Pay Transparency Penalties Are Real Now: What Enforcement Looks Like in 2026

Pay Transparency Penalties Are Real Now: What Enforcement Looks Like in 2026

For the first few years of the pay transparency era, most employers treated the salary-range rules as a formality. You dropped a range into the posting, hoped it was wide enough, and moved on. Regulators were slow, penalties were theoretical, and nobody you knew had actually been fined. That era is over. In 2026, eighteen states plus Washington, D.C. have pay transparency laws on the books, and the agencies and plaintiffs' lawyers behind them have found their footing. Washington employers alone are facing hundreds of class actions. New York City can hit a single bad posting with a six-figure penalty. This piece walks through what enforcement actually looks like right now — the real dollar amounts, the class-action machine, the cure periods that can save you — and why a defensible pay range is the cheapest insurance you can buy.

TL;DR

• Enforcement stopped being theoretical in 2025–2026. Agencies are issuing citations, and plaintiffs' firms have built a class-action pipeline around job postings.
• Washington is the epicenter: statutory damages of $5,000 per applicant drove 300+ class actions, nearly all in King County, before a 2025 amendment added a narrow cure period.
• New York City can impose civil penalties of up to $250,000 per violation and is targeting ranges it considers too wide to be "good faith."
• Colorado fines run $500 to $10,000 per posting, and the state has already collected hundreds of thousands of dollars.
• Virginia's new law (effective July 1, 2026) adds attorney general penalties and a private right of action, with a 15-business-day cure period.
• The through-line: penalties scale per posting and per applicant, so one sloppy template can multiply into real money fast.

The grace period is over

When Colorado kicked off the modern wave in 2021, enforcement was gentle. Agencies focused on education, first violations got warnings, and the penalty language read more like a deterrent than a threat. Employers noticed, and compliance stayed loose.

Three things changed that. First, more states passed laws, so the same posting mistake now creates exposure in a dozen jurisdictions at once. Second, agencies built the staff and the complaint intake to actually investigate. Third — and this is the one that should worry you — plaintiffs' attorneys discovered that some of these statutes hand a fixed dollar amount to every applicant, which is the raw material for a class action.

The result is a genuine shift in risk. You are no longer betting against a slow regulator. You are betting against a law firm that can turn your job board into a spreadsheet of statutory damages.

Washington: the class-action epicenter

If you want to understand how bad this can get, look at Washington. Its Equal Pay and Opportunities Act (EPOA) requires employers with 15 or more employees to include a wage scale or salary range, plus a general description of benefits and other compensation, in every covered job posting. The official Washington L&I guidance spells out the mechanics.

Here is the part that turned Washington into a courtroom: the law lets an applicant recover statutory damages of $5,000 per violation — with no requirement to prove any actual harm. Multiply that by every person who applied to a non-compliant posting, and the math gets ugly. Plaintiffs' firms did exactly that. More than 300 class actions have been filed, nearly all of them in King County, and in 2025 roughly 40% of the state's employment class-action filings involved job-posting claims.

The Washington Supreme Court then made things worse for employers by reading "applicant" broadly, so the pool of people who can sue is wide. The legislature responded in 2025 with an amendment (effective July 27, 2025) that added a five-business-day cure period: if someone notifies you of a non-compliant posting and you fix it in time, you can shield yourself from damages. But that safety valve is temporary — it sunsets on July 27, 2027 — and it only helps if you catch the problem before a filing lands.

The lesson from Washington is not "avoid Washington." It is that a per-applicant damages model plus a high-volume job board is a class-action waiting to happen.

New York City: six-figure penalties for a "bad faith" range

New York City takes a different route to a scary number. Under the city's law, enforced by the NYC Commission on Human Rights, a violation can draw a civil penalty of up to $250,000. First-time violators get 30 days to fix a non-compliant posting without penalty, which sounds forgiving — until you realize what the Commission has been scrutinizing.

The NYC standard is not just "include a range." It is a good-faith range. The Commission has gone after postings with ranges so wide they are meaningless — think $50,000 to $180,000 for one role. A range that broad tells a candidate nothing, and regulators treat it as an attempt to technically comply while dodging the point of the law. If your compliance strategy is to post a range wide enough to cover any outcome, New York City is the jurisdiction that will call it what it is.

Colorado: the original, still collecting

Colorado's Equal Pay for Equal Work Act, created by SB 19-085, remains one of the most aggressive posting regimes. Fines run $500 to $10,000 per violation, and the state treats each non-compliant posting as its own violation. The Colorado Department of Labor and Employment accepts complaints, investigates, and issues citations — and it has the receipts to prove enforcement is real. As of late 2024, the agency had fielded 1,747 complaints, issued twenty citations, and collected roughly $238,000 in fines.

Colorado's rules also reach further than most people expect. The posting obligation covers roles that could be performed in Colorado or remotely by a Colorado resident, and it applies to internal promotions and transfers, not just external hires. If you run a remote-friendly company and think you have no Colorado exposure, check again.

