Home›Obligations›United States›By state›Missouri

What a Missouri business has to have in writing

Missouri runs no OSHA state plan and has no comprehensive consumer privacy law, so most of its written-policy load is notice and poster driven: a domestic and sexual violence leave notice handed to every new hire at employers with 20 or more people, a youth employment list posted where minors work, and the century-old service letter statute that forces employers with seven or more employees to put a departing worker's service history and reason for separation in writing on request.

The paid sick leave law that voters approved in 2024 was repealed effective August 28, 2025, so there is no state paid leave mandate. Insurance licensees are the exception on the data side: the Insurance Data Security Act took effect January 1, 2026 and requires a written information security program and an April 15 compliance certification from domiciled insurers.

Missouri has a rule of its own in 6 of the 14 areas, listed below. In 1 more we searched the state's own site and found nothing beyond the federal rule, but we have not finished writing up where we looked, so that one is not shown yet. The remaining 7 areas we have not checked yet.

Headcount

Industry General is always on

Ad from the publisher

Policy Acknowledgment Proof

MissouriHandbook 2026acknowledged by name

Missouri on Recordwith AllyMatter

Cover Missouri the Modern WayEvery policy Missouri makes you write, acknowledged by name

Approve it, lock the version

Non-author approval, obsolete copies blocked

Every employee in Missouri on record

Who read which version, and when

Walk into any state inspection with the trail

From $29/mo, 20 editors, unlimited staff (published)

See how it works →Pricing →

Missouri rules for a 15–19 person general business

We check the same 14 areas of state law on every state page: breach notification, data security program, consumer privacy law, biometric and health data, harassment prevention, workplace safety programs, workplace violence prevention, insurance data security, state vendor security program, paid leave policies, required postings, pay transparency, licensing and certifications, and other written policies. Federal rules apply in most of these already. What this page adds is whether Missouri has a rule of its own on top. The federal rules every employer carries follow the Missouri rules. Each row names what you must write, post, file or certify, who enforces it, and links to the authority.

Breach Notification 1Who you must tell after a data breach, and how fast

LawProduceWhat it requiresTriggerEnforced by

Notice to consumer for breach of securityMo. Rev. Stat. § 407.1500 #Any person or business that owns or licenses personal information of Missouri residents, or conducts business in Missouri and owns or licenses such informationDistribute + ack

Notice

Notify affected Missouri residents without unreasonable delay after discovering a breach. Missouri's definition of personal information is broader than most, covering medical information and health insurance information alongside Social Security, driver license and financial account numbers. If notice goes to more than 1,000 consumers at once, also tell the Attorney General's office and the nationwide consumer reporting agencies the timing, distribution and content of the notice. A business whose own written information security policy contains notice procedures consistent with the statute's timing is treated as compliant if it follows them.

From the first employee

Missouri Attorney General (exclusive; up to $150,000 per breach or series of related breaches)

AuthorityMissouri Revisor of Statutes - § 407.1500 Missouri Attorney General - Consumer Protection Report an error

Paid Leave Policies 1Sick and family leave laws that come with a written policy or notice

LawProduceWhat it requiresTriggerEnforced by

Victims Economic Safety and Security Act (domestic and sexual violence leave)Mo. Rev. Stat. §§ 285.625 to 285.670, notice duty at § 285.665 #Employers with 20 or more employees; employers with 20 to 49 employees give one week of unpaid leave a year and those with 50 or more give two weeksDistribute

Notice

Deliver a notice prepared or approved by the director of the Division of Labor Standards, summarizing the leave rights, to every employee, and to each new hire at the start of employment. The notice may be electronic. Employers also have to keep the leave, accommodation and confidentiality practices the statute requires. Missouri's separate paid sick leave law was repealed effective August 28, 2025, so this is the state's remaining leave mandate.

20+ employees

Missouri Department of Labor and Industrial Relations, Division of Labor Standards

AuthorityMissouri Revisor of Statutes - § 285.665 Missouri Department of Labor - Notice to Victims of Domestic and Sexual Violence Leave Time Allowed (LS-112)Missouri Revisor of Statutes - § 290.600 (paid sick leave, repealed by H.B. 567, 2025)Report an error

Required Postings 1The notices every workplace in the state must display

LawProduceWhat it requiresTriggerEnforced by

Required state workplace noticesMo. Rev. Stat. §§ 213.020.2, 285.665, 287.127, 290.522, 294.060.1; 8 CSR 60-3.010 #Missouri employers, with two of the notices keyed to headcount or to employing minorsPost

Posting

Post the Department of Labor and Industrial Relations set where employee notices are displayed: Workers' Compensation Law (WC-106), Discrimination in Employment (MCHR-9), Missouri Minimum Wage Law (LS-52) and Notice to Workers Concerning Unemployment Benefits (MODES-B-2). Employers of workers under 16 also post the Youth Employment List (LS-43), and employers with 20 or more employees deliver the domestic and sexual violence leave notice (LS-112) to each employee rather than only posting it. Housing and public accommodation businesses post MCHR-6 and MCHR-7.

