HR Compliance in India (2026): Meaning, Rules, Checklist and Best Practices

📅 Published: Aug 2024
🔄 Last Updated: Aug 2026
⏱ Reading Time: 10 minutes

HR compliance involves adhering to all rules and regulations regarding hiring, remuneration, management, and termination of employment in your company. In India, some of the HR compliance includes payment of statutory dues such as PF and Employees State Insurance, deductions for salary taxes, labour laws, keeping track of employees and their details, and most recently, employee data protection. Doing everything by the book will go unnoticed, while doing anything outside of the rules will cost you dearly.

There is one more reason why this guide was created. From November 2025 to June 2026, India made significant amendments to its employment laws. The Labour Codes were introduced, a new EPF Scheme was notified, and the Income Tax Act, 2025, replaced the old legislation that had been used by the payroll specialists since 1961. Much of the information on which companies relied when dealing with HR compliance became obsolete, and even this page, in its previous version, should be considered outdated.

What Is HR Compliance in India?

HR compliance is the practice of running every people-related process in your company, hiring, salaries, working hours, leave, safety, and exit, according to the laws that apply to it. Think of it as the rulebook sitting underneath your HR policies. Your company decides how generous the leave policy is; the law decides the minimum you cannot go below.

It works at two levels. There’s what the government requires: depositing PF, deducting tax, maintaining registers, and following the Labour Codes. And there’s what your own policies promise: if your offer letter says something, you’re bound by it too. A company can be fully paid up with the government and still land in trouble because it didn’t follow its own employee handbook.

Why Does HR Compliance Matter So Much?

To put it simply, non-compliance in India is costly, personal, and becoming harder to cover up. For instance, any delay in PF contributions means a penalty of 12% interest per annum according to Section 7Q of the EPF Act, along with an additional damage amount of 5% to 25% per year depending on the duration of the breach as outlined in Section 14B.

The act of enforcement is going digital too. In May 2026, EPFO introduced a risk-based digital inspection scheme where the profile of each registered establishment was generated through the filing data in its own database and identifies the defaulter. The interconnection of databases makes it harder for discrepancies to go unnoticed.

Beyond any penalties for non-compliance, compliance is basically the way the employees view you. The PF is their pension plan, ESI is their family’s insurance plan, and the payslip showing the payments is the most fundamental indicator of good faith.

What Changed in 2025 and 2026? The Compliance Reset

If you were introduced to HR compliance in India before 2025, expect to have your notes revised. There have been three major developments that have occurred in rapid succession, and all three redefine the language of compliance altogether.

• The four Labour Codes took effect on 21 November 2025.  These codes amalgamate 29 labour laws into the Code on Wages, the Code on Social Security, the Industrial Relations Code, and the Occupational Safety, Health and Working Conditions (OSH) Code. The latter has replaced much well-known legislation, such as the Factories Act, 1948, and the Contract Labour (Regulation and Abolition) Act, 1970.
• A new EPF Scheme was notified on 29 June 2026 through G.S.R. 525(E), restructuring the provident fund rules that payroll teams had worked with for decades.
• The Income-tax Act, 2025, replaced the 1961 Act, renumbering the forms payroll runs on. The quarterly salary TDS return, once known as Form 24Q, is now Form 138, the tax certificate given to employees, as Form 16, is now Form 130; and the investment declaration, once called Form 12BB, is now Form 124.

Another aspect to consider is the Digital Personal Data Protection (DPDP) Act, 2023, and the DPDP Rules of 2025, which consider employee data like biometric attendance and identity documents as personal data of your company.

What Are the Key HR Compliance Requirements in India?

India’s HR compliance burden can seem daunting until you bucket it out. Almost all the work the employer needs to do is in one of five buckets, and each bucket has its own cycle of monthly, quarterly, and annual activities.

