I-9 compliance isn't a box to check during onboarding, it's an active, ongoing obligation every U.S. employer carries for the life of each employment relationship. ICE audits and worksite enforcement actions have picked up in recent years, and even well-intentioned procedural errors, like a late signature or a missing field, can trigger real fines. This guide breaks down what Form I-9 requires, who must complete it, how to run the verification process correctly, and how to build a compliance program that holds up under audit, for HR leaders and hiring managers who want clarity and a process they can trust.
What Is Form I-9 and Why It Matters
The Immigration Reform and Control Act of 1986 (IRCA) requires employers to verify that every person they hire is authorized to work in the United States. Form I-9, Employment Eligibility Verification, is the federal form used to document that verification, and it applies to every employer, regardless of size, industry, or the employee's citizenship status. There's no small-business exemption and no industry carve-out.
Non-compliance carries real financial exposure. Paperwork violations, like incomplete forms or missed deadlines, carry civil fines per violation. Knowingly hiring unauthorized workers carries substantially higher penalties, and employers with a pattern of violations can face debarment from federal contracts. The stakes grow with hiring volume, which is why a repeatable process matters more than a one-off effort.
Who Must Complete Form I-9?
Scope confusion is one of the most common sources of I-9 errors. Form I-9 is the employment eligibility verification form employers use to meet their primary obligations under IRCA. Here's how it breaks down:
- Employees who must complete I-9: All employees hired to work in the United States after November 6, 1986, including U.S. citizens and nationals, permanent residents, and workers with employment authorization documents; completing Form I-9 involves responsibilities for both the employee and the employer.
- Who is exempt: Independent contractors (they are not employees), employees hired before the IRCA effective date who have been continuously employed, and employees who work outside the United States.
- Note on discrimination: Employers may not request specific documents or treat employees differently based on citizenship status, national origin, or appearance. The verification process must be applied consistently to every new hire, regardless of citizenship or immigration status, without exception.
The I-9 Verification Process, Step by Step
Getting the sequence and timing right is where most I-9 programs succeed or fail. Here's the process from start to finish:
1. Provide Form I-9 to the new hire. Employees must complete Section 1 of Form I-9 no later than their first day of employment. Employers should provide the form at or before that date, along with the accompanying List of Acceptable Documents.2. Review documents. The employee must present original, unexpired documents that establish identity and employment authorization. The employer or an authorized representative must physically, or remotely under DHS-approved procedures, examine those documents.
3. Complete Section 2. The employer must complete Section 2 within three business days of the employee's first day of employment, noting the document title, issuing authority, document number, and expiration date.
4. Re-verify if applicable. If the employee presented an employment authorization document with an expiration date, the employer must re-verify authorization before it expires. Employers may not re-verify U.S. passports, Permanent Resident Cards, or List B identity-only documents.
5. Retain the completed form. Keep the signed I-9 for the required retention period. Don't submit it to USCIS unless you're audited.
Acceptable Documents for I-9 Verification
Form I-9 organizes acceptable documents into three lists, and understanding the structure matters more than memorizing every document on it:
- List A documents establish both identity and employment authorization on their own. Examples include a U.S. passport, a Permanent Resident Card, or an Employment Authorization Document (EAD). An employee who presents a List A document doesn't need anything from Lists B or C.
- List B documents establish identity only, for example, a driver's license or ID card issued by any U.S. state or territory. These must be paired with a List C document.
- List C documents establish employment authorization only, such as a Social Security card or U.S. birth certificate. These must be paired with a List B document.
In limited circumstances when original documents are unavailable, acceptable receipts may be presented temporarily. Employers review official documents to confirm the employee's identity and employment authorization, and for the complete, current list of acceptable documents, refer to USCIS.gov. Electronic I-9 solutions can simplify this step further, tracking which documents were presented and flagging expiration dates automatically so nothing slips through.
How to Store and Retain I-9 Records
Retention rules trip up a lot of employers, especially across high turnover or high-volume hiring. Here's what to know:
- Retention period: Employers must retain Form I-9 for three years from the hire date or one year after the date employment ends, whichever is later.
Keep completed forms for current employees, and track retention deadlines separately for former employees and terminated employees.
- Storage format: I-9 forms may be stored on paper, on microfilm or microfiche, or electronically. Electronic storage systems must include reasonable controls to ensure the integrity, accuracy, and reliability of the records.
