Summary. A single employee working from a state where the company has no other presence makes that company a multistate employer subject to that state's entire employment regime, its tax registrations, and frequently its business income tax. Most companies discover this after the fact, one state at a time, through a notice. This guide covers why the employee's physical work location governs almost everything, the registrations required before the first paycheck, how withholding and the convenience-of-the-employer rule interact across state lines, which wage, hour, and leave obligations change by state, what happens to non-competes and pay transparency and expense reimbursement, and how to build a policy that controls where employees may work.
A 90-person company with an office in one state permits remote work. Over two years, employees relocate. Nobody tracks it. The head of people knows about the moves and considers them a benefits question.
An audit, triggered by one employee's unemployment claim, reveals the following:
Employees in fourteen states. The company is registered for withholding and unemployment insurance in three.
Unpaid state income tax withholding in eleven states, plus penalties and interest, plus the employees' own filing problems — several have been paying tax to the wrong state for two years and now owe in another, with refund claims complicated by limitations periods.
No workers' compensation coverage for employees in four states whose extraterritorial provisions did not extend the home-state policy. One of those employees was injured, and the company faces an uninsured claim with the exclusive remedy potentially unavailable.
Wage and hour exposure in two states with daily overtime — the company paid weekly overtime only — and in one state with meal and rest break premiums it never provided.
Expense reimbursement claims in three states that require employers to indemnify employees for necessary business expenses, including a portion of home internet and phone. Two years, ninety employees, class-actionable.
Pay transparency violations in two states that require salary ranges in job postings, where the company posted remote roles open to applicants nationwide.
Corporate income tax nexus in nine states, with unfiled returns, and sales tax nexus in several — because in most states an employee working in the state creates nexus for both.
Two non-compete agreements that are void under the law of the states where the employees now live, and one that triggers a statutory notice requirement the company never satisfied.
None of this involved a bad actor. It involved the absence of a single control: knowing where each employee physically works, and treating a move as an event requiring action.
The organizing principle
The law of the state where the employee physically performs the work governs, for nearly every purpose. Not where the company is headquartered, not where the manager sits, not where the employment agreement says, and not what the employee prefers.
That principle applies to: wage and hour law, leave entitlements, anti-discrimination statutes (many of which apply at lower headcount thresholds than federal law), workers' compensation, unemployment insurance, income tax withholding, notice and posting requirements, restrictive covenant enforceability, pay transparency, expense reimbursement, and final pay deadlines.
A choice-of-law clause does not change it. Employment statutes are generally not waivable, and a state's wage and hour law applies to work performed in that state regardless of what the parties agreed.
The practical consequence: each state where an employee works is a separate compliance jurisdiction, and adding one is a project rather than an update.
Registrations, before the first paycheck in a new state
For the employer entity:
- Foreign qualification with the secretary of state. Most states treat an employee working in the state as transacting business, though a few have exceptions for a single remote employee. Failure to qualify typically bars the company from bringing suit in the state's courts and produces back fees and penalties.
- Registered agent in the state.
- Income tax withholding registration.
- Unemployment insurance account.
- Paid family and medical leave program registration where the state has one.
- State disability insurance where applicable.
- Workers' compensation coverage confirmed for the state.
- Local registrations — several cities impose payroll taxes, business license requirements, and their own paid leave ordinances.
For each hire or relocation:
- New hire reporting to that state's directory, generally within 20 days.
- State-specific notices at hire, which a growing number of states require — wage rate notices, sick leave notices, workers' compensation notices, and whistleblower notices.
- Electronic postings delivered to the employee.
Timing. Registration takes days to weeks depending on the state. Start it when the relocation is approved, not when the first payroll runs.
Payroll tax across state lines
This is the most technically complex piece, and it is where employees are harmed by employer errors.
The general rule is that income tax is withheld for the state where the work is performed, and the employee files a resident return in their state of residence, claiming a credit for taxes paid to other states.