1. Statutory and payroll compliance. Payment and submission of PF, ESI, Professional Tax (PT), and TDS in a proper way and in due time.
2. Labour-law compliance. Following the Labour Codes on wages, working hours, contracts, layoffs, and safety.
3. Records and documentation. Appointment letters, pay slips, registers, leave attendance, and their storage.
4. Workplace obligations.  POSH committee, maternity benefits, and safety of work environment.
5. Data protection. Handling employee personal data lawfully under the DPDP Act.

The rest of this guide walks through each bucket, then looks at the challenges and the tools that make the whole thing manageable.

Statutory Compliance vs Payroll Compliance vs HR Compliance

All these three terms are used synonymously; however, this creates a lot of confusion in practical settings. All these terms are included within one another, just like boxes. The largest legal box in this hierarchy is statutory compliance, which includes all legal requirements for your business. Payroll compliance refers to the financial component of statutory compliance, which includes all the issues related to salaries, deductions, deposits and filing, hence the need to have a specific payroll compliance checklist.

HR compliance begins with payroll compliance, but it goes further to cover contracts, working conditions, documentation, POSH, and data compliance. A good example to distinguish these is that any activity involving an employee’s money involves payroll compliance, while any activity involving an employee is HR compliance.

The Big Four: PF, ESI, Professional Tax and TDS

Four deductions appear on almost every Indian payslip, and they generate most of the monthly compliance work. Each one has its own authority, its own rules, and its own deadline, so let’s take them one at a time.

Provident Fund (PF)

PF is a mandatory scheme for retirement savings initiated by EPFO. Normally, organizations having 20 or more workers need to register themselves. On a monthly basis, 12% of the basic salary and dearness allowance of an employee is deducted as his/her contribution, whereas the employer contributes another 12% out of its pocket, which includes the portion contributed towards the pension of the employee. The amount needs to be deposited within 15 days of the next month, while ECR needs to be filed within 25 days. Each and every employee will have a Universal Account Number (UAN) to keep record of his/her balance. In case one wants to know about calculations at the salary level, our guide to PF calculation will help.

Employees’ State Insurance (ESI)

ESI is health insurance for employees, run by the Employees’ State Insurance Corporation (ESIC). It generally applies to establishments with 10 or more employees in covered areas for employees earning up to ₹21,000 a month. The employee contributes 0.75% of wages, and the employer contributes 3.25%, and in return the employee and their family get medical care through ESIC facilities. Our ESI calculation guide covers the contribution math and edge cases.

Professional Tax (PT)

PT is the odd one out because it’s a state tax, not a central one. Some states levy it, some don’t, and the slabs differ from state to state, with a constitutional ceiling of ₹2,500 per person per year. If you have offices in four states, you may have four different PT registrations, slabs, and filing calendars. More detail sits in our Professional Tax guide.

Tax Deducted at Source (TDS) on Salary

Every employer must estimate the income tax liability of the employee for each year and reduce it out of the salaries paid every month and deposit it with the Income Tax Department. According to the Income-tax Act, 2025, the forms are named differently. The quarterly form will be Form 138; the annual certificate issued to employees will be Form 130; and the investments by the employees have to be submitted through Form 124. The procedure appears similar to 24Q and Form 16. But referring to these forms in the new forms itself becomes a mistake in compliance. See our full guide to TDS on salary.

Labour Laws Every Employer Should Know

This does not account for all aspects of the problem since the Labour Codes and several other individual acts control the work relationship. It is here that the amendments of 2025 have most impact.

• Code on Wages. Sets minimum wages, timely payment of wages, and bonus rules, and standardises the definition of “wages” that other calculations hang off.
• Code on Social Security. The umbrella for PF, ESI, gratuity, and maternity benefits, replacing the older standalone Acts.
• Industrial Relations Code. Governs employment contracts, standing orders, layoffs, retrenchment, and dispute resolution.
• OSH Code. Covers working conditions, safety, working hours, and contract labour, replacing the Factories Act and the Contract Labour Act. Contractors now need a licence under this Code, and companies engaging contract workers can carry principal-employer responsibility if the contractor defaults.
• POSH Act, 2013. Any workplace with 10 or more employees must constitute an Internal Committee to handle sexual harassment complaints, run awareness training, and file an annual report.
• Maternity Benefit rules. Women employees who are eligible, are entitled to 26 weeks of paid maternity leave, now administered under the Code on Social Security.
• Shops and Establishments registration. A state-level registration covering working hours, holidays, and conditions for offices and shops, with rules that vary by state.

