Workplace Compliance Guidelines

Understanding the Contract Labour (Regulation & Abolition) Act, 1970 – A Must for Every HR & Compliance Professional! The Contract Labour (R&A) Act, 1970 is a vital piece of legislation ensuring the rights and welfare of contract labourers, and every organization engaging contract workers must adhere strictly to its provisions. Here’s a quick checklist of key compliance requirements: Applicability: Establishments and contractors employing 20 or more workers (varies by state – e.g., 50 in Rajasthan & MP). Registration & Licensing: Mandatory for both Principal Employers and Contractors (Forms I & IV). Welfare Measures: Canteens, first-aid, restrooms, clean drinking water, and sanitation facilities. Registers & Returns: Form XII – Register of Contractors (Principal Employer) Forms XIII to XXV – Worker-related registers and returns (Contractor) Wage Payment: Timely wages in presence of employer rep, wage slips (Form XIX), Muster Rolls (Form XVI/XVII), deductions, fines, overtime – all to be documented. Display of Notices: Abstracts of Act, wage details, work hours, inspector contacts. Penalties: Obstruction of inspector: up to 3 months’ imprisonment or fine (Sec. 22) Violation of provisions: up to 3 months’ imprisonment/fine of ₹1,000, plus ₹100/day on continued default (Sec. 23) Why this matters: Non-compliance not only attracts penalties but also reflects poorly on the organization’s ethical and social commitments. Let’s uphold the spirit of fair employment practices and ensure our contractors do the same. #LabourLaws #ComplianceMatters #ContractLabourAct #HRInsights #IndustrialRelations #LabourWelfare #WorkplaceCompliance #LabourLawIndia #HumanResources #KnowledgeSharing

𝐔𝐒 𝐃𝐄𝐏𝐀𝐑𝐓𝐌𝐄𝐍𝐓 𝐎𝐅 𝐋𝐀𝐁𝐎𝐑 𝐏𝐑𝐎𝐏𝐎𝐒𝐄𝐒 𝐑𝐔𝐋𝐄 𝐂𝐋𝐀𝐑𝐈𝐅𝐘𝐈𝐍𝐆 𝐈𝐍𝐃𝐄𝐏𝐄𝐍𝐃𝐄𝐍𝐓 𝐂𝐎𝐍𝐓𝐑𝐀𝐂𝐓𝐎𝐑 𝐒𝐓𝐀𝐓𝐔𝐒 The U.S. Department of Labor’s Wage and Hour Division today announced a proposed rule designed to help workers and employers better understand how to determine when a worker is an employee and when the worker may be classified as an 𝘪𝘯𝘥𝘦𝘱𝘦𝘯𝘥𝘦𝘯𝘵 𝘤𝘰𝘯𝘵𝘳𝘢𝘤𝘵𝘰𝘳. DOL believes that streamlined regulations in line with Congress’s intent will improve compliance, reduce misclassification, and reduce costly litigation in an economic environment that needs flexibility and innovation. The analysis in the proposed rule would: •Apply an “economic reality” test to determine whether a worker is in business for himself or herself as an independent contractor or is an employee economically dependent on an employer for work. •Identify and explain two “core factors” to help determine if a worker is economically dependent on an employer for work or in business for him- or herself:        o The nature and degree of control over the work.        o The worker’s opportunity for profit or loss based. •Identify other factors to help determine a worker’s status as an employee or independent contractor, including the amount of skill required for the work, degree of permanence of the working relationship, and whether the work is part of an integrated unit of production. •Advise that the actual practice of the worker and the potential employer is more relevant than what may be contractually or theoretically possible. •Provide eight fact-specific examples applying the factors to real-life circumstances. DOL encourages all interested parties to submit comments on the proposed rule, which has a 60-day comment period that closes on 𝗔𝗽𝗿𝗶𝗹 𝟮𝟴, 𝟮𝟬𝟮𝟲. Read the proposed rule: https://lnkd.in/errGeWqf

