Breach Notification 1Who you must tell after a data breach, and how fast
LawProduceWhat it requiresTriggerEnforced by
Breach of Personal Information Notification Act (as amended by Act 151 of 2022)AI-compiled73 P.S. §§ 2301-2330Any entity that maintains, stores or manages computerized data including personal information of Pennsylvania residents, plus state agencies, counties, municipalities and school districtsDistribute
Notice
Notify affected Pennsylvania residents without unreasonable delay after discovering a breach, and at the same time file a report with the Office of Attorney General through its breach portal when more than 500 residents are affected. At 500 or more residents you also notify the consumer reporting agencies. Vendors holding data for someone else tell the data owner instead.
From the first employee
Pennsylvania Office of Attorney General, Bureau of Consumer Protection
Workplace Safety Programs 2Written programs the state safety agency requires beyond federal OSHA
LawProduceWhat it requiresTriggerEnforced by
State Certified Workplace Safety Committee ProgramAI-compiledAct 44 of 1993; 34 Pa. Code chapter 129 subchapter BAny employer carrying Pennsylvania workers' compensation coverage that wants the premium discount; participation is voluntaryCertify
Certification
Set up a safety committee with at least two employer and two employee representatives, train every member in committee operation, hazard inspection and accident investigation, meet monthly and keep written agendas, attendance lists and minutes, then file the certification application in WCAIS between 90 and 30 days before the policy renewal date and recertify each year for the 5 percent workers' compensation discount.
From the first employee
Pennsylvania Department of Labor and Industry, Bureau of Workers' Compensation, Health and Safety Division
Pennsylvania industrial and building safety certificates (Bureau of Occupational and Industrial Safety)AI-compiledFire and Panic Act (35 P.S. §§ 1221-1235); Boiler and Unfired Pressure Vessel Law (35 P.S. §§ 1331.1-1331.19); Elevator Law (34 Pa. Code chapter 405); Uniform Construction Code (35 P.S. §§ 7210.101 et seq.)Owners and operators of commercial buildings, elevators, boilers and pressure vessels, amusement rides, propane and combustible-gas installations in PennsylvaniaCertify
Certification
Obtain and display the certificates the Bureau issues after inspection - building occupancy or fire and panic certificate, elevator and boiler operating certificates, amusement ride registration - and keep inspection records current through a certified inspector. Federal OSHA, not a state plan, covers general occupational safety in Pennsylvania private workplaces.
From the first employee
Pennsylvania Department of Labor and Industry, Bureau of Occupational and Industrial Safety
Insurance Data Security 1The written security program insurance licensees must certify
LawProduceWhat it requiresTriggerEnforced by
Insurance Data Security Act (Act 2 of 2023)AI-compiled40 Pa.C.S. chapter 45Licensees of the Pennsylvania Insurance Department, including insurers, HMOs, health service plans, fraternal benefit societies and producers; purchasing groups, out-of-state risk retention groups and assuming insurers domiciled elsewhere sit outside the definitionCertify
Certification
Run a documented risk assessment and build a written information security program on top of it, name someone accountable for the program, oversee third-party service providers, keep an incident response plan, tell the Commissioner within five business days of determining a cybersecurity event occurred, and, for Pennsylvania-domiciled insurers, file a written compliance certification with the Commissioner each April 15.
From the first employee
Pennsylvania Insurance Department
Required Postings 1The notices every workplace in the state must display
LawProduceWhat it requiresTriggerEnforced by
Mandatory workplace postingsAI-compiledVarious (43 P.S. § 333.112 minimum wage; 43 P.S. § 336.5 equal pay; 43 P.S. § 40.1 et seq. child labor; 77 P.S. workers' compensation; 43 P.S. § 781 unemployment; Act 197 of 2012; Act 31 of 2025)Every Pennsylvania employer, at each worksitePost + ack
Posting
Post the current L&I notices where employees can read them: minimum wage, the equal pay law abstract, unemployment compensation (UC-700), workers' compensation insurance (LIBC-500), the veterans' benefits notice, and, for employers of minors, the child labor abstract and hours of work for minors. Certain establishments add the human trafficking hotline sign, and government contractors above $25,000 post an anti-drug policy statement.
