Industry HR Guide

Healthcare HR Compliance

Mandatory overtime limits, staffing ratios, HIPAA training, licensing verification, and background check requirements — the HR rules that matter most in healthcare.

Get a free compliance playbook →
Free · No signup required · Takes 2 minutes

Mandatory overtime restrictions for healthcare workers

Unlike most industries, many states impose specific limits on mandatory overtime for nurses and direct care workers — restrictions that go beyond the FLSA's general overtime rules. These laws don't just require overtime pay; they prohibit requiring workers to stay beyond their scheduled shift at all, except in genuine emergencies.

California Connecticut Maine Maryland Minnesota New Jersey New York Oregon Texas Washington

In these states, requiring a nurse to work beyond their scheduled shift (except in a genuine emergency that could not have been anticipated) is a violation — regardless of whether you pay overtime rates. Violations expose employers to state investigations, nursing board complaints, and whistleblower lawsuits.

RN overtime pay (FLSA)
1.5× after 40 hrs/week
RNs who meet the learned professional exemption may be exempt — but most do not qualify
LPN overtime status
Almost always non-exempt
LPNs generally do not qualify for the learned professional exemption — overtime required after 40 hrs
CNAs / aides
Non-exempt, always
Home health aides, CNAs, and direct care workers are entitled to FLSA minimum wage and overtime
Shift differentials in OT
Must be included
Evening/night/weekend differentials must be included in the regular rate for overtime calculation
Automatic meal break deductions are one of the most common wage violations in healthcare

Many healthcare employers automatically deduct 30 minutes for a meal break whether or not the nurse was able to leave the unit. If nurses cannot be relieved from patient care duties during the break, that time is compensable and the deduction is an illegal wage violation. Track actual breaks taken — don't rely on automatic deductions.

Nurse staffing ratios and staffing plan requirements

California is the only state with mandatory minimum nurse-to-patient ratios set in statute. But multiple other states have enacted staffing plan requirements, mandatory overtime restrictions that effectively function as staffing minimums, and reporting requirements that apply to your facility.

California ICU
1:2 nurse-to-patient
Minimum ratio; may not be exceeded regardless of census
California med-surg
1:5 nurse-to-patient
Must be maintained at all times, including during breaks and meals
CMS nursing homes (2024)
3.48 hrs/resident/day
Including 0.55 RN hrs/resident/day. Phase-in timeline applies.
Staffing plan states
NY, IL, OR, WA
Require written staffing plans, committee input, and compliance reporting — ratios vary

Background checks, licensing verification, and OIG exclusions

Healthcare hiring involves multiple verification requirements that go well beyond a standard background check. Missing any of them — particularly OIG exclusion — can result in repayment of all Medicare and Medicaid claims attributed to that worker.

Employing an OIG-excluded individual in any Medicare or Medicaid-billable role triggers full claim repayment

The OIG exclusion list must be checked before every hire and monitored monthly for all employees with any patient contact in a Medicare or Medicaid-funded organization. This includes billing staff, administrators, and clinical workers. One excluded employee in a facility can trigger repayment of all claims they touched — which can be substantial.

OIG exclusion check
Pre-hire + monthly
Check the OIG List of Excluded Individuals and Entities before hire and monthly thereafter
State licensure verification
Primary source required
Verify directly with state licensing board — not just by asking the applicant. Document date verified.
Nurse Aide Registry
Required for CNAs
Verify CNA listing status before hire — registry flags abuse findings that disqualify employment
NPDB query
Required for physicians/dentists
National Practitioner Data Bank must be queried when granting hospital privileges and during credentialing

HIPAA workforce training requirements

The HIPAA Privacy Rule requires covered entities to train all workforce members on privacy policies — not just clinical staff. The Security Rule requires security awareness training. Both must be documented, and training must be repeated when policies change.

HIPAA training must be documented — verbal training is insufficient during an audit

OCR reviews training documentation in virtually every investigation and audit. Training records should include: who was trained, when, what was covered, and evidence of completion (sign-in sheets, quiz scores, or LMS completion records). Keep records for at least 6 years. New hires must be trained before or immediately upon hire.

