Updated April 2026

The rise of remote work has fundamentally changed the legal landscape for American employers. What was once a niche arrangement has become a permanent feature of the modern workplace. According to recent surveys, more than a quarter of all full-time employees in the United States now work remotely at least part of the time, and many do so across state lines. An employee who lives in New Jersey but works for a company headquartered in New York, a software engineer in Texas whose employer is based in California, or a customer service representative in Florida working for an Ohio company—each of these arrangements creates a distinct set of legal obligations that employers ignore at their peril.

Multistate compliance is not a single legal problem but rather a web of overlapping state-law obligations spanning employment taxes, wage and hour standards, workers’ compensation, unemployment insurance, paid leave, non-competition agreements, data privacy, and business registration. Every state has its own rules, and those rules frequently conflict. A policy that is lawful and compliant in one state may expose an employer to liability in another. As employers have expanded their hiring footprints to attract talent regardless of geography, the compliance burden has grown accordingly.

This article provides a structured overview of the principal multistate compliance challenges facing U.S. employers with remote workforces. It is written for business owners, human resources professionals, and in-house counsel seeking to understand the landscape and identify where expert legal counsel is most urgently needed. While this discussion touches on many of the major issues, it is not a substitute for jurisdiction-specific legal advice, and employers should consult qualified employment counsel when making decisions affecting their workforce.

I. Tax Nexus and Employer Withholding Obligations

When an employee works from a state other than the state where the employer is incorporated or primarily operates, a host of tax obligations may be triggered. The threshold concept is “nexus”—a sufficient connection between the employer and a state to justify that state’s assertion of taxing authority. Historically, nexus required some physical presence in a state. The presence of a remote employee, however, can itself constitute physical presence sufficient to create nexus, even where the employer has no office, property, or other assets in that state.

State Income Tax Withholding

Employers are generally required to withhold state income taxes for the state in which an employee performs work—not where the employer is located. This means that if a company headquartered in Illinois hires a remote employee who works exclusively from Wisconsin, the employer must register as an employer with Wisconsin, withhold Wisconsin income tax from that employee’s wages, and remit those withholdings to the Wisconsin Department of Revenue. The employee would file a Wisconsin income tax return, not an Illinois return, for that income.

The situation becomes more complicated when employees work from multiple states. Employees who split their time between a home office in one state and a company office in another may owe income taxes in both states. Most states apportion wages based on the percentage of time worked in each state, although the methodologies differ. A small number of states—notably New York, Connecticut, Delaware, Nebraska, and Pennsylvania—apply what is known as the “convenience of the employer” doctrine. Under this rule, if a nonresident employee works remotely for reasons of their own convenience rather than out of employer necessity, that state may tax all of the employee’s wages as if the work were performed there, even on days the employee does not physically work in that state. For employers with significant New York-based operations, in particular, this rule has real teeth and has been consistently upheld by the courts.

Employers must register with each state in which they have withholding obligations. Failure to register, withhold, and remit can result in back taxes, interest, and penalties assessed directly against the employer. States have become increasingly aggressive in auditing for remote work nexus, and the exposure can be significant for employers who have not kept pace with the growth of their remote workforce.

Unemployment Insurance

Unemployment insurance (UI) taxes are similarly state-specific. Under the Federal Unemployment Tax Act (FUTA) and the associated state frameworks, employers must pay UI taxes to the state where an employee performs work. The general rule, known as the “localization of services” test, looks first to whether the employee’s services are localized in a single state. If so, that state has exclusive UI jurisdiction. If services are performed in multiple states, the analysis proceeds through a series of tie-breaker rules, eventually defaulting to the state of the employer’s principal place of business.

For most remote employees who work entirely from home in a single state, the analysis is straightforward: UI taxes are owed to the state of the employee’s home. But employers must ensure they are registered for UI purposes in each relevant state and that they are using the correct state UI tax rate, which varies significantly and is further influenced by each employer’s individual experience rating. Misclassifying the state for UI purposes can result in assessments of back taxes and, critically, may affect employees’ eligibility for benefits.

Corporate Income Tax and Other Business Taxes

Beyond payroll taxes, a remote employee’s presence in a state may create corporate income tax nexus for the employer. While the Supreme Court’s decision in South Dakota v. Wayfair (2018) addressed sales tax nexus in the context of e-commerce, its reasoning has influenced state positions on corporate income tax nexus as well. Many states now assert that a single remote employee performing substantive business activities—sales, management, software development, customer support—is sufficient to create corporate income tax filing obligations, regardless of whether the employer has any other presence in the state.

