Payroll Compliance Checklist for 2027: What Every Employer Must Know

Payroll compliance fails in predictable places. It is almost never a misunderstanding of a complicated rule — it is a simple control that nobody owns, running unchecked for eleven months.

This checklist is organized by frequency, because that is how compliance actually works: some things must be verified every payroll, some quarterly, some once a year. Use it as a control inventory. Assign an owner to each line, and the annual scramble mostly disappears.

Reference Figures: What Is Fixed and What Moves

Half of these never change. The rest are republished every year, and several of the 2027 figures are not announced until the autumn of 2026 — so load them from the issuing agency rather than from a secondary source.

Fixed by statute — these do not change annually:

Republished annually — confirm the 2027 figure before your first payroll:

Three notes that cause real errors. The Additional Medicare threshold has never been indexed, so wage growth alone brings more employees above $200,000 every year. The Roth catch-up requirement applies to employees whose prior-year wages exceeded the applicable threshold — they must make catch-up contributions on a Roth basis, which requires the plan document, the recordkeeper, and the payroll deduction code to agree. And FUTA credit reduction states are confirmed late in the tax year, so a Form 940 budgeted at 0.6% can come in higher.

One figure you cannot look up at all: your state unemployment experience rate is assigned to your company individually and arrives by notice. Confirm one arrived for every state, and read it in full — add-on assessments are frequently listed separately and must be loaded alongside the base rate. See our new tax year update guide.

Every Payroll

These are the controls that catch errors before money moves. They take fifteen minutes.

• [ ] Variance report reviewed. Any employee whose net pay moved beyond your threshold versus the prior period has a documented explanation.
• [ ] No zero-net or negative-net checks unless deliberately created and understood.
• [ ] New hires verified — valid W-4 on file, state certificate on file, I-9 complete, correct pay rate, correct work state.
• [ ] Terminations verified — final pay computed to the correct state deadline, accrued leave handled per state law and policy.
• [ ] Time records approved by a supervisor before entering payroll, with missing punches and negative adjustments resolved.
• [ ] Overtime computed on the FLSA regular rate, including non-discretionary bonuses and shift differentials — not the base rate.
• [ ] Garnishments recalculated from the order, with disposable earnings computed on legally required deductions only, priority order applied, and the aggregate cap respected.
• [ ] Social Security wage base checked — anyone at or above $184,500 in year-to-date Social Security wages has stopped accruing OASDI.
• [ ] Additional Medicare checked — withholding began in the period cumulative wages crossed $200,000.
• [ ] Deduction totals by code compared to the prior period; a doubled benefit deduction usually means a duplicate election.
• [ ] Funding reconciled — total net + total tax liability + third-party remittances = the amount drawn.
• [ ] Release approved by someone other than the person who entered the changes.

That last line is the single highest-value control in the list. Ghost employees and inflated hours — the two most common payroll fraud schemes — both depend on one person controlling entry and release. Our How to Prevent Payroll Fraud session covers the rest of the control set.

Every Deposit Cycle

• [ ] Deposit schedule confirmed for the current year based on the lookback period (monthly vs. semi-weekly).
• [ ] Accumulated liability checked before any unusual payroll. Bonus runs, severance rounds, and equity vesting events can trip the $100,000 next-day rule, which overrides your normal schedule and promotes you to semi-weekly for the remainder of this year and all of next.
• [ ] State and local deposits made on each jurisdiction's own schedule — they do not follow the federal calendar.
• [ ] Third-party remittances sent — garnishment payments, child support, 401(k) deferrals, HSA contributions.

Retirement plan deferrals deserve their own line: deferrals must be deposited as soon as administratively feasible, and late deposits are a prohibited transaction under ERISA requiring correction, not merely a payroll delay.

Our How To Minimize And Eliminate Payroll Penalties session covers deposit penalty structure and abatement strategy.

Every Quarter

• [ ] Form 941 filed by the last day of the month following quarter end.
• [ ] Form 941 reconciled to the payroll register — total wages, federal income tax withheld, Social Security wages and tax, Medicare wages and tax. Do this every quarter. Four small reconciliations are dramatically easier than one December forensic exercise, and errors found in April are still cheap to fix.
• [ ] State withholding and unemployment returns filed per each state's schedule.
• [ ] Taxable wage matrix spot-checked — confirm traditional 401(k) deferrals reduced income tax wages but not FICA wages, and that Section 125 contributions reduced all three bases.
• [ ] Classification spot-check — review any contractor paid continuously for more than a year or paid more than a comparable employee's salary.
• [ ] State footprint reviewed — did anyone move, or did you hire in a new state? Each new work state can require withholding registration, an unemployment account, new hire reporting, and paid leave contributions.

Our Payroll Reconciliation And Reporting and How To Properly Complete The 941 Form sessions cover the tie-out mechanics, and Multi-State Taxation training covers the jurisdictional review.

