed: 6.2 percent for Social Security up to the wage base and 1.45 percent for Medicare on everything. The rest moves with the W-4, the state, and what the employee elected.

For a real person it is arithmetic on a real stub: total deductions divided by gross pay, times one hundred. Run it twice, once for the taxes alone and once for everything. The gap between those two numbers is the part the employee chose, and therefore the part they can change.

The Document Behind Each One

Every deduction on a pay stub is the visible end of a piece of paper. Here is the mapping, and it is the most useful thing in this article.

Every deduction has a document behind it. If you cannot produce it, the deduction is naked.
Federal income taxForm W-4At hire, before the first run
No W-4 on file does not mean withhold nothing. It means withhold as single or married filing separately, with no other entries on the form
State income taxState withholding certificateAt hire
Many states have their own form. A few piggyback on the federal W-4. Check the state where they actually work
Health and dental premiumsSigned benefit electionAt enrollment, and again at each change
This IS your written authorization. Keep it. An election form that cannot be produced is a deduction you cannot defend
401(k) or Roth contributionSigned deferral electionAt enrollment or change
Must match what the plan record says. If payroll and the plan disagree, you have two problems
Union dues, charitable givingSigned authorizationBefore the first deduction
Charitable giving is the classic unauthorized deduction. Enthusiasm in a meeting is not written consent
Employer loan or advance repaymentSigned repayment authorizationBefore the money is advanced
Get this signed when you hand over the money, not when you want it back. Afterwards is too late and they may refuse
Uniform or equipment costSigned authorization, specific as to amountBefore the deduction
And it still cannot take a nonexempt employee below minimum wage, no matter what they signed
Child supportIncome Withholding OrderWhen it arrives, on its deadline
Comes on a standard federal form. Has a start deadline. Missing it makes you liable for the amount
Tax levyIRS Form 668-W or state equivalentWhen served
Not capped by the ordinary garnishment rules. An IRS levy runs on its own exemption table, and a state levy follows that state's own rules
Creditor garnishmentCourt orderWhen served
Always ranks below child support, and frequently gets nothing at all
The test that matters is not whether the deduction was correct. It is whether, eighteen months from now, when a former employee files a wage claim, you can put your hand on the piece of paper that authorized it.

The pattern is that the documents behind the taxes and the court orders come to you whether you want them or not. The voluntary ones are the ones you have to generate, and they are the ones that end up living in an email thread, a filing cabinet, or nowhere at all.

That makes it a records problem rather than a payroll problem, and it is the actual gap. Your payroll system executes the deduction; it does not hold the signed election that entitled you to make it. That document belongs in the personnel file, retrievable, for at least as long as the retention rules require.

Being Precise About What FirstHR Does Here
FirstHR does not calculate or execute payroll deductions. Your payroll processor does that, and I am not going to blur the line in an article about the topic. What FirstHR is, is the layer that holds the authority: the signed benefit elections, the deferral forms, the loan agreements, the garnishment orders, collected with e-signature at onboarding or at enrollment, stored against the employee record, and still retrievable when someone who left two years ago disputes a deduction. That is a narrow problem. It is also the one that decides whether you win that dispute.

When the Money Runs Out

When gross pay cannot cover everything, deductions come out in a priority order: taxes first, then court and agency orders in their own ranking, and anything the employee signed up for last. Almost no guide addresses this, and it happens more often than you would expect: an employee with several deductions, some of them court-ordered, and not enough pay to go around.

You cannot pay them all, so the order decides which ones happen.

When the money runs out, this is the order
1
Statutory taxesFederal and state income tax, Social Security, Medicare. These come out first, always, and they are what define disposable earnings for everything below
2
IRS tax levy, if it predates the support orderA federal tax levy is the only thing that outranks child support, and only when the levy was entered before the underlying support order was established
3
Child supportWithheld before all other garnishments. Runs on higher limits than ordinary debt: up to 50 or 60 percent of disposable earnings, plus 5 percent more where payments are over twelve weeks in arrears
4
Federal tax levy entered after the support orderNow it sits behind child support rather than in front of it. Same document, different position, decided entirely by a date
5
Other federal debts (such as student loans) and creditor garnishmentsRanked against each other by which order was served on you first, not by type. A federal administrative garnishment is generally capped at 15 percent of disposable earnings and an ordinary creditor garnishment at 25 percent, and together they share one 25 percent ceiling, which child support above them can use up entirely
6
Voluntary deductionsHealth premiums, retirement, union dues. Last in line. If there is not enough money left, these are what does not happen
Note rows 2 and 4. They are the same document. Whether an IRS levy outranks child support or falls behind it is decided by a date you almost certainly do not have, which is why the federal guidance tells employers in that position to notify whoever issued the later document rather than guess.

