If your business does not sponsor a 401(k) or similar retirement plan, there is a good chance a state government now wants you to enroll your employees in one anyway. State-mandated retirement savings programs have expanded steadily since California and Illinois launched the first ones nearly a decade ago, and 2026 has brought new entrants, tightened thresholds, and enforcement deadlines that are catching a lot of small business owners off guard.
At least 17 states currently have an active or upcoming mandatory auto-IRA program, and that number keeps growing. Mississippi and Philadelphia both enacted new programs in 2026, and several existing programs - including New Jersey and Virginia - lowered their employer-size thresholds this year, pulling smaller businesses into scope that were previously exempt.
Here is what you need to know if you have not already dealt with this.
What a state-mandated retirement plan actually is
The most common model is a payroll-deduction auto-IRA, usually structured as a Roth IRA. If a covered employer does not already sponsor a qualifying retirement plan, it is required to facilitate the state program instead: register with the state, upload basic payroll and employee data, and deduct a default contribution rate - typically somewhere between 3% and 5% of wages, often increasing automatically each year up to a cap around 8%.
Employees are enrolled automatically and can opt out or change their contribution rate at any time. The employer is not required to contribute matching funds and generally is not responsible for investment decisions or plan administration - that sits with the state or its program administrator. The employer's job is essentially payroll mechanics: register, deduct, remit, repeat.
Which states require this
States with active or rolling-out mandates as of mid-2026 include California, Colorado, Connecticut, Delaware, Hawaii, Illinois, Maine, Maryland, Minnesota, Nevada, New Jersey, New York, Oregon, Rhode Island, Vermont, Virginia, and Washington. Washington's program will not launch until mid-2027, but the law is already on the books. Massachusetts operates a voluntary version for small nonprofits, and Mississippi's new program is voluntary rather than mandatory. Philadelphia became the first city-level program in 2026, following the earlier city-level examples in New York and Seattle - both of which have since been folded into their state programs.
Coverage details vary by state. Employee thresholds generally range from just one employee to around 25, and the countdown to compliance typically starts once a business has been operating for a set period, commonly two years. If you operate in more than one state with a mandate, do not assume the rules match from one to the next - thresholds, deadlines, and default contribution rates are all set independently.
Enrollment deadlines are staggered by company size
Most programs roll out compliance deadlines in waves based on employee count, largest employers first. New York's Secure Choice program, for example, has already passed its deadline for employers with 15 or more employees, while businesses with 10 to 14 employees have a mid-2026 deadline still ahead of them. Other states follow a similar staggered pattern. If your headcount has grown since the last time you checked whether a mandate applied to you, it is worth checking again - crossing a threshold can bring you into scope with little warning.
Penalties for non-compliance
Enforcement varies by state but is not symbolic. Some programs assess a flat per-employee penalty that increases the longer a business stays out of compliance - for example, an escalating structure that roughly doubles the penalty in year two. Others cap the total annual penalty per employer at a fixed dollar amount regardless of headcount. A few states tie compliance to other obligations, such as waiving an annual state filing fee only for businesses that have registered. None of these outcomes are worth risking for what is, in most cases, a fairly simple registration and payroll setup process.
How to avoid the mandate entirely
Sponsoring your own qualifying retirement plan - a 401(k), SEP IRA, or SIMPLE IRA - exempts you from the state program. For businesses that have been putting off setting up a retirement plan, this is often the more attractive path: private plans allow significantly higher contribution limits than the Roth IRA structure most state programs use, and small employers establishing a new retirement plan may qualify for federal tax credits that offset a meaningful portion of setup and administration costs for the first few years.
The multi-state compounding problem
For a business with employees in several mandate states, this is not a one-time task - it is an ongoing compliance obligation with different rules in every jurisdiction. Different default contribution rates, different escalation schedules, different registration portals, different renewal and certification requirements. Tracking this manually across five or six states, on top of everything else running a small business demands, is where things start to slip.
How a PEO simplifies this
A PEO can sponsor a 401(k) through a pooled employer plan that satisfies the private-plan exemption in every mandate state at once, removing the need to register separately with each state's auto-IRA program. Instead of monitoring a dozen different compliance calendars, you get one retirement benefit that keeps you exempt everywhere your employees work - and gives your team a materially better savings vehicle than a state-run Roth IRA in the process.
If you are not sure whether a state mandate currently applies to your business, or you have been putting off dealing with it, browse PEO companies by state or get matched with a provider who can walk through your specific state exposure.
If retirement benefits are part of a larger list of frustrations with your current provider, PEO Alternatives has side-by-side comparisons to help you find a better fit.