OFCCP compliance 2026 sits in an unusual posture. The framework that governed federal contractor obligations for nearly six decades shifted in 2025. The statutory obligations that operate alongside that framework did not. For federal contractors, this creates a precise question. What still applies, what does not, and where is enforcement actually concentrating in the months ahead?
We addressed these questions with Leigh Valencia, Director of Compliance Services at JobTarget. The conversation surfaced a working framework for federal contractor HR and compliance leaders heading into the next OFCCP scheduling letter cycle.
The framework breaks into three parts. Statutory obligations. Recordkeeping. Outreach operations.
Executive Order 11246, signed in 1965, established one of the frameworks under which the Office of Federal Contract Compliance Programs (OFCCP) operated for nearly six decades. The 2025 rescission ended that framework.
While the OFCCP previously enforced three program areas, the 2025 rescission did not touch the statutory architecture of the two remaining laws: Section 503 of the Rehabilitation Act of 1973, governing IWD (individuals with disabilities) outreach by federal contractors, and the Vietnam Era Veterans' Readjustment Assistance Act of 1974 (VEVRAA), governing protected veteran outreach.. Both continue to bind federal contractors and drive OFCCP enforcement activity.
As Leigh Valencia frames it: "Compliance is designed for federal contractors and subcontractors that must adhere to VEVRAA and Section 503 regulations." The rescission of EO 11246 did not alter that reality. Those requirements are focused on equal employment opportunity for veterans and individuals with disabilities, and they remain fully in effect.
The implications for OFCCP compliance in 2026 are specific. Federal contractors covered by Section 503 (with contracts of $20,000 or more) and VEVRAA (with contracts of $200,000 or more) retain their obligations to develop and maintain written outreach programs, document outreach activity, and meet recordkeeping requirements.
A: No. It’s confirmed that Section 503 (IWD outreach) and VEVRAA (veteran outreach) remain statutory obligations independent of EO 11246. Federal contractors meeting the contract thresholds retain their full obligations under VEVRAA and Section 503, including written program requirements, outreach documentation, and recordkeeping under the internet applicant rule.
Recordkeeping is where most OFCCP audits really live. Non-discrimination violations—including problems with recordkeeping and applicant tracking—remain a primary focus for the agency. Findings related to improper record maintenance are among the most common violations cited during investigations.
Under VERAA and Section 503, federal contractors must maintain personnel and employment records related to applicants, hires, promotions, terminations, rates of pay, and other personnel actions. Records must be retained for two years (or one year, depending on contractor size and contract value).
This sounds straightforward in the regulation. It plays out differently in practice. The contractors who hit findings during compliance evaluations rarely fail because the records do not exist. They fail because the records are incomplete, inconsistent, or do not align with the contractor's written programs.
Leigh and her team encounter this pattern routinely. As she puts it: "Compliance isn't optional, and it's not going away. Any manual process is prone to human error, especially when they involve repetitive tasks like job postings and recordkeeping." A contractor will have a written outreach program describing its relationships with IWD-serving organizations and veteran-serving organizations. The compliance evaluation will ask for the records of those relationships. The records will be partial, undated, or stored across systems that cannot be reconciled.
A compliance audit review addresses this specifically. The review maps the contractor's actual recordkeeping practices against the requirements of VEVRAA and Section 503, identifying gaps before a scheduling letter arrives.
A: Recent audit trends show that findings frequently cluster around incomplete IWD and veteran outreach documentation. Furthermore, gaps in applicant tracking and the failure to maintain organized records of hiring and compensation practices are consistently cited as top violations. Records must be audit-ready and retained for at least two years to ensure compliance.
Section 503 and VEVRAA both require federal contractors to undertake affirmative outreach efforts toward IWD and protected veterans and they specify the categories of outreach activities and the documentation requirements that support compliance evaluation.
The regulations are specific. Contractors must list employment openings with appropriate state workforce agencies. They must engage with state vocational rehabilitation services and IWD-serving community organizations. Under VEVRAA, contractors must list openings with the appropriate employment service delivery system (typically the state workforce agency that participates in the Veterans' Employment and Training Service network) and undertake outreach with veteran-serving organizations.
What Leigh emphasizes about this section is the cadence. "The product provides flexibility, allowing customers to adjust outreach strategies based on changing regulations or internal priorities," she notes, but the underlying point is that OFCCP expects documented, ongoing relationships, not episodic bursts of activity. The regulations are not satisfied by annual or quarterly campaigns. They are satisfied by records of postings shared, responses received, candidates referred, and outcomes tracked over time.
The JobTarget compliance platform automates this documentation. Postings flow to the appropriate state workforce agencies. IWD and veteran outreach efforts are logged. When a scheduling letter arrives, the records are ready.
As Leigh describes the system's function: it handles "posting jobs to appropriate state job banks, distributing roles to veteran and disability-focused job sites, conducting outreach to local organizations, expanding candidate reach to diversify applicant pools, and capturing and storing proof of postings for compliance audits." JobTarget keeps those records for three years.
A: Auditors typically request records of state workforce agency posting compliance, dated outreach communications to IWD-serving and veteran-serving community organizations, response and referral logs, and annual self-assessment reviews. Episodic outreach campaigns rarely produce the documentation auditors expect.
The scheduling letter is the start of a compressed timeline. Federal contractors typically have 30 days to respond with the initial document submission. The submission window is not the place to discover that the recordkeeping infrastructure has gaps.
Leigh frames audit prep as a posture, not a project. "By automating the compliance-driven aspects of federal contractor job distribution, organizations can reduce risk while reclaiming their time back," she says. "That time can then be redirected toward higher-impact work that truly requires a human touch, like analyzing workforce data, evaluating promotion and termination trends, and strengthening overall recruiting strategies."
The contractors who handle compliance evaluations cleanly are the ones whose recordkeeping and outreach documentation operate at audit-ready quality year-round.
She positions the ongoing nature of this work clearly: "Our customers benefit from continuous updates aligned with regulatory changes, reliable recordkeeping for audits, and scalable automation as their organization grows. It's not just a tool. It's a long-term compliance partner."
A: It’s recommended that federal contractors operate audit-readiness as continuous discipline: annual written program review, quarterly recordkeeping audits, ongoing documentation of IWD and veteran outreach. The contractors who do this consistently produce clean scheduling letter responses.
Court challenges. Agency reorganizations. State-level requirements that intersect with federal contractor obligations. The regulatory environment around federal contractor compliance is not stable, and it is not expected to stabilize quickly. Seyfarth Shaw, Littler Mendelson, and Jackson Lewis publish ongoing analysis worth tracking.
What Leigh emphasizes is that the regulatory motion does not change the operational fundamentals. "We follow shifts in policy and enforcement very closely and continuously update our products and communications to reflect those changes," she says. "We see it as our responsibility to help guide our customers through the uncertainty. We stay deeply connected to what's happening in the regulatory landscape and share that knowledge through webinars, resources, and timely insights so our customers aren't left trying to interpret complex changes on their own."
Her one-phrase summary of the compliance platform captures the operating principle: "Automated assurance for compliance."
Outreach obligations require documented, ongoing operations. Federal contractors who operate against this set of fundamentals are positioned to adapt as the regulatory environment continues to move.
Schedule a compliance audit review with JobTarget. Request your review here to see how the JobTarget compliance platform supports federal contractor audit readiness.