Employment law compliance in India is no longer simply about maintaining a few registrations, issuing appointment letters or filing statutory returns.
For businesses, employment-law risk can arise from something as simple as an incorrect salary structure, an improperly handled termination, an employee working remotely from another state, a contractor being treated like an employee, or HR records that do not match payroll.
This has become particularly important in 2026 following the implementation of India’s four Labour Codes and the introduction of new central and state-level rules.
For an Indian business, the practical question is not:
“Do we have all the required HR policies?”
It is:
“Are the way we hire, pay, manage, monitor and exit employees actually compliant with the law?”
This guide explains the key areas businesses should review in 2026 and provides a practical framework for building an employment-law compliance system.
1. What Has Changed for Indian Businesses in 2026?
India’s four Labour Codes have consolidated a large number of existing labour laws into four broad frameworks:
- Code on Wages, 2019
- Industrial Relations Code, 2020
- Code on Social Security, 2020
- Occupational Safety, Health and Working Conditions Code, 2020
The Codes came into effect on 21 November 2025, with central rules and state-level implementation continuing to shape the practical compliance requirements for employers.
The important point for businesses is that Labour Code compliance is not simply a matter of changing references in HR policies.
Businesses may need to review:
- employment contracts;
- salary structures;
- payroll calculations;
- working hours and overtime;
- social-security contributions;
- termination processes;
- contractor arrangements;
- workplace safety;
- statutory records; and
- state-specific requirements.
The Ministry of Labour and Employment publishes the Labour Codes, rules, FAQs and employer guidance. Businesses should also monitor the requirements applicable in the states in which their employees actually work.
What this means for employers
If your business has not reviewed its employment practices since the Labour Codes became operational, 2026 is a good time to conduct a structured compliance review.
2. Start With Your Workforce — Not Your Policies
One of the biggest mistakes businesses make is starting an employment-law audit by checking whether all their HR policies exist.
The better starting point is:
Who is actually working for the business?
Your workforce may include:
- permanent employees;
- probationers;
- fixed-term employees;
- trainees and apprentices;
- consultants;
- independent contractors;
- contract labour;
- interns;
- inter-State migrant workers;
- gig or platform workers; and
- employees working remotely.
Different categories can have different legal implications.
Don’t rely only on the contract label
Calling someone a “consultant” does not by itself determine the legal nature of the relationship.
For example, consider a consultant who:
- works full-time;
- follows fixed working hours;
- reports to a company manager;
- uses company equipment;
- receives employee-style performance reviews; and
- performs an ongoing core business function.
The business should examine whether the actual relationship is consistent with the contractual arrangement.
A simple workforce review
For every category of worker, ask:
- Who recruited them?
- Who controls their work?
- Who pays them?
- Who determines their working hours?
- Who approves leave?
- Who evaluates performance?
- Who can terminate the engagement?
- Where do they actually work?
This exercise can reveal classification and compliance risks that a contract review alone may miss.
3. Salary Structure and Payroll: One of the Biggest Compliance Risks
Payroll should be one of the first areas businesses review under the new Labour Code framework.
The Code on Wages introduces important rules around the concept of “wages”, minimum wages, payment of wages, overtime and deductions.
Businesses should therefore review how compensation is structured.
This includes:
- basic pay;
- dearness allowance, where applicable;
- house rent allowance;
- special allowance;
- incentives;
- commissions;
- bonuses;
- reimbursements;
- retention payments;
- joining bonuses; and
- variable compensation.
CTC is not the same as statutory wages
A common problem is treating the employee’s CTC as though it automatically represents the statutory wage base.
It does not.
CTC is a commercial compensation concept. Statutory wage calculations depend on the applicable legal definitions and rules.
Businesses should therefore examine whether their salary structure and statutory calculations are consistent with the law.
The six-record payroll check
A simple way to identify inconsistencies is to compare:
Employment contract → Payroll master → Payslip → Bank payment → Statutory records → Accounting records
These records should broadly tell the same story.
If an employee’s appointment letter states one salary, the payroll system uses another, the payslip shows a third structure and statutory calculations use a fourth figure, the business has created unnecessary compliance and dispute risk.
4. Employee Exits Need a Proper Process
Employee exits are another major source of employment-law risk.
Before issuing a termination letter, the business should first determine what type of exit is actually taking place.
It could be:
- resignation;
- misconduct termination;
- poor-performance termination;
- retrenchment;
- redundancy;
- fixed-term expiry;
- retirement;
- abandonment;
- closure-related termination; or
- negotiated separation.
The legal process can differ depending on the situation.
