What a Wage and Hour Audit Looks Like, and What It Finds

An investigation can begin with a single employee complaint, a targeted initiative in your industry, or a routine review. By the time you know about it, your records are what they are.

A product-focused treatment of online timesheets is available in the website.

The federal enforcement baseline is maintained by the U.S. Department of Labor Wage and Hour Division.

Understanding how it proceeds is useful mainly because it tells you what to fix now.

General information, not legal advice. If you receive a notice of inspection, contact employment counsel before responding.

How it proceeds

Notice of inspection. Typically giving a short window — often three business days — to produce records.

That deadline is the point. It is not enough time to reconstruct anything, and attempting to is the worst available response.

Records production. Payroll records, time records, and the documents underlying wage computations. See FLSA recordkeeping.

Employee interviews. Conducted privately, and employers may not be present. Employees are asked what time they actually started, whether they took breaks, whether they ever worked without recording it, and whether anyone told them not to record something.

That last question is where most findings originate. No records will contradict a consistent account from several employees that a supervisor discouraged recording.

Analysis. Recorded hours against pay, classification against duties, rounding against raw data.

Findings and back wages. Computed across the relevant period, commonly two years and three for willful violations, with liquidated damages frequently doubling the figure.

What is found most often

In rough order of frequency.

Misclassification. Employees treated as exempt who do not satisfy the tests. The largest by value, because the exposure runs across the whole period and there are no hour records to rebut it. See exempt or non-exempt.

Off-the-clock work. Pre-shift setup, post-shift closing, work at home, messages answered outside hours. See off-the-clock work.

Automatic meal deductions where breaks were not taken or were interrupted. High frequency, easily demonstrated from interviews. See meal and rest breaks.

Rounding that is not neutral. Straightforward arithmetic once the raw data is produced — and where the raw data has been discarded, the absence itself is a finding. See rounding time entries.

Regular rate errors. Overtime calculated on base rate only, excluding non-discretionary bonuses, shift differentials or commissions that should have been included. Technical, extremely common, and rarely noticed internally.

Unpaid travel and training time. See travel, training and on-call.

Incomplete records. Which, under Anderson v. Mt. Clemens Pottery, shifts the burden onto the employer to disprove the employee's reasonable estimate.

Independent contractors who are employees. Whole categories of unpaid overtime and no records at all.

The self-audit worth running

Annually, and now if you have never done it. A day of work.

1. Classification. List every salaried employee with weekly salary and work state. Flag anyone below the applicable threshold — federal or state, whichever is higher. Then test duties against what the person actually did last month, not against the job description.

2. Regular rate. Take five overtime employees who received a bonus, commission or shift differential. Recalculate the overtime rate including it. This finds errors more often than any other single check.

3. Rounding. One pay period, exact recorded minutes versus hours paid, per employee. If any individual is down, aggregate neutrality will not help you.

4. Meal breaks. One pay period. Every shift over the state's trigger length should show a recorded meal period of the required length. Check the exception rate — if it is near zero, the process is not working.

5. Off-the-clock. Pick one non-exempt role. Compare recorded hours against email timestamps, system access logs and badge data for a month. Consistent gaps at either end of the day are the finding.

6. Corrections. Pull every correction for a quarter and sort by direction and by manager. Clustering under one manager, or a strong one-way bias, is what an investigator looks for. See correcting time records.

7. Multi-state. Confirm you know where every remote employee actually works, and that the applicable state rules are configured. See timekeeping for remote and hybrid staff.

8. Records. Confirm you can produce, for one employee, three years ago, every raw punch and every edit with its author and reason.

Do it under privilege

Worth stating plainly: a self-audit creates a record.

An internal review that finds a problem and documents it, followed by no remediation, is considerably worse than no review. And the findings may be discoverable.

Run substantive audits through counsel so that the analysis is privileged, and decide the remediation plan alongside the review rather than afterwards.

If you find something

Do not simply fix it going forward and hope. There is back pay exposure, and how the correction is made and communicated matters — including whether employees are asked to sign anything.

Take advice on remediation before acting. Options differ by jurisdiction, and some routes preserve protections that others do not.

Fix the cause, not the instance. A rounding error is a configuration. A misclassification is usually a whole job family. Off-the-clock work is usually a manager incentive.

The one that prevents most of it

Most findings trace back to a single structural fact: managers measured on overtime spend, with no measure of unrecorded work.

That arrangement pays supervisors to discourage recording. No policy, training or system corrects an incentive, and it is the first thing to look at — before the timekeeping configuration and before the audit.