AB 538 requires contractors and subcontractors on California public works projects to maintain certified payroll records with specific fields (name, address, SSN, classification, daily hours, actual per diem wages) and a written declaration under penalty of perjury that the payroll is accurate and compliant with prevailing-wage laws. The bill mandates who may inspect or receive certified copies — employees, awarding bodies, the Division of Labor Standards Enforcement (DLSE), the public (through the awarding body or DLSE), Taft‑Hartley trust funds, and certain law‑enforcement entities — and prescribes redaction rules and form requirements.
Why it matters: the bill tightens administrative responsibilities and imposes a $100-per-worker-per-day forfeiture for late production, while carving out privacy protections and limited immunity for employers who act in good faith. Contractors, subcontractors, awarding bodies, unions, and compliance officers should prepare for new document-handling procedures, potential administrative fees, and closer DLSE and law‑enforcement scrutiny of payroll records.
At a Glance
What It Does
The bill mandates specific payroll fields and a perjury declaration, requires certified copies be made available to employees, awarding bodies, and DLSE, and opens public access to payroll records via the awarding body or DLSE subject to redaction rules. It sets a 10‑day compliance window for records requests, authorizes the DLSE to withhold progress payments to recover penalties, and directs the DLSE to provide standardized forms.
Who It Affects
All contractors and subcontractors on California public works projects; bodies awarding public‑works contracts and their compliance staff; the DLSE and agencies in the Joint Enforcement Strike Force; Taft‑Hartley trust funds and joint labor‑management committees; and privacy officers responsible for CPRA/Information Practices Act compliance.
Why It Matters
The law raises the operational burden on contractors (records, certified forms, faster turnaround) and gives awarding bodies and DLSE clear enforcement levers (withholding progress payments). It also clarifies which third parties may receive payroll data and under what redaction rules, creating friction points between transparency, privacy, and administrative workflows.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
AB 538 specifies exactly what must be in a contractor’s certified payroll: employee name, address, social security number, trade classification, daily and weekly straight‑time and overtime hours, and actual per diem wages paid. Each payroll entry must be accompanied or verified by a signed declaration under penalty of perjury attesting that the payroll is accurate and that the employer complied with prevailing wage statutes for work on the project.
The bill creates a tiered access regime. Employees and their authorized representatives get certified copies on request.
Awarding bodies and the DLSE likewise may obtain certified payrolls directly. Members of the public can obtain payroll records, but only if they route requests through the awarding body or the DLSE; the awarding body must procure records from contractors when it does not already possess them.
Where records are not previously furnished to DLSE (per Section 1771.4 processes), the requester must reimburse contractors and intermediaries for preparation costs before receiving the records.AB 538 sets concrete timelines and enforcement tools. Contractors and subcontractors have 10 days after written notice to produce requested payrolls; failure to comply triggers a forfeiture of $100 per worker per calendar day until production, and the DLSE may ask awarding bodies to withhold those amounts from progress payments.
Contractors must also notify awarding bodies of the physical location of payroll records and update any change of location within five working days.The bill balances disclosure and privacy. Public copies must be redacted to remove individual names, addresses, and full social security numbers, while Taft‑Hartley funds and joint labor‑management committees may receive records marked only to conceal full SSNs (Taft‑Hartley may retain last four digits).
Taft‑Hartley funds and joint committees must receive data on DLSE forms (electronic certified payroll copies are not sufficient for them). Agencies in the Joint Enforcement Strike Force and other law‑enforcement investigators can obtain non‑redacted payrolls for investigative purposes, and employers get limited civil immunity for good‑faith compliance.
Finally, the DLSE director must adopt rules that harmonize release procedures with the California Public Records Act and the Information Practices Act and set reasonable reproduction fees.
The Five Things You Need to Know
The bill requires payroll records to include name, address, social security number, work classification, daily and weekly hours, and actual per diem wages plus a written perjury declaration of accuracy and compliance with Sections 1771, 1811, and 1815.
Contractors and subcontractors have 10 days after a written request to provide certified payrolls; failure to comply triggers a $100 forfeiture per worker per calendar day until compliance.
Public requests must be routed through the awarding body or the DLSE; requesters may have to reimburse preparation costs if the records were not already provided to DLSE under Section 1771.4.
Taft‑Hartley trust funds and joint labor‑management committees must receive payrolls on DLSE forms (electronic certified printouts do not satisfy their requests) and are entitled to the last four digits but not full SSNs for Taft‑Hartley requests.
Agencies in the Joint Enforcement Strike Force and law‑enforcement agencies may obtain nonredacted payrolls for investigations, but any copies they release to the public must be redacted; employers have statutory immunity for good‑faith acts or omissions taken to comply with this subdivision.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Required payroll fields and perjury declaration
This subsection dictates the minimum contents of certified payrolls (name, address, SSN, classification, daily/weekly hours, actual per diem wages) and requires each payroll record to be certified under penalty of perjury. Practically, contractors must adopt a signed attestation process that explicitly ties payroll accuracy to compliance with prevailing‑wage statutes referenced in the bill — a paperwork practice with evidentiary import in audits and enforcement actions.