Reciprocity agreements between certain neighboring states allow an employee who lives in one and works in another to have tax withheld only for the state of residence, on filing the applicable certificate. These are bilateral and specific; check whether one exists for the pair in question.
The convenience of the employer rule is the trap. A small number of states — New York most prominently, along with several others — treat wages earned by a nonresident working remotely for an in-state employer as sourced to the employer's state, unless the remote work is for the employer's necessity rather than the employee's convenience. The result is that an employee who lives in one state and works remotely for a company headquartered in a convenience-rule state may owe tax to both, with the residence state's credit sometimes unavailable because it does not recognize the other state's claim.
The rule has been litigated repeatedly and criticized consistently, and a company with employees in this position should confirm the current state of the law and communicate clearly with affected employees, because the surprise arrives on their personal return.
Multi-state employees who work in more than one state during the year require allocation, typically by workdays, and several states impose withholding obligations only after a threshold number of days or dollars — thresholds that differ by state and that must be tracked for traveling employees.
Unemployment insurance uses a different test entirely. Under the localization of work standard applied in every state:
- Is the service localized in one state — performed entirely there, or with only incidental work elsewhere? If so, that state.
- If not, is there a base of operations in a state where some service is performed? If so, that state.
- If not, is there a place of direction and control in a state where some service is performed?
- If not, the employee's state of residence if some service is performed there.
For a fully remote employee, this almost always produces their home state.
Workers' compensation follows yet another framework. Most states have extraterritorial provisions that extend a home-state policy to employees temporarily working elsewhere, and reciprocity provisions recognizing other states' coverage — but the periods and conditions differ, and a permanently relocated employee is not covered by them. Some states require coverage from a carrier licensed in that state or from the state fund, and a few are monopolistic, so the home-state policy cannot cover them at all. Confirm coverage state by state with the broker, in writing, and obtain the endorsement — this is the failure with the most serious consequences, because an uninsured injury can strip the exclusive remedy and expose the company to a tort suit.
Business tax nexus. In most states, an employee working in the state creates income tax nexus for the employer, and Public Law 86-272's protection for solicitation of orders does not shield a company whose employee performs non-solicitation activities in the state. It also frequently creates sales tax nexus independent of economic nexus thresholds, and franchise or gross receipts tax obligations. The temporary pandemic-era waivers that suspended these consequences have largely expired. Involve tax advisors when a remote employee is added in a new state — the employment registration is the visible obligation, and the tax registration is frequently the larger one.
Wage, hour, and pay practices
Minimum wage — the highest of federal, state, and local. Many cities set their own, and several index annually.
Overtime — federal law requires time and a half over 40 hours in a week. Several states add daily overtime above 8 hours, double time above 12, and premium pay for the seventh consecutive day worked. A company paying weekly overtime only has an exposure in every one of those states.
Exempt salary thresholds — several states set thresholds above the federal level, and a few use a multiple of the state minimum wage that rises annually. An employee properly classified as exempt in one state may be non-exempt in another at the same salary.
Duties tests also differ — a few states apply narrower versions of the administrative and professional exemptions than the federal regulations do.
Meal and rest breaks — federal law requires none. Many states require both, several impose premium pay for a missed or interrupted break, and remote work makes compliance harder to demonstrate because nobody observes it. The practical answer is a policy that schedules breaks, a timekeeping system that records them, and a certification process — plus a written prohibition on working through them.
Pay frequency and wage statement content are set by state law, and several states impose per-employee, per-period penalties for defective statements. Confirm the payroll provider's statement format satisfies each state's requirements, because the default template frequently does not.
Final pay deadlines range from immediately on involuntary termination to the next regular payday, with waiting time penalties in several states that can equal weeks of wages. Whether accrued vacation must be paid out is also state law. Confirm both before scheduling a termination, not after.