Some states have enacted economic nexus thresholds that establish nexus based on sales volume or payroll alone, without requiring physical presence. Employers should work with their tax advisors to map the states in which they have remote employees and assess whether corporate income tax returns are required in those states.

II. Wage and Hour Compliance

The Fair Labor Standards Act (FLSA) establishes a federal floor for minimum wage and overtime pay, but states are free to provide greater protections. With a remote workforce spread across multiple states, employers must comply with the more protective of the federal or state standards applicable to each employee’s work location—not the location of the company’s headquarters or main office.

Minimum Wage Disparities

As of 2026, the federal minimum wage remains $7.25 per hour, but the majority of states have minimum wages substantially above that floor. Washington, California, and several other states have minimum wages exceeding $17.00 per hour, with scheduled increases built in. Some cities and counties have adopted local minimum wages even higher than their state’s baseline. An employer with remote employees in multiple states must maintain a wage structure that meets or exceeds the applicable minimum for each location. A blanket “one-size-fits-all” wage floor set at the federal rate will expose the employer to liability in the many states where that rate is lawfully insufficient.

Overtime Rules

The FLSA requires overtime pay at one and one-half times the regular rate for hours worked over 40 in a workweek, with exemptions for executive, administrative, and professional employees meeting specific criteria. California, however, requires daily overtime—time and a half for hours worked over eight in a single day and double time for hours over twelve—in addition to weekly overtime. Alaska and Nevada also impose some form of daily overtime obligation. An employer accustomed to federal overtime rules may unknowingly violate California law by applying only the federal standard to its California-based remote employees.

State exemption thresholds also differ. California, New York, and Washington impose salary thresholds for overtime exemptions that exceed the federal threshold. An employee who is legitimately exempt under federal law may nonetheless be non-exempt in their state of work and entitled to overtime.

Pay Frequency, Pay Stub Requirements, and Final Pay

States impose varying requirements on how often employees must be paid. Some states require weekly or biweekly pay for certain categories of workers; others allow monthly pay. Many states impose detailed pay stub requirements—mandating that pay stubs include specific information such as gross wages, itemized deductions, hours worked, and applicable pay rates. California’s pay stub requirements are among the most detailed in the nation, and noncompliance can expose employers to per-employee, per-pay-period penalties.

Final pay rules are equally varied. When an employee is involuntarily terminated in California, final wages—including accrued vacation—must be paid immediately at the time of termination. In contrast, other states allow a pay period or two before the final paycheck is due. An employer that applies its home-state final pay practices to employees in other states risks violating those states’ prompt payment statutes.

Expense Reimbursement

A growing number of states require employers to reimburse employees for necessary business expenses, including expenses incurred while working remotely. California Labor Code Section 2802 is the most well-known example, requiring employers to indemnify employees for all necessary expenditures or losses incurred in direct consequence of the discharge of their duties. This can include a portion of home internet and phone costs for employees who work primarily from home. Illinois, Massachusetts, Montana, Iowa, and the District of Columbia have comparable reimbursement requirements. Employers should audit their expense reimbursement policies against the requirements of each state in which they have remote employees.

III. Workers’ Compensation and Unemployment Insurance Coverage

Workers’ compensation is a state-mandated no-fault insurance system that provides wage replacement and medical benefits to employees injured in the course of employment. Every state has its own workers’ compensation regime, and coverage requirements, benefit levels, and insurance mechanisms differ substantially.

Remote employees are generally entitled to workers’ compensation coverage under the law of the state in which they work—their home state. An employer that carries workers’ compensation coverage only in its home state may find itself uninsured or underinsured with respect to remote employees working in other states. Most commercial workers’ compensation policies include “other states” coverage provisions that can be extended to cover employees in additional states, but employers must affirmatively elect this coverage and often must list the relevant states in the policy. Failure to maintain proper coverage can expose employers to direct liability for injured employees’ medical and lost-wage claims, as well as significant regulatory penalties.

Some states, including Ohio, North Dakota, Washington, and Wyoming, operate state-run (monopolistic) workers’ compensation funds and do not permit coverage through private insurers. Employers with remote employees in these states must register and obtain coverage through the state fund. This is a frequently overlooked requirement that can create significant liability.