The rule that places a tax levy above or below child support is federal, and it is precise. Per the guidance from the Administration for Children and Families, an IRS tax levy is the only deduction that takes precedence over child support, and only where the levy was entered before the underlying support order was established. Otherwise child support is withheld before all other garnishments, full stop.

You Do Not Know the Date, and That Is the Point
Read the rule again. Whether the IRS levy outranks the support order turns on which was entered first, not on which one arrived on your desk first. And federal guidance acknowledges directly that employers and other income withholders usually do not know the date of the original order. So the instruction is not to work it out, it is to tell whoever issued the document that arrived second. A support order landing on top of a running levy goes to the issuing child support agency, which will take it to the IRS. A levy landing on top of a running support order goes to the IRS, with a note that a withholding order is already being honored. This is one of the rare compliance questions where the correct answer is to pick up the phone rather than to reason it out.

The middle of the stack runs on dates as well. Under the Department of Education's wage garnishment rule, 34 CFR 34.20, a student loan order is paid ahead of any garnishment served after it and behind one served before it. When it arrives second, it gets only what is left of 25 percent of disposable pay.

Treasury's rule for other federal debts, 31 CFR 285.11, works the same way, and both rules put a family support order ahead of the federal order no matter when the support order arrives. Against any other garnishment, neither rule asks which debt is larger or older, only which order was served on you first.

Now look at the bottom of the stack, because it has a practical consequence you must plan for. Voluntary deductions come last. When the money runs out, it is the health premium that does not get taken, not the garnishment. That leaves you with an unpaid premium, an insurer who still wants it, and an employee whose coverage is now in question.

That situation has to be decided in advance, in a written policy, calmly. Deciding it on the morning payroll is due, under time pressure, is precisely when an employer reaches for the obvious solution of taking a little extra out of the next check, which is a deduction they may well have no authority to make.

Companies Using FirstHR Onboard 3x Faster
Join hundreds of small businesses who transformed their new hire experience.
See It in Action

The State Law Overlay

Everything above is the federal floor. It is the least protective version of these rules that exists anywhere, and states build on top of it in ways that vary enormously.

The floor itself is narrow. Per DOL Fact Sheet 16, a deduction for something that primarily benefits the employer, such as a uniform or a cash drawer shortage, may not reduce a nonexempt employee's pay below the minimum wage or cut into the overtime pay they are owed. That is the entire federal protection, and it says nothing about employees earning well above the minimum.

What states commonly addEffectWhy it catches employers
Written authorization required for any non-statutory deductionA deduction with no signed form is unlawful regardless of whether the employee agreed verballyThe employer believes agreement is agreement. The state believes agreement is a signature
Advance notice of the specific amountEven with an authorization on file, you may owe separate notice before deducting a variable amountNobody expects to need a second document for a deduction they were already authorized to make
Outright prohibition on deducting business lossesShortages, breakage, and walkouts cannot be recovered from wages at all, at any wage levelThe federal rule only protects the minimum wage floor. Some states protect the whole paycheck
Restrictions on recovering an overpaymentYou may not simply claw back your own error from the next check without consentThis is the most counterintuitive one. Your mistake does not entitle you to self-help
Stricter garnishment floorsThe state protects more of the employee's pay than the federal 30-times-minimum-wage ruleWhere state and federal differ, you must apply whichever produces the smaller garnishment

The overpayment row is the one that reliably surprises people. You overpaid somebody by mistake. The money is obviously yours. The instinct is to take it back out of the next check, and in a number of states you may not do that without written authorization, which means your innocent error becomes your violation the moment you try to fix it unilaterally.

