HR compliance for small and mid-sized businesses

Amy Bakay, SHRM-SCP

HR leader with 25+ years across HR leadership roles

Staying compliant with federal, state and local employment law is one of the few areas where a small mistake creates a disproportionate cost. A missed classification, an outdated handbook, or an unreviewed I-9 file does not announce itself — it surfaces during a claim, an audit, or a departure, when the options for fixing it have narrowed.

For organizations without a dedicated HR function, the challenge is not usually willingness. It is that compliance obligations accumulate quietly across seven or eight separate areas, each with its own rules, and no one owns tracking them.

How to approach compliance

Compliance is not a project you finish. It is a set of practices you maintain, and it breaks down into three habits.

Manage it proactively

The first step is staying current with changing regulations at the federal, state and local levels, then regularly reviewing your own practices against them. For most small organizations this is genuinely difficult without outside support, because the monitoring itself is a standing job.

Educate the whole organization

Compliance is not solely an HR responsibility. Managers make the decisions that create exposure — in interviews, in performance conversations, in terminations. Regular training ensures the people making those decisions understand their role in it.

Monitor continuously

Achieving compliance once is not the same as holding it. Regular audits and periodic reviews keep an organization on track and surface gaps while they are still cheap to close.

Seven areas worth reviewing

These are the areas where exposure most often accumulates in small and mid-sized organizations, along with what tends to go wrong and what addresses it.

1. Interviewing practices

Proper interviewing technique is what keeps hiring both lawful and effective. Unlawful questions can lead to discrimination claims, legal complications and reputational damage. Poorly trained interviewers also miss qualified candidates or advance unsuitable ones, which costs the organization in a different way.

• Train managers on lawful interview technique before they sit in an interview
• Build a standardized process with consistent questions and evaluation criteria
• Document the process so hiring decisions can be explained later

2. Handbook and documentation

The employee handbook is the foundation for transparency, accountability and legal protection. Outdated or incomplete handbooks lead to misunderstandings and disputes; weak documentation practices leave the organization with little to stand on when a matter escalates.

• Review and update the handbook on a set schedule, not when something goes wrong
• Maintain a consistent system for personnel files, with records accurate and secure
• Train HR and management on documentation practice so it is applied the same way

3. Compensation and classification

Pay and classification structures determine how employees are paid, how they are classified and what they are eligible for. Errors here are among the most expensive in employment law because they compound across every affected employee and every pay period.

• Review compensation structures regularly for both equity and competitiveness
• Conduct FLSA classification audits to verify exempt and nonexempt status
• Establish clear policies distinguishing hourly and salaried treatment
• Track overtime and commission payments through a system, not a spreadsheet

4. ADA and EEO

Compliance with the Americans with Disabilities Act and Equal Employment Opportunity regulations affects hiring practice and job descriptions directly. Inaccurate job descriptions can deter qualified candidates and create exposure at the same time.

• Review job descriptions so they accurately reflect essential functions and requirements
• Train HR and management on legal considerations throughout the hiring process

5. Form I-9

I-9 compliance has become a significant area of attention for employers. Failure to complete and validate Form I-9 correctly carries per-violation penalties that accumulate quickly across a workforce, and the errors are usually clerical rather than deliberate.

• Train the staff responsible for I-9 completion on current procedure
• Audit existing I-9 records for accuracy rather than assuming they are correct
• Implement a document retention policy that keeps records secure and purges on schedule

A structured Form I-9 audit produces a findings report, a risk assessment and corrective action guidance — so you know both what is wrong and what to do about it.

6. Harassment policy

Effective harassment policy is what makes a workplace both safe and defensible. Inadequate policy leads to incidents going unreported and unresolved. An employee who believes they have been harassed should know exactly where to go and what happens next.

• Develop clear policy including reporting procedures and consequences for violations
• Conduct regular workplace respect training so employees understand policy and their rights
• Provide a reporting mechanism that does not require reporting to the person involved

7. Terminations

Properly conducted terminations reduce legal risk and give both the employee and the organization a clear path forward. Mishandled terminations generate wrongful termination claims and damage internal trust well beyond the individual involved.

• Develop clear termination policies and procedures before you need them
• Train HR and management on how terminations are conducted and documented

Where to start

If you are reviewing compliance for the first time, a structured assessment is more useful than working through the list above area by area. An HR assessment reviews policies, compliance posture, the employee lifecycle and documentation together, then produces a prioritized view of what needs attention first.

That sequencing matters. Most organizations have more open items than they can address at once, and the difference between a productive year and a frustrating one is usually whether the highest-exposure items were tackled first.

About the author

Amy Bakay has over 25 years of experience in HR leadership roles and holds the SHRM-SCP credential, the highest level of certification for HR professionals, along with a bachelor’s degree from Mississippi College Business School. She authored and instructs a master’s course, Managing the Employee Life Cycle, as adjunct faculty at Tulane University Law School.

Common questions