Poor performance is not the same as misconduct
A poor-performance case will generally require evidence such as:
- defined expectations;
- measurable objectives;
- performance feedback;
- reasonable opportunity to improve;
- performance reviews; and
- a final assessment.
A misconduct matter may instead require:
- an allegation;
- evidence;
- an opportunity to respond;
- an inquiry where required; and
- a proportionate disciplinary decision.
Businesses should avoid using a single termination template for every situation.
Keep a clear record
For important employee exits, the business should be able to answer:
- What happened?
- When did it happen?
- Who made the decision?
- What evidence was considered?
- What was the employee told?
- Was the employee given an opportunity to respond?
- Why was the final action taken?
This is particularly important if the employee later challenges the decision.
5. Performance Management Can Become Legal Evidence
Performance management is not only an HR exercise.
Performance reviews, emails, PIPs and manager feedback may later become evidence in an employment dispute.
One of the biggest problems arises when HR records contradict the reason given for termination.
For example:
Annual appraisal: “Consistently exceeds expectations.”
Three weeks later — termination letter: “Persistent and serious performance deficiencies.”
The contradiction does not automatically make the termination unlawful. However, the business may now have to explain the apparent inconsistency.
A better performance-management process
A performance improvement plan should ideally identify:
- the specific performance issue;
- expected standards;
- measurable targets;
- improvement period;
- support provided;
- review meetings;
- employee responses; and
- final outcome.
The objective is not to create excessive paperwork.
It is to ensure that the business’s records accurately reflect what actually happened.
6. Contractors and Consultants: Check How They Are Actually Managed
Outsourcing work does not automatically eliminate employment-law risk.
Businesses should periodically review contractors and outsourced workers, particularly where they work closely with company employees.
Ask:
- Who recruits them?
- Who supervises them?
- Who allocates daily work?
- Who approves leave?
- Who manages attendance?
- Who evaluates performance?
- Who disciplines them?
- Who supplies equipment?
- Who pays them?
- Who can remove them from the assignment?
This does not mean that operational involvement automatically converts a contractor into an employee.
It does mean that businesses should identify situations where the written outsourcing arrangement and actual working relationship are significantly different.
Contractor compliance should also cover
Depending on the arrangement, businesses may need to review:
- wages;
- statutory contributions;
- licences and registrations;
- working conditions;
- safety;
- records;
- welfare requirements; and
- contractual protections and indemnities.
7. Working From Another State Can Create Compliance Questions
Remote and hybrid work have changed where employees actually perform their jobs.
A company may have its registered office in one state while employees permanently work from another.
This creates a practical question:
Does the employee’s actual work location trigger additional state-level compliance requirements?
Businesses should review:
- the employee’s actual work location;
- the applicable establishment;
- state-specific employment legislation;
- working hours;
- leave;
- minimum wages;
- registrations;
- holidays; and
- other local requirements.
This is especially important for businesses with employees spread across multiple states.
One HR policy does not always mean one compliance position
A national HR policy can provide consistency, but businesses should maintain a state-wise compliance matrix where necessary.
Maharashtra, for example, has published state rules and related materials under the Labour Code framework. Other states may have their own requirements and implementation timelines.
Therefore, businesses should monitor both:
Central requirements + applicable state requirements.
8. Social Security: PF, ESI and Gratuity
Social-security compliance should be reviewed independently rather than assuming that payroll automatically gets everything right.
Businesses should examine the applicability and calculation of:
- provident fund;
- ESI;
- gratuity;
- maternity-related benefits; and
- other applicable social-security obligations.
What should be checked?
At a minimum:
- employee eligibility;
- wage components;
- contribution calculations;
- contractor workers;
- employee transfers;
- historical discrepancies;
- statutory records; and
- payment timelines.
Businesses should pay particular attention to situations where the salary structure has changed over time.
A payroll system may continue calculating contributions using an old structure even though the employee’s compensation has subsequently been redesigned.
9. POSH Compliance Is More Than Having an Internal Committee
Many businesses treat POSH compliance as complete once they constitute an Internal Committee.
That is not enough.
A functioning POSH framework should cover:
- Internal Committee constitution;
- required members;
- external member;
- training;
- employee awareness;
- complaint mechanisms;
- conflict management;
- inquiry procedures;
- confidentiality;
- records;
- recommendations;
- implementation; and
- required reporting.
POSH also applies to modern workplaces
Workplace-related conduct may occur through:
- email;
- messaging applications;
- video calls;
- work-related events;
- business travel;
- company WhatsApp groups; and
- remote working platforms.
Businesses should therefore ensure that their POSH framework reflects how employees actually work.
10. Working Hours, Overtime and Leave
Employment compliance is not limited to salary payments.
