Form I-9 is one of the most audited employment documents in the United States. Every employer — regardless of size — must complete a Form I-9 for every employee hired to work in the United States. Yet despite its universal requirement, I-9 violations are among the most common findings in federal worksite enforcement audits.
The penalties for I-9 violations range from $272 to over $27,000 per violation depending on whether the violation is technical or substantive and whether it is a first or repeat offense. Here is what you need to know to keep your I-9 process audit-ready.
What Is Form I-9 and Who Must Complete It?
Form I-9 is the Employment Eligibility Verification form required by the Immigration Reform and Control Act of 1986. Its purpose is to verify that every person you hire is legally authorized to work in the United States.
You must complete a Form I-9 for every employee you hire — including US citizens, permanent residents, and temporary visa holders. The only exception is for employees hired before November 6, 1986 who have been continuously employed by you since that date.
You do not need to complete an I-9 for independent contractors or for employees provided by a staffing agency where the agency is the employer of record.
The Three-Day Rule
The I-9 process has a strict timeline that many small businesses violate without realizing it.
Section 1 — The employee must complete their portion of the I-9 on or before their first day of work. You may provide the form to the employee before their start date but they cannot complete it before they have accepted a job offer.
Section 2 — You must complete your portion of the I-9 — the employer review and verification section — within three business days of the employee’s first day of work. This means physically examining the employee’s original documents and recording the document information on the form.
Missing the three-day deadline is one of the most common I-9 violations and one of the easiest to avoid with a proper onboarding checklist.
Acceptable Documents — Lists A, B, and C
Employees must present documents that establish both identity and employment authorization. The I-9 uses a three-list system:
List A documents establish both identity and employment authorization in a single document. Examples include a US passport, permanent resident card, or Employment Authorization Document. If an employee presents a List A document you do not need any additional documents.
List B documents establish identity only. Examples include a driver’s license or state ID card with a photograph.
List C documents establish employment authorization only. The most common example is an unrestricted Social Security card or a birth certificate.
If an employee does not have a List A document they must present one document from List B and one document from List C.
The Most Critical Rule — You Cannot Specify Which Documents to Accept
This is the I-9 rule that gets small businesses into the most serious trouble. You cannot tell an employee which specific documents to bring. You cannot require a US passport from a US citizen or a green card from a permanent resident. You cannot refuse to accept a document that appears genuine and relates to the employee on its face.
Requiring specific documents or refusing to accept facially valid documents from the approved lists constitutes document abuse — a form of employment discrimination that carries its own separate civil penalties.
Your role is to examine whatever documents the employee chooses to present from the approved lists and determine whether they appear genuine and relate to the employee presenting them.
Remote Hire I-9 Compliance
For employees who work remotely and are never physically present at your location the document examination requirement presents a challenge. You must still physically examine original documents — a photocopy or scan sent via email does not satisfy the requirement under standard I-9 rules.
Options for remote I-9 completion include:
Authorized representative. You may designate any person — including a notary public, another employer, or even a trusted individual chosen by the employee — to physically examine the documents and complete Section 2 on your behalf. The authorized representative signs the form and you remain liable for any violations.
DHS-authorized remote examination. The Department of Homeland Security has authorized certain employers enrolled in E-Verify to use alternative document examination procedures for remote hires. Check current DHS guidance for eligibility requirements and procedures.
I-9 Retention Requirements
You must retain completed I-9 forms for all current employees and for a specific period after an employee separates from your company. The retention formula is:
Retain for whichever is later — three years from the date of hire or one year from the date of employment ends.
The easiest way to calculate the retention date is to keep a spreadsheet with each employee’s hire date, termination date if applicable, and the calculated retention deadline.
You may store I-9 forms on paper, on microfilm or microfiche, or electronically using a compliant electronic storage system. Whatever system you use must allow you to produce the forms for inspection within three days of a government request.
Common I-9 Audit Mistakes Small Businesses Make
Late completion of Section 2. Completing the employer section more than three business days after the employee’s start date is a technical violation that carries monetary penalties.
Accepting expired documents. With very limited exceptions you may not accept documents that have expired. An expired passport is not an acceptable List A document.
Recording incorrect document information. Transposing numbers in a document number or recording the wrong expiration date are technical violations that auditors flag consistently.
Failing to reverify work authorization. When an employee’s work authorization document expires you must reverify their continued authorization before the expiration date. Failure to reverify is a substantive violation.
Retaining I-9s for terminated employees past the required period. Keeping I-9 forms longer than required creates unnecessary exposure if ICE conducts an audit.
Storing I-9s in the employee’s personnel file. I-9 forms should be stored separately from personnel files so they can be produced quickly during an audit without exposing unrelated employee records.
I-9 Compliance Checklist
- Complete Section 1 with every new hire on or before their first day
- Complete Section 2 within three business days of the employee’s start date
- Physically examine original documents — copies are not acceptable for verification
- Never specify which documents an employee must present
- Record document information accurately on the form
- Set up a tickler system to reverify expiring work authorization documents
- Store I-9 forms separately from personnel files
- Calculate and track the retention deadline for each employee’s I-9
- Conduct an annual self-audit of your I-9 files to catch and correct technical errors
Key Takeaways
Form I-9 is required for every employee hired to work in the United States regardless of citizenship status. Section 2 must be completed within three business days of the employee’s start date. You cannot specify which documents an employee must present. Physical examination of original documents is required — copies do not satisfy the requirement. Retention is required for three years from hire or one year after termination whichever is later. Annual self-audits are the most effective way to identify and correct technical violations before a government audit occurs.
Recommended Resource: Avoid costly I-9 audit mistakes with the Ultimate Guide to HR Checklists Edition by Thalheimer & Simikian — includes step-by-step verification checklists and hiring compliance guidance to keep your business audit-ready.
Recommended Resource: Hiring remote workers across state lines? You may need to register your business as a foreign entity in each state. Harbor Compliance provides registered agent service in all 50 states — flat annual rate, no hidden fees, includes their Entity Manager software to track all state registrations and filing deadlines.
Disclaimer: The information on WorkplaceLogic.com is for general informational purposes only and does not constitute legal advice. Employment laws vary by jurisdiction and change frequently. Always consult a qualified employment attorney for advice specific to your situation.
This post contains affiliate links. We may earn a commission at no extra cost to you.