The practical consequence of all this is that the rule that binds you depends on where the employee physically works, not where you are incorporated. One remote hire across a state line introduces a rulebook you have not read.

The Unauthorized Deduction

When you take money you had no right to take, the first consequence is that you owe it back. That much is obvious, and it is the least of it.

Then the state wage payment law arrives, and this is where it gets expensive. Many of those laws provide for penalties on top of the amount, some for liquidated or multiple damages (an extra sum beyond the wages you owe back), and a great many for the employee's attorney fees.

Attorney fees are the mechanism. A twenty dollar deduction is not worth a lawyer's time. A twenty dollar deduction with a fee-shifting statute behind it, one that can make you pay the employee's lawyer, very much is.

Deduction Practices Are Uniform, Which Makes Them Collective
Here is the structural risk that makes this worse than it looks. You do not make deduction decisions one employee at a time. You apply a practice: everybody who gets a uniform is charged for it, everybody in the drive gets the same amount taken. Which means an unauthorized deduction is almost never a single unauthorized deduction. It is the same unauthorized deduction, applied to your entire workforce, every pay period, for as long as the practice has run. That is a very attractive shape for a collective claim, and it is how a small charge that seemed trivial becomes a number that does not.

And there is a version of this that is worse still, which is a deduction from an exempt employee's salary. Under 29 CFR 541.602, an exempt employee receives a predetermined amount that is not subject to reduction because of variations in the quality or quantity of the work performed.

An improper deduction can destroy the exemption, which means the employee is now entitled to overtime, potentially retroactively. Where the deductions were an actual practice, 29 CFR 541.603 extends the loss to everybody in the same job classification working for the same managers. Without a payroll specialist, treat docking an exempt salary as a question for advice rather than one to answer yourself.

Payroll Deduction Plans

A payroll deduction plan is a systematic arrangement in which an employee authorizes a recurring deduction to fund a defined program. The term sounds generic, but it names something quite specific.

The common ones are a retirement arrangement such as a payroll deduction IRA, an employee stock purchase plan, or a health savings account funded through a cafeteria plan. What defines it is that it is voluntary, recurring, and authorized in advance, which distinguishes it from a one-off deduction and from anything a court compels.

An automatic deduction is the same arrangement seen from the payroll side. Once the election is on file the amount comes out every period with nobody re-approving it, which is convenient right up to the point the election goes stale. It is also why a revocation has to reach payroll rather than sit in somebody's inbox.

For a small employer, the one worth knowing is the payroll deduction IRA, one of the simplest retirement arrangements available. The IRS says no plan document has to be adopted and the employer has no filing requirement; your responsibility is to transmit the authorized deduction to the financial institution. You provide the plumbing and the employee funds it.

The Annual Deduction Audit

Everything above compresses into a short recurring task. Once a year, pull one pay stub for each type of employee and interrogate every line on it.

For every deduction on this stub, what is my authority?
Statute, court order, or signed consent. Name it for each line. If any line has no answer, you have found the problem, and it is almost certainly on everyone else's stub too.
Can I actually produce the authorization?
Not is there one somewhere. Can you put your hand on it, today, in under five minutes, for an employee who left last year. That is the standard a wage claim applies.
Was every authorization signed before the first deduction?
Check the dates. An authorization dated after the deduction began is not an authorization for the period before it, and that period is your exposure.
Does each authorization state a specific amount and purpose?
A blanket permission to deduct as needed fails in several states. Specificity is not a formality, it is what makes the consent informed and therefore valid.
Are health premiums running through a Section 125 plan?
If not, they are post-tax, and you and the employee are both overpaying tax. This is a plumbing question that a lot of small employers have never thought to ask.
Am I deducting anything for the business's own benefit?
Uniforms, tools, shortages, breakage, walkouts. Check the minimum wage floor, and then check whether the state prohibits it outright regardless of the floor. Many do.
Are garnishments being calculated against disposable earnings?
Not net pay. Disposable earnings is the higher figure, and using net pay means under-withholding, and the creditor comes to you for the difference.
Do I have a written policy for when gross pay cannot cover everything?
Decide the priority order and the treatment of an unpaid premium in advance, in writing. Deciding it under pressure on payroll day is when unauthorized deductions get invented.

