Most compliance failures are not discovered during audits. They are discovered after them. Here is what to check now, before enforcement season begins.
Why Q1 Is the Right Time to Audit
January 1 each year brings a wave of updated federal and state employment rules. Minimum wage adjustments, updated poster requirements, revised leave entitlements, and adjusted tax thresholds all take effect at the start of the calendar year. By March, most employers have settled into the new year’s rhythms without actually verifying that those rhythms reflect the new rules. That gap — between what changed and what your business updated — is exactly where compliance liability lives.
The DOL, IRS, and EEOC tend to ramp up enforcement activity as the year progresses, and a review conducted in March gives your business 30 to 60 days to correct any gaps identified before that pressure builds. SHRM’s 2026 compliance resources identify wage and hour enforcement, leave law updates, and worker classification as the three areas generating the most employer violations in 2026.
For employers in Georgia and the Southeast, there is an additional layer of complexity. Several neighboring states — North Carolina, Tennessee, and Florida among them — have enacted new employment laws in the past 18 months affecting non-compete agreements, wage payment timing, and employer notice requirements. Businesses with employees in multiple states may be managing obligations they do not realize apply to them.
I-9 Compliance: The Overlooked Record-Keeping Risk
Employment eligibility verification under Form I-9 is one of the most consistently under-audited areas in small business HR. Per ICE enforcement data published through the DOL,civil fines for I-9 paperwork violations in 2026 range from $288 to $2,861 per form for a first offense — and from $716 to $28,619 for knowingly employing an unauthorized worker. The fine scale rises steeply for repeat offenses, and ICE has the authority to audit any employer. Audits typically begin with a Notice of Inspection, giving employers at least three business days to produce their Forms I-9 before review.
A Q1 I-9 audit should do three things. First, confirm that every current employee has a completed I-9 on file with Section 1 signed on or before the first day of work and Section 2 completed within three business days of the start date. Second, check for documents that will expire during Q2 — many employers complete Section 3 reverification correctly the first time but miss subsequent re-verifications when documents expire again. Third, confirm that any employees onboarded remotely between March 2020 and July 2023 had their documents physically inspected after the COVID remote inspection flexibility ended. Failure to complete that catch-up review remains one of the most common I-9 audit findings today.
I-9 records for terminated employees must be retained for the greater of three years from the hire date or one year from the termination date. A Q1 audit is a good time to purge expired records and confirm that storage — whether physical or electronic — is organized in a way that permits timely production if ICE or DHS requests access.
Wage and Hour Classification: Where Most Liability Concentrates
The Fair Labor Standards Act’s classification rules for overtime exemptions have been a persistent enforcement target. The SHRM FLSA compliance audit checklist identifies two distinct issues: whether employees classified as exempt actually meet both the salary basis test and the duties test, and whether workers classified as independent contractors genuinely qualify under the economic realities standard.
The salary basis test is binary and easy to check: employees classified as exempt under the executive, administrative, or professional exemptions must earn at least $684 per week on a salary basis. If any exempt employees received salary reductions in 2025 that took them below that threshold, the exemption was lost for the entire period below the minimum, and overtime owed may have accrued. Run a quick check against payroll records for any salary adjustments made in the past 12 months.
The duties test is harder to evaluate because it requires a job-by-job analysis against the specific regulatory criteria for each exemption category. Many businesses inherit misclassifications from prior HR regimes and carry them forward without review. The DOL’s Wage and Hour Division recovered $274 million in back wages in fiscal year 2024 — the majority from overtime violations, and the majority of those from employers who misclassified employees as exempt rather than from employers who simply failed to pay overtime to workers they knew were non-exempt.
Independent contractor misclassification carries a different risk profile. A worker reclassified from contractor to employee triggers back payroll taxes, potential benefits claims, unemployment insurance exposure, and, in some states, workers’ compensation liability. The IRS, DOL, and state revenue agencies all use different tests to evaluate contractor status, which means a worker who qualifies as a contractor under one test may not qualify under another. If any contractors have worked exclusively for your business, on-site, for more than six months, that relationship deserves a fresh look.
Posting Requirements, Handbooks, and the Traps That Catch Employers Flat
Federal labor law posting requirements are updated without public notice or employer notification. The required posters — covering FLSA, FMLA, OSHA, EEOC, and USERRA, among others — must reflect current information and must be displayed where all employees can see them. A poster from 2022 or earlier is almost certainly out of date for at least one requirement. The DOL issues updated versions that are available at no cost, but employers must proactively check and replace them.
Employee handbooks present a subtler problem. Handbook policies that conflict with current law do not just fail to protect the employer — they can actively create liability. A non-solicitation policy that is too broad may violate the NLRA’s protections for concerted activity. A social media policy that restricts employees from discussing wages or working conditions may face similar scrutiny. A policy stating that the handbook is not a contract is necessary but not sufficient if other language implies job security. A Q1 review of handbook language against current federal and Georgia state requirements is one of the highest-value low-cost compliance steps available to small businesses.
Finally, confirm that your OSHA 300 log for 2025 was properly completed if your business had any recordable incidents last year, and that the OSHA 300A summary — the annual summary of work-related injuries and illnesses — was posted between February 1 and April 30, 2026, as required by OSHA’s recordkeeping standards. OSHA recordkeeping requirements apply to most employers with 10 or more employees, but coverage depends on both employer size and industry classification — certain low-hazard industries are partially exempt. If you are unsure whether your business is covered, OSHA’s recordkeeping exemption lookup is a reliable starting point. The April 30 posting deadline is often overlooked.
A Q1 compliance audit covers a lot of ground — I-9 records, FLSA classification, poster requirements, handbook language, and OSHA recordkeeping are just the starting points. OneSource PEO provides Georgia-based small and mid-size businesses with ongoing HR compliance support, including annual audits, handbook reviews, and wage and hour guidance from experienced professionals. Visit onesourcepeo.com or call (470) 253-7120to to learn how we keep your business current without adding to your administrative load.