Who may obtain certified payrolls and the 10‑day production rule
Subdivision (b) establishes that employees, the awarding body, and the DLSE can obtain certified copies; public access is allowed only through the awarding body or DLSE. Subdivision (d) sets a concrete deadline: contractors have 10 days after receipt of a written request to file certified payroll copies with the requesting entity. This creates a predictable compliance clock for both requesters and contractors and a clear trigger for enforcement steps.
Form standards, electronic records, and redaction for public disclosure
Payrolls must either use DLSE‑provided forms or include identical information; computer printouts are acceptable if they match the form fields and are properly verified. Publicly disclosed copies must be redacted to remove an individual’s name, address, and SSN, though contractor/subcontractor identity remains unredacted. The statute separates electronic certified payrolls from the specialized needs of certain third parties (see Taft‑Hartley rules), which forces contractors to maintain DLSE‑compatible paper/formatted outputs for some requests.
Special handling for Taft‑Hartley trust funds and joint committees
Taft‑Hartley trust funds seeking records for contribution allocations get copies that are only redacted to prevent disclosure of full SSNs and may retain the last four digits; joint labor‑management committees get redactions limited to SSNs. Importantly, those entities must receive data on DLSE forms — the bill explicitly rejects uncertified electronic printouts for these parties — which imposes an administrative step when trust funds request payrolls.
Enforcement access and employer immunity
The statute grants Joint Enforcement Strike Force agencies and law‑enforcement entities access to non‑redacted payrolls for investigations, while simultaneously requiring that any copies those agencies make public be redacted. The provision also shields employers from civil damages for reasonable, good‑faith acts or omissions in complying with these disclosure rules, reducing litigation risk for employers who follow the statute in earnest.
Location notice, penalties, and contract insertion
Contractors must tell the awarding body where payroll records are kept and notify any location change within five working days. If a contractor fails to produce payrolls within the statutory 10‑day window, the contractor forfeits $100 per worker per calendar day until production; the DLSE may request withholding of those penalties from progress payments. The awarding body is required to insert contract language to effectuate these duties, shifting some compliance supervision onto public agencies.
DLSE rulemaking to align with CPRA and Information Practices Act
The director must adopt rules consistent with California’s Public Records Act and the Information Practices Act to govern release procedures and establish reasonable reproduction fees. This delegates granular procedural decisions — fee schedules, redaction standards, and request workflows — to DLSE rulemaking, which will determine day‑to‑day practice more than the statute’s broad strokes.
This bill is one of many.
Codify tracks hundreds of bills on Employment across all five countries.
Explore Employment in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Journeymen, apprentices, and workers — gain clearer access to certified payrolls, which helps verify proper classification and prevailing‑wage payments during audits or disputes.
- Awarding bodies and DLSE compliance teams — obtain a statutory right and timeline for production plus an enforcement mechanism (withholding progress payments) to compel timely record delivery.
- Taft‑Hartley trust funds and joint labor‑management committees — receive tailored access on DLSE forms with limited SSN disclosure so they can allocate contributions without extensive data‑sharing negotiations.
- Public watchdogs and journalists — have a formal channel to request payroll data through awarding bodies or DLSE, increasing transparency over public‑works wage compliance.
Who Bears the Cost
- Contractors and subcontractors — must maintain DLSE‑compliant forms or equivalent printouts, verify records under penalty of perjury, respond within tight 10‑day windows, and risk $100 per‑worker per‑day forfeitures for delays.
- Awarding bodies and public agencies — face added administrative duties to accept public requests, retrieve records from contractors, coordinate reimbursements, and insert contractual stipulations to enforce the statute.
- DLSE and enforcement partners — will bear rulemaking, oversight, and potential resource burdens to process public requests, publish guidance, and administer withholding and penalty actions.
- Privacy and records managers — must design redaction workflows and reconcile the statute’s disclosure mandates with the California Public Records Act and Information Practices Act, potentially increasing legal and operational costs.
Key Issues
The Core Tension
The central dilemma is balancing transparency and public accountability for prevailing‑wage compliance against worker privacy and administrative feasibility: the bill expands access and enforces speedy production, improving oversight, but its rigid timelines, heavy per‑worker fines, and form requirements increase operational costs and privacy‑risk exposure for employers and workers, leaving DLSE rulemaking to reconcile the trade‑offs.
AB 538 tries to thread three competing objectives — transparency, investigatory effectiveness, and individual privacy — but leaves several practical questions for DLSE rulemaking. The statute requires non‑redacted access for enforcement agencies while restricting public disclosure of personal identifiers; how agencies will document and audit downstream disclosures (and what processes will prevent leaks) is left undefined.
The carve‑outs for Taft‑Hartley trust funds and joint committees (no electronic certified copies; DLSE forms required) create an administrative mismatch for contractors who increasingly store payrolls electronically.
Enforcement mechanics also raise implementation friction. The $100 per‑worker per‑day forfeiture is a blunt instrument that can quickly escalate for projects with many workers; the statute permits withholding from progress payments but does not prescribe a dispute resolution mechanism or a pro rata adjustment when records are voluminous or require extensive redaction.
The bill shields employers from civil damages for good‑faith compliance but does not define ‘‘good faith’’ in this context; absent guidance, employers and enforcement agencies may litigate the line between reasonable acts and negligent production practices.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.