Work it line by line off an actual stub rather than from memory, and write the answers down as you go. The sheet below is the record of that pass: one row for every deduction line on the stub, and a second tab for what the pass turned up, because a gap needs a date and an owner against it rather than a mental note to sort it out sometime.

Payroll Deduction Authority Audit Sheet
ABCDEFGHIJ
1Employee or stub reviewedDeduction line as it appears on the stubAuthority: statute, court order, or signed consentDocument that proves itDate the document was signedSigned before the first deduction (Y/N)States a specific amount and purpose (Y/N)Where the document is storedProduced in under five minutes (Y/N)Gap found
2Pull one stub per type of employeeOne row for every line on itName the source before anything elseThe signed form, the order, or the W-4Anything you could not answer in the columns to the left
3
4
5
6
7
8
9
10
11
12
13

Common Mistakes

The Recurring Failures
Treating a verbal agreement as authorization for a voluntary deduction, when many states require it in writing. Obtaining the authorization after the deduction rather than before it, which does not retroactively make it lawful. Writing a blanket authorization to deduct whatever is necessary, rather than stating a specific amount and purpose. Deducting for charitable giving because everyone was enthusiastic in a meeting, which is a textbook unauthorized deduction.Deducting a cash register shortage or breakage from wages, which can breach the federal minimum wage floor and is prohibited outright in a number of states regardless of the floor. Reaching for the workaround of asking for cash reimbursement instead of deducting, which 29 CFR 531.35 closes explicitly, because wages have to reach the employee free and clear. Clawing back your own overpayment from the next paycheck without written consent, in a state that requires it.Deducting a health premium with no Section 125 plan behind it and assuming it is pre-tax. Calculating a garnishment as a percentage of net pay rather than of disposable earnings, and under-withholding as a result. Applying the ordinary 25 percent cap to an IRS levy, which does not run on that rule at all. Paying an ordinary creditor garnishment before child support, when child support outranks everything except a levy that predates it. Skipping a garnishment because the employee asked you to, which makes you personally liable for the amount.Aggregating every deduction into one line on the pay stub in a state that requires itemization. Making any deduction at all from an exempt employee's salary without advice, which risks the exemption itself. And keeping the authorizations somewhere you cannot find them, which converts a defensible deduction into an indefensible one for no reason other than filing.

The thread through all of them is a single confusion: treating a deduction as an accounting entry when it is a legal act. An accounting entry needs to be correct. A legal act needs to be authorized. Those are separate tests, and you can pass the first while failing the second every single pay period for years.

That leaves one question worth carrying away from this, and it is not whether the deduction is right. That is your payroll system's job, and it is probably doing it fine. The question is this: if this employee walked out tomorrow and disputed every line on their pay stub, could you produce the document that entitled you to take each one?

If the answer is yes, the arithmetic will take care of itself. If the answer is no, it does not matter how correct the arithmetic was. Pull one real stub, run the audit above against it, and you will know which answer you have.

Key Takeaways
A payroll deduction is a legal act rather than an arithmetic one, and taking money out of someone's wages requires authority.
There are only three sources of that authority: a statute compels you, a court or agency orders you, or the employee agreed in writing.
Many states require a signed authorization before a voluntary deduction, and getting one first that names the amount and the purpose is the safe practice everywhere.
Mandatory versus voluntary is a question about authority while pre-tax versus post-tax is a question about tax, and every deduction has a position on both.
When gross pay cannot cover everything, taxes come out first, then child support, then the remaining garnishments, generally in the order they were served, with voluntary deductions last.
The question that decides a wage claim is whether you can produce the document that authorized each line on the stub.

Frequently Asked Questions

What are payroll deductions?

Payroll deductions are amounts an employer withholds from an employee’s gross pay before issuing the remainder as net pay. They fall into three categories defined not by what the money is for but by what gives the employer the right to take it: statutory deductions, which a law requires, such as income tax and FICA; involuntary deductions, which a court or agency orders, such as child support or a tax levy; and voluntary deductions, which the employee has agreed to in writing, such as health premiums or retirement contributions. Every lawful deduction traces back to one of those three, and money taken without any of them is simply wages withheld unlawfully.

