SB 1237 amends Government Code section 12999 to require private employers with 100 or more employees to file annual pay-data reports with the Civil Rights Department beginning January 1, 2027. The reports must include counts by race, ethnicity, and sex across detailed job categories, pay-band distributions based on BLS bands, mean and median hourly rates, total hours worked, and an employer NAICS code; employers must also file a separate report for workers supplied through labor contractors and disclose the contractors’ ownership names.
The bill matters to employers, labor contractors, HR and payroll teams, and compliance officers because it standardizes what pay data must be produced, how earnings are calculated (W-2 for the reporting year), and how snapshots are taken (a single pay period between Oct. 1 and Dec. 31). It also creates civil penalties tied to employee counts, allows courts to allocate penalties to noncompliant labor contractors, requires long data retention, and constrains public release to aggregate datasets — all of which have operational, privacy, and enforcement implications for covered entities and state agencies.
At a Glance
What It Does
The bill requires private employers with 100+ employees to submit annual pay-data reports to the Civil Rights Department covering the prior calendar year, including a separate report for employees supplied through labor contractors and disclosure of contractor ownership. Reports must contain counts by race/ethnicity/sex across specified job categories, pay-band distributions per BLS bands, mean and median hourly rates, total hours worked, and NAICS code.
Who It Affects
Private employers with 100 or more employees (including multi-establishment employers filing per establishment), labor contractors that supply those employers, HR/payroll/compliance teams, the Civil Rights Department, and the Employment Development Department (which must provide lists of businesses on request).
Why It Matters
The bill standardizes pay-data collection and creates a statutory enforcement path with per-employee civil penalties and potential allocation of penalties to labor contractors, increasing regulatory risk and compliance costs while expanding the state’s ability to detect and analyze wage disparities.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
SB 1237 sets a recurring annual reporting obligation: covered private employers must submit a pay-data report each year by the second Wednesday of May, covering the prior calendar year. For counting employees in job categories, employers must create a single “snapshot” payroll count from a pay period they choose between October 1 and December 31 of the reporting year.
For pay-level reporting, employers use W-2 earnings for each person in that snapshot to allocate employees into the Bureau of Labor Statistics’ pay bands and to calculate mean and median hourly rates within each job-category and demographic group.
The bill requires employers to produce separate pay-data reports for employees supplied through labor contractors and to disclose the ownership names of those contractors. Labor contractors must provide the pay data the employer needs; if a contractor refuses or fails to supply it, the statute allows a court to apportion penalties to the contractor.
Employers with multiple establishments must file a report for each establishment, and each report must include the employer’s NAICS code and an optional clarifying remarks section.On enforcement, the department may seek a court order compelling compliance and recover costs of seeking that order. The statute sets civil penalties tied to the employer’s employee count: up to $100 per employee for a first failure to file and up to $1,000 per employee for a subsequent failure, payable to the Civil Rights Enforcement and Litigation Fund.
The department must retain submitted pay-data reports for at least 10 years. The statute restricts disclosure of individually identifiable information: such data remains confidential and not subject to CPRA disclosure, cannot be publicly released before an investigation or enforcement action, and the department may publish only aggregate reports designed to avoid linking data to any specific person or business.The bill also creates operational duties for state agencies: upon request, the Employment Development Department must supply the department with names and addresses of businesses with 100 or more employees within 60 days to facilitate compliance checks.
The section becomes operative on January 1, 2027, giving employers and agencies time to prepare systems and procedures for collection, submission, and secure retention of the mandated data.
The Five Things You Need to Know
Employers must base job counts on a single “snapshot” pay period chosen between October 1 and December 31 of the reporting year, but must calculate earnings using each employee’s W-2 for the entire reporting year.
Employers must file a separate pay-data report for employees supplied through labor contractors and disclose the ownership names of all labor contractors used.
The report requires counts by race, ethnicity, and sex across 23 specific occupational categories, plus pay-band distributions using BLS Occupational Employment Statistics pay bands, mean and median hourly rates, total hours worked per employee, and the employer’s NAICS code.
A court may impose civil penalties payable to the Civil Rights Enforcement and Litigation Fund of up to $100 per employee for a first failure to file and up to $1,000 per employee for a subsequent failure; courts can apportion penalties to noncompliant labor contractors.
The department must retain pay-data reports for at least 10 years, may publish only aggregate reports designed to prevent association with any individual business or person, and the EDD must provide a list of businesses with 100+ employees within 60 days upon request.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Who must file and basic timing
This portion defines covered employers as private employers with 100 or more employees and sets the annual filing deadline as the second Wednesday in May for the prior calendar year. It also requires employers to prepare a separate report for employees provided through labor contractors and orders that demographic data be stored separately from personnel files — an operational requirement that affects HR recordkeeping systems.