You don’t need to memorise every section. You need to know which of these apply to your headcount, your states, and your industry, and to have someone accountable for each.

Which Employee Records and Documents Must You Maintain?

Compliance that cannot be proven is not compliance at all. The Indian labor laws make it mandatory to maintain records for compliance at all levels of employment, and the process of inspection, audit, and even litigation is carried out through documents and not memory.

Core HR documents are offer letters, appointment letters, register of employees, wage registers, and wage slips (wage slips are mandatory under the Code of Wages), attendance and leave records, Provident Fund challans/returns and Employee State Insurance returns, and full and final settlement agreements at exit. Many of these can be automated through an attendance management system, a leave management system, and an employee self-service portal from where employees can access their wage slips and tax certificates.

Above that lies a more recent responsibility; the DPDP Act, 2023, has made it obligatory for your organization to be responsible for the employee personal data, including Aadhaar and PAN copies, biometric attendance, and GPS data. This includes collecting just enough, safeguarding it, and knowing who has access to it.

What Are the Most Common HR Compliance Challenges?

If compliance was simply following certain rules, then all businesses would be compliant. However, the problem lies in how those rules should be followed, and there are some common mistakes that many businesses make.

1. Multi-state complexity. Different slab structures of PT, Shops and Establishment rules, and Labour Welfare Fund payments exist for different states, making five cities a five-fold rule book for a company.
2. Constant change. The 2025-26 reset is just one big instance; rates, thresholds, and formats continue to change, and yesterday’s right procedure becomes today’s violation in silence.
3. Manual processes. No warning comes your way from spreadsheets when there is any delay in filing ECR or if the PF amount has been calculated incorrectly. Errors are discovered much later in time, with interest.
4. Contractor and agency exposure. In case you use the laborers through an agency that doesn’t deposit PF punctually, you might end up being held responsible for it.
5. Deadline density. PF, ESI, TDS, PT, and returns each have their own dates every single month. Missing one by a day still counts as default.
6. Data security. Employee data now carries legal weight of its own, and a leak of salary or identity data is both a trust problem and a DPDP problem.

How Does HR Software Help With Compliance?

Most compliance failures are not because of ignorance. They’re caused by scattered data: attendance in one file, salaries in another, and employee documents in a drawer. HR software fixes the root cause by putting every employee record, attendance log, leave balance, and payroll input in one system, so calculations run on accurate data and every action leaves an audit trail.

Automation brings practical benefits: automatic statutory registers, accurate PF and ESI calculations, deadline reminders, and audit-ready reports. An efficient employee management system also keeps documents such as appointment letters and ID proofs organized in employee files. If you’re comparing options, our guide to HRMS software in India is a useful starting point.

HRMS, HRIS or HCM: Which One Do You Need for Compliance?

Shopping for HR technology  means running into three overlapping labels, and vendors rarely stop to explain them. A Human Resource Information System (HRIS) is the record-keeper: employee data, documents, attendance and leave in one database. A Human Resource Management System (HRMS) is an HRIS plus the operational engines, payroll, statutory calculations and compliance workflows. Human Capital Management (HCM) is the widest tier, adding strategic layers like performance management, talent and workforce planning on top.

For compliance specifically, the HRMS tier is where the action is, because that is where PF, ESI, PT and TDS get calculated, deducted and filed rather than merely recorded. If the jargon is muddying a purchase decision, our guide to HRMS vs HRIS draw the line in detail, and our review of HCM software covers what the top end of the market adds.

Where Does HR Automation Fit In Compliance Management?