Not sure whether your current ranges would survive a "good-faith" challenge in New York or a per-posting audit in Colorado? See how PointFactors builds defensible ranges from the job up — before a regulator or a plaintiff does the math for you.

Virginia: the newest test case

Virginia's law took effect July 1, 2026, and it is worth watching because it stacks two enforcement paths on top of each other. The state attorney general can bring civil actions with penalties of up to $1,000 for a first violation and up to $5,000 for each subsequent violation. Separately, current and prospective employees can sue in court within one year and recover actual damages plus other relief. The law does give you a 15-business-day cure period to fix a non-compliant posting after written notice.

Virginia matters because it shows where new laws are heading: agency penalties and a private right of action, paired with a short cure window. That combination gives employers a chance to fix mistakes, but only if you have a process to catch them quickly.

California: quieter penalties, longer memory

California's posting penalties under Labor Code 432.3 are comparatively modest — $100 to $10,000 per violation — but the state changed the calculus in 2026 with SB 642. The amendment, effective January 1, 2026, tightened the definition of a "pay scale" so a good-faith range has to reflect what you actually expect to pay, and it extended the statute of limitations for equal pay claims to three years. A longer look-back window means the ranges you post today can be evidence in a claim years from now. California's message is that your postings are not disposable — they become part of the record.

What the penalties have in common

Read across the jurisdictions and a few patterns jump out:

Two features drive the real exposure. The first is that penalties scale per posting or per applicant, so a single flawed template does not create one problem — it creates hundreds. The second is that "good faith" is becoming the operative test. Posting a range is table stakes; posting a range you can defend is the actual requirement. For a fuller map of what each state demands, our multi-state compliance guide breaks it down jurisdiction by jurisdiction, and the Washington, Colorado, and New York guides go deep on each.

The defense is a defensible range

Here is the uncomfortable truth underneath every one of these penalties: most violations are not employers hiding pay. They are employers who genuinely do not know what a job is worth, so they post a range that is either too wide, too vague, or copied from a template that no longer matches the role.

That is a compensation problem before it is a legal problem. When you can show that a range came from a consistent method — jobs scored against weighted compensable factors like skill, effort, responsibility, and working conditions — the range stops being a guess and becomes a defensible position. A "good-faith" range is simply a range you can explain. If a regulator or a plaintiff asks why the job pays $95,000 to $115,000, "that is what the market felt like" is not an answer. "The role scored here on our factor framework, which places it in this band" is.

This is exactly why defensible pay ranges have moved from a nice-to-have to a compliance necessity. The point-factor method gives you a repeatable, documented basis for every number you post — which is the same evidence that shields you when someone challenges it.

FAQ

Which state has the toughest pay transparency enforcement? Washington has produced by far the most litigation, because its law hands each applicant $5,000 in statutory damages with no need to prove harm — ideal fuel for class actions. New York City carries the highest single-violation penalty at up to $250,000. "Toughest" depends on whether you fear agencies or plaintiffs' firms more.

Can employees sue directly, or only regulators? Both, depending on the state. Washington and Virginia allow private lawsuits, and Washington's per-applicant damages have driven hundreds of class actions. Colorado and New York City rely primarily on agency enforcement. Several states now combine both, which is the emerging model.

Does fixing a posting after a complaint protect me? Sometimes. Washington (five business days, through July 2027), Virginia (15 business days), and New York City (30 days for a first violation) all offer cure periods. But cure windows only help if you catch the problem fast, and they usually do not erase exposure once a lawsuit is already filed.

Are remote job postings covered? Often, yes. Colorado's law reaches roles that could be performed remotely by a Colorado resident, and several other states take a similar view. If you hire remotely, assume your postings are subject to the strictest state where a hire could plausibly work.

Why are regulators rejecting wide salary ranges? Because a range like $50,000 to $180,000 defeats the purpose of the law. New York City in particular treats implausibly broad ranges as bad-faith attempts to technically comply, and it has pursued employers over them. A range should reflect what you actually expect to pay for the role.

How do I make a range defensible? Base it on a consistent job evaluation method rather than gut feel. When each role is scored against weighted compensable factors, you can document why a job sits in a given band — which is precisely the "good-faith" evidence enforcement standards are looking for.

Is a federal pay transparency law coming? Not imminently. Bills have been introduced in Congress but none has passed as of 2026. For now, compliance is a state-by-state exercise, which is what makes a single, consistent internal methodology so valuable — it travels across jurisdictions.

Pay transparency penalties are no longer a hypothetical line in a statute. They are citations, class actions, and six-figure numbers landing on real employers in 2026. The good news is that the fix is within your control: know what every job is worth, document how you got there, and post ranges you can defend. Book a PointFactors demo and see how point-factor job evaluation turns your salary ranges into evidence instead of exposure.

Justin Hampton is the founder and CEO of PointFactors.