IV. Paid Leave Laws

The United States has no federal mandate for paid sick leave or paid family and medical leave, but an ever-expanding constellation of state and local laws fills the gap. As of 2026, more than a dozen states have enacted paid sick leave laws, and a comparable number have enacted paid family and medical leave programs funded through payroll contributions. Dozens of cities and counties have enacted their own paid leave ordinances.

State paid sick leave laws typically require employers to provide a set number of paid sick hours per year—often 40 to 72 hours—that employees may use for their own illness, the illness of a family member, or other qualifying reasons such as domestic violence. The accrual rates, carryover rules, permitted uses, notice requirements, and anti-retaliation protections differ by state. An employer operating in multiple states cannot apply a single uniform paid sick leave policy and be confident it complies everywhere; the policy must be reviewed against each state’s law or, in some cases, multiple local laws within a single state.

Paid family and medical leave (PFML) programs are funded through mandatory employee and/or employer payroll contributions and provide partial wage replacement to employees who take leave for qualifying reasons—the birth or adoption of a child, serious personal illness, or the serious illness of a family member. States with PFML programs currently include California, Colorado, Connecticut, Delaware, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Oregon, Rhode Island, Washington, and the District of Columbia. Employers must register with each applicable state program, remit contributions (and withhold the employee share), and provide required notices to employees. Multistate employers need to track each state’s contribution rates, benefit levels, and administrative requirements, all of which change periodically.

One particular compliance challenge arises when an employer’s voluntary paid leave benefits are more generous than a state mandate. Some states allow employers to apply their own paid leave plans in lieu of a state-run program, provided the plan meets minimum requirements. Whether and how an employer can integrate private plans with state PFML programs is a complex question that requires careful legal and financial analysis.

V. Non-Competition and Restrictive Covenant Agreements

Few areas of employment law reveal the divergence among states as starkly as the law of non-competition agreements. The enforceability of covenants not to compete varies enormously from state to state—from California, which renders them void and unenforceable as a matter of public policy (with limited statutory exceptions), to states that enforce reasonable restrictions relatively freely under a common-law reasonableness standard.

California Business and Professions Code Section 16600 provides that every contract by which anyone is restrained from engaging in a lawful profession, trade, or business is void. This prohibition is broadly construed and applies to non-solicitation of employees as well as non-solicitation of clients in many circumstances. Recent legislation strengthened California’s position further by requiring employers to notify employees and former employees of unenforceable non-compete clauses and prohibiting retaliation against employees who refuse to sign them. California employees working remotely for out-of-state employers are generally entitled to the protections of California law. An employer that assumes its non-compete agreements—valid under its home state’s law—are enforceable against its California remote employees may be in for an unpleasant surprise.

Minnesota joined California in 2023 by enacting a near-total ban on non-compete agreements for employees and independent contractors. Oklahoma, North Dakota, and Oklahoma have long-standing prohibitions as well. The Federal Trade Commission issued a rule in 2024 that would have effectively banned most non-competes nationally, though that rule faced significant legal challenges and its ultimate fate remains uncertain. Regardless of the federal outcome, the state-level patchwork of non-compete law is extensive and must be navigated carefully.

Even in states that enforce non-competes, courts apply varying standards of reasonableness regarding duration, geographic scope, and the legitimate business interest being protected. A two-year, nationwide non-compete might be enforceable in Florida but blue-penciled—rewritten by the court to narrower scope—in New York, and void entirely in California. Choice-of-law clauses in employment agreements, by which the employer attempts to designate its home state’s law as governing, are not always honored by courts in the employee’s state of residence, particularly where the employee’s state has a fundamental public policy against non-competes.

Employers should review all restrictive covenant agreements with legal counsel to ensure they are tailored to the law of the state in which each employee is located, and should not assume that a single form agreement is enforceable across all jurisdictions.

VI. Employee Data Privacy

Data privacy law in the United States is largely a creature of state legislation, and the landscape has grown substantially more complex in recent years. While there is no comprehensive federal employee privacy law comparable to the EU’s General Data Protection Regulation, numerous states have enacted or are in the process of enacting laws that directly affect how employers may collect, store, use, and share employee data.