From the first employee

Missouri Department of Labor and Industrial Relations; Missouri Commission on Human Rights

AuthorityMissouri Department of Labor and Industrial Relations - Notices (required posters)Missouri Revisor of Statutes - § 213.020 Missouri Revisor of Statutes - § 287.127 Report an error

Licensing and Certifications 3Registrations, licenses and certifications a business or its staff must hold

LawProduceWhat it requiresTriggerEnforced by

Business entity registration and annual reportMo. Rev. Stat. chs. 347, 351, 355 and 359; fictitious name registration ch. 417 #Any corporation, LLC, limited partnership or nonprofit formed in or transacting business in Missouri, plus anyone operating under a fictitious nameFile

Filing / record

File articles of organization or incorporation, or a foreign registration, with the Secretary of State's Corporations Division, keep a registered agent on file, register any fictitious name, and file the annual or periodic report required for the entity type to stay in good standing.

From the first employee

Missouri Secretary of State, Corporations Division

AuthorityMissouri Secretary of State - Corporations Missouri Secretary of State - Starting a Business Report an error

Sales and use tax registration and retail sales licenseMo. Rev. Stat. ch. 144 #Businesses selling tangible personal property or taxable services at retail in Missouri, plus employers required to withhold Missouri income taxFile

Filing / record

Register with the Department of Revenue before making retail sales, post the retail sales license at the business location, post the required bond where one applies, and file sales, use and withholding returns on the frequency the department assigns. Local and special district sales taxes are collected through the same registration.

From the first employee

Missouri Department of Revenue

AuthorityMissouri Department of Revenue - Sales/Use Tax Missouri Department of Revenue - Register a Business Location Missouri Revisor of Statutes - chapter 144 Report an error

Unemployment insurance employer registration and quarterly reportingMo. Rev. Stat. ch. 288 #Employers meeting Missouri's liability tests for unemployment insuranceFile

Filing / record

Register with the Division of Employment Security, post the Notice to Workers Concerning Unemployment Benefits (MODES-B-2) at each worksite, and file quarterly contribution and wage reports with the tax due.

From the first employee

Missouri Department of Labor and Industrial Relations, Division of Employment Security

AuthorityMissouri Division of Employment Security - Employers Missouri Department of Labor - Notices (MODES-B-2)Report an error

Other Written Policies 4Any other document the state makes an employer write or hand out

LawProduceWhat it requiresTriggerEnforced by

Service letter (letter of dismissal) statuteMo. Rev. Stat. § 290.140 #Corporations doing business in Missouri that employ seven or more people, for employees with at least 90 days of serviceDistribute + ack

Notice

When a departed employee makes a written request by certified mail to the superintendent, manager or registered agent within one year of leaving and cites the statute, issue a signed letter within 45 days stating the nature and character of the service rendered, how long it lasted, and truthfully why the employee was discharged or quit. Failing to issue the letter exposes the company to nominal and punitive damages, so most employers keep a standing service letter procedure and a designated signer.

7+ employees

Private civil action

AuthorityMissouri Revisor of Statutes - § 290.140 Missouri Revisor of Statutes - § 516.140 (limitation period for service letter actions)Report an error

Federal work authorization affidavit for public contracts and incentivesMo. Rev. Stat. § 285.530 #Any business entity awarded a state or local contract or grant over $5,000, or receiving a state-administered or subsidized tax credit, abatement or loanCertify

Certification

Enroll in a federal work authorization program such as E-Verify and file a sworn affidavit, with supporting documentation, affirming that enrollment for the employees working on the contracted services, plus a second affidavit that the entity does not knowingly employ unauthorized workers. The affidavits go to each contracting public body annually. Employers that enroll must verify every employee hired after enrollment and retain the dated federal verification report.

From the first employee

Missouri Attorney General; contracting public bodies

AuthorityMissouri Revisor of Statutes - § 285.530 Missouri Revisor of Statutes - chapter 285 Report an error

Child labor - youth employment list and work certificatesMo. Rev. Stat. ch. 294, in particular § 294.060.1 #Any employer of workers under 16Post

Posting

Post the Youth Employment List (LS-43) naming every employee under 16 where employee notices appear, keep the work certificate for each minor on file at the workplace, and observe the chapter's hour and occupation limits. The list must be printed on legal-size paper to fit on one page.

