Checklist · Employment · Illinois New Hire

Illinois New-Hire Compliance Checklist: From Offer Acceptance Through Day 20

A new-hire file should connect work authorization, pay notice, payroll, state reporting, policies, access, training, benefits, privacy, and role-specific licensing. Use the first 20 days to build a record that shows what the employer told the employee, what it verified, and what access it granted.

By Lincoln Square Law · 7-minute read

🖨 Print this checklist

New-hire controls from offer acceptance through day 20

• Confirm the legal employer, title, manager, work location, start date, classification, and approved compensation.
• Complete Form I-9 using the current federal form and timing rules, and do not request a preferred List A, B, or C document.
• Deliver and acknowledge the Illinois hiring-time pay notice, and confirm payroll matches the approved terms.
• Submit the Illinois new-hire report within the applicable statutory reporting period and keep confirmation.
• Issue the current handbook and role-specific policies, with versioned acknowledgments.
• Complete required safety, harassment, privacy, security, and role-specific training before unrestricted access.
• Approve system, facility, financial, and regulated-data access by role, and test the permissions after provisioning.
• If biometrics are used, complete the BIPA notice, purpose/term disclosure, written release, and retention controls before collection.
• Record benefits enrollment or waiver, required licenses/credentials, equipment issued, and any open onboarding exception.
• Run a day-20 completion audit and assign each unresolved item to an owner and due date.

Build one onboarding control file

Onboarding should not be a stack of forms maintained by unrelated systems. Create one checklist keyed to the employee, legal employer, job title, manager, work location, start date, classification, pay basis, and role-specific requirements. The checklist should point to the evidence held in HRIS, payroll, Form I-9 systems, training platforms, benefits, security tools, and licensing files rather than duplicating sensitive records everywhere.

Set deadlines from the actual start date. Federal Form I-9 rules, Illinois new-hire reporting, pay notices, benefit enrollment, policy acknowledgments, and security access do not all use the same clock. A central onboarding owner should see every due date and escalate missing items before payroll or system access makes the gap harder to correct.

Complete employment verification on the federal timetable

Federal law requires employers to complete Form I-9 for each covered new hire and follow the timing and document rules in 8 U.S.C. §1324a and 8 C.F.R. §274a.2. The process is about identity and authorization to work. It is not permission to demand a preferred document from the employee. Train the person completing Section 2 to follow the current form instructions, accept documents that reasonably appear genuine and relate to the person, and escalate unusual cases rather than improvising.

Keep Form I-9 records and supporting copies, if the employer’s consistent process retains them, in a controlled location separate from ordinary personnel files. If the employer participates in E-Verify or has federal-contract obligations, document that additional workflow separately. Do not use the onboarding process to ask for citizenship or immigration details the verification rules do not require.

Give the pay notice at hiring and configure payroll to match

Illinois Wage Payment and Collection Act Section 10 requires employers to notify employees at the time of hiring of the rate of pay and the time and place of payment. Whenever possible the notice should be in writing and acknowledged. The employer also must notify employees of changes before they take effect (820 ILCS 115/10). The offer letter, wage notice, payroll setup, and job classification should therefore agree.

Verify hourly versus salaried status, regular rate inputs, overtime eligibility, commission or bonus terms, pay frequency, deductions, expense reimbursement, and timekeeping. Do not assume the payroll vendor determines legal classification. Preserve the approved compensation record and have HR review the first paycheck where the role has unusual pay components.

Report the hire to Illinois on time

Illinois’s Directory of New Hires statute requires employers to submit specified new-hire information, generally no later than 20 days after hire, with special timing rules for electronic transmissions (820 ILCS 405/1801.1). Make the reporting task a dated onboarding item rather than a payroll assumption. Record the transmission confirmation or other evidence that the report was submitted.

For rehires, transfers between related entities, and workers returning after separation, verify whether the statutory definition and employer reporting rules treat the individual as a reportable new hire. Multi-state employers should coordinate any designated-state reporting arrangement rather than allowing each location to guess which state received the record.

Give policies that match the employee’s actual work

Provide the current handbook and role-specific policies, not every policy the company has ever written. At minimum, consider attendance, timekeeping, anti-harassment, complaint reporting, confidentiality, data security, acceptable use, remote work, expense reimbursement, leave, workplace safety, drug and alcohol rules, and conflicts of interest. Regulated businesses may need additional licensing, patient/privacy, quality, or product rules.

Require acknowledgments that prove receipt, not a waiver of statutory rights. Track the policy version and effective date. If a policy changes during the first weeks, document the new acknowledgment rather than overwriting the original record. Employees should know where to report concerns outside their direct supervisor.

Provision only the access the role needs

Use role-based access rather than copying the permissions of the last person who held the job. Identify email groups, cloud folders, HR systems, financial systems, customer or patient records, code repositories, physical keys, badges, alarm codes, and privileged applications. Require manager and system-owner approval for elevated access and record who granted it.

The first-week access review should compare the employee’s active permissions to the approved request. Remove temporary credentials and test multifactor authentication. For regulated data, train the employee before granting full access when practical. Onboarding is the best time to create a clean baseline for later quarterly access reviews and termination offboarding.

Handle biometrics and workforce monitoring before collection

If the company uses fingerprint or face-geometry time clocks, access controls, or another covered biometric system, address BIPA before the first scan. Section 15 requires a written publicly available retention policy and, before collection, written notice of collection/storage, purpose and term, and a written release (740 ILCS 14/15). Vendor configuration should not outrun the legal notice and consent process.

Similarly, identify cameras, GPS, call recording, productivity tools, and AI systems used in the role and provide notices required by applicable law or policy. Record the vendor, data collected, retention, access, and business purpose. A new employee should not discover the company’s monitoring architecture accidentally after a dispute.

Close onboarding with a day-20 audit

By day 20, the employer should be able to produce a short completion record: Form I-9 status, pay notice, payroll setup, new-hire reporting confirmation, policy acknowledgments, training, benefits or waiver status, licenses or credentials, issued equipment, access approvals, and any open exceptions. Assign each exception an owner and due date.

Do not let incomplete onboarding disappear into the personnel file. Missing verification, access, training, or reporting items become harder to resolve months later. A day-20 audit converts onboarding from a welcome process into a compliance control and gives the employer a reliable baseline for future pay changes, access reviews, leave, investigations, and offboarding.

Reconcile onboarding with future offboarding

The onboarding record should also establish what must be reversed at separation. Every account, key, device, license, payment authority, customer assignment, and record-access grant issued during onboarding should have an owner and a system of record. That lets HR and IT remove access promptly without reconstructing what the employee received.

Use the same employee identifier across onboarding and offboarding systems. If a role changes, update the baseline rather than layering new permissions on top of old ones. Good onboarding is the first half of access governance: it defines the approved state that later reviews and termination controls are supposed to restore.