You're sitting at your desk on a Tuesday morning with your coffee, scrolling through the stack of mail. Bills. Advertisements. Then there's the envelope from New York State. You open it.

"Notice of Secure Choice Obligations: Your business has been determined to meet the criteria for mandatory enrollment in the New York Secure Choice Savings Program. Action required by [date]."

Your first thought: What did I miss? Do I have a retirement plan? Are my employees supposed to be in something?

Your second thought: Oh no, here comes another compliance nightmare.

Your third thought; the one you don't want to admit: Can we just ignore this?

The answer to that last question is a hard no. Secure Choice is real, it's mandatory, and the state is already issuing letters. If you've got 10 or more employees in New York and you don't already sponsor a retirement plan, this deadline applies to you. And missing it comes with real penalties.

The good news? This isn't as complicated as it sounds. But you've got to understand what you're dealing with, who's affected, and what exactly you need to do.

Welcome to Secure Choice. Let's break it down.

Secure Choice is New York State's mandated automatic retirement savings program. Here's the core: it's not a 401(k). It's not a pension. It's a Roth IRA administered through a platform called Vestwell.

Here's how it actually works:

Employees are automatically enrolled at a 3% contribution rate. That contribution comes directly from their paycheck. The employee doesn't have to do anything to enroll; it happens automatically. The catch? The employee can opt out within 30 days, or anytime after.

But there's a kicker built into the program design: that 3% automatically escalates by 1% every year until it hits 10%. So year one at 3%, year two at 4%, year three at 5%, and so on, until it levels off at 10%. That auto-escalation is smart policy (employees usually don't adjust their own contributions), but it can blindside your workforce if they're not paying attention.

As the employer, you're not putting money in. You're not matching anything. You're not sponsoring a plan in the traditional sense. What you're doing is handling the payroll mechanics: deducting the contributions, remitting them to Vestwell within 30 days of enrollment, and maintaining records.

And here's the crucial part for business owners nervous about fiduciary liability: the state says Secure Choice contributions don't fall under ERISA. You're not a fiduciary of the program. You're not liable for investment performance, fund choices, or how the money is managed.

But, and this is a critical but, you're still responsible for handling deductions correctly, protecting the money until it's remitted, and making sure employees get the information they need to make informed decisions about opt-outs.

Not every New York employer is caught by Secure Choice. The rule targets a specific population: private-sector employers that don't already have a retirement plan.

Here's the eligibility checklist:

Yes, this applies to you if:

No, this doesn't apply to you if:

The critical phrase here is "already sponsor." If you've got a 401(k), you're exempt. If you've got a SIMPLE IRA, you're exempt. If you've got any qualified plan, you don't have to enroll in Secure Choice, but you do have to prove it.

Here's the decision logic to figure out where you stand:

If you land on "MUST ENROLL," that's your path. If you land on "EXEMPT," you still need to register and certify your exemption status. Don't just ignore the letters.

The state knows that universal deadlines create chaos. So they've staggered them by employer size. Here's what you're up against:

This staggering is both a gift and a problem. It gives smaller employers more time, but it also means you can't glance at one deadline and assume everything else lines up. Figure out which category you're in, find your specific date, and mark it.

If you're in the 30+ category, that's March 18, 2026. Mark it red. If you miss it, you're already in violation territory.

Enrollment in Secure Choice breaks down into three practical steps. None of them are particularly complicated, but all of them matter.

The state has been mailing Access Codes to registered business addresses. This code is paired with your EIN and is your gateway to the system. If you haven't received it, call 1-833-369-1392. Have your business name, EIN, and address ready.

Go to newyorksecurechoice.com. You'll be prompted to log in using your EIN and Access Code. Once you're in, you've got two options:

Once enrolled, you've got to actually do the work:

The remittance deadline is strict. Deductions taken from March payroll? Due to Vestwell by early April. Miss that window, and you've held state-mandated funds past their required date, which triggers compliance violations.

Here's where it gets weird for New York City employers.

New York State has a Secure Choice program for employers with 10+ employees who don't have a retirement plan. But New York City has its own mandate: a separate Secure Choice Savings Program that applies to employers with 5+ employees.

They're different programs. Different contribution rates (city uses 5% default, state uses 3%). Different payment platforms. Different deadlines. And if you're in NYC, you might need to comply with both.

How do you know if both apply? If your business is located in New York City and you have 5 or more employees, the city mandate applies. If you also have 10 or more employees, the state mandate applies too. You don't get to pick one. You could be enrolling in both systems.

This is the kind of dual compliance that trips up employers because they're looking at their state deadline and missing that the city mandate kicked in earlier or with a lower threshold.

If you're in NYC: Check the city's website (nyc.gov/secure-choice or similar) for their specific requirements, deadlines, and enrollment process. Then check the state requirements separately. Talk to your payroll provider about supporting both. This is twice the setup work, but it's what the law requires.

Secure Choice compliance failures tend to follow patterns. Here are the mistakes we see consistently:

This is the most common one. You've got a SIMPLE IRA from years ago, you haven't thought about it in forever, and you figure you're in the clear. But you never register with the state and certify the exemption. The state thinks you didn't respond, assumes you're not enrolling, and later treats you as non-compliant. Certify. It takes 10 minutes.