Software records and calculates, while automation does things. HR automation means that the system will do things by itself: attendance will be automatically transferred to the payroll, deductions will automatically be applied to all salaries, reminder emails will send themselves prior to the 15th and 25th, and returns will be created using live data instead of recreating old data.

For compliance specifically, automation removes the two biggest failure points: human error in calculations and human forgetfulness on dates. Our guides to HR automation and payroll automation go deeper into what’s worth automating first.

Why Cloud-Based HR Software Makes Compliance Easier

For businesses that operate out of multiple locations, cloud technology ensures the process stays uniform. This cloud-based HR software applies the same policies, rates, and procedures to every single branch of business you operate. Hence, your Pune office won’t be able to get out of line with your Gurugram office. And when there is an update on a rate or form, it will happen only once in one central place.

It ensures documents remain accessible, teams can collaborate remotely, and auditors can securely access information without physical paperwork. For compliance teams, a “single source of truth” can turn a three-week audit into a half-day process.

Payroll Software and Payroll Outsourcing: Two Ways to Get There

When it comes to the money side of compliance, businesses generally take one of two routes. The first is running payroll in-house on dedicated payroll software that calculates salaries, applies PF, ESI, PT, and TDS automatically, and generates challans and returns; our comparison of payroll software in India maps that market. The second is handing the operational work to a specialist through payroll outsourcing services, which suits companies that lack a payroll team or are tired of key-person risk.

Either way, keep in mind the rule that always holds true: Outsourcing may happen, but responsibility can’t be outsourced. Whether managed in-house or through a third party, statutory compliance remains the employer’s responsibility. Tools like TankhaPay help maintain accurate compliance documentation, regardless of the approach.

What Are the Best Practices for HR Compliance?

None of this requires heroics. The companies that stay compliant tend to do a few unglamorous things consistently, and they compound.

1. Maintain a compliance calendar. Every deadline for every state, owned by a named person, with reminders that fire early.
2. Assign single-point ownership. Compliance shared by all is owned by none. A single owner of accountability per area is better than a committee.
3. Audit yourself before anyone else does. Quarterly self-auditing of deposits, returns, and registers will help identify the problem when its cost to rectify is low.
4. Track the law from primary sources. Updates of EPFO, ESIC, Income Tax Department, and the Ministry of Labour reach first, followed by vendors’ newsletters or consultants’.
5. Train beyond the HR team. Management is responsible for approving attendance, expenses, and exits; if they do not understand the compliance rules, it’s a late realization for HR.
6. Document everything, then keep it. Record-keeping is mandatory, and always the record that you have thrown away becomes the one that you need.
7. Verify your vendors. Ask for their PF challans and ECR copies every month. Their default will be your liability.

What Should Your HR Compliance Checklist Include?

Below is the working checklist organized by rhythm and not by laws since that’s how the work comes in. Customize the state-specific checklist for your place.

Foundational (one-time and on change):

1. Register under EPFO and ESIC when the criteria related to the number of employees are fulfilled.
2. Register at the state level for Shops and Establishment Act, Profession Tax, and Labour Welfare Fund.
3. Form POSH Internal Committee if the employee strength is 10 or above.
4. Issue appointment letters to every employee, and map which Labour Code provisions apply to your establishment.

Monthly:

1. Make the PF deposit by the 15th of the next month and submit the ECR before the 25th.
2. Make deposits for ESI contribution and deduct tax by the respective deadlines.
3. Pay salaries on time using valid payslip forms and make PT payments as per your state’s deadline.
4. Obtain PF challan and ECR copies from all staffing agencies used by you.

Quarterly and annual:

1. Submit quarterly TDS return Form 138, and by the end of the year circulate Form 130 to employees.
2. Submit PT, LWF, and labor returns as per state calendars and the annual POSH report.
3. Conduct an internal compliance check and reconcile the register with the actual deposit.

Ongoing:

1. Monitor changes by EPFO, ESIC, IT Dept., and Labour Ministry.
2. Evaluate the management of employees’ data in relation to the DPDP Act.
3. Maintain proper records which must be organized and readily available; every month could be selected for scrutiny.