Annually — January

• [ ] Forms W-2 and W-3 issued to employees and filed with the SSA by January 31.
• [ ] Forms 1099-NEC issued by January 31 for non-employee compensation of $600 or more.
• [ ] Form 940 filed for FUTA, including any credit reduction.
• [ ] New wage bases and limits loaded into the payroll system before the first payroll — Social Security wage base, deferral limits, state unemployment wage bases and rates, state minimum wages.
• [ ] New state unemployment experience rates entered. These arrive by mail or portal notice and are easy to miss; an outdated rate under-collects all year.
• [ ] W-4 exempt claims re-solicited. An exemption claim expires in mid-February of the following year; absent a new form, revert to single with no adjustments.
• [ ] State minimum wage increases applied, including any local ordinance rates, and exempt salary levels re-tested where a state sets its own threshold.
• [ ] Pay statement content re-verified against each state's itemization requirements.

Annually — Any Time

• [ ] Worker classification audit. Pull every 1099 recipient and re-test. Consistency within a role is what preserves Section 530 relief.
• [ ] Exempt/non-exempt audit. Re-test both the salary basis and the duties test. Titles are irrelevant; "salaried" is not a synonym for exempt. Several states impose salary thresholds above the federal level.
• [ ] I-9 self-audit. Technical paperwork errors carry per-violation penalties and are inspected independently of anything tax-related. See our I-9 training.
• [ ] Recordkeeping review. FLSA requires payroll records for three years and wage-computation records for two; employment tax records should be held at least four years after the tax is due or paid; ERISA and state law add their own periods. Most departments adopt a single floor satisfying the longest applicable rule. See payroll recordkeeping requirements and Payroll Records: What To Keep, What To Toss.
• [ ] Unclaimed paycheck review. Uncashed wages are subject to state escheatment law with jurisdiction-specific dormancy periods. See handling unclaimed paychecks.
• [ ] Segregation of duties walkthrough. Confirm the person who enters changes is not the person who approves and releases them.
• [ ] Business continuity test. Confirm you can run payroll if your primary system, your bank connection, or your payroll manager is unavailable. See cybersecurity and keeping payroll processing going during an outage.
• [ ] Procedures manual updated. A documented process is what lets the department absorb a resignation or pass an audit without improvising. See documenting payroll procedures and the Payroll Operations Procedures Manual.

2026-Specific: OBBBA Tips and Overtime Reporting

This is the item most likely to be missed this year, because it requires a system change months before the reporting deadline.

The One Big Beautiful Bill Act created individual federal deductions for qualified tips and qualified overtime compensation for tax years 2025 through 2028. Beginning with the 2026 tax year, employers must separately report qualified tips and qualified overtime on Form W-2, using dedicated Box 12 codes, with a tipped occupation code where applicable.

Action items:

• [ ] Isolate the overtime premium into its own earnings code. Only the premium portion of overtime mandated by Section 7 of the FLSA is qualified. Voluntary overtime, premiums owed only under state law or a collective bargaining agreement, and overtime-style bonuses do not count. If your system posts all overtime to one code, you cannot produce the required figure in January.
• [ ] Confirm tip tracking captures qualified tips separately, with occupation coding, for tipped establishments.
• [ ] Do not change FICA treatment. These deductions are claimed by the individual on their return. Qualified tips and qualified overtime remain subject to Social Security and Medicare and remain wages for withholding purposes.
• [ ] Brief managers and employees. Expect questions built on the phrase "no tax on overtime," which materially overstates what the provision does.

Our OBBBA payroll forms update and Form W-4 update and OBBBA changes sessions cover the reporting and withholding changes.

Event-Triggered: Opening a New Work State

This is the checklist most employers do not have, and the absence of it is why remote hiring generates so many penalties. Run it whenever an employee begins performing work in a state where you have no existing footprint — including when an existing employee simply moves.

• [ ] Income tax withholding registration in the new state, completed before the first paycheck.
• [ ] State unemployment insurance account opened, and the new-employer rate recorded.
• [ ] Reciprocal agreement analysis if the employee lives and works in different states — and the employee's non-residency certificate collected if residence-state-only withholding will be used. Without that certificate, work-state withholding is still owed.
• [ ] Local tax registration where the city, county, school district, or transit authority levies its own withholding.
• [ ] New hire reporting to the state's child support enforcement registry, typically within 20 days.
• [ ] Paid family and medical leave program enrollment and contribution setup, where the state operates one.
• [ ] State disability insurance contributions, where applicable.
• [ ] Workers' compensation coverage confirmed for the new state — coverage does not automatically extend across state lines.
• [ ] Minimum wage and overtime rules checked, including any local ordinance and any daily overtime requirement that differs from the federal weekly standard.
• [ ] Exempt salary threshold re-tested against the state's own level if it exceeds the federal figure.
• [ ] Pay frequency and pay lag requirements confirmed.
• [ ] Pay statement content requirements confirmed and the template updated.
• [ ] Final paycheck deadline recorded for both voluntary and involuntary separation.
• [ ] Garnishment limits for the new state noted, since the more protective of state and federal caps controls.
• [ ] Meal and rest break requirements confirmed, including any premium pay owed for a missed break.
• [ ] Paid sick leave accrual and carryover requirements confirmed.