Businesses should also review:
- working hours;
- weekly rest;
- overtime;
- leave;
- attendance;
- holidays; and
- applicable state requirements.
Watch for the “attendance contradiction”
Technology can create an unexpected problem.
For example:
HR attendance records: 9:30 a.m. to 6:30 p.m.
But:
- access-control records;
- manager instructions;
- email traffic;
- project systems; or
- other operational records
may indicate substantially longer working hours.
Not every system login proves that an employee was working.
However, significant inconsistencies should be investigated because they can become relevant in an overtime or working-hours dispute.
11. Employee Data and Workplace Monitoring
HR departments now hold large amounts of personal information, including:
- identity details;
- bank information;
- salary;
- tax information;
- attendance;
- performance records;
- disciplinary records;
- background-verification information;
- health information;
- biometric data;
- CCTV footage; and
- employee communications.
The Digital Personal Data Protection framework adds another important dimension to employee-data governance.
Businesses should be able to explain:
What employee data do we collect, why do we collect it, who can access it, where is it stored, how long is it retained and when is it deleted?
Employee monitoring requires governance
Businesses may use:
- CCTV;
- biometric attendance;
- GPS;
- device-management tools;
- email monitoring;
- productivity software;
- screenshots; or
- access logs.
The question is not simply whether the technology can be used.
Businesses should consider whether the monitoring is appropriately justified, communicated, controlled and proportionate to its purpose.
12. Recruitment and AI: A New Employment-Law Risk
Businesses are increasingly using technology to recruit employees.
Examples include:
- automated CV screening;
- AI interview tools;
- candidate-ranking systems;
- automated assessments; and
- background-verification platforms.
This creates a new management question:
Who is responsible if an automated recruitment system produces discriminatory or otherwise problematic outcomes?
Businesses using AI in recruitment should understand:
- what the system evaluates;
- what data it uses;
- whether it may disadvantage particular groups;
- whether human review exists;
- how exceptions are handled; and
- what information the technology vendor provides.
AI can assist with recruitment decisions, but businesses should not assume that responsibility disappears because software made the recommendation.
13. Employment Contracts Should Reflect How the Business Actually Operates
Employment contracts are often copied from old templates and rarely reviewed.
Businesses should periodically review provisions relating to:
- role and responsibilities;
- compensation;
- working hours;
- probation;
- confidentiality;
- intellectual property;
- conflicts of interest;
- termination;
- notice periods;
- garden leave;
- data protection;
- company property; and
- post-employment obligations.
Be careful with restrictive covenants
Businesses often use broad non-compete clauses to protect their interests.
However, simply inserting a broad restriction does not guarantee enforceability.
The better approach is to identify the actual business interest being protected.
For example:
- confidential information → strong confidentiality controls;
- intellectual property → clear ownership and assignment provisions;
- customer relationships → appropriate contractual and operational protections;
- transition during notice → properly structured notice/garden-leave arrangements.
The contract should solve the business problem rather than merely contain more legal language.
14. Moonlighting and Conflicts of Interest
The question “Is moonlighting legal?” does not have a simple yes-or-no answer for every situation.
Businesses should instead consider:
- the employment contract;
- working-time obligations;
- confidentiality;
- conflicts of interest;
- competing businesses;
- intellectual property;
- use of company resources;
- performance impact; and
- disclosure requirements.
The real concern may not be that an employee has another activity.
It may be that the activity:
- competes with the employer;
- exposes confidential information;
- affects working hours;
- uses company resources; or
- creates an actual conflict of interest.
A well-designed policy should address those risks directly.
15. Intellectual Property and Use of AI Tools
Employees may create valuable intellectual property during employment, including:
- software;
- designs;
- documents;
- inventions;
- databases;
- content;
- business processes; and
- AI-assisted work products.
Employment contracts should clearly address ownership and confidentiality.
Businesses should also have rules governing the use of external AI tools.
For example, an employee may unknowingly upload:
- customer information;
- source code;
- confidential business documents;
- financial information; or
- proprietary data
into an external AI platform.
Businesses should therefore establish clear rules around:
- approved AI tools;
- confidential information;
- company data;
- intellectual property;
- access controls; and
- employee responsibilities.
16. Maintain Records That Tell the Same Story
Good employment compliance is not just about having documents.
It is about having consistent documents.
Businesses should periodically check whether:
Contract → HRIS → Payroll → Attendance → Statutory records → Manager records
are broadly consistent.