Microsoft AI Teams will soon tell your boss where you are. Starting December 2025, Teams can automatically detect when you connect to your company’s Wi-Fi and update your location to “in the office.” It sounds like a small feature. It isn’t. Location tracking through workplace networks is the newest frontier in digital surveillance, and it’s coming through your collaboration software. Microsoft says the feature is opt-in. That is very good. But, that decision will rest largely with employers and admins, not the average employee trying to meet deadlines. If you work for a Microsoft-using organization, now is the time to ask: Is our company planning to activate this feature? Has consent been properly documented? If you represent a union, this deserves to be on your next agenda. The GDPR and UK Data Protection Act require transparency, necessity, and proportionality for any location tracking. Under the EU AI Act, this may also fall under high-risk processing of biometric and personal data for workplace management. Employers must conduct a fundamental rights impact assessment before rolling it out. This isn’t paranoia. It is risk management, employee rights, and compliance. Workplace tracking without explicit, informed consent can violate privacy law in multiple jurisdictions, and it may open employers to liability under both GDPR and the EU AI Act’s risk provisions. If your organization uses Microsoft Teams with minors, such as schools or training programs, the stakes are even higher. Here’s what to do as an employee, parent, or guardian: 🔹 Ask your IT administrator if “location autodetection” is enabled. 🔹 Request a copy of the company’s Data Protection Impact Assessment (DPIA). 🔹 Ensure opt-in consent is voluntary and revocable. 🔹 Check that logs are deleted regularly and not used for performance evaluation. Transparency is not optional. #DigitalSovereignty #WorkplacePrivacy #AICompliance #GDPR #MicrosoftTeams Image source: SlashGear, https://lnkd.in/di5WvY2e From Microsoft: Microsoft 365 Roadmap: https://lnkd.in/dYc3N9TX Microsoft Learn (Configure auto-detect of work location): https://lnkd.in/dtEkYNqB

Gig workers new rule is about worker classification, here's a proactive approach to work with your staffing agency for compliance: Understanding the Rule: Get the details of the new rule and your business. For example, worker classified as employee or an independent contractor. Review Existing Contracts: Are your contracts updated and aligned with the new rule's requirements? Worker Classification Assessment: Discuss with your staffing agency how they assess worker classification and their procedures in response to the new rule. Legal Compliance: Partner with your staffing agency & legal counsel to ensure legal compliance, risk mitigation, and potential litigation. Employee Relations: Consider how the rule changes may impact your relationship with workers provided by the agency and maintain open communication. Communication: Informed transparent communication with your staffing agency about updates and challenges. This approach aims to help businesses adapt to regulatory changes and work hand in hand with staffing agencies to navigate the impacts effectively. Rule take effect March 11, but don’t wait until then - get strategic now. #businessleadership #compliance #staffingagency #departmentoflabor

The following is not legal advice. If you work for a US-based company and your accessibility program is linked to a DEI program, you need to break that connection as quickly as possible. This would have sounded backward a year ago. For most of the last decade, linking accessibility to DEI was a best practice. It helped accessibility gain seats at tables and commitments it had never had access to before. That structural marriage is now a liability. Yesterday, the DOJ announced a $30M settlement with PayPal over what it called an "unlawful DEI investment program." The Acting Attorney General was explicit: the administration intends to "root out illegal DEI from every corner of corporate America." PayPal is not an isolated case. Anything labeled "DEI" now invites scrutiny. Accessibility is legally distinct. It's grounded in the ADA, Section 508, and the Rehab Act, none of which share the legal theories driving current DEI enforcement. But when accessibility lives inside a DEI org or is publicly described as a DEI or even inclusion initiative, you've blurred a line the law clearly draws and tied a compliance obligation to whichever way the political wind blows. What breaking the connection looks like: 1) Move accessibility reporting out of DEI. 2) Legal, Product, Engineering, or a standalone Chief Accessibility Officer are all defensible homes. 3) Rewrite internal and external descriptions to reference the ADA, WCAG, and Section 508, not "belonging" or "inclusion" frameworks. 4) Separate the budget line. 5) Track and report accessibility metrics independently. You don't have to abandon your values. However, you do have to protect your legally mandated program from enforcement aimed at something else. Accessibility predates DEI and will outlast it. Make that obvious on the org chart. https://lnkd.in/g3Db92wY #Accessibility #DigitalAccessibility #ADA #WCAG #Section508 #A11y #DEI #ChiefAccessibilityOfficer