Expense reimbursement is the most commonly missed remote work obligation. A number of states require employers to indemnify employees for necessary expenditures incurred in the discharge of their duties, and courts and agencies in those states have applied it to a reasonable portion of home internet, mobile phone, and in some cases utilities and home office equipment. The workable approach is a monthly stipend set at a defensible amount, documented as intended to cover the reimbursable categories, applied to employees in the states that require it (and frequently to everyone, for simplicity and morale). The alternative — actual expense reimbursement with substantiation — is administratively worse and produces the same result.
Pay transparency. A growing number of states and localities require salary ranges in job postings, and several require disclosure to applicants or employees on request. These apply to remote roles that could be performed in the jurisdiction, which for a nationally posted remote role means the strictest requirement effectively governs. Several also impose pay data reporting obligations. Post ranges, and document how they were determined, because the same statutes frequently pair with pay equity provisions.
Salary history bans exist in many jurisdictions, prohibiting employers from asking about or relying on prior compensation. Remove the question from applications and train recruiters, because a single question in a screening call is the violation.
Leave, benefits, and discrimination
Paid sick leave is mandated in a substantial and growing number of states and localities, with different accrual rates, caps, carryover rules, permitted uses, documentation limits, and notice requirements. A single national policy that meets the most generous requirement is administratively simpler than tracking each, though it costs more.
Paid family and medical leave programs exist in a number of states, funded by payroll contributions from employees, employers, or both, with registration, contribution, and notice obligations. Coordination with the FMLA and with company-provided leave requires a policy that addresses whether leaves run concurrently.
Other mandated leaves vary widely: jury duty, voting, domestic violence, school activities, bereavement, organ donation, military, crime victim, and — in some jurisdictions — leave for public health emergencies. Each has its own eligibility, duration, and notice rules.
Anti-discrimination statutes at the state level frequently apply at lower headcount thresholds than Title VII and the ADA, and frequently cover additional protected characteristics — marital status, political affiliation, hairstyle under CROWN Act legislation, height and weight, arrest and conviction records, credit history, caregiver status, and reproductive health decision-making. A company outside federal coverage may be well inside a state statute.
Mandatory training — several states require sexual harassment prevention training with prescribed frequency, duration, and content, and separate supervisor requirements. The obligation follows the employee's work location.
Benefits. Health plan networks may not cover an employee who relocates, which is a real problem for the employee and a retention issue for the company. Confirm network adequacy in each state, and consider a national network or a plan with adequate out-of-area coverage. State-mandated retirement programs in several states require employers without a plan to enroll employees in a state-facilitated IRA, with thresholds as low as one employee.
Restrictive covenants. Enforceability follows the state where the employee works, and choice-of-law clauses selecting a permissive state are increasingly voided by statute for that state's residents. Several states now require advance notice of a non-compete before an offer is accepted, impose wage thresholds, or ban them outright for some or all workers. An employee who relocates may render an existing covenant unenforceable — and, in a few states, may make the mere act of presenting it a violation. Review covenants on every relocation.
Practical infrastructure
Know where everyone works. This is the control that prevents everything above.
- Require employees to report their primary work location and to obtain approval before changing it.
- Maintain a work location field in the HRIS, kept current, and audit it against payroll addresses and IP geolocation periodically.
- Treat a relocation as an event that triggers a checklist: registration in the new state, deregistration if the last employee leaves a state, payroll setup, workers' compensation confirmation, handbook addendum, notices, postings, benefits check, covenant review, and tax notification.
Adopt an approved work locations policy. Rather than permitting employees to work anywhere, maintain a list of approved states, and require approval for anything else. This is the single most effective control available, and it is far easier to implement before employees have scattered than afterward.
- Publish the approved list and the request process.
- Require a defined lead time, so registrations can be completed.
- Reserve the right to decline a location where the compliance cost is disproportionate, and be prepared to explain that this is not arbitrary.
- Address temporary work from another state — a month with family, a workation — with a stated day threshold beyond which approval is required, because several states impose withholding obligations after a small number of days.
- Prohibit international work without approval, for the reasons below.