What is a payroll deduction?

A payroll deduction is a single amount withheld from an employee’s pay for a specific purpose, such as federal income tax, a health insurance premium, or a court-ordered garnishment. The important thing about the term, and the thing most definitions miss, is that a deduction is a legal act rather than an arithmetic one. Removing money from somebody’s wages requires authority, and that authority comes from a statute, a court or agency order, or the employee’s own written consent. If you cannot name which one applies to a given line on the pay stub, you should not be taking it. Each line is the visible end of a piece of paper, and that paper is what you will be asked to produce if the line is ever disputed.

What is the payroll deduction definition?

A payroll deduction is any amount subtracted by an employer from an employee’s gross wages, resulting in the net pay actually received. Deductions are classified in two independent ways. First, by authority: mandatory, meaning required by law or by a court or agency order, versus voluntary, meaning authorized by the employee. Second, by tax treatment: pre-tax, meaning the deduction reduces taxable income, versus post-tax, meaning it does not. Those two classifications are separate questions and a deduction has an answer to both. For example, a traditional 401(k) deferral is both voluntary and pre-tax. Federal income tax is mandatory and, obviously, neither. Pre-tax also deserves a second look, because that same 401(k) deferral lowers income tax wages but not the wages subject to Social Security and Medicare.

What are the most common payroll deductions?

The mandatory ones appear on essentially every US pay stub: federal income tax, Social Security at 6.2 percent, Medicare at 1.45 percent, and state and often local income tax. The most common voluntary ones are health, dental, and vision premiums, and a retirement contribution to a 401(k) or its Roth equivalent. After that the frequency drops off: HSA and FSA contributions, commuter benefits, group term life insurance, union dues, charitable giving, and repayment of an employer loan. Wage garnishments are less common per employee but very common across a workforce of any size, and they are the ones with the sharpest consequences for getting wrong.

Do I need written authorization for a payroll deduction?

For anything voluntary, yes in many states, and it is the safe practice everywhere. It is also a step small employers routinely skip. Statutory deductions such as tax and FICA need no consent because a law compels them. Court-ordered deductions need no consent because a court compels them. Everything else, meaning health premiums, retirement contributions, union dues, charitable giving, and any repayment of a loan or an item, generally requires a signed authorization from the employee obtained before the deduction is taken. Several states are strict about the form of it, variously requiring that the authorization name the amount and the purpose, come before the deduction, and be genuinely voluntary.

What makes a payroll deduction authorization valid?

A valid authorization is written, signed, specific, voluntary, and obtained before any money comes out. The rules vary by state, but the common requirements are consistent enough to be worth following everywhere. The authorization should be in writing and signed. It should be obtained before the deduction is made rather than afterwards. It should state the specific reason for the deduction. It should state the actual dollar amount or the exact percentage, not a vague reference to costs. It should be voluntary rather than a condition of getting or keeping the job. It should say how the employee can revoke it and what happens to any outstanding balance if they do. And it should be retrievable later, because an authorization you cannot find when a wage claim arrives is, for practical purposes, an authorization that does not exist.

Can I deduct a cash register shortage from an employee's pay?

Be very careful, and in some states the answer is simply no. Federal law is the floor rather than the ceiling here: it says a deduction that primarily benefits the employer cannot take a nonexempt employee below minimum wage or cut into the overtime they are owed, and that holds even where the shortage was genuinely the employee’s fault. Many states go considerably further and prohibit deductions for business losses entirely, or require a signed authorization that is specific to that shortage and given after it occurred. California in particular is highly restrictive. The instinct to recover a loss from the person who caused it is understandable and it is one of the more reliable ways for a small employer to end up with a wage claim.

What is the difference between mandatory and voluntary payroll deductions?