Common red flags include:
| Red flag | What it may indicate |
| Contract salary differs from payroll | Contract/payroll inconsistency |
| Consultant works like a full-time employee | Classification risk |
| Overtime appears in attendance but not payroll | Wage/overtime risk |
| Employee works permanently from another state | State compliance issue |
| Positive appraisal immediately before termination | Evidentiary concern |
| Missing POSH records | Governance/process risk |
| HR policy differs from actual manager practice | Process risk |
The objective is not to create paperwork for its own sake.
It is to ensure that if the business is questioned later, its records accurately reflect reality.
17. What Should Businesses Check in an Employment Compliance Audit?
A practical 2026 employment-law audit can be organised into eight areas.
1. Workforce
Identify:
- employees;
- contractors;
- consultants;
- fixed-term workers;
- apprentices;
- interns; and
- other worker categories.
2. Locations
Map where employees actually work and identify applicable state requirements.
3. Contracts
Review employment agreements, salary structures, amendments and key HR policies.
4. Payroll
Test:
- wages;
- allowances;
- overtime;
- deductions;
- statutory contributions; and
- final settlements.
5. HR Processes
Review:
- recruitment;
- performance management;
- disciplinary action;
- grievances;
- complaints; and
- termination.
6. POSH and Workplace Conduct
Check the Internal Committee, training, awareness, complaint process and records.
7. Contractors
Compare contractual arrangements with how workers are actually managed.
8. Data and Technology
Review employee data, monitoring tools, background checks and AI-based HR systems.
18. A Practical 30-Day Compliance Plan
Businesses do not need to fix every employment-law issue at once.
A structured 30-day exercise can help.
Week 1: Map the workforce
Identify:
- who works for the business;
- how they are engaged;
- where they work; and
- which entities or establishments employ them.
Week 2: Review payroll and contracts
Compare:
Contract → Payroll → Payslip → Statutory records
Identify discrepancies in salary structures, contributions and final settlements.
Week 3: Review HR processes
Focus on:
- performance management;
- disciplinary action;
- termination;
- POSH;
- grievances; and
- contractor management.
Week 4: Review state and technology risks
Check:
- state-wise compliance;
- remote employees;
- employee data;
- monitoring systems;
- AI recruitment tools; and
- background verification.
Then create a simple compliance register showing:
Issue → Risk → Action required → Owner → Deadline
19. Questions Every Business Should Ask Quarterly
Employment compliance should not be a once-a-year exercise.
Management and HR teams should periodically ask:
- Have we hired new categories of workers?
- Are any employees now working from another state?
- Have salary structures changed?
- Do payroll and contracts still match?
- Are contractors being managed differently from their contracts?
- Have we introduced new monitoring or AI tools?
- Have there been significant disciplinary or termination decisions?
- Is our POSH mechanism functioning?
- Have Labour Code rules or state requirements changed?
- Are statutory payments and records up to date?
- Could we reconstruct the employment history of a disputed employee?
These questions help businesses identify problems before they become disputes.
20. The Biggest Employment-Law Mistakes Businesses Should Avoid
In practice, many employment-law problems arise from a relatively small number of recurring mistakes.
Mistake 1: Treating compliance as a policy exercise
Having a policy does not mean the business follows it.
Mistake 2: Relying on contractual labels
Calling someone a consultant or contractor does not end the legal analysis.
Mistake 3: Treating CTC as statutory wages
Commercial compensation structures and statutory wage concepts are not necessarily identical.
Mistake 4: Using the same termination process for every employee
Poor performance, misconduct, redundancy and resignation can involve different legal considerations.
Mistake 5: Ignoring actual work locations
Remote employees can create state-level compliance questions.
Mistake 6: Treating POSH as an Internal Committee exercise
The Committee is part of the compliance system, not the entire system.
Mistake 7: Allowing HR records to contradict payroll or management records
Inconsistent records can create unnecessary dispute risk.
Mistake 8: Waiting for a dispute before preserving evidence
Good documentation should be created during employment, not reconstructed after receiving a legal notice.
Build Employment Compliance Into the Business
Employment-law compliance in India in 2026 is best understood as an ongoing business process, not a folder of HR policies.
A compliant business should have alignment between:
Business model → Workforce → Contracts → Payroll → HR processes → Statutory compliance → State requirements → Data systems → Management conduct → Records
The Labour Codes have increased the importance of reviewing this entire system, while central and state rules continue to shape how businesses implement their obligations.
The most useful compliance test is therefore simple:
If an employee, regulator, labour authority, tribunal or investor examined our employment practices tomorrow, would our contracts, payroll, HR records and actual management practices tell the same story?
If the answer is yes, the business is doing more than maintaining a compliance checklist.
It has built an employment-law compliance system that can support the business as it grows.