Handbook architecture. A core national handbook plus state-specific addenda. Do not attempt a single document that describes every state's rules; it becomes unreadable and it is never current. Reissue addenda when a state's law changes, and collect acknowledgments.
Postings must be delivered electronically to remote employees, in a manner that is readily accessible and that the employee is affirmatively directed to.
Form I-9. Section 2 requires physical examination of documents, unless the employer is enrolled in E-Verify and in good standing and uses the alternative remote examination procedure, which permits a live video review with retained copies. For employers not enrolled, an authorized representative — anyone the employer designates, though notaries and HR service providers are common — may examine documents in person on the employer's behalf, with the employer remaining liable for errors. Decide the approach before the first remote hire.
Monitoring and privacy. Several states require notice or consent before electronic monitoring of employees, one requires prior written notice with acknowledgment, and recording laws in several states require all-party consent for recorded calls and meetings. State privacy statutes increasingly extend to employee data, with access and deletion rights. And an employee working from home introduces genuine security questions — home networks, shared devices, family members in the room during confidential calls — that belong in the policy rather than in an incident report.
Workplace safety. OSHA's general duty clause reaches the workplace, and the agency has taken the position that it will not inspect home offices and will not hold employers responsible for their condition, while home-based work involving hazardous materials or manufacturing is a different matter. Workers' compensation, however, does cover injuries in a home office arising out of and in the course of employment, and those claims are litigated on the arising-out-of question. A written home workspace policy and an ergonomic self-assessment help both with claims and with the employees' actual well-being.
International remote work
Do not permit it without analysis. An employee working from another country raises:
- Immigration — the right to work in that country, which a tourist visa does not provide.
- Local employment law, which in most countries is far more protective than U.S. law and frequently attaches after a short period, including severance entitlements, notice periods, and works council obligations.
- Payroll and social insurance registration and contributions in the host country.
- Permanent establishment risk — an employee performing certain activities can create a taxable presence for the company in that country, with corporate income tax consequences that dwarf the employment issues.
- Data protection — the GDPR or an analogue applying to the employee's processing of personal data, and cross-border transfer requirements.
- Export controls for technical data, and sanctions restrictions on certain locations.
- Benefits, which typically do not extend abroad.
The available structures: an employer of record in the host country, which is the standard answer for one or two people; a local entity, which is appropriate at scale; or converting the person to a contractor, which is usually a misclassification under the host country's law and is the option most often chosen and most often wrong.
Short trips are a different question and are usually manageable, but even a few weeks can trigger obligations in some countries. Set a day threshold in the policy and require approval.
A short case study
A 140-person software company decides to formalize remote work rather than continue improvising.
Phase one — discovery. HR reconciles the HRIS work location field against payroll addresses, IP logs, and manager knowledge. It finds employees in nineteen states; the company is registered in six. Three employees are working abroad, two of them unknown to anyone in HR.
Phase two — remediation. Counsel and tax advisors triage: register in the thirteen states, file voluntary disclosure agreements where back withholding and income tax exposure exist (which reduces penalties substantially in most states), confirm workers' compensation coverage in every state and add endorsements where the home policy did not extend, and correct the wage statement format for the four states whose requirements the payroll template missed. Expense stipends are implemented in the reimbursement states, with a modest retroactive true-up that resolves the exposure cheaply. Two of the international employees are moved to an employer of record; the third is asked to return or resign, which is unpleasant and unavoidable.
Phase three — controls. An approved work locations policy covering fifteen states, with a request process and a 45-day lead time. The HRIS work location field becomes required and is audited quarterly. A relocation checklist is built and assigned to an owner. State handbook addenda are drafted for each approved state. Postings are delivered electronically with acknowledgment. Non-compete agreements are reviewed and reissued or dropped by state.
Phase four — ongoing. A quarterly review of legislative changes in the fifteen states, a January check of minimum wage and salary threshold changes, and an annual reconciliation of work locations.