The difference is who decided. A mandatory deduction is compelled by an external authority: a statute in the case of income tax and FICA, or a court or agency in the case of a garnishment or levy. The employee cannot decline it and neither can you, so asking for consent would mean nothing. A voluntary deduction exists because the employee chose it: they enrolled in the health plan, they elected a retirement contribution, they agreed to a payroll advance. Voluntary deductions call for written authorization, which many states require and which is the safe practice everywhere, and they can generally be revoked by the employee, subject to plan rules. Mandatory ones cannot be revoked by anybody.

Are union dues pre-tax or post-tax?

Post-tax, in practically every case. Dues are withheld after income tax and FICA have been calculated, so they do not reduce taxable wages and they produce no tax saving for the employee. A deduction is only pre-tax when it runs through an arrangement that is allowed to move the tax base, such as a Section 125 cafeteria plan or a qualified retirement plan, and ordinary union dues do not sit inside either one. The question that matters more on the employer side is authority rather than tax treatment. Federal labor law lets you deduct dues from pay, a practice called checkoff, only on a written assignment from each employee, even where the union contract provides for checkoff, and that signed assignment is the thing you have to be able to produce. Stop the deduction when a valid revocation arrives, on whatever terms the authorization itself sets out.

What is the difference between pre-tax and post-tax deductions?

A pre-tax deduction comes out of gross pay before income tax is calculated, which lowers the employee's taxable income and therefore their income tax withholding. A traditional 401(k) contribution and a health premium running through a Section 125 cafeteria plan are the common examples. A post-tax deduction comes out after tax has been calculated and provides no tax benefit at all: a Roth contribution, union dues, a garnishment, charitable giving. The catch that surprises employers is that pre-tax does not mean pre-tax for every tax. A traditional 401(k) deferral lowers the income tax base while leaving Social Security and Medicare wages untouched, whereas a health premium paid through a Section 125 plan comes out of both bases.

In what order do payroll deductions come out?

Statutory taxes first, because they define the disposable earnings figure that the garnishment limits are calculated against. Then involuntary deductions in their own order of priority, with an IRS tax levy outranking child support only where the levy predates the underlying support order, and child support otherwise taking precedence over every other garnishment. Below child support, a federal student loan garnishment and an ordinary creditor garnishment generally rank by which one was served on you first, and together they share a single 25 percent ceiling. Voluntary deductions come last, which means that when there is not enough gross pay to cover everything, the health premium and the retirement contribution are what fail to happen, not the garnishment.

Which garnishment gets paid first if there are several?

Child support comes ahead of every other garnishment, with one exception: an IRS tax levy that was entered before the underlying child support order was established. That is the only thing that outranks it, and note the wording, because it turns on a date rather than on which document reached you first. Federal guidance accepts that income withholders rarely know that date, and tells you to notify whoever issued the document that arrived second: the child support agency where a support order lands on top of a running levy, the IRS where a levy lands on top of a running support order. Further down, date of service does most of the ranking: a student loan order that reached you before a creditor’s garnishment is paid ahead of it, and one that reached you afterwards waits behind it. When support already takes 25 percent or more of disposable earnings, neither of them receives anything at all.

What happens if an employee's gross pay is not enough to cover all deductions?

You work down the priority order and stop when the money is gone, which means the deductions at the bottom simply do not happen that period. Since voluntary deductions sit at the bottom, the practical result is that the health premium or retirement contribution is what gets skipped, not the garnishment. This creates a second problem you have to handle deliberately: an unpaid premium does not vanish, and you need a policy for how it is recovered. Deciding that in the moment, under pressure, on the day payroll is due, is how employers end up making a deduction they had no authority to make.

Is a payroll deduction the same as a payroll tax?

No, and the terms get used interchangeably in a way that causes real confusion. A payroll tax is a specific kind of deduction, and importantly it is also something the employer pays out of its own pocket on top. When you withhold 6.2 percent of an employee’s wages for Social Security, that is a payroll deduction. When you then pay a matching 6.2 percent yourself, that is a payroll tax and it is not a deduction from anybody, because it never touched the employee’s wages. Payroll deductions is the broader category and includes many things that are not taxes at all, such as a health premium or a garnishment.

What is a payroll deduction plan?

