A California employer with 50 employees discovers their payroll system has been rounding time entries to the nearest quarter-hour for two years. The employees weren't shorted by much — maybe a few minutes each shift — but under the Private Attorneys General Act (PAGA), that single technical error translates to millions of dollars in potential penalties. Welcome to California wage and hour law.

PAGA allows individual employees to sue their employer on behalf of themselves, other employees, and the State of California — collecting 25% of any penalties for the employee-plaintiffs and the remaining 75% going to the Labor and Workforce Development Agency. For employers, it means every pay period a violation occurred becomes its own penalty trigger.

How PAGA penalties compound

The math is what makes PAGA so dangerous. Under California Labor Code Section 2699, civil penalties are:

For a company with 50 employees on biweekly pay with a systemic violation running for two years:

Add plaintiffs' attorney fees — typically 30–40% of a settlement — and the total exposure routinely exceeds $700,000 for what might look like a minor bookkeeping issue.

The violations that trigger PAGA claims most often

Meal break violations

California law requires an unpaid, uninterrupted 30-minute meal break for any shift exceeding five hours. If that break is late, shortened, or skipped, the employer owes a one-hour premium at the employee's regular rate of pay — per instance. Automated time-rounding, scheduling pressure, or a simply busy service period can silently generate hundreds of these premiums without anyone noticing.

A second meal break is required for shifts over ten hours. Many employers in hospitality, healthcare, and retail simply don't schedule them — and every missed second break is another premium, multiplied across every affected employee and pay period.

Rest break violations

Employers must provide a paid, duty-free 10-minute rest break for every four hours worked. The break must be completely uninterrupted — employees cannot be kept on-call, asked to monitor anything, or be available to return immediately. Each missed or interrupted rest break generates a separate one-hour premium obligation.

Rest breaks are surprisingly easy to get wrong. Scheduling systems that don't explicitly block break time, managers who ask employees to "stay close" during breaks, and retail environments where the employee is the only person on the floor all produce rest break violations at scale.

Overtime miscalculations

California's overtime rules are more employee-favorable than federal FLSA standards. Overtime applies after:

Payroll systems configured only for federal overtime often miss the daily triggers entirely. Employees working 9-hour shifts five days a week may be owed one hour of overtime pay per day — five extra hours per week — without their employer realising it.

Wage statement deficiencies

California Labor Code Section 226 requires pay stubs to include nine specific items: gross wages, total hours worked, piece-rate units, all deductions, net wages, pay period dates, employee name and last four digits of their Social Security number, employer name and address, and applicable hourly rates with corresponding hours worked. A pay stub missing any required field — even if the underlying pay was correct — creates a separate PAGA exposure.

Final pay timing violations

When an employee is terminated, California law requires final pay on the last day of employment. For employees who resign with at least 72 hours' notice, final pay is due on their last day. Resign without 72 hours' notice, and the employer has 72 hours to deliver final wages. Missing these deadlines triggers waiting time penalties under Labor Code Section 203 — the employee's daily wages continue accruing for up to 30 days.

AB 2288: What changed and what didn't

California's 2024 PAGA reform (AB 2288) was designed to curb the most egregious penalty stacking, but it didn't eliminate PAGA exposure — it restructured it.

The key changes for employers:

What didn't change: PAGA still allows representative actions, still reaches back four years for violations, and still awards 75% of penalties to the state. Systematic violations with no corrective action remain extraordinarily expensive.

What "all reasonable steps" actually means

The reduced-penalty protection under AB 2288 hinges on demonstrating that you took all reasonable steps to comply. Courts look for concrete evidence:

The distinction courts draw is between an employer who had no system and one who had a system that failed. If you can show you proactively reviewed your payroll practices, trained your managers, and corrected issues when you found them, that evidence changes your exposure significantly.

Why automated payroll isn't a safe harbour

Many employers assume that using a reputable payroll platform protects them from PAGA liability. It doesn't. Payroll software processes the data you give it — if your timekeeping system rounds entries in a way that shortchanges employees, or if your scheduler doesn't enforce break requirements, the payroll system will faithfully process the non-compliant data without flagging it.

The configurations that most commonly create hidden PAGA exposure:

The practical defence: validate before problems become lawsuits

The cheapest PAGA defence is fixing violations before an employee's attorney finds them. That means running your timesheet data through California-specific validation: daily overtime thresholds, break premium calculations, and wage statement completeness — not just the federal floor.

If you find shortfalls, document them and remediate immediately. Self-correction before any PAGA notice is filed is the single most important factor in reducing both liability and settlement value. After a notice is filed, the 65-day cure window under AB 2288 still applies — but the clock is running, and you need wage calculations ready.

The $520K trap isn't a dramatic incident. It's two years of a payroll system quietly processing the wrong numbers, multiplied by headcount and pay periods, until someone files a notice. The employers who avoid it aren't luckier — they're the ones who audited their own systems first.