Identifying Your Top HR Compliance Risks as You Grow
An HR compliance issue, in plain terms, is any gap between what employment law requires and what a business actually does in practice. It can be a paperwork gap, a pay calculation error, a policy that never got updated, or a manager making a call that contradicts the employee handbook. None of it requires bad intent. In Asure’s experience, most of it comes from growth outrunning process.
If you run a growing business in professional services, healthcare, construction, manufacturing, hospitality, or restaurants, the risk is rarely a single catastrophic failure. It is a handful of recurring problem areas that tend to show up in a predictable order as your headcount and complexity increase.
The five risk categories to watch as you grow
Misclassification. Calling a worker an independent contractor, or a role exempt from overtime, does not make it so. Contractor status depends on the actual working relationship. The IRS, for example, looks at the entire relationship and asks whether the business controls, or has the right to control, what the worker does and how the work gets done (IRS.gov, “Independent contractor (self-employed) or employee?”). Exempt status under the Fair Labor Standards Act (FLSA), the federal wage and hour law, generally requires meeting both a salary test and a duties test, and job titles do not determine it (DOL.gov, Fact Sheet #17A). The label in the offer letter settles neither question.
Wage and hour errors. Unpaid off-the-clock work, miscalculated overtime, and improper paycheck deductions are the core wage and hour exposures. The FLSA requires nonexempt employees to be paid at least one and one-half times their regular rate for hours worked over 40 in a workweek (DOL.gov, Handy Reference Guide to the FLSA), and some states go further. California, for example, requires time and a half for hours worked over eight in a workday and double time for hours over 12 (California DIR, Overtime).
Outdated handbooks. A handbook written for 12 employees in one state does not hold up once the business has 40 employees across three states. Policies on leave, overtime, and discipline need to reflect current law in every state where people work, not just the state the company started in. Federal labor law applies to handbook rules too. Under the National Labor Relations Act, employees covered by the Act have the right to discuss their wages with coworkers whether or not they are represented by a union, and the NLRB states that policies that prohibit or chill those conversations are unlawful (NLRB.gov, Your Right to Discuss Wages).
Inconsistent manager behavior. Two managers handling the same kind of performance issue in two different ways is not a culture problem. It is a legal exposure problem, because uneven treatment of employees in similar situations is the kind of evidence a discrimination or retaliation claim is built on.
Missing postings and recordkeeping gaps. Required workplace notices, I-9 documentation, and personnel records sound like minor administrative tasks until an agency audit or an employee complaint asks for them and they are not there. The deadlines are specific. A new hire must complete Section 1 of Form I-9 no later than the first day of employment, and the employer must complete Section 2 within three business days of the employee’s first day of work for pay (USCIS, Completing Section 1; USCIS, Completing Section 2). The FLSA requires payroll records to be kept for at least three years, and the records wages are computed from, such as time cards, for two years (DOL.gov, Fact Sheet #21). Posting requirements vary by law, and not every employer is covered by every law, so the set of required notices changes as headcount grows (DOL.gov, Workplace Posters).
Why these cluster around growth moments
These risks rarely appear evenly. They cluster at specific inflection points, because each one changes something structural about how the business operates.
Hiring in a new state is the clearest trigger. A new location means new wage and hour rules, new leave laws, and new posting requirements, often before payroll or HR has caught up to the fact that a second state is now in play.
Hiring the first manager is another. Once someone other than the owner is making hiring, discipline, and scheduling decisions, the business needs documented, repeatable practices. Without them, each manager improvises, and improvisation is where inconsistency starts.
Headcount crossing a legal threshold is a third, and it is easy to miss because nothing visibly changes on the day it happens. The key federal lines arrive in this order.
* Virtually every employer. The Equal Pay Act, which requires that men and women in the same workplace be given equal pay for equal work (EEOC.gov, Equal Pay/Compensation Discrimination), covers virtually all employers (EEOC.gov, Business/Private Employer Coverage).
* 15 employees. Title VII of the Civil Rights Act, the Americans with Disabilities Act (ADA), and the Genetic Information Nondiscrimination Act (GINA) apply once a business has 15 or more employees for at least 20 calendar weeks in the current or preceding calendar year (EEOC.gov, Business/Private Employer Coverage). The Pregnant Workers Fairness Act (PWFA), in effect since June 27, 2023, also applies to employers with 15 or more employees and requires reasonable accommodation for known limitations related to pregnancy, childbirth, or related medical conditions, unless the accommodation would cause an undue hardship (EEOC.gov, What You Should Know About the PWFA).
* 20 employees. The Age Discrimination in Employment Act (ADEA) applies at 20 or more employees for at least 20 calendar weeks in the current or preceding calendar year (EEOC.gov, Business/Private Employer Coverage). Federal COBRA continuation coverage generally applies to private-sector group health plans of employers with at least 20 employees on more than 50 percent of their typical business days in the previous calendar year (DOL.gov, An Employer’s Guide to Group Health Continuation Coverage Under COBRA).
* 50 employees. The Family and Medical Leave Act (FMLA) covers a private-sector employer that has 50 or more employees in 20 or more workweeks in the current or preceding calendar year. That employer coverage test has no distance requirement, and public agencies and public and private elementary and secondary schools are covered regardless of size (DOL.gov, Fact Sheet #28). Under the Affordable Care Act, an employer with at least 50 full-time employees, including full-time equivalent employees, on average during the prior year is an applicable large employer, subject to the employer shared responsibility and information reporting provisions (IRS.gov, Determining if an employer is an applicable large employer).