Cost of remediation: substantial, mostly in professional fees and back taxes, and a fraction of what the exposure would have been had it surfaced through an audit or a class action rather than through a voluntary review.
Conclusion
Three points carry the weight.
Work location governs, and one employee makes the company a multistate employer — for employment law, for payroll tax, for workers' compensation, and usually for corporate income and sales tax as well. The employment registration is the visible obligation; the tax nexus is frequently the larger one.
The control that prevents all of it is knowing where people are. An approved work locations policy with a required HRIS field, a lead time, and a relocation checklist is inexpensive, and it converts a compliance problem into an administrative one.
Three obligations are missed most often: workers' compensation coverage in states the home policy does not reach, expense reimbursement in the states that require it, and daily overtime and break premiums in the states that impose them. Each is silent until it is a claim, and each is straightforward to fix once the work locations are known.
Frequently asked questions
Does one remote employee really make us subject to that state's law? Yes, for employment purposes in essentially every state, and usually for income and sales tax nexus as well. A few states have narrow exceptions for foreign qualification with a single remote employee, but none of them exempt the employer from withholding, unemployment, workers' compensation, or the state's wage and hour law.
Can we just apply our home state's employment policies everywhere? Only if the home state's rules are the most protective on every dimension, which they will not be. The workable approach is a national baseline set at or above the strictest requirement for the items where a single standard is cheaper than tracking (sick leave, for instance), with state addenda for everything else.
Can we pay people differently by location? Yes, and most companies do, using geographic pay bands. Two cautions: pay transparency statutes require ranges in postings for roles that could be performed in the jurisdiction, and pay equity statutes in several states require that differentials be justified by a bona fide factor other than a protected characteristic — location is generally acceptable, but the methodology should be documented.
What if an employee moves without telling us? It happens constantly, and the exposure accrues from the day of the move. Mitigations: require reporting in the policy and in the handbook acknowledgment, audit the HRIS work location field against payroll addresses and IP logs, and treat a discovered unreported move as a compliance event to be remediated rather than only as a discipline question — because the company's obligations attached regardless of what the employee did.
Do we need workers' compensation in every state? You need coverage that responds in every state where an employee works. Extraterritorial and reciprocity provisions extend a home-state policy for temporary work in many states, and they do not cover a permanently relocated employee. Confirm with the broker in writing, state by state, and obtain the endorsements.
Are we required to reimburse home internet? In several states, yes, to the extent it is a necessary expense of the work. A modest monthly stipend applied to employees in those states resolves it, and applying it company-wide is often simpler and better received than a state-by-state distinction.
Can employees work from another country for a few weeks? Sometimes, and it depends on the country and the duration. Set a day threshold in the policy, require approval, and confirm the immigration position — an employee working on a tourist visa is generally working unlawfully, whatever the employer's intentions.
What is the highest-value thing to do first? Reconcile where everyone actually works. Every other item on this list depends on that answer, and most companies cannot produce it on demand.
Two structural questions worth deciding deliberately
How many states will you support? There is a real tradeoff, and companies rarely make it consciously.
Unrestricted — hire anywhere. Maximizes the talent pool and maximizes compliance cost, since each state carries registration, addenda, notices, benefits verification, and ongoing legislative tracking. Realistic only with a dedicated compliance function or a professional employer organization.
A defined list — ten to twenty states chosen for talent density, reasonable compliance burden, and existing presence. This is the right answer for most companies between fifty and five hundred employees. Employees outside the list may be grandfathered or supported through an employer of record.
Hub states only — hiring restricted to a handful of states where the company has offices. Lowest cost, narrowest pool, and increasingly uncompetitive for roles where remote work is the norm.
Whichever is chosen, publish it, because recruiting against an unstated constraint wastes everyone's time and produces offers that have to be withdrawn.
Build or buy the compliance function? Three models.
In-house, with an HR or legal owner, a payroll provider handling registrations and filings, and outside counsel for policy and legislative tracking. Appropriate above roughly a hundred employees.