California leads the field with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). Although originally focused on consumer data, the CCPA/CPRA now covers employee personal information with limited exceptions. California employers—and employers with California-based remote employees—must provide employees with detailed notices at or before the point of collection describing the categories of personal information collected and the purposes for which it is used. Employees have rights to know, delete, correct, and limit the use and disclosure of their personal information. The California Privacy Protection Agency, empowered under the CPRA, has authority to investigate and enforce these obligations.

Several other states—including Colorado, Virginia, Connecticut, Texas, and Washington—have enacted comprehensive privacy laws with varying employee carve-outs and obligations. Texas passed its own comprehensive privacy law effective in 2024. Washington State has a separate biometric data privacy law that regulates the collection and use of facial recognition and other biometric data—a matter increasingly relevant as employers adopt technology-enabled monitoring and authentication tools for remote employees.

Remote work has made employee monitoring a particularly sensitive data privacy issue. Employers have legitimate interests in ensuring productivity and protecting confidential information. Many states, however, restrict or regulate monitoring of employees’ electronic communications, keystrokes, screen activity, and computer usage. New York enacted a law in 2022 requiring employers to provide advance written notice of electronic monitoring, and several other states have similar requirements. An employer that deploys monitoring software for its remote workforce without regard to applicable state law may face both regulatory liability and employee relations problems.

Employers should adopt a clear, written remote work data privacy and monitoring policy that is reviewed against the requirements of each state in which remote employees work. The policy should address what data is collected, how it is used, how long it is retained, and what rights employees have with respect to that data.

VII. Business Registration and Foreign Qualification

Most states require companies incorporated or organized in another state to register as a “foreign” entity before transacting business within the state. The definition of “transacting business” differs from state to state but generally captures ongoing commercial activity that goes beyond isolated or sporadic transactions. Having an employee performing work in a state—particularly a permanent remote employee—is widely regarded as sufficient to constitute transacting business in that state, triggering foreign qualification requirements.

Foreign qualification involves filing an application with the Secretary of State (or equivalent agency), paying filing fees, appointing a registered agent for service of process in the state, and, in many states, filing annual reports and paying annual fees. Failure to register can result in the company being unable to maintain suits in the state’s courts and, in some states, civil penalties. Importantly, foreign qualification is separate from and in addition to tax registration obligations; an employer must often register both with the Secretary of State and with the state’s department of revenue or taxation.

Some states impose additional licensing requirements on certain industries. A financial services company, a staffing firm, an insurance company, or a contractor may be subject to industry-specific licensing obligations in each state where its employees work. Employers in regulated industries should undertake a comprehensive licensing review when adding remote employees in new states.

VIII. Employee Benefits and ERISA Considerations

Employee benefit plans governed by the Employee Retirement Income Security Act (ERISA) are generally subject to federal rather than state law, which preempts state laws that “relate to” covered benefit plans. As a result, state laws imposing substantive requirements on employer-sponsored health plans, retirement plans, and similar benefits are largely preempted. This federal uniformity is one of the benefits of the ERISA framework for multistate employers.

However, certain state insurance mandates may still apply if an employer’s health plan is fully insured (i.e., underwritten by an insurance company) rather than self-insured. Fully insured plans must comply with state insurance mandates in the state where the insurance policy is issued, which can create disparities between insured and self-insured employers. Self-insured plans avoid state mandates entirely, which is one reason larger employers often self-insure.

Beyond health insurance, multistate employers must consider state-specific requirements for certain benefits that are not preempted by ERISA. For example, many states have enacted requirements for retirement savings programs targeting employers that do not offer their own retirement plans. California’s CalSavers program, Illinois Secure Choice, OregonSaves, and a growing number of similar programs require covered employers to automatically enroll employees in state-run individual retirement account programs unless the employer already sponsors a qualifying retirement plan. These programs vary in their coverage thresholds, contribution structures, and employer obligations. An employer operating in multiple states must identify which state programs apply to its employees and ensure compliance or demonstrate that a qualifying employer-sponsored plan is in place.

State continuation of coverage requirements (sometimes called “mini-COBRA” laws) also vary. While federal COBRA applies to employers with 20 or more employees, many states have enacted continuation of coverage requirements applicable to smaller employers or providing broader coverage than federal COBRA. These requirements apply based on the state in which coverage is issued, and employers with employees in multiple states should ensure their benefits administration addresses state-specific continuation obligations.