FMLA coverage and FMLA eligibility are separate tests, and the 75-mile rule belongs only to the second. Once a business is a covered employer, an individual employee is eligible for FMLA leave only after working for the employer for at least 12 months, logging at least 1,250 hours of service in the 12 months before the leave starts, and working at a location where the employer has at least 50 employees within 75 miles (DOL.gov, Fact Sheet #28A). A covered employer can therefore have employees who are not yet eligible, such as a recent hire or someone at a small, remote location. Covered employers must also display the FMLA notice of employee rights (DOL.gov, Workplace Posters).
State laws can apply sooner. California’s Fair Employment and Housing Act, for example, applies its discrimination protections to employers with five or more employees and prohibits harassment in workplaces of any size, and the California Family Rights Act likewise requires employers with five or more employees to provide job-protected family and medical leave to eligible employees, far below the federal FMLA’s 50-employee line (California Civil Rights Department, Employment). A business can cross any of these lines mid-quarter, with no internal process that flags it.
Changes to benefits or retirement programs round out the list. Adding a new benefit plan or a 401(k) brings disclosure, eligibility, and nondiscrimination rules that a simpler program did not carry. A traditional 401(k) plan, for example, requires annual nondiscrimination tests to verify that employee deferrals and employer matching contributions do not favor highly compensated employees (IRS.gov, 401(k) plan overview).
How to prioritize which risk to fix first
Not every gap deserves the same urgency. A useful way to sort them is by two questions. How likely is this to surface, and how costly is it if it does?
Start with whatever is tied to pay. Misclassification and wage and hour errors create direct financial liability that reaches back into past pay periods. Under the FLSA, the Department of Labor or an employee can recover back wages plus an equal amount in liquidated damages, generally for two years, or three years for willful violations (DOL.gov, Handy Reference Guide to the FLSA). Fix the pay-related gaps first.
Next, look at whatever just changed. If you added a state, added a manager, or crossed a headcount threshold in the last year, assume the handbook, postings, and manager practices tied to that change have not caught up yet, and check them specifically rather than reviewing everything at once.
Then address inconsistency at the point where it is most visible, which is usually manager-level decisions on discipline, scheduling, and performance. A documented standard that managers are trained to apply consistently closes more exposure than a lengthy policy nobody follows.
In Asure’s experience, recordkeeping and postings come last, not because they do not matter, but because they are usually the fastest to fix once the higher-risk items are addressed.
Frequently asked questions
What are the top HR compliance risks for a growing business?
The five to watch are misclassification, wage and hour errors, outdated handbooks, inconsistent manager behavior, and missing postings or recordkeeping gaps. They tend to surface at growth moments, such as hiring in a new state, hiring a first manager, crossing a headcount threshold, or changing benefits or retirement programs.
When does the FMLA apply to an employer?
A private-sector employer is covered by the Family and Medical Leave Act once it has 50 or more employees in 20 or more workweeks in the current or preceding calendar year. The employer coverage test has no distance requirement. Public agencies and public and private elementary and secondary schools are covered regardless of size (DOL.gov, Fact Sheet #28).
Which employees are eligible for FMLA leave?
An employee of a covered employer is eligible after working there for at least 12 months, logging at least 1,250 hours of service in the 12 months before the leave starts, and working at a location where the employer has at least 50 employees within 75 miles. The 75-mile test applies only to employee eligibility (DOL.gov, Fact Sheet #28A).
At what headcount do federal anti-discrimination laws apply?
Title VII, the ADA, and GINA apply to employers with 15 or more employees for at least 20 calendar weeks in the current or preceding calendar year, and the ADEA applies at 20 or more employees over the same period (EEOC.gov, Business/Private Employer Coverage). The PWFA applies to employers with 15 or more employees (EEOC.gov, What You Should Know About the PWFA). The Equal Pay Act covers virtually all employers (EEOC.gov, Business/Private Employer Coverage).
Do state employment laws use the same thresholds as federal law?
Not always, and some reach much smaller employers. California’s Fair Employment and Housing Act, for example, applies its discrimination protections to employers with five or more employees and prohibits harassment in workplaces of any size (California Civil Rights Department, Employment). Check the rules in every state where you have employees.
Which HR compliance risk should a growing company fix first?
Start with pay. Misclassification and wage and hour errors carry liability for past pay periods, including back wages plus an equal amount in liquidated damages under the FLSA, generally for two years, or three for willful violations (DOL.gov, Handy Reference Guide to the FLSA). After pay, review whatever just changed, then manager consistency, then postings and recordkeeping.
The federal and state rules cited in this guide were last verified in October 2026.
Getting the expertise without the headcount
If your business has no standing legal or HR compliance function, building one is usually more than a company this size needs. Asure HR Compliance is built for exactly this stage. It provides on-demand support from certified HR professionals, delivered as an add-on alongside AsureCentral or AsureWorks, with proactive reviews rather than a once-a-year scramble. It is designed for businesses dealing with the same triggers covered here, including multi-state operations, hiring growth, manager inconsistency, an outdated handbook, or changes to benefits and retirement programs, without adding a dedicated HR hire.
Growth is supposed to create more opportunity, not more exposure. Knowing which risks to fix first is what keeps it that way.