California's latest regulatory move offers a clear signal for enterprise HR, yet many leaders are overlooking it simply because the initial target is the gig economy. Last week, the California Privacy Protection Agency (CalPrivacy) launched its first formal sectoral audit. The focus is gig platforms. The objective is determining whether these organisations actually allow workers to access the data shaping their livelihoods. This introduces a pragmatic reality for people management: algorithmic due process. For years, workforce data collection has operated on a model of strict 'Data Asymmetry'. Employers hold the raw datasets, which include behavioural metrics, performance scoring and communication logs. The worker simply receives the final output. That output could be a shift allocation or an automated termination flag. California is directly challenging this asymmetry. Under state privacy laws, workers possess a legal right to understand the precise personal data an algorithm processes to reach decisions about their employment. Logically, a worker cannot contest a machine-generated decision without seeing the underlying inputs. If you oversee HR technology, people analytics or talent acquisition, it is worth viewing this as an early indicator of enterprise regulation. Legal frameworks frequently test compliance at the edges of the workforce before moving into the corporate centre. Consider the data your current HR infrastructure actively collects today: • Productivity monitoring outputs • AI-driven interview assessments • Flight-risk prediction scores If an employee asks to see the raw data informing an AI-generated "low potential" flag, your systems should theoretically be able to isolate and provide it. The transition from black-box algorithms to the Glass Box Mandate is shifting from an abstract debate to an active compliance requirement. You can certainly continue deploying advanced HR analytics to drive efficiency, but you must govern the data access risks properly. Review your vendors this quarter to understand how they support employee data access requests for algorithmic decisions. Preparing for data symmetry now builds operational resilience for whatever regulatory framework arrives next.

I run an AI audit firm. We do a lot of bias audits; the most common question I'm getting right now (from employers) is some version of: "Does my vendor's audit cover me?" 🙏 My honest answer is: it depends on what you mean by "cover." There are quite a few things at play here, so I'll touch on just a few. NYC Local Law 144 is really the only place in the US right now that requires you to have an independent third-party bias audit for an automated employment decision tool (AEDT, or ADS if you're in California). California, Colorado, etc. (and even the EU AI Act) all require (or strongly suggest) bias testing, and doing it yourself or asking your vendor to show you their testing is very good practice and a positive defense if you're ever investigated. But they don't require an outside auditor the way NYC does. Under LL144 itself, a vendor's audit CAN satisfy the employer's obligation, but only if you actually contributed your own self-declared historical demographic data to that audit. If you didn't, what the vendor has is what the DCWP calls "test data." Test data is okay for a while, but only until you've accumulated a statistically significant amount of your own applicant data. After that, it's on you. The problem I see most often: vendors and employers aren't really talking to each other about any of this. The vendor writes "compliance is your responsibility" into the contract, both sides sign, and often, nobody is totally sure what that means in practice. Then the employer calls us asking why the vendor audit doesn't seem to close the loop (flagged, correctly, by their external counsel)... it's because you didn't make arrangements ahead of time to share the appropriate data. Vendors, meet employers. Please have a discussion about this. Disclaimer: I'm the CEO of a firm that does this work, so of course I'd love more of it. But I'd rather you understand what the law is actually asking of you than hire us because someone panicked or communication wasn't clear. The above is not legal advice, just what I see in practice, and I'm skimming over a ton of nuance. I'll be back with more, or you can reach out or comment. If you or someone you know is suffering from chronic vendor-employer miscommunication, please share ♻️ this PSA and ask them to get help (and not from me, a lawyer).

Companies struggle to get employees to return to the office (#RTO). Many leaders have not considered how COVID and other viral infections make this more difficult. First, a significant percentage of people remain concerned about #COVID19 infections. The Annenberg Public Policy Center conducted a study two months ago that found 33% are worried about getting or having a family member get Covid in the next three months, 37% are worried about the flu, and 26% are worried about RSV. (https://lnkd.in/gC8CUsSN) Some claim this fear is inflated, but there is growing knowledge that each COVID reinfection increases the risks of Long COVID (https://lnkd.in/gyAQC4Hb), and that COVID can cause a host of chronic cardiovascular, neurological and other issues (https://lnkd.in/g7vTCmeR.) But it is not just concern about infections that might cause employees to resist returning full-time. COVID and Long COVID also cause people to struggle with work. As of September, one of every 23 American adults reported having some activity limitations due to Long COVID (https://lnkd.in/gPhUH8jM). The number of people in the US civilian workforce with a disability has skyrocketed since the pandemic began (https://lnkd.in/gbnfCHXH). And a series of studies have found people with COVID are often left with cognitive issues. For example, new research found that people with post-COVID fatigue are less sensitive to rewards (https://lnkd.in/gzAarjfr). COVID is not over. We will see another significant surge of infections this holiday season that will probably be among the largest six waves of infections since the pandemic began (https://lnkd.in/guQ2vSj5). As more get reinfected and are left with Long COVID, the challenges faced by employers will only increase. Forcing people back into the office who have concerns or are struggling with health issues is not the way to increase employee engagement and strengthen corporate culture. Leaders who want people to return to the office must consider: — Implementing and promoting safer air standards that increase ventilation and filtration and reduce CO2 — Being flexible with RTO policies, allowing more WFH during surges (as we will experience in the next two months) — Offering accommodations for those with Long COVID and other disabilities under the ADA It isn't enough to demand people work in places where they feel unsafe. You must make changes to improve safety for employees and customers.