Employees get enrolled at 3%. Most of them don't pay attention. Then six months later, their take-home shifts slightly because the contribution just bumped to 4%. And the employee blames you, assuming payroll messed up, doesn't understand the program, or suspects some other problem. Communicate early and often about auto-escalation. Include it in your initial enrollment notice and remind employees during open enrollment or annually.

You take the deduction, it sits in your general payroll account, and you remit it "whenever." That's a violation. The moment the contribution is deducted, a 30-day timer starts. Miss that window and the state counts it as a failure to remit.

Employees can opt out within 30 days of first notice. Some will. But if you don't document who opted out, when they opted out, and which employees are actually in the program, you've got no defense when the state audits your records.

The state built penalties into Secure Choice enforcement for a reason. Violations are expensive, and they compound.

Here's how the penalty structure works:

Let's put this in concrete terms. A 30-employee company that misses the enrollment deadline and doesn't respond:

If they still don't fix it within 90 days and the state comes back, it's another round at $500 per employee. A 25-employee company? That's $12,500 for the second violation alone.

The state is serious about this. The penalties stack, and they stack fast.

Getting Secure Choice right isn't complicated, but it's sequential. Here's the playbook:

Secure Choice uses the prior calendar year to determine eligibility. If you're reading this in 2026, the state is looking at your 2025 employee count. Figure out your Q4 2025 payroll and confirm you had 10+ New York employees during that year. This determines whether you're even covered.

Do you sponsor a retirement plan? Check your records: payroll systems, HR files, tax returns, anything. Look for SIMPLE IRA, SEP IRA, 401(k), 403(b), or any other qualified plan. If you've got one, even if it's dusty and unused, you're exempt. But you have to know it exists.

The state is mailing these. Check your mail, call 1-833-369-1392 if you haven't received it, and get the code paired with your EIN. You cannot register without it. Write it down in a safe place. You'll need it again.

Use your EIN and Access Code to log in. If you're exempt (you have a plan), select the exemption path. If you're enrolling, select the enrollment path. Don't leave this for the last day. Technical glitches happen, and you don't want to be troubleshooting an hour before the deadline.

If you're claiming an exemption because you have a SIMPLE IRA, 401(k), or other plan, gather your proof: plan documents, the most recent Form 5500 (if required), or a letter from your plan administrator. Upload this to the state. This documentation is your shield if the state ever questions your exemption.

Work with your payroll provider to enable Secure Choice deductions. Create 3% contribution rates in your system. Prepare the employee notices that the state provides (they've got templates). Schedule these notices to go out before your first pay date so employees understand what's happening.

Once enrolled, employees get 30 days to opt out. Document who opts out, the date they opt out, and the method (email, form, verbal, etc.). Keep records. This is your evidence that you followed the rules if the state audits.

Every paycheck, a deduction is taken. Every deduction has a 30-day remittance deadline. Set a recurring calendar reminder to check remittance status before each deadline. Better yet, let your payroll system handle the timing automatically and just verify it happens.

Secure Choice is a regulatory reality. It's here. The deadlines are real. The penalties are real. And if you're in New York with 10 or more employees and no retirement plan, this applies to you.

But here's the thing: none of this is actually that hard. The state made it straightforward on purpose. Get your Access Code. Register. Either certify your exemption or enroll. Set up payroll. Remit on time. Done.

The employers who mess this up don't mess it up because Secure Choice is complicated. They mess it up because they treat it like it's optional or they can handle it "later." And later becomes a month late, which becomes a violation, which becomes a penalty letter, which becomes 60 hours of scrambling.

You've read Paper Trail Starts Here before. You know that documentation matters. Secure Choice is just another documentation system. The good news is the state's already got the templates. You're not building anything from scratch.

And if you're worried about complexity, you're not alone. That's exactly why Vestwell exists and why the state runs the program centrally. You're not managing investments. You're not picking funds. You're handling deductions and remittances. That's it.

One more thing: if you already sponsor a retirement plan, do not sit on the sidelines. Get your exemption certified before your deadline. The cost of certification is five minutes and some paperwork. The cost of non-response is a $250-per-employee violation. That's an easy math problem.

The Secure Choice Savings Program is New York's way of saying: "If you're not providing retirement benefits, we'll provide the infrastructure so your employees can still save." It's actually not a terrible policy. It's just mandatory. And mandatory has teeth.

So move. Check those deadlines. Get that Access Code. Register. And keep moving.

Keep fighting the good fight.

^{Final Thoughts}

^{This article is provided for informational purposes only and should not be construed as legal or tax advice. The Secure Choice Savings Program is administered by the New York Department of Financial Services and involves complex regulatory requirements that may change. Employers should consult with qualified legal counsel, tax advisors, and HR professionals to ensure full compliance with all applicable state and federal requirements. Penalties for non-compliance are enforceable by the state. This article references the Secure Choice program as of April 2026 and reflects current understanding, but regulations and deadlines may be updated. Always verify current requirements directly with the state at newyorksecurechoice.com or by calling 1-833-369-1392.}