Required data fields and measurement rules
Subdivision (b) lists the precise data elements: employee counts by race/ethnicity/sex across enumerated occupational categories, pay-band counts using BLS bands, median and mean hourly rates for each demographic/job-cell, total hours worked per employee, and employer NAICS code. It establishes the dual measurement method: a headcount 'snapshot' for occupational distribution and annual W-2 earnings to populate pay bands and compute hourly rates — a combination that forces payroll and HR teams to link pay and demographic data across systems.
Multi-establishment reporting, clarifications, format, and penalties
Employers with multiple establishments must submit a report for each establishment, and the form includes an optional clarifying remarks section. The department requires data in a software-searchable format. If an employer fails to file, the department may seek a court order; courts can impose per-employee civil penalties and recover enforcement costs. Notably, if the employer cannot complete the report because a labor contractor withheld data, the court may apportion penalties to that contractor.
Confidentiality, limited disclosure, and aggregate reporting
These clauses classify 'individually identifiable information' as confidential and not subject to CPRA disclosure, prohibit public release of identifiable data prior to enforcement activity, and permit the department to publish annual aggregate reports that are 'reasonably calculated' to avoid associating data with any specific business or person. This creates a legal framework balancing privacy protections with a mandate to produce public-facing analysis.
Record retention, definitions, and agency cooperation
The department must maintain pay-data reports for at least 10 years. The statute defines key terms — e.g., 'employee' tied to payroll withholding of Social Security taxes, 'labor contractor' as any supplier of workers to the client employer’s usual course of business, and 'establishment' as an economic unit. The Employment Development Department must provide the department with names and addresses of businesses with 100+ employees within 60 days on request, which creates a timeliness obligation for interagency data sharing.
Transition and operative date
The bill preserves prior reporting requirements for earlier years where applicable and makes the amended section operative on January 1, 2027. That operative date sets the implementation horizon for employers and agencies to build or adapt systems for data collection, secure transmission, and long-term storage.
This bill is one of many.
Codify tracks hundreds of bills on Employment across all five countries.
Explore Employment in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Employees — particularly women and workers of color: The standardized, demographic-linked pay data will increase transparency into pay gaps within employers and industries and enable targeted enforcement and advocacy.
- Civil Rights Department and enforcement units: The department gains a consistent, machine-readable dataset for detecting pay disparities and prioritizing investigations.
- Researchers and policy analysts: Access to systematized, NAICS-coded pay data permits more granular studies of wage inequality by occupation and demographic groups.
- Policymakers and advocates: Aggregate reports create evidence to design sector- or occupation-specific interventions without exposing individual businesses.
Who Bears the Cost
- Private employers with 100+ employees: HR, payroll, and IT teams must link demographic, payroll, and job-classification data; produce establishment-level filings; and may face significant liability exposure from per-employee penalties.
- Labor contractors: They must supply pay and demographic data to client employers and risk being apportioned penalties if they fail to cooperate, raising compliance and contractual risk.
- State agencies (Civil Rights Department and EDD): Agencies must build intake, secure storage, analytics, and interagency data-sharing capacity and manage confidentiality protocols and public aggregate reporting.
- Compliance officers and outside counsel: These stakeholders will bear increased advisory, audit, and remediation costs as employers adapt policies, correct pay disparities, and respond to enforcement inquiries.
Key Issues
The Core Tension
The bill pits two legitimate objectives against one another: the public interest in comprehensive, comparable pay data to identify and remedy wage discrimination versus employers’ and contractors’ interests in protecting confidential payroll and business information and avoiding overly burdensome compliance and large per-employee penalties; resolving how much granular data to collect and how strictly to enforce compliance requires trade-offs with no frictionless solution.
The statute creates useful standardized inputs for pay-equity work but also raises practical and legal challenges. First, the combination of detailed occupational breakdowns and demographic cells increases the risk of reidentification in small establishments or narrow job-demographic cells; the law relies on the department’s aggregate-publishing standard to prevent that, but it does not prescribe a concrete cell-size suppression rule, leaving significant discretion (and litigation risk) about what can be released.
Second, tying earnings to W-2 totals and requiring hours-worked reporting creates technical burdens: employers must reconcile payroll, timekeeping, and personnel-demographic systems and decide how to treat partial-year hires, leaves, or commission-heavy pay structures — all of which affect pay-band placement and mean/median rate calculations.
Enforcement and penalty allocation also invite complexity. The per-employee penalty model can produce very large fines for big employers and creates incentives for courts to parse responsibility among employers and labor contractors; but the statute gives no detailed procedural rules for how to allocate responsibility, which may produce protracted litigation.
The bill’s definition of 'employee' (based on Social Security withholding) excludes workers paid off the employer’s payroll, which the bill attempts to address by requiring separate contractor reporting — yet disputes over classification, access to contractor records, and contractual limits can still impede compliance. Finally, the 10-year retention requirement and confidentiality protections improve investigatory capacity but increase data-security obligations and potential exposure if breaches occur, without specifying minimum technical safeguards.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.