You hired a developer in Colorado last month. She’s great. Fully remote, no office, no physical footprint – just a laptop and a Slack account.
In your mind, you added a team member. In Colorado’s mind, you now have nexus in the state. And with that comes a set of employment obligations your company has never dealt with.
This is the multi-state employment compliance gap that catches growing teams off guard. Not the 50-employee federal threshold. Not the big structural compliance moments. Just: you hired someone in a new state, and the clock started.
What Actually Triggers State Obligations
Physical presence of even one employee is enough to establish employer obligations in most states. You do not need an office. You do not need a registered agent. You need one person doing work there. The specific obligations triggered and the threshold for establishing nexus vary by state, and some states may have different rules for remote-only employees versus those with physical office presence.
Once that happens, the state expects you to register as an employer, withhold state income taxes correctly, comply with that state’s wage and hour laws, follow local leave requirements, and in some cases post specific notices or provide specific documentation formats.
Most founders find this out during a state agency audit – not before.
Four States That Illustrate the Range
The challenge is that “comply with state employment law” means something different in every jurisdiction. A few examples that show how wide the variation gets:
California. If you have even one employee in California, you are operating under some of the most employee-protective laws in the country. Wage statement requirements specify exactly what information must appear on each pay stub – and the format matters. Misclassification standards differ from federal rules. Paid sick leave accrual, final paycheck timing, and non-compete enforceability all operate under California-specific rules that override what you may be used to in your home state.
California also has its own biometric privacy framework and a separate data privacy law (CCPA) with employment implications. One hire there is not a small administrative step. California employment law is subject to frequent updates through legislation and regulation, and requirements may change.
New York. New York has its own paid sick leave law with accrual rates and permitted uses that differ from federal guidance. New York City adds a second layer with its own requirements on top of the state rules. If your remote employee is in the city, you are navigating both simultaneously. Other New York localities may have additional requirements as well.
Colorado. Colorado requires employers to include pay ranges in job postings – not just for roles based in Colorado, but for any remote role that a Colorado resident could apply for. If your job posting says “remote” and does not include a salary range, you may already be out of compliance with Colorado law, even if you have no employees there yet. Colorado’s Equal Pay for Equal Work Act has specific requirements that continue to evolve through regulatory guidance.
Illinois. Illinois has the Biometric Information Privacy Act (BIPA), which governs how employers collect and store biometric data – fingerprints, facial recognition, retina scans. If your timekeeping system or any HR tool uses biometric identifiers, you need a specific written policy and employee consent before collecting that data from Illinois employees. BIPA has generated significant litigation.
These examples illustrate the range of state-specific requirements, but they are not exhaustive. Each state has its own employment law framework, and requirements are subject to change through legislation, regulation, and court decisions.
What an Audit Looks Like When You Did Not Know You Needed to Register
State labor agencies do not send warnings. When they audit, they look at payroll records, classification decisions, wage statements, and registration history.
If you have been paying an employee in a state for 18 months without registering, the audit starts with back taxes, penalties, and interest – before they even get to any substantive compliance questions.
The harder part is that ignorance of the requirement is not a defense. The state’s position is that you had an employee there, you had an obligation, and you did not meet it.
The Trade Secret Dimension
One piece that gets overlooked in the remote hiring conversation: trade secret protections vary by state.
Most states have adopted some version of the Uniform Trade Secrets Act, but the specific provisions vary, and some states (including California and New York) have their own frameworks with meaningful differences in definitions, remedies, and procedural requirements.
If your remote employees handle proprietary information – client data, product roadmaps, pricing models, source code – the agreements protecting that information need to account for the state where the employee works. A confidentiality agreement drafted for Maryland may not provide the same protection when the employee is in California. The enforceability of restrictive covenants, including non-compete and non-solicitation provisions, also varies dramatically by state, with some states (like California) severely limiting or prohibiting such restrictions.
The Practical Reality
Remote hiring has made geographic expansion effortless from an operational standpoint. The compliance side has not kept pace with how founders think about it.
Every new state hire is a new jurisdiction. The obligations are real, they start on day one, and they compound as your team spreads across more states.
The companies that stay ahead of this treat each new state hire as a trigger – not a formality.
About Garcia-Zamor: We’re the fractional general counsel for innovators – protecting both your business operations and your intellectual property. Ruy Garcia-Zamor leads business growth strategy, Elliott Alderman (former Copyright Office attorney, 40+ years IP expertise) handles intellectual property, and Claudia Castillo specializes in employment law. Contact us at garcia-zamor.com or (410) 531-9853.
