The Biggest HR Compliance Mistakes Small Businesses Make
Most small business owners don't set out to break employment law. They're busy running their companies and try to get by with “good enough” HR systems until it’s too late. But in the U.S., HR compliance doesn't wait, and the penalties for getting it wrong can be catastrophic and expensive.
Most small business owners don't set out to break employment law. They're busy running their companies and try to get by with “good enough” HR systems until it’s too late. But in the U.S., HR compliance doesn't wait, and the penalties for getting it wrong can be catastrophic and expensive. Here's what we see go sideways most often, and what you can do about it before a government audit, employee complaint, wage dispute, or unexpected compliance issue forces your hand.
A common misconception is that compliance rules kick in once you hit some threshold, 10, 25, or 50 employees. In reality, the moment you put someone other than yourself on payroll, you're on the hook for federal and state regulations. It only takes one disgruntled employee filing a complaint with the Department of Labor to trigger a full audit, and once an audit is triggered, they look everywhere and at everything.
The six most costly HR mistakes we see companies making
Mistake 1: No handbook, or a handbook that isn't state-specific
A generic employee handbook (yes, including one drafted by AI) is often worse than no handbook at all, because it creates a false sense of security. While ChatGPT can be helpful in some scenarios, it isn’t often up to date when it comes to laws and regulations. Every state has its own employment laws, and a policy that works in Texas may be unenforceable, or even illegal, in New York or California. We recommend building a state-specific handbook before you hit five employees, and certainly before expanding into a new state.
How To Avoid Handbook Issues
Before drafting any policy, consult the specific state laws for each location where you have employees. A solid handbook is also the foundation for everything else, payroll policies, PTO, and your first line of defense if a dispute ever reaches court. Creating a bulletproof handbook is tedious and takes an expert eye. If you want support from a team who has created hundreds of handbooks across industries, that’s where Crossborder comes in.
Mistake 2: Payroll that's set up incorrectly from the start
This is the single most expensive compliance failure we encounter. Payroll errors aren't isolated; they cascade. States regulate everything from pay frequency (some require weekly payroll for hourly workers) to the criteria an employee must meet to qualify as salary-exempt. In New York, for example, an employee must earn at least ~$62,000 annually to be considered exempt from overtime pay outside of NYC. Set this up wrong, and you're exposed to "theft of time" claims, which carry steep penalties. On top of that, quarterly tax filings, workers' compensation codes, and multi-state registrations all need to be configured correctly from day one.
How To Avoid Payroll Mistakes
Confirm your pay frequency meets state requirements for every employee classification before your first payroll run. Verify salary-exempt thresholds, set up quarterly tax accounts in every state where you have employees, and when in doubt, classify as non-exempt until you've confirmed otherwise.
Mistake 3: Workers' comp coverage that doesn't match your actual workforce
If you have a remote employee working from a state where you haven't registered or obtained workers' comp coverage, you're exposed, even if that employee is your only hire in that state. The wrong worker classification code compounds the problem. We've seen companies receive notices threatening to revoke their coverage entirely, which means they'd be legally barred from having employees until it's resolved. This is one of those mistakes that looks small on paper until it isn't.
How To Avoid Workers' Compensation Mistakes
Every time you hire in a new state, treat it like opening a new business location. Register, obtain coverage, and verify the correct workers' comp classification code. Review annually against where your employees are physically working, even if that means they are working from home.
Mistake 4: I-9 and employment verification errors
Form I-9 requirements have always been strict, but enforcement has intensified significantly in recent years. Improper documentation, missing records, or verification errors can trigger serious federal penalties. This is an area where getting the process right the first time and maintaining organized records is far cheaper than remediation.
How To Avoid 1-9 Mistakes
Complete every I-9 on time, store forms separately from personnel files, and keep them for the full required retention period. Conduct periodic self-audits to confirm forms are complete, and re-verification is current where required. When everything is completed and filed correctly, the process is far less intimidating if the Department of Homeland Security ever does come knocking.
Mistake 5: Poor documentation across the board
Offer letters, job descriptions, performance reviews, PIPs, and personnel files. Most businesses either don't have them or don't maintain them properly. Job descriptions in particular are underestimated: they're foundational to salary benchmarking, performance reviews, and defensible terminations. Personnel records must also be stored separately from other files and kept in secure, locked locations. Documentation doesn't just keep you compliant, it keeps you out of court.
How To Avoid Documations Errors
Every new hire gets a written offer letter. Every role gets a job description that reflects what the person actually does. Keep personnel records in secure, locked locations, separate from other files (including their I-9 documentation). When a difficult situation arises, clean documentation is often what determines whether it stays manageable or escalates.
Mistake 6: No clear PTO and vacation policy
An undefined PTO policy tends to get expensive at year-end. Without stipulations around accrual, carryover, and payout, businesses can find themselves obligated to pay out large balances they hadn't budgeted for. And front-loading vacation time without a clear repayment policy leaves the door open for employees to use all of it, and then leave. A written policy, built to your state's requirements, eliminates this ambiguity.
