The legal and regulatory requirements for businesses in the United States sit in three stacked layers — federal, state, and local — on top of industry-specific rules, employment law, tax and recordkeeping obligations, and formation filings that keep the entity in good standing. Missing any one of them can mean fines, personal liability, or in serious cases criminal exposure. What follows is what applies to nearly every company, and where the biggest risks sit.
The Three Regulatory Layers
Federal agencies set the nationwide baseline. The Federal Trade Commission handles consumer protection and competition across most sectors, and other agencies carry their own enforcement powers in their own domains. Federal civil penalties adjust for inflation every year, so the dollar amounts climb even without new legislation.1Federal Trade Commission. About the FTC2Federal Register. Adjustments to Civil Penalty Amounts
States add a second layer. Most require businesses to register with the Secretary of State or an equivalent agency before operating legally, and to file periodic reports confirming the company is still active.3U.S. Small Business Administration. Register Your Business If those filings lapse, the state can administratively dissolve the entity. That strips away the liability shield an LLC or corporation is supposed to provide, and owners can be held personally responsible for business debts.
Local governments add the third layer through zoning ordinances, building codes, and local business permits. Zoning decides whether a given activity is even allowed at a given address. Building code violations can produce daily fines that accumulate quickly, and local approval is required regardless of what federal or state agencies have already signed off on.
Formation and Tax Filings That Come First
Before any ongoing compliance work matters, the foundational paperwork has to exist. An Employer Identification Number, obtained by filing Form SS-4 with the IRS, is the business’s federal tax identifier. You need it to hire employees, open business bank accounts, and file returns.4Internal Revenue Service. About Form SS-4, Application for Employer Identification Number Articles of incorporation or organization, filed with the state, establish the entity’s legal existence and need to be kept accessible for the life of the business.
A company that wants S-corporation tax treatment must file Form 2553 no later than two months and 15 days from the start of the tax year the election should take effect. For a calendar-year business, that’s typically March 15. Existing entities can also file during the prior tax year. Miss the deadline and the election won’t apply until the following year unless the IRS grants late-filing relief on a showing of reasonable cause.
Keep the legal entity name, registered agent address, and names of principal officers consistent across every filing. Discrepancies trigger rejections and sometimes audits.
If you plan to bid on federal contracts or receive federal assistance as a prime awardee, you also have to register in SAM.gov and obtain a Unique Entity ID. Registration is free but can take up to 10 business days to become active, and it has to be renewed every 365 days. A lapsed registration can disqualify a business from receiving contract payments. If you only need a Unique Entity ID for sub-awardee reporting, there is a streamlined process requiring just the legal business name and physical address.5SAM.gov. Get Started with Registration and the Unique Entity ID
Employment and Labor Obligations
Employment law is where most small and mid-sized businesses get into trouble, because the rules are detailed and the penalties double the bill when you lose.
Wages and Overtime
The Fair Labor Standards Act sets the federal minimum wage at $7.25 per hour and requires non-exempt workers to be paid at least one-and-a-half times their regular rate for hours worked beyond 40 in a workweek.6U.S. Department of Labor. Handy Reference Guide to the Fair Labor Standards Act Many states set higher minimums, and the higher rate controls where it applies. Whether a worker qualifies as exempt depends on both salary level and job duties. The current federal salary threshold for exemption is $684 per week, or $35,568 annually, though that figure has been the subject of ongoing rulemaking and litigation. Employers who misclassify or fail to pay overtime can owe back wages plus an equal amount in liquidated damages — effectively double.7U.S. Department of Labor. Fair Labor Standards Act Advisor – Recovery of Back Wages
Worker Classification
Treating an employee as an independent contractor is one of the costliest mistakes a business can make. The Department of Labor uses an economic reality test under the FLSA that weighs six factors: control over the work, the worker’s opportunity for profit or loss, their investment in their own operation, the permanence of the relationship, whether the work is integral to the business, and the skill and initiative the worker brings.8U.S. Department of Labor. Fact Sheet 13: Employment Relationship Under the Fair Labor Standards Act No single factor decides the question, and the DOL has said what actually happens on the job matters more than the written contract. Getting this wrong exposes the business to back pay for wages, overtime, and benefits, plus IRS penalties for unpaid employment taxes. A new proposed rule on this topic was published in early 2026, so the specific framework may shift.
Disability Accommodations
The Americans with Disabilities Act requires employers to provide reasonable accommodations so employees with disabilities can perform essential job functions.9U.S. Equal Employment Opportunity Commission. The ADA: Your Responsibilities as an Employer That might mean a modified schedule, assistive technology, or a workspace change. The employer and employee work through an interactive process to identify what is feasible without undue hardship. Document that process carefully. If a discrimination claim is filed, the employer’s record of good-faith engagement is its primary defense.
