Most HR compliance gaps don't announce themselves. They accumulate quietly — in outdated employee handbooks, inconsistently applied policies, misclassified workers, and documentation that hasn't been reviewed in years. By the time an organization realizes there's a problem, the cost of addressing it is significantly higher than it would have been to prevent it.
As organizations begin planning for 2027, now is the right time to take an honest look at your HR infrastructure. This checklist is designed to help HR leaders, executive directors, and organizational decision-makers identify where their compliance posture is strong — and where it needs attention.
What HR Compliance Actually Means
Compliance is often misunderstood as a checkbox exercise — something you do to satisfy an auditor or avoid a fine. In practice, effective HR compliance is about building the systems, documentation, and practices that allow your organization to operate consistently, treat employees fairly, and respond confidently when questions arise.
That includes everything from how you classify workers and document performance conversations to whether your policies reflect current law and whether your managers understand and apply them consistently.
A well-functioning compliance infrastructure doesn't just protect your organization from legal risk. It creates the conditions for a more equitable, predictable, and professional workplace.
The Compliance Checklist: Eight Areas to Assess
1. Employee Handbook and Policies
Your employee handbook is the foundation of your HR infrastructure. It communicates expectations, establishes procedures, and — when written and maintained well — protects both the organization and its employees.
Ask yourself:
- When was your handbook last reviewed and updated?
- Does it reflect current federal, state, and local law?
- Are your policies written clearly enough that a new employee could understand and follow them?
- Do your managers know what the handbook says — and apply it consistently?
Outdated handbooks are one of the most common compliance vulnerabilities we see. Policies that were accurate five years ago may no longer reflect current legal requirements or organizational practice.
2. Worker Classification
Misclassification of employees as independent contractors — or of exempt employees as non-exempt — is a significant and frequently overlooked compliance risk. The consequences can include back wages, penalties, and reputational damage.
Ask yourself:
- Have your worker classifications been reviewed recently?
- Do your independent contractor relationships meet the legal tests for contractor status in your jurisdiction?
- Are your exempt/non-exempt classifications based on current FLSA criteria?
If you haven't reviewed classifications in the past two to three years, it's worth doing so before 2027.
3. Hiring and Onboarding Documentation
The hiring and onboarding process generates a significant amount of required documentation — and gaps in that documentation can create problems down the road.
Ask yourself:
- Are your I-9 forms completed correctly and stored appropriately?
- Do you have signed offer letters and job descriptions on file for current employees?
- Are background check processes compliant with applicable law, including ban-the-box requirements in your jurisdiction?
- Is your onboarding process consistent across departments and locations?
Inconsistency in hiring and onboarding documentation is a common finding in compliance audits — and one that's relatively straightforward to address with the right systems in place.
4. Performance Management and Documentation
How your organization documents performance — and how consistently it does so — matters both for employee development and for legal protection.
Ask yourself:
- Do managers conduct and document regular performance conversations?
- Are performance improvement plans used consistently and documented appropriately?
- Is your disciplinary process clearly defined, consistently applied, and documented?
- Do employees have access to their performance documentation?
Organizations that lack consistent performance documentation often find themselves in difficult positions when employment decisions are challenged.
5. Leave and Accommodation Policies
Leave and accommodation requirements have expanded significantly in recent years, and many organizations are operating with policies that haven't kept pace.
Ask yourself:
- Do your leave policies reflect current federal and state requirements, including FMLA, state paid leave laws, and any applicable local ordinances?
- Do you have a clear, documented process for handling accommodation requests under the ADA?
- Are managers trained to recognize and appropriately respond to leave and accommodation requests?
This is an area where the gap between policy and practice is often significant — and where the risk of inconsistent application is high.
6. Compensation and Pay Equity
Pay equity has become an increasingly prominent compliance and organizational culture issue. Many organizations have not conducted a formal pay equity analysis.
Ask yourself:
- Do you have a documented compensation philosophy and structure?
- When did you last review compensation for equity across gender, race, and other protected characteristics?
- Are your pay practices compliant with applicable equal pay laws?
- Do managers understand what they can and cannot discuss regarding compensation?
Pay equity analysis doesn't have to be a massive undertaking, but it does need to be intentional and documented.
7. Training and Acknowledgment Records
Compliance training — harassment prevention, workplace safety, data privacy, and others — is only effective if it's completed, documented, and reinforced.
Ask yourself:
- Do you have records of required training completions for all employees?
- Are acknowledgment forms (handbook receipt, policy acknowledgments) signed and stored?
- Is training content current and reflective of applicable law?
Missing training records are a common finding in audits and investigations — and they're entirely preventable.
8. Separation and Offboarding
How an organization handles employee separations — whether voluntary or involuntary — is a significant compliance area that is often underprepared.
Ask yourself:
- Do you have a consistent, documented offboarding process?
- Are final pay requirements met in compliance with state law?
- Is access to systems and facilities revoked promptly upon separation?
- Are separation agreements reviewed by legal counsel before use?
Inconsistent offboarding practices create both legal risk and operational vulnerability.
What to Do With What You Find
Working through this checklist will likely surface a mix of areas where your organization is well-positioned and areas that need attention. That's normal — and it's exactly the kind of honest assessment that makes compliance work meaningful.
The next step is prioritization. Not every gap carries the same level of risk, and not every organization has the same capacity to address everything at once. A structured compliance engagement can help you identify which issues to address first, develop a realistic action plan, and build the systems that will serve your organization for years to come.
How C5 Compliance Services™ Can Help
C5 Organizational Consulting is now accepting 2027 engagements for C5 Compliance Services™. Our compliance consulting work includes compliance audits, targeted action packages, and broader organizational consulting engagements designed to help organizations assess and strengthen their HR infrastructure.
We work with nonprofits, schools, workforce organizations, and employers of all sizes. Engagement spots for 2027 are limited.