2024 Compliance Radar: 8 Regulatory Shifts US Businesses Cannot Afford to Miss
For US businesses, staying current with regulatory requirements has never been more demanding. In 2024, multiple federal agencies and several states have introduced or finalized rules that carry meaningful consequences for non-compliance — consequences that range from civil penalties to operational restrictions and, in the most serious cases, criminal liability.
This checklist is designed to serve as a practical orientation guide, not a substitute for qualified legal or compliance counsel. Each item below identifies the change, the affected sectors, the stakes involved, and the initial steps organizations should take. Where the complexity of a requirement warrants it, engaging a specialized consultant is strongly advisable.
1. FTC's Revised Non-Compete Rule
What Changed: The Federal Trade Commission finalized a rule in April 2024 broadly prohibiting non-compete clauses in employment agreements across most industries. While legal challenges have created uncertainty around enforcement timelines, businesses should treat this as an active compliance matter.
Who It Affects: Virtually every US employer that utilizes non-compete agreements, with limited exceptions for senior executives and business sale transactions.
Potential Penalties: Violations may be treated as unfair methods of competition under the FTC Act, exposing businesses to enforcement actions and civil penalties.
Actionable Steps: Audit all existing employment agreements. Work with legal counsel to revise onboarding documentation. Consider alternative protective measures such as narrowly tailored non-solicitation or confidentiality agreements.
2. SEC Climate Disclosure Requirements
What Changed: The Securities and Exchange Commission adopted new rules in March 2024 requiring publicly traded companies to disclose climate-related risks and, for large accelerated filers, Scope 1 and Scope 2 greenhouse gas emissions in their annual filings.
Who It Affects: Public companies registered with the SEC, with phased implementation timelines based on filer category. Smaller reporting companies have extended deadlines.
Potential Penalties: Inaccurate or incomplete disclosures can trigger SEC enforcement actions, shareholder litigation, and reputational harm.
Actionable Steps: Engage sustainability and financial reporting consultants to assess current disclosure gaps. Establish internal data collection processes for emissions tracking. Review board-level oversight structures for climate risk governance.
3. HIPAA Security Rule Updates (Proposed)
What Changed: The Department of Health and Human Services proposed significant amendments to the HIPAA Security Rule in late 2023, with formal rulemaking advancing through 2024. The proposed changes strengthen cybersecurity requirements for covered entities and business associates, including mandatory encryption, multi-factor authentication, and enhanced incident response protocols.
Who It Affects: Healthcare providers, health plans, healthcare clearinghouses, and any business associate handling protected health information (PHI).
Potential Penalties: HIPAA violations carry civil penalties ranging from $100 to $50,000 per violation, with annual caps up to $1.9 million per violation category. Criminal penalties apply in cases of willful neglect.
Actionable Steps: Conduct a comprehensive security risk analysis aligned with the proposed rule's standards. Prioritize encryption of PHI at rest and in transit. Update business associate agreements to reflect enhanced security obligations.
4. State-Level Data Privacy Law Expansion
What Changed: In 2024, several additional states — including Texas, Florida, Oregon, and Montana — have data privacy laws either taking effect or entering enforcement phases. These laws grant consumers rights over their personal data and impose obligations on businesses that collect, process, or sell that data.
Who It Affects: Any business with customers or employees in affected states that meets applicable revenue or data volume thresholds. E-commerce businesses with nationwide customer bases face the broadest exposure.
Potential Penalties: State attorneys general can pursue civil penalties ranging from $7,500 to $50,000 per intentional violation depending on the jurisdiction. Some laws include private rights of action.
Actionable Steps: Map all personal data flows across your organization. Update privacy policies and consumer-facing disclosures. Implement mechanisms to honor data access, deletion, and opt-out requests within legally required timeframes.
5. OSHA's Updated Heat Illness Prevention Standard
What Changed: OSHA proposed its first-ever federal heat illness prevention standard in 2024, establishing explicit requirements for outdoor and indoor workplaces where heat exposure poses risk. The rule covers rest breaks, water access, acclimatization protocols, and emergency response planning.
Who It Affects: Employers in agriculture, construction, landscaping, warehousing, manufacturing, and other industries with significant heat exposure risk.
Potential Penalties: OSHA serious violations carry penalties up to $15,625 per violation. Willful or repeated violations can reach $156,259 per occurrence.
Actionable Steps: Assess workplace heat exposure levels by job function and location. Develop a written heat illness prevention plan. Train supervisors on early symptom recognition and response protocols.
6. FinCEN Beneficial Ownership Reporting (Corporate Transparency Act)
What Changed: Beginning January 1, 2024, most US small businesses are required to report beneficial ownership information to the Financial Crimes Enforcement Network (FinCEN) under the Corporate Transparency Act. Existing entities have until January 1, 2025 to file; new entities formed in 2024 must file within 90 days of formation.
Who It Affects: Corporations, LLCs, and similar entities with fewer than 20 full-time employees and less than $5 million in gross receipts. Numerous exemptions exist for larger companies, regulated entities, and nonprofits.
Potential Penalties: Willful non-compliance carries civil penalties of $500 per day and criminal penalties up to $10,000 and two years imprisonment.
Actionable Steps: Determine whether your entity qualifies for an exemption. If not, compile identifying information for all beneficial owners. File through FinCEN's online portal and establish a process for updating reports when ownership changes.
7. FTC's Updated Franchise Rule and Business Opportunity Rule
What Changed: The FTC has advanced revisions to disclosure requirements under both the Franchise Rule and the Business Opportunity Rule, increasing transparency obligations for franchisors and sellers of business opportunities, including digital-first and gig-economy models that have proliferated in recent years.
Who It Affects: Franchisors, franchise brokers, and businesses selling work-from-home or income-generating opportunities to consumers.
Potential Penalties: Violations of FTC trade regulation rules carry civil penalties up to $51,744 per violation.
Actionable Steps: Review Franchise Disclosure Documents for compliance with updated formatting and content requirements. Assess whether digital business models fall within the updated Business Opportunity Rule's scope. Engage franchise counsel for a disclosure audit.
8. EPA's Updated PFAS Regulations for Manufacturers and Water Systems
What Changed: The Environmental Protection Agency finalized the first-ever national drinking water standards for PFAS (per- and polyfluoroalkyl substances) in 2024, setting maximum contaminant levels for six PFAS compounds. Separately, EPA has expanded reporting requirements for industrial facilities that manufacture or use PFAS chemicals.
Who It Affects: Public water systems nationwide face testing and remediation obligations. Manufacturers in industries including aerospace, automotive, electronics, and textiles that use PFAS in production processes face expanded reporting under TSCA Section 8(a)(7).
Potential Penalties: TSCA violations carry penalties up to $37,500 per violation per day. Water system non-compliance can trigger enforcement actions and public notification obligations.
Actionable Steps: Industrial facilities should inventory all PFAS-containing materials and processes. Engage environmental consultants to assess TSCA reporting obligations. Water systems should begin baseline testing and evaluate treatment technology options.
Staying Ahead of a Shifting Regulatory Landscape
The eight areas outlined above represent some of the most significant compliance developments of 2024, but they are by no means exhaustive. Regulatory activity at both the federal and state levels continues to accelerate, and the cost of non-compliance — financial, operational, and reputational — continues to rise.
TD88 Services works with businesses across industries to assess compliance exposure, develop actionable remediation plans, and implement sustainable processes for ongoing regulatory monitoring. If any of the items on this checklist apply to your organization, the time to act is now — not after an audit, a fine, or an enforcement notice arrives.
Proactive compliance is not overhead. It is risk management at its most effective.
