An HR compliance audit in Singapore is not the same as an MOM inspection. A MOM inspection is reactive and adversarial: MOM arrives, requests records, and finds violations. A compliance audit is proactive and employer-initiated: the employer reviews their own practices against the legal requirements before a complaint is filed or an inspector arrives. We recommend running a compliance audit annually as standard practice, and also after any significant change in employment law, company size, or payroll structure. The employer who finds and fixes their own violations pays nothing except the remediation cost. The employer who waits for MOM to find them pays fines, back-payments, and the reputational damage of a public investigation.
HR Compliance Audit Singapore
- A Singapore HR compliance audit should cover 6 areas: Employment Act record-keeping, CPF contributions, WICA insurance and reporting, TAFEP fair employment practices, leave management, and employment contracts.
- The most commonly missed compliance items are payslip issuance, leave record retention, and CPF age bracket transitions. These three account for the majority of MOM enforcement actions against Singapore SMEs.
- An audit is only useful if findings are remediated: Identifying that payslips are non-compliant without fixing them creates documented evidence of known non-compliance.
- Self-audit using MOM’s published checklists is the starting point: MOM provides employer compliance self-assessment resources online.
- HR software that automatically generates compliant records reduces the audit to a verification exercise: The audit confirms the software is configured correctly, not that records exist at all.
The Six Areas of a Singapore HR Compliance Audit
A complete Singapore HR compliance audit covers six areas. Each has specific documentation requirements and common failure points.
1. Employment Act Record-Keeping
Required records and common failures:
| Requirement | Common failure |
|---|---|
| Itemised payslips within 3 working days | Payslips issued late, missing mandatory fields, or not issued at all |
| Employee register | Register not maintained, missing departure dates for ex-employees |
| Employment records are retained for 2 years | Records are deleted when the employee leaves |
| Correct overtime/rest day calculations | Hourly rate calculated incorrectly for overtime; flat amounts paid instead |
2. CPF Contributions
Common failures:
- Wrong age bracket applied after employee turns 55, 60, 65, or 70
- OW ceiling not applied (CPF calculated on full salary above SGD 6,800)
- AW ceiling not calculated annually, resulting in CPF on excess bonuses
- CPF for new Permanent Residents not applying the graduated rate in years 1 and 2
3. WICA Insurance and Reporting
Common failures:
- WICA insurance is not in place for all covered employees (employees earning below SGD 2,600 and all manual workers)
- Workplace accidents not reported within 10 days because no one knows the reporting obligation exists
- Incident report submitted but contains incomplete information (missing expected medical leave duration)
4. TAFEP Fair Employment Practices
Common failures:
- Job advertisements containing age, nationality, or gender preferences (even implicitly)
- MyCareersFuture.sg advertisement not run for 14 days before EP application (for roles below SGD 22,500)
- Selection process not documented; cannot demonstrate fair consideration if challenged
- Performance management applied inconsistently across protected groups
5. Leave Management
Common failures:
- Annual leave entitlement is not increasing with service years
- Sick leave entitlement less than the statutory minimum
- Parental leave entitlements are not configured separately from annual leave
- Leave records not retained for 2 years
6. Employment Contracts
Common failures:
- KETs not issued within 14 days of employment start
- Notice periods below the Employment Act minimum
- Probation clauses purporting to remove statutory leave entitlements
- Contract based on overseas template not compliant with Singapore law
The Audit Process
A Singapore HR compliance audit follows a 4-step process:
Step 1: Document collection. Pull all HR records for the audit period (typically the last 12 months, or 24 months for a full Employment Act period): payslips, CPF contribution history, leave records, employment contracts, and any incident reports.
Step 2: Checklist review. Compare each document against the compliance requirement. Use MOM’s self-audit checklist as the reference. Mark each item as compliant, non-compliant, or unknown (records missing).
Step 3: Finding prioritisation. Rank findings by risk level. CPF underpayment and WICA non-insurance are the highest priority because they involve ongoing financial liability. Payslip format issues are medium priority. Documentation gaps with no active dispute are lower priority.
Step 4: Remediation: Address findings in priority order. Correct CPF errors through the CPF e-Submit correction process. Issue backdated payslips (note that late payslips cannot reverse past violations, but fixing them going forward reduces the penalty exposure for future compliance periods). Implement process changes to prevent recurrence(Source: MOM).
Audit Frequency and Triggers
Annual audits are standard practice for Singapore employers with 10 or more employees. Additional audit triggers include:
- Significant headcount growth (crossing 10, 50, or 100 employee thresholds that change legal obligations)
- Employee complaints or MOM inquiries (conduct an internal audit before responding)
- Changes in employment law (CPF rate changes, new leave entitlements)
- New payroll system implementation (verify configuration against compliance requirements)
- After a retrenchment exercise (review the full process for compliance)
“The best time to audit is before a complaint is filed. The second-best time is immediately after a complaint is filed. The worst time is during a MOM inspection.”
Frequently Asked Questions
How long does an HR compliance audit take for a Singapore SME?
For an SME with 20 to 50 employees and a basic HR system, a compliance audit typically takes 2 to 3 working days. This includes document collection, checklist review, and finding documentation. Remediation time depends on what is found. An organisation with 100 or more employees and more complex payroll structures should budget a week or more for the initial audit.
Should Singapore employers use an external HR consultant for compliance audits?
External consultants provide independence and specialist knowledge, but are not required. Many Singapore SMEs conduct effective internal audits using MOM’s published checklists and their HR manager’s knowledge. External consultants are particularly useful when there is a specific compliance risk area (such as a historical CPF underpayment issue), when the employer suspects there are problems but does not know where to look, or when legal privilege over the audit findings is important.
What is the MOM self-audit checklist, and where can it be found?
MOM publishes a compliance self-assessment checklist on its website covering Employment Act obligations, including payslips, salary payment, leave, and records. The checklist is available at https://www.mom.gov.sg/employment-practices/employment-act/self-audit. It is a practical starting point for any Singapore employer conducting its first compliance review.
Can a Singapore compliance audit finding be used against the employer by MOM?
An internal audit report is generally not discoverable by MOM unless the employer chooses to share it. However, if the audit finds a violation and the employer does not remediate it, and MOM later investigates and finds the same violation, the employer cannot credibly claim they were unaware of the problem. The practical advice: if you find it, fix it.
Does a Singapore HR compliance audit cover data protection obligations?
A thorough HR compliance audit should include PDPA compliance, particularly for employee data handling: payroll data security, biometric data consent and deletion procedures, third-party payroll processor data agreements, and employee access to their own records. PDPC (Personal Data Protection Commission) can investigate HR-related data breaches separately from MOM employment law enforcement.
Conclusion
An HR compliance audit in Singapore is the employer’s best defence against MOM enforcement, CPF Board back-payments, and Employment Claims Tribunal actions. The six areas to audit are Employment Act records, CPF contributions, WICA insurance, TAFEP fair employment, leave management, and employment contracts. The most valuable output of an audit is not the finding list but the remediation plan. HR software that automatically maintains compliant records reduces the audit from a document reconstruction exercise to a configuration verification. The employer with a complete HR system records audits in hours, not days.
Tipsoi’s HR platform supports Singapore employer compliance across all six HR compliance audit areas with automated record-keeping and compliance alerts. Get a quote. Download Tipsoi’s Singapore HR Compliance Audit Checklist for a complete self-assessment guide.