🔹 Navigating the Return-to-Office Mandates 🔹 As many of us steer our teams through the complexities of Return-to-Office (RTO) mandates, the challenge of aligning company policies with employee needs has never been more critical. A recent survey by ResumeBuilder.com reveals that 90% of companies will have RTO policies in place by the end of this year. But how do we implement these mandates effectively without diminishing team morale or productivity? According to experts like Art Markman of the University of Texas at Austin, and Carol Kulik from the University of South Australia, the key lies in empathetic leadership and creative flexibility. Here’s what they suggest: 🔹 Co-Design the Return: Engage with your team members to address their concerns and co-create solutions that add value to their office presence. 🔹 Show Compassion: Understand the autonomy the pandemic afforded your team and listen to their concerns about returning to a structured office environment. 🔹 Seek Creative Solutions: Adjust work hours or explore remote work options during periods requiring deep focus to accommodate personal needs without compromising productivity. 🔹 Prioritize Inclusion: Use demographic data to tailor initiatives that foster a more inclusive environment, ensuring all team members feel connected and valued. 🔹 Celebrate Wins: Highlight and celebrate the advantages of in-person collaboration to boost morale and underline the benefits of office interactions. As managers, our role is not just to enforce policies but to champion a workplace where every team member can thrive. How have you navigated these challenges? What strategies have worked for your team? Let’s share insights and learn from each other. #Leadership #Management #ReturnToOffice #WorkplaceCulture #Teamwork #HBR

𝐃𝐏𝐃𝐏 𝐢𝐬 𝐧𝐨𝐭 𝐚 𝐜𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞 𝐥𝐚𝐰. 𝐈𝐭 𝐢𝐬 𝐚 𝐝𝐚𝐭𝐚 𝐚𝐫𝐜𝐡𝐢𝐭𝐞𝐜𝐭𝐮𝐫𝐞 𝐫𝐞𝐟𝐨𝐫𝐦. Last Saturday morning, I joined Akash Agrawal for a session with the ISB Alumni Association (Delhi NCR Chapter) on India’s Digital Personal Data Protection (DPDP) Act. One observation stayed with me. For a law that will reshape how every organisation handles personal data, the leadership attention it deserves remains modest. This mirrors what I am seeing across industry conversations: many organisations still view DPDP as a distant legal development rather than an imminent operating-model shift. Historically, regulatory urgency in India has accelerated after the first visible enforcement actions. DPDP is unlikely to be different. Three implementation realities that stood out in discussion: 1. Purpose comes before consent The Act does not require consent for everything. It requires processing to be anchored to a clear lawful ground. Purpose → determines → lawful ground → determines → retention. If purpose is unclear, consent will not rescue the processing. 2. Liability cannot be outsourced You may outsource processing to vendors, platforms or SaaS tools. You cannot outsource fiduciary responsibility. Under DPDP, the regulatory lens remains on the Data Fiduciary. 3. Employee data is the hidden risk zone Many organisations still rely on: • WhatsApp sharing • personal email exchanges • unrestricted internal access • legacy HR data retention These everyday practices are structurally incompatible with DPDP’s purpose-linked and access-controlled model. The transition window is shorter than it appears Rules were notified in November 2025. Indicative enforcement is expected around May 2027. For most organisations, this is one redesign cycle, not a gradual evolution. The real takeaway DPDP compliance will not be achieved through privacy policies, consent banners, or contract clauses alone. It will be achieved by redesigning how data is collected, accessed, retained and deleted inside the organisation. DPDP is ultimately an operating-model change. If your organisation has not yet mapped its personal data flows, purposes and retention logic, you are already behind the implementation curve. #DPDPAct #DPDP #DataProtection #DataGovernance #Privacy #DigitalIndia #AIGovernance #ISBAlumni #ISB