- Separation from personnel files: USCIS recommends storing I-9 forms separately from general personnel files. This streamlines audits and limits unnecessary exposure of sensitive information.
- Audit readiness: I-9 records must be made available for inspection by authorized federal agencies, including ICE, DOL, and OSC, within three business days of a request. Electronic I-9 systems with built-in audit trails significantly reduce the time and risk associated with an inspection.
Common I-9 Compliance Mistakes to Avoid
Most I-9 violations aren't the result of bad faith. They're procedural. Watch for these common errors:
- Missing or incomplete Section 1. Employees must complete all required fields, including their attestation of employment authorization status, no later than their first day of work.
- Completing Section 2 late. Employers have three business days from the first day of employment to complete Section 2. Missing that window is a technical violation, even if the underlying documents are valid.
- Accepting expired documents. All documents must be unexpired at the time of verification, regardless of the employee's citizenship status.
- Over-documenting. Requesting more documents than required, or specifying which documents an employee must present, can constitute unlawful discrimination under the INA's anti-discrimination provisions.
- Failing to re-verify before expiration. For employees with temporary work authorization, employers must track expiration dates and complete re-verification on time.
- Audit readiness. Build regular audits into your process, including internal audits, periodic internal audits, and self audits, and conduct I-9 checks at least annually to strengthen compliance. Internal reviews help hr teams identify issues, correct errors, and reduce compliance risks before a government audit. Unresolved substantive violations are more serious than minor technical mistakes.
- Storing I-9s in personnel files. This isn't technically prohibited, but it complicates audits and unnecessarily exposes additional sensitive employee information.
Electronic I-9 and E-Verify: What Employers Should Know
Electronic I-9 systems and E-Verify are two of the most effective tools employers have for reducing errors and staying audit-ready:
- What electronic I-9 systems do: Automate form completion, guide users through required fields to reduce errors, store records securely with audit trails, and alert employers to upcoming re-verification deadlines. Employers should also confirm they are using the current edition date of the new form.
- E-Verify: A voluntary federal program (mandatory for federal contractors and some state-regulated employers) that allows employers to electronically verify an employee's work authorization against records maintained by the Department of Homeland Security and the Social Security Administration. E-Verify doesn't replace Form I-9. It runs alongside it.
- Who must use E-Verify: E verify required for certain federal contractors and subcontractors covered by the Federal Acquisition Regulation (FAR) E-Verify clause, but it is not universally required for all employers. Several states also mandate E-Verify for some or all employers, so check your state-specific requirements.
- Benefits of electronic I-9 for employers: Fewer completion errors, built-in compliance guidance, centralized record storage, simplified audit response, and integration with onboarding workflows.
Cisive's Electronic I-9 solution helps employers simplify verification, reduce errors, and stay audit-ready, without adding friction to onboarding.
Frequently Asked Questions About I-9 Compliance
What happens if an employer fails an I-9 audit?
Penalties vary by violation type and severity. Paperwork violations, technical errors or missing fields, carry civil fines ranging from hundreds to thousands of dollars per violation. Knowingly employing unauthorized workers carries higher fines and potential criminal liability for repeat violations. A government audit may also be initiated by immigration enforcement authorities such as U.S. Immigration and Customs Enforcement, so employers should involve counsel promptly to address substantive violations. Employers undergoing an audit have three business days to produce records and should consult employment counsel immediately upon receiving an inspection notice.
Does Form I-9 apply to part-time and temporary employees?
Yes. I-9 requirements apply to all employees regardless of hours worked, duration of employment, or whether they were hired through a staffing agency. For staffing agency placements, the agency, as the employer of record, typically completes the I-9, not the client company.
Can I-9 verification be completed remotely?
Yes. Remote employees are subject to the same Form I-9 rules as on-site employees. The Department of Homeland Security, through U.S. Citizenship and Immigration Services, has established procedures for remote I-9 verification for employers enrolled in E-Verify. Under current DHS rules, E-Verify employers may use an authorized representative or conduct a live video interaction to review documents remotely, rather than requiring in-person inspection. Because these procedures have evolved, employers should check USCIS.gov or consult qualified legal counsel to confirm current requirements before implementing a remote process; this article is not legal or tax advice.
How long should we keep completed I-9 forms?
The retention formula is simple: three years from the date of hire, or one year from the date employment ends, whichever is later. A tracking spreadsheet or electronic I-9 system can automate this calculation, helping you avoid both premature disposal and unnecessary long-term storage of sensitive records.
