Compliance Checklist

A general regulatory and policy compliance checklist for organizations.

Published July 3, 2026

Download PDF

Identify applicable requirements

List the laws and regulations that apply to your activities.
Requirements vary by industry and jurisdiction — confirm what applies to you.
Identify required licenses, permits and registrations.
Note contractual and customer compliance obligations.
Identify the standards your organization must meet.
Assign an owner to track each area of requirement.
Keep a register of obligations and renewal dates.
Track renewal deadlines, governing bodies, and owners to prevent lapsed permits or costly penalties.

Policies and procedures

Maintain policies that address each key requirement.
Ensure procedures translate policies into day-to-day practice.
Keep policies current and approved by the right authority.
Make policies accessible to all relevant staff.
Define a code of conduct and ethics expectations.
Set a process for reporting concerns or violations.
Provide anonymous reporting channels so staff feel safe raising concerns without fear of retaliation.

Training and awareness

Identify which roles need compliance training.
Provide training on relevant laws, policies and procedures.
Keep records of who completed training and when.
Archive completion dates, attendee lists, and comprehension scores as verifiable proof for future audits.
Refresh training when requirements or policies change.
Confirm staff understand their compliance responsibilities.
Communicate updates and reminders regularly.

Records and documentation

Define which records must be created and retained.
Store records securely and protect sensitive data.
Apply retention and disposal schedules consistently.
Keep evidence that requirements are being met.
Archive inspection logs, approvals, and system audit trails instead of relying on verbal confirmations.
Maintain licenses, certificates and inspection records.
Ensure records are available and retrievable for audit.
Use consistent file structures so critical documentation can be produced immediately during an inspection.

Monitoring and assessment

Schedule regular compliance reviews and internal audits.
Monitor for changes in laws, regulations and standards.
Assess controls for gaps and weaknesses.
Track key compliance indicators and incidents.
Document review results and identified gaps.
Escalate significant risks to management.

Corrective action and improvement

Log compliance gaps and violations as they are found.
Investigate the root cause of each issue.
Trace failures back to process flaws or missing training rather than stopping at individual human error.
Assign corrective actions with owners and due dates.
Verify corrective actions are effective.
Report compliance status to management.
Update policies and controls to prevent recurrence.

0 / 36 done

Organizations can confirm they meet all applicable laws, regulations, standards, and internal policies by following this structured compliance checklist. It covers identifying applicable requirements, putting policies and controls in place, training staff, keeping records, monitoring for gaps and taking corrective action when something falls short.

Compliance failures rarely come from bad intent; they come from requirements no one tracked, policies no one followed, or records no one kept. A clear checklist turns a sprawling obligation into a manageable set of checks so gaps surface internally before they become regulatory or legal problems.

This checklist helps compliance officers, managers and auditors review where the organization stands across its obligations — regulatory, contractual and policy-based — and keep evidence that requirements are being met. It is general by design and not limited to HR; adapt it to the specific regulations and standards that apply to you.

Print the checklist for a compliance review, or download the PDF so you can record status, gaps and actions with owners and dates. Keep completed records on file as evidence of due diligence and for audit.

FAQ

What is a compliance checklist?

It is a structured tool for confirming an organization meets the laws, regulations, standards and internal policies that apply to it, covering applicable requirements, policies, records, training, monitoring and corrective action.

What does 'applicable requirements' mean?

It means the specific laws, regulations, standards, licenses and contractual obligations that apply to your organization based on its industry, location and activities. Identifying them accurately is the foundation of compliance.

Is this an HR compliance checklist?

No. This is a general regulatory and policy compliance checklist that applies across an organization. HR compliance is one specialized area; this checklist covers the broader compliance process rather than employment-specific rules.

How often should compliance be reviewed?

Review compliance on a regular schedule, at least annually, and whenever regulations change or the business adds new activities, locations or products. Continuous monitoring catches issues between formal reviews.

How should an organization prepare for a compliance audit?

Start by conducting an internal mock review using your compliance checklist to identify weaknesses early. Gather all relevant documentation, including current licenses, training sign-in sheets, incident logs, and policy acknowledgment records. Designate specific team members to liaise with auditors and ensure every record owner knows how to retrieve supporting evidence quickly. Addressing lingering gaps beforehand ensures an efficient, stress-free formal audit.

What core areas should a basic business compliance checklist cover?

A foundational checklist should focus on five core pillars: legal and licensing obligations, operational policies and workplace standards, mandatory employee training, secure record retention, and ongoing monitoring. Covering these essential areas ensures your business meets basic statutory obligations, protects confidential customer and employee data, and maintains operational consistency without requiring overly complex program management.

Built from public guidance and kept up to date — how we write our checklists. Spotted a mistake? Tell us.