IX. Practical Compliance Strategies

Given the complexity of multistate compliance, employers need a structured approach to managing their obligations as their remote workforce grows or shifts. The following strategies can help establish a manageable compliance framework.

Maintain a Real-Time Remote Work Inventory

Employers should maintain an up-to-date record of each employee’s physical work location, not merely their mailing address. Employees frequently move without notifying their employers, and a move from one state to another can trigger a cascade of new compliance obligations. Periodic confirmations of work location—incorporated into annual enrollment cycles or performance review processes—can help employers stay current. Employment agreements and remote work policies should include an obligation for employees to notify HR before changing their work location to another state.

Conduct a State-by-State Legal Audit

Before permitting remote work in a new state, employers should engage employment counsel to conduct a compliance review covering, at a minimum: employer registration and qualification requirements; payroll tax and withholding obligations; wage and hour standards, including minimum wage, overtime, and pay frequency; workers’ compensation and unemployment insurance registration; paid leave requirements; enforceability of existing restrictive covenants; data privacy obligations; and any industry-specific licensing requirements. This audit does not need to be repeated in full each time a new employee is hired in a familiar state, but it should be updated when state laws change significantly.

Build Location-Specific Employment Policies and Documents

A single, national employee handbook or set of employment agreements will rarely satisfy every state’s requirements across a large remote workforce. Employers should consider developing state-specific addenda or supplements to their handbook that address jurisdiction-specific requirements—California meal and rest break rules, New York pay frequency requirements, Massachusetts non-compete limitations, and so on. Offer letters and non-competition agreements should be reviewed by counsel familiar with the law of the employee’s work state before they are used.

Partner with Experienced Payroll and HR Technology Vendors

Maintaining compliance with tax withholding, UI registration, and payroll recordkeeping across dozens of states is not a task most employers should manage manually. Robust payroll technology platforms can automate registration notifications, track jurisdiction-specific withholding rates, and help manage the compliance calendar for recurring filings. However, technology is not a substitute for legal judgment; employers should ensure their platforms are configured correctly for each jurisdiction and should periodically audit their payroll outputs against applicable requirements.

Consider Employer of Record Arrangements for Limited Presences

Where an employer has only one or two employees in a given state and does not wish to undertake the full burden of employer registration in that state, an Employer of Record (EOR) arrangement may be a practical alternative. Under an EOR model, a third-party entity serves as the legal employer of record for workers in a given jurisdiction, handling payroll, tax registration, and HR compliance. The business retains operational control over the work performed. EOR arrangements can reduce direct compliance burdens but introduce their own legal and commercial considerations, including the need for a well-drafted commercial agreement and due diligence on the EOR provider’s financial stability and compliance track record.

Stay Current as Laws Change

State employment laws are a moving target. Minimum wages increase on scheduled intervals. New paid leave programs are enacted and amended. Non-compete law continues to evolve both at the state and potential federal level. Data privacy obligations are expanding. Employers should subscribe to employment law updates from their counsel, monitor legislative developments in the states where they have remote employees, and budget for periodic legal reviews. What is compliant today may not be compliant in eighteen months.

Conclusion

Remote work is here to stay, and so is the multistate compliance challenge that accompanies it. For employers, the temptation to ignore compliance obligations in states where they have a handful of remote employees—hoping that regulators will not notice—is understandable but unwise. State revenue agencies, labor departments, and attorneys general have become increasingly sophisticated in identifying non-compliant employers, and the penalties for sustained noncompliance can be severe: back taxes with interest, civil penalties, private lawsuits by employees, and reputational harm.

The employers that navigate multistate compliance most successfully are those that treat it as an operational issue requiring systematic management, not a one-time legal problem to be solved and set aside. That means real-time tracking of where employees work, proactive legal review when entering new states, jurisdiction-sensitive employment documents, investment in compliant payroll infrastructure, and ongoing vigilance as laws evolve.

If your organization is growing its remote workforce—or if you are uncertain whether your existing compliance framework is adequate for the states in which your employees work—we encourage you to speak with an experienced employment attorney. The cost of a proactive compliance review is almost always a fraction of the cost of remedying non-compliance after the fact.

DISCLAIMER: This article is provided for general informational and educational purposes only and does not constitute legal advice. It does not create an attorney-client relationship. The laws described are subject to change, and their application to specific circumstances varies. Employers should consult qualified legal counsel for advice specific to their situation before making employment or compliance decisions.