Who must be trained
All workforce members
Includes employees, contractors, volunteers, and trainees with access to PHI
Training timing
Within reasonable time of hire
Also required when material changes to policies occur. Annual refresher is best practice.
Social media violations
Individual + employer liability
Workers who post patient info on social media expose both themselves and the employer to OCR enforcement
HIPAA sanction policy
Required and enforced
You must have a documented, enforced disciplinary policy for privacy violations — and apply it consistently

Employee vs. independent contractor in healthcare

Healthcare staffing — especially travel nurses, per diem staff, locum tenens physicians, and home care workers — involves complex classification questions. Healthcare is a top DOL enforcement priority for worker misclassification.

1099 travel nurses and per diem staff are almost always misclassified

Staffing agencies frequently classify travel nurses as independent contractors. Under the DOL's economic reality test, nurses provided through agencies are economically dependent on the agency (not truly in business for themselves) and perform the agency's core service. They are employees entitled to minimum wage, overtime, and FLSA protections — from the agency, and potentially from the facility under joint employer rules.

📋
Not sure which compliance rules apply to your healthcare organization?
Answer 5 questions about your state, headcount, and worker types and get a specific gap analysis covering overtime, classification, breaks, and required policies.
Run free compliance check →

Final pay and termination of licensed staff

Terminating a licensed healthcare professional involves steps that go well beyond issuing a final paycheck. Several obligations must happen on the same day — others within days.

EHR access revocation
Same day — immediately
Revoke access to all patient records systems, EHR, and clinical applications on the day of termination
Licensing board report
Mandatory in most states
If termination relates to patient safety, substance abuse, or professional misconduct, report to the state board
NPDB report (physicians)
Required if peer review involved
Hospitals must report to NPDB when a physician resigns or is terminated during peer review proceedings
COBRA notice
Within 14 days
Notify your health plan within 30 days of qualifying event; plan has 14 days to send election notice to employee
Final Pay Calculator — what's the deadline in your state?
Final pay timing for healthcare workers follows state law — California is immediate, most states allow the next regular payday. Get your state's exact deadline.
Calculate final pay deadline →

Healthcare HR — common questions

Do I have to pay for mandatory training and in-service time?
Yes — mandatory training time is compensable under the FLSA. This includes HIPAA training, annual competency assessments, safety training, new equipment orientation, and required in-services. Pre-shift huddles are compensable. Automatic exclusion of training time from payroll is a documented DOL violation in healthcare wage audits.
What are the rules for on-call time?
On-call time is compensable if restrictions are so burdensome that employees cannot use it for personal purposes. A nurse required to respond within 15 minutes, stay near the hospital, and remain sober during on-call periods may be entitled to compensation for the entire on-call period — not just time actually worked. Time spent responding to calls is always compensable.
Can I require nurses to sign non-competes?
Non-compete enforceability varies by state. California, Minnesota, and several others prohibit them entirely. Even in states that allow them, restrictions on nurses limiting patient access to care face heightened scrutiny. Non-solicitation clauses restricting patient solicitation are generally more enforceable. The regulatory trend is strongly against non-competes in healthcare.
What are my obligations if an employee diverts drugs?
Confirmed drug diversion requires: termination for cause (document thoroughly), mandatory reporting to the state licensing board (required in most states), DEA Form 106 if a DEA registration is involved, and full incident documentation. Do not allow a diverting employee to resign quietly to avoid mandatory reporting — the obligation is triggered by the underlying conduct, not the form of separation.
What are the meal break rules for nurses who can't leave the unit?
If a nurse cannot be relieved from patient care duties during a meal break, that time is compensable. Automatic 30-minute deductions without verifying the break was taken are a wage violation. California imposes a 1-hour premium wage for each meal period not provided. Many healthcare facilities use an interrupted meal break policy — nurses must be able to clock back in and be paid if called back during a break.
Are shift differentials included in the overtime calculation?
Yes. Shift differentials (evening, night, weekend) must be included in the "regular rate" for overtime purposes — they cannot be excluded. If a nurse earns $30/hr base plus $5/hr night differential, the overtime rate is 1.5× $35, not 1.5× $30. Excluding differentials from the overtime base is a common healthcare wage violation.

Get a healthcare-specific compliance playbook

Answer a few questions about your organization — state, headcount, facility type, worker mix — and get a specific action list covering overtime rules, classification, required training, and termination obligations.

Run free HR playbook →