It is a standing arrangement in which an employee signs up once and an agreed amount then comes out of every paycheck to fund one particular program. Typical examples are a payroll deduction IRA, an employee stock purchase plan, and health savings account contributions made through a cafeteria plan. Three features set it apart: the employee chose it, it repeats every pay period, and the signature came before the first dollar left, so it is neither a one-off deduction nor something a statute, court, or agency imposes. For a small employer the IRA version stands out, because the IRS names the payroll deduction IRA as one of the simplest retirement arrangements a small employer can offer, with no plan document to adopt, no employer filing requirement, and contributions made by employees alone.

How long do I need to keep payroll deduction records?

Two federal clocks run at once, so work to the longer one. The Fair Labor Standards Act sets three years for payroll records, while the IRS wants employment tax records kept at least four years after the fourth-quarter return for that year is filed. The records that matter most in a dispute are the authorizations themselves, since the amounts are reconstructible from the payroll register but the employee’s consent is not. Several states impose longer periods again, and where you have employees in more than one state the practical approach is to apply the strictest rule that reaches any of them. Note also that the clock runs from the record, not from the employment, so a departed employee’s authorizations still have to be held.

Can an employee stop a voluntary payroll deduction?

Generally yes, and you should process the revocation promptly, though the specifics depend on what the deduction was for. A charitable contribution or a savings program can usually be stopped at will. A health insurance premium is typically tied to a plan year and the enrollment rules of the plan, so it cannot simply be switched off mid-year outside a qualifying event. And where the deduction is repaying a genuine debt, such as an employer loan, revoking the authorization stops the deduction but does not extinguish the debt, which is exactly why the authorization you had them sign should have addressed what happens on revocation.

Do payroll deductions have to appear on the pay stub?

In practical terms, yes, and in many states as a matter of law. The Fair Labor Standards Act obliges you to keep records but does not require you to issue a pay stub at all, which surprises most employers. Many states do require one, and where a state regulates the content of the wage statement, an itemization of deductions is essentially always among the required items. Aggregating everything into a single line labeled deductions is a violation in states that require itemization, and it is a bad idea everywhere else, because a deduction the employee cannot see is a deduction they will eventually question.

What is the penalty for an unauthorized payroll deduction?

It varies by state and it is usually worse than the amount you took. The baseline is that you owe the money back. On top of that, many state wage payment laws attach penalties, and a number of them provide for liquidated or multiple damages plus the employee's attorney fees, which is what makes even a small unauthorized deduction worth a lawyer's time. Because deduction practices tend to be uniform across a workforce, a single unauthorized deduction applied to everyone is also an attractive basis for a collective claim, which is how a twenty dollar uniform charge becomes a genuinely expensive problem.

Can I deduct from an exempt employee's salary?

Only in a few narrow cases, and be extremely careful, because the risk here is not just the deduction, it is the exemption itself. An exempt employee must be paid a predetermined salary that is not subject to reduction based on the quality or quantity of their work. Improper deductions from that salary can destroy the exemption, and if the exemption is destroyed the employee becomes entitled to overtime, potentially retroactively. Where the improper deductions amount to an actual practice, the loss reaches everybody in the same job classification who works under the managers responsible for them. Those permitted cases are tightly drawn, and the general rule for a small employer with no payroll specialist is that deductions from an exempt employee’s salary should be treated as something to get advice on rather than something to work out yourself.

Where should payroll deduction authorizations be stored?

In the employee’s own records, somewhere you can actually retrieve them, which sounds obvious and is where most small businesses fail. The authorizations that matter belong with the personnel file: the signed benefit election, the retirement deferral election, the loan repayment agreement, the garnishment order. The test is not whether they exist somewhere, it is whether you can produce the specific document authorizing a specific deduction, for an employee who left eighteen months ago, on the day a wage claim arrives. If the honest answer involves searching an email archive, you do not have a system, you have a hope. Keep each one for at least as long as the payroll records it supports have to be kept.

Make HR the easy part of running your business

Onboarding, e-signatures, training and core HR in one place. Up and running in 5 minutes.

  • 7-day free trial
  • No credit card required
  • Cancel anytime
4.7 on G2300+ companies trust FirstHR