Two notes on why this matters more than it appears. First, unregistered withholding accrues state penalties and interest from the very first paycheck, and there is no reasonable-cause argument for simply not having registered. Second, late state unemployment contributions jeopardize the federal FUTA credit — the 5.4% credit that turns a 6.0% rate into 0.6% is conditioned on timely state payment, so a state failure can cost roughly nine times the state's own penalty.

Our Multi-State Taxation training covers the registration analysis and multi-state payroll tax compliance covers ongoing operations.

Wage and Hour Compliance

• [ ] Every non-exempt employee's overtime is calculated at the FLSA regular rate, including non-discretionary bonuses and differentials.
• [ ] Multi-week bonuses are allocated back to raise the regular rate for the weeks earned.
• [ ] Compensable time is captured correctly — required training, travel between job sites, donning and doffing required gear, and controlled waiting time. See travel pay rules.
• [ ] State meal and rest break rules are followed, including premium pay where required.
• [ ] Off-the-clock work is actively policed, including after-hours email for non-exempt staff.
• [ ] Final pay meets each state's deadline, which frequently differs for voluntary versus involuntary separation. See final paycheck requirements.

Our Payroll Wage & Hour Training & Certification Program covers this section in depth.

Deductions and Garnishments

• [ ] Voluntary deductions have written, specific, revocable authorization on file.
• [ ] No deduction reduces pay below the applicable minimum wage where state law prohibits it.
• [ ] Overpayment recovery has fresh written authorization — a prior general authorization is not sufficient in most states.
• [ ] Disposable earnings for garnishment are computed on legally required deductions only.
• [ ] The more protective of the federal cap and the state cap is applied.
• [ ] Multiple orders are allocated by statutory priority, not arrival order.

See Payroll Deductions: Mandatory vs Voluntary and the garnishment hub with state-by-state rules.

Frequently Asked Questions

What is on a payroll compliance checklist for 2026?

Per-payroll controls including variance review, regular-rate verification, garnishment recalculation, wage base checks, and separated entry-versus-release authority. Deposit-cycle controls including schedule confirmation and the $100,000 next-day rule check. Quarterly controls including Form 941 filing and reconciliation to the payroll register. Annual controls including Forms W-2, W-3, 1099-NEC, and 940, loading new wage bases and state unemployment rates, and re-soliciting expired W-4 exempt claims. For 2026 specifically, add separate tracking of qualified tips and qualified overtime for Form W-2 reporting.

What is the Social Security wage base for 2026?

$184,500. The Social Security rate remains 6.2% for the employee and 6.2% for the employer. Medicare remains 1.45% on each side with no wage base, plus an employee-only Additional Medicare Tax of 0.9% on wages above $200,000.

What is the 401(k) contribution limit for 2026?

The elective deferral limit is $24,500. The catch-up contribution for employees age 50 and older is $8,000, and employees aged 60 to 63 may contribute $11,250 instead if the plan permits. The IRA limit is $7,500. Higher earners whose prior-year wages exceeded the applicable threshold must make catch-up contributions on a Roth basis, which requires the plan and the payroll system to be configured consistently.

What changed for payroll in 2026?

The most operationally significant change is that beginning with the 2026 tax year, employers must separately report qualified tips and qualified overtime compensation on Form W-2 under the One Big Beautiful Bill Act. Only the premium portion of overtime mandated by Section 7 of the FLSA qualifies — voluntary overtime, state-law-only premiums, and overtime-style bonuses do not. If your system posts all overtime to a single earnings code, isolating the premium is a configuration project that must be completed before year end.

Does the OBBBA overtime deduction change FICA withholding?

No. Qualified tips and qualified overtime remain fully subject to Social Security and Medicare and remain wages for withholding purposes. The deduction is claimed by the individual on their personal return. Expect employee questions built on the phrase "no tax on overtime," which materially overstates what the provision does.

How long do employers have to keep payroll records?

The FLSA requires payroll records for three years and wage-computation records for two. Employment tax records should be retained at least four years after the tax is due or paid. ERISA and state laws add their own periods, and unclaimed property dormancy rules can reach back further. Most departments adopt a single retention floor satisfying the longest applicable rule rather than tracking each regime separately.

Assign an Owner to Every Line

A checklist without named owners is a document, not a control. Print this, put initials and a date next to each item, and file it. That file is also your best evidence of reasonable care if an examiner ever asks how you manage compliance.

For structured coverage of the areas above:

• Paycheck Fundamentals Training & Certification Program
• Payroll Reporting Training & Certification Program
• Payroll Management Operations Training & Certification Program
• Certified Payroll Administrator and Certified Payroll Manager

Rates, wage bases, minimum wages, and state thresholds change every year, and 2026 carries a genuinely new federal reporting requirement. Verify current-year figures against the issuing agency before you rely on them.