Workplace Safety
OSHA inspects workplaces and issues citations for hazardous conditions. Serious violations can run up to $16,550 per instance, and willful or repeated violations up to $165,514 per instance, with both figures adjusted annually for inflation.10Occupational Safety and Health Administration. OSHA Penalties Employers also have to maintain logs of work-related injuries and provide safety training for dangerous equipment or materials. A pattern of willful violations can lead to criminal prosecution.
Industry-Specific Rules to Check
Certain sectors carry obligations well beyond the general baseline.
Healthcare organizations are governed by HIPAA, which has a tiered penalty structure. A violation the organization had no reasonable way to know about starts at $145 per incident; willful neglect that goes uncorrected can cost $73,011 per violation, with annual caps reaching $2,190,294. Criminal penalties can apply when protected health information is knowingly obtained or disclosed, with fines up to $250,000 and prison time up to ten years for the most serious offenses.
Banks, broker-dealers, and investment advisors operate under the Dodd-Frank Act and rules enforced by the Financial Industry Regulatory Authority, which the SEC oversees.11U.S. GAO. Securities Regulation: SEC Inspections of Financial Industry Regulatory Authority’s Governance Were Consistent with Internal Guidance FINRA sets standards for capital reserves, anti-money-laundering monitoring, and fiduciary conduct. Falling short can mean substantial fines and permanent loss of individual licenses.
Any company handling consumer personal data is subject to a growing patchwork of privacy laws. California’s Consumer Privacy Act and the EU’s General Data Protection Regulation are the most prominent, and a growing number of states have passed comprehensive privacy statutes. The common thread: disclose what you collect, explain how you use it, and let consumers opt out of data sales. Enforcement and fines are trending upward.
Beneficial Ownership Reporting
The Corporate Transparency Act created a federal requirement for certain companies to report their beneficial owners to FinCEN. In a major policy shift, FinCEN published an interim final rule on March 26, 2025, exempting all entities created in the United States from this reporting requirement.12FinCEN.gov. Beneficial Ownership Information Reporting Only entities formed under foreign law that have registered to do business in a U.S. state or tribal jurisdiction are currently required to file.
Those foreign reporting companies still have to submit initial reports and update them within 30 days of any ownership change. Penalties for noncompliance remain steep: civil fines up to $500 per day for each day the violation continues, plus potential criminal penalties up to $10,000 in fines and two years in prison for willful violations. A safe harbor protects filers who correct inaccuracies within 90 days.13Office of the Law Revision Counsel. United States Code Title 31 – Section 5336 This area has moved quickly, so verify current rules before assuming you’re exempt.
Records You Have to Keep
Record retention is itself a regulatory obligation, and falling short exposes the business to audits and spoliation claims in litigation.
On the tax side, the IRS sets these minimum retention periods:
- Three years is the baseline for most business tax records, measured from the date the return was filed.14Internal Revenue Service. How Long Should I Keep Records?
- Four years for employment tax records, measured from the date the tax is due or paid, whichever is later.
- Six years if unreported income exceeds 25% of the gross income shown on the return.
- Seven years for claims involving worthless securities or a bad debt deduction.
- Indefinitely if no return was filed, or if a return was fraudulent.
Property records should be kept until the statute of limitations expires for the year the property is sold or disposed of, because the IRS may need to verify depreciation and gain or loss calculations.
On the employment side, EEOC regulations require private employers to retain personnel and employment records for at least one year from the date the record was created or the action was taken, whichever is later. For involuntarily terminated employees, that clock starts on the date of termination.15U.S. Equal Employment Opportunity Commission. Summary of Selected Recordkeeping Obligations in 29 CFR Part 1602 Payroll records must be kept for three years under Age Discrimination in Employment Act requirements. If an EEOC charge is filed, all records related to the matter must be preserved until the case is fully resolved, including any appeals.16U.S. Equal Employment Opportunity Commission. Recordkeeping Requirements
How and When to File
Most federal and state agencies now accept filings through electronic portals. Digital signatures on those filings carry the same legal weight as handwritten signatures under the Electronic Signatures in Global and National Commerce Act, which provides that a record cannot be denied legal effect solely because it is electronic.17Office of the Law Revision Counsel. United States Code Title 15 – Section 7001 Electronic filings are faster, generate immediate confirmation, and leave an audit trail.
Some filings still have to go by certified mail with return receipt to establish proof of timely delivery.18United States Postal Service. Certified Mail – The Basics This is common for legal notices, appeals, and certain tax documents where the postmark date carries legal significance. Whichever route you use, keep every confirmation receipt. Those are your evidence in any later dispute over whether you filed on time.
Fees vary widely. Small updates or amendments might cost $20 to $50; complex corporate registrations in some states exceed $1,000 once formation fees, registered agent designations, and certified copies are added together. Payment typically runs through the agency’s portal by credit card or electronic funds transfer. Processing can take anywhere from a few business days for electronic submissions to several weeks for paper filings, so build that timeline into any deadline you’re working against.