How To Avoid Policy Errors
Write your PTO policy before you need it, covering accrual, carryover, payout at termination, and any caps. Check your state's rules first: some states treat accrued vacation as earned wages, which limits your "use it or lose it" options.
A real example from our team
We were brought in to cover payroll for a client while their payroll administrator was out on medical leave. What we found was a 100+ employee company with remote staff in multiple states, none of which had proper state registrations or workers' comp coverage set up. Two states had already issued notices to revoke coverage at their physical locations. The cleanup took 12 weeks, including multiple audits with state workers' comp boards. Because of our relationships with those boards, we were able to reverse the revocation notices and negotiate lower premium rates going forward. But none of that would have been necessary with proper setup from the start.
Where to start if you want to audit your own compliance
Start with payroll. It's where government oversight is heaviest, and it's where the most expensive errors tend to live, tax filings, employee classifications, I-9 records, and workers' comp. From there, move to your documentation: do you have a current, state-specific handbook? Signed offer letters? Job descriptions that reflect what people actually do?
If the answer to any of those is "not really," you're not alone, but it's worth addressing before something forces the issue.
How Crossborder can help
HR compliance isn't a one-time project. Laws change, workforces grow, and new states bring new requirements. Most business owners we work with aren't failing because they don't care, they simply specialize in what their business does, not in the shifting landscape of employment law.
Crossborder works alongside small and mid-size businesses as their dedicated HR partner, catching problems before they become penalties, and building the systems that protect your business as it grows.
- Handbooks & policies: State-specific, built from scratch, not a template with your logo on it.
- Payroll administration: Accurate, on-time, and fully compliant across every state you operate in.
- Compliance audits: We find the gaps in your current setup before a government agency does.
- Ongoing HR support: Monthly, bi-weekly, or quarterly check-ins to keep you ahead of changes.
We work with businesses at every stage, from first hire to 50+ employees, and with Canadian companies establishing their U.S. presence for the first time. As a certified Women Business Enterprise (WBE), partnering with us can also support your supplier diversity goals.
Common Questions
What is HR compliance?
HR compliance refers to a business's adherence to all applicable employment laws and regulations at the federal, state, and local levels. This includes everything from proper payroll setup and tax filings to maintaining employee records, following wage and hour laws, and creating legally sound workplace policies. For small businesses, HR compliance also means staying current as laws change, which they often do.
What happens if a company violates HR compliance rules?
The consequences depend on the nature and severity of the violation, but they can include government-issued fines and penalties, back pay owed to employees, revocation of workers' compensation coverage (which means you can no longer legally employ workers), Department of Labor audits, and civil lawsuits from employees. One audit can cascade into a full review of every aspect of your HR and payroll practices, which is why addressing gaps proactively is always less expensive than reacting after the fact.
Do small businesses need HR compliance policies?
Yes, even if you only have one employee. The size of your business does not exempt you from federal and state employment laws. In fact, compliance obligations begin the moment you hire your first worker. Many small business owners assume they're "too small" to be on the radar, but it only takes one employee complaint to trigger an audit. Starting with a clear handbook and sound payroll practices from the beginning is far less costly than cleaning up problems later.
What should be included in an employee handbook for a small business
A small business employee handbook should include your company's PTO and vacation policy, attendance and timekeeping expectations, anti-harassment and anti-discrimination policies, code of conduct, disciplinary procedures, and any state-required notices. It should also outline how employees can raise concerns or complaints. Critically, every policy must comply with the specific state laws where your employees work, a one-size-fits-all template is rarely sufficient and can actually create legal exposure if it contradicts applicable state law.
How often should small businesses update their HR policies?
At minimum, HR policies should be reviewed annually. However, state and federal employment laws can change at any point throughout the year, so businesses should also stay alert to legislative updates in the states where they operate. Areas like paid sick leave, minimum wage, overtime rules, and mandatory workplace postings tend to change most frequently. Working with an HR partner means these updates are monitored on your behalf, rather than falling through the cracks.
Is HR compliance different for businesses with remote employees?
Yes, significantly. If you have an employee working remotely from a different state than your company's headquarters, you're generally required to comply with that employee's state laws, not just your own. This includes registering your business in that state for payroll tax purposes, carrying workers' compensation coverage in that state, and adhering to that state's wage, leave, and overtime requirements. Many businesses don't realize this until they're already out of compliance, which is why remote hiring decisions should always involve an HR compliance review first.
What's the difference between a job description and a job advertisement?
A job description is an internal document outlining the responsibilities, qualifications, and expectations for a role. A job advertisement is the public-facing communication used to attract candidates. While job descriptions are useful for internal purposes, and critical for performance management, PIPs, and terminations, they should never simply be copy-pasted as job postings. Effective job advertisements are engaging, personality-driven, and communicate your culture and benefits in a way that makes candidates want to apply.