Professional employer organization, a co-employment arrangement in which the PEO is the employer of record for payroll, benefits, and much of the compliance burden. It resolves the registration problem cleanly and gives a small company access to better benefits pricing. It costs a percentage of payroll, it constrains flexibility, and exiting one is a project.
Employer of record, used for a small number of employees in states or countries where the company does not want to register. Higher per-employee cost, no co-employment of the main workforce, and the standard answer for international.
The decision should be revisited as headcount grows, because the economics cross over — a PEO that was clearly right at twenty employees is frequently expensive at two hundred.
The relocation checklist
When an employee's approved work location changes, work through this. Assign it to a named owner, because a checklist with no owner is a document.
Before approval. Confirm the state is on the approved list, or run the analysis to add it: registration requirements and timelines, workers' compensation availability, wage and hour differences, leave mandates, pay transparency and salary history rules, restrictive covenant enforceability, tax nexus consequences, and benefits network adequacy. Price it. Decide.
On approval, with lead time. Foreign qualification and registered agent if the company has no presence. Withholding and unemployment insurance registration. Paid family leave and disability program registration where applicable. Workers' compensation endorsement confirmed in writing by the broker. Local registrations where the city imposes them.
On the effective date. Update the HRIS work location field. Update payroll withholding, and notify the employee in writing of the change and of any personal tax consequences — including a convenience-of-the-employer issue if one applies, which employees deserve to hear from the company rather than from their accountant. File the new hire report if the state treats a relocation as a reportable event. Deliver state notices at hire and electronic postings. Issue the state handbook addendum and collect the acknowledgment. Confirm health plan network coverage. Review any restrictive covenant, and reissue or release it. Confirm expense reimbursement treatment. Adjust the compensation band if the company uses geographic pay.
Afterward. Add the state to the legislative tracking list. Note the state on the annual reconciliation. And if the employee was the last one in their prior state, run the deregistration sequence — closing withholding and unemployment accounts and withdrawing the foreign qualification — because dormant registrations generate notices and penalties for unfiled returns for years.
A final observation about tone. Companies frequently present remote work restrictions as a bureaucratic imposition, and employees hear them as a lack of trust. Both framings are wrong. The constraint is real, it is external, and it is expensive — a single unregistered state can cost more than a year of one employee's salary once back taxes, penalties, and remediation are counted. Explaining that plainly, with the actual numbers, converts a policy that reads as arbitrary into one people understand. It also produces the behavior the policy needs: employees who tell the company before they move.
One more practical note: build the legislative tracking into someone's job. State employment law changes every session, minimum wages and salary thresholds index on January 1 in many jurisdictions, and new pay transparency, sick leave, and non-compete statutes take effect with short lead times. A quarterly review of the approved states, plus a January sweep of wage and threshold changes, keeps the program current at a cost of a few hours.
Related articles
- Multistate Employment Compliance Checklist — the state-by-state review.
- Remote Work Policy Checklist — building the policy.
- Remote and Hybrid Workforce Toolkit — the full roadmap.
- Multistate Employment Compliance Toolkit — registrations, addenda, and tracking.
- Setting Up Payroll and Employment Compliance for a First Hire — the registration sequence in one state.
- Wage and Hour Law Under the FLSA: Overtime, Exemptions, and Off-the-Clock Work — the federal baseline the states build on.
- Wage and Hour Self-Audit Checklist — testing classifications across states.
- Restrictive Covenants in Business Sales, Franchises, and Partnerships — enforceability and the relocation problem.
- Telehealth Law: Licensure, Prescribing, Reimbursement, and Privacy — the same fifty-state problem in a licensed profession.
- Cybersecurity Program Toolkit — securing a distributed workforce.
This guide is provided for general informational purposes and does not constitute legal or tax advice. State employment, tax, and insurance requirements vary substantially and change frequently, and international remote work raises immigration, employment, tax, and data protection issues in the host country. Consult qualified employment counsel and tax advisors before approving work in a new jurisdiction.