From the first employee

Missouri Department of Labor and Industrial Relations, Division of Labor Standards

AuthorityMissouri Department of Labor - Notices (Employer's Employing Workers Under the Age of 16 List, LS-43)Missouri Revisor of Statutes - § 294.060 Report an error

Workers' compensation coverage and noticeMo. Rev. Stat. §§ 287.030, 287.061 and 287.127 #Employers with five or more employees, and construction industry employers with one or more employeesPost

Posting

Carry workers' compensation insurance or hold an approved self-insurance authorization, and post the WC-106 notice stating that the employer is covered, who the insurer is and how to report an injury, where employees can see it. Injury reports go to the Division of Workers' Compensation on the state's schedule.

5+ employees

Missouri Department of Labor and Industrial Relations, Division of Workers' Compensation

AuthorityMissouri Department of Labor - Notices (Workers' Compensation Law, WC-106)Missouri Revisor of Statutes - § 287.127 Missouri Revisor of Statutes - § 287.030 Report an error

Because You Are in Food & Beverage 1Industry layer

LawProduceWhat it requiresTriggerEnforced by

Retail food establishment regulation (Missouri Food Code)19 CSR 20-1.025 (Sanitation of Food Establishments) #Restaurants, groceries, mobile and temporary food operations serving food directly to consumersCertify

Certification

Operate to the Missouri Food Code, which is based on the FDA 2009 model code, and designate a person in charge who can demonstrate knowledge of foodborne illness prevention and HACCP principles and who trains and monitors staff. The state code does not itself require a certified food protection manager; permits, fees, manager training and food handler cards are set by the county or city public health agency that inspects the establishment, so operators must check locally before opening.

From the first employee

Missouri Department of Health and Senior Services and local public health agencies

AuthorityMissouri DHSS - Retail Food Safety Missouri DHSS - Food Safety Training (person in charge and local requirements)Missouri Secretary of State - 19 CSR 20-1 (Missouri Food Code rule)Report an error

Because You Are in Financial & Tax 1Industry layer

LawProduceWhat it requiresTriggerEnforced by

Missouri Insurance Data Security ActMo. Rev. Stat. §§ 375.1400 to 375.1427 #Department of Commerce and Insurance licensees. Licensees with fewer than 10 employees including independent contractors are exempt from the security-program duty, as are producers with fewer than 50 employees, under $5 million gross annual revenue or under $10 million in year-end assets; HIPAA-covered and GLBA Interagency Guidelines licensees are deemed compliant.Certify

Certification

Run a risk assessment and maintain a comprehensive written information security program with board oversight and a written incident response plan. Notify the director within four business days of determining a cybersecurity event occurred where Missouri is the domicile or home state and there is a reasonable likelihood of material harm, or where 250 or more Missouri consumers' nonpublic information is involved. Insurers domiciled in Missouri file a written compliance certification by April 15 each year and keep the supporting records, plus documentation of any remediation underway, for five years.

10+ employees

Missouri Department of Commerce and Insurance

AuthorityMissouri Revisor of Statutes - § 375.1405 (information security program and certification)Missouri Revisor of Statutes - § 375.1400 (Insurance Data Security Act)Missouri Revisor of Statutes - § 375.1417 (exceptions) and § 375.1427 (effective dates)Report an error

From the publisher

Keep Your Written Policies in One Place

Whatever you are working toward, AllyMatter gets your policies approved, keeps every version and records who has read each one.

See how AllyMatter works ↗From $29/mo, 20 editors, unlimited staff

Your business type, with Missouri on top

Need a hand implementing it?

Find a Consultant Who Does This Work

Tell us what you need done and we will point you to firms that do this work. Your details go to a firm only when you choose it.

Get help →Advertise Here

Sources

What a Missouri business has to have in writing

Headcount

Industry General is always on

Missouri rules for a 15–19 person general business

Breach Notification 1Who you must tell after a data breach, and how fast

Paid Leave Policies 1Sick and family leave laws that come with a written policy or notice

Required Postings 1The notices every workplace in the state must display

Licensing and Certifications 3Registrations, licenses and certifications a business or its staff must hold

Other Written Policies 4Any other document the state makes an employer write or hand out

Because You Are in Food & Beverage 1Industry layer

Because You Are in Financial & Tax 1Industry layer

Federal rules for a 15–19 person general business

Keep Your Written Policies in One Place

Your business type, with Missouri on top

For another state

Find a Consultant Who Does This Work

Sources

About this data

Think something is wrong?

Want to advertise here?