From the first employee
Pennsylvania Department of Labor and Industry, Bureau of Labor Law Compliance
Licensing and Certifications 4Registrations, licences and certifications a business or its staff must hold
LawProduceWhat it requiresTriggerEnforced by
Business registration (Bureau of Corporations and Charitable Organizations)AI-compiled15 Pa.C.S. (Associations Code); 54 Pa.C.S. chapter 3 (fictitious names)Corporations, LLCs, limited partnerships, nonprofits and any business operating under a fictitious name in PennsylvaniaFile
Filing / record
File formation or foreign registration documents (or a fictitious name registration) with the Bureau of Corporations and Charitable Organizations through Business Filing Services, keep a registered office address on record, and file the annual report that replaced the old decennial filing. Pennsylvania has no single statewide general business license, so tax and local registrations are handled separately.
From the first employee
Pennsylvania Department of State, Bureau of Corporations and Charitable Organizations
Professional and occupational licensure (Bureau of Professional and Occupational Affairs)AI-compiled63 P.S.; 49 Pa. CodeBusinesses and individuals in the trades and professions governed by Pennsylvania's licensing boards, from cosmetology and barbering to accountancy, engineering, nursing and real estateCertify
Certification
Hold the licence or registration the relevant board issues before offering services, display it where the board requires, meet the continuing education hours set for the profession, and renew on the board's cycle through the PALS online system.
From the first employee
Pennsylvania Department of State, Bureau of Professional and Occupational Affairs
Home Improvement Contractor registration (Home Improvement Consumer Protection Act)AI-compiled73 P.S. §§ 517.1-517.19 (Act 132 of 2008)Contractors doing $5,000 or more of home improvement work in Pennsylvania in a calendar yearFile
Filing / record
Register with the Office of Attorney General, renew every two years, carry the required liability insurance, and show the registration number in advertising and on contracts. Any home improvement job of $500 or more needs a written contract with the statutory terms, including the three-day right to cancel and limits on deposits.
From the first employee
Pennsylvania Office of Attorney General, Bureau of Consumer Protection
Retail food facility license and Food Employee Certification ActAI-compiled3 Pa.C.S. chapter 57 (Retail Food Facility Safety Act); 3 Pa.C.S. §§ 6501-6510; 7 Pa. Code chapter 46Retail food facilities licensed by the Department of Agriculture; the certification duty falls on higher-risk facilities (types 3 and 4)Certify
Certification
Hold a retail food facility licence and renew it annually, and have at least one supervisory employee complete an ANAB-accredited food protection manager exam. The certificate is posted in public view, the certified person acts as person in charge, and a new facility has 90 days to comply - three months if the certified employee leaves.
From the first employee
Pennsylvania Department of Agriculture, Bureau of Food Safety and Laboratory Services
Other Written Policies 3Any other document the state makes an employer write or hand out
LawProduceWhat it requiresTriggerEnforced by
Child Labor Act work permits and employer notificationAI-compiled43 P.S. §§ 40.1-40.16 (Act 151 of 2012)Any employer that hires a minor under 18 in PennsylvaniaFile
Filing / record
Keep the minor's school-issued work permit on file, and within five days of the first day of work send the issuing officer written notice of the minor's duties, hours, age and permit number. For workers under 16, get a written statement from a parent or guardian approving the duties and hours; child performers need a separate L&I permit before rehearsals start.
From the first employee
Pennsylvania Department of Labor and Industry, Bureau of Labor Law Compliance
Construction Workplace Misclassification Act (Act 72 of 2010)AI-compiled43 P.S. §§ 933.1-933.17Employers in the construction industry that engage individuals as independent contractorsWrite
Written policy
Hold a written contract with each individual treated as an independent contractor and be able to show the person is genuinely free from direction and running an independent business with their own tools, business location, liability insurance and profit or loss exposure. L&I investigates complaints and publishes an annual enforcement report.
From the first employee
Pennsylvania Department of Labor and Industry, Bureau of Labor Law Compliance
Wage Payment and Collection Law notice of pay termsAI-compiled43 P.S. §§ 260.1-260.12Every Pennsylvania employerDistribute
Notice
Tell employees at hire, in writing or by posted notice, the rate of pay, the regular payday and any fringe benefits or wage supplements promised, and give written notice before changing them. Deductions from pay are limited to those the law or the employee's written authorization allows.
From the first employee
Pennsylvania Department of Labor and Industry, Bureau of Labor Law Compliance