I-9 Verification

I-9 compliance is a standing US employment obligation. ICE conducts I-9 audits through Notice of Inspection (NOI); the agency has significantly increased enforcement in recent years. Civil penalties per paperwork violation range from roughly $280 to over $2,800, and knowingly hiring unauthorized workers produces higher penalties and potential criminal liability. For an employer with 2,000 employees hired over a few years, paperwork penalties alone can reach seven figures. The compliance is also not optional — every US employer must complete the form for every hire, including citizens and permanent residents, not just foreign nationals.

Take a 900-person company's I-9 process. New hire completes Section 1 electronically on day 1 (identity information, attestation of work authorization status). Within three business days, the HR coordinator examines acceptable documents from List A (identity and work authorization combined — US passport, Permanent Resident Card, employment authorization document) or a combination of List B (identity — driver's license) and List C (work authorization — Social Security card, birth certificate, employment authorization document). Documents are examined in person or via an authorized remote procedure (the permanent E-Verify alternative remote procedure was finalized in 2023 for E-Verify employers in good standing). Section 2 is completed by the employer representative. Forms are stored electronically. Re- verification is required for employees with time-limited work authorization (when documents expire). Retention: three years after hire or one year after termination, whichever is later.

E-Verify A voluntary (for most employers) online system operated by USCIS that compares I-9 information against Social Security and DHS records to confirm employment authorization. Federal contractors and some state-required employers must use E-Verify; many employers use it voluntarily. E-Verify produces a "Case Result" (Employment Authorized or Tentative Nonconfirmation) within seconds to days. Tentative Nonconfirmations require employer- employee coordination to contest with SSA or DHS; the process has specific timelines and notification requirements. E-Verify does not replace the I-9 — employers must still complete the I-9 and use E-Verify in addition where required or elected.

Most I-9 audits find the same issues: forms with blank fields, forms completed late, documents accepted that shouldn't have been (expired, for example), and missing forms entirely. Organizations that treat I-9 as a checkbox produce thousands of small errors that aggregate into significant penalty exposure. The ones that get this right centralize I-9 processing, use electronic completion systems with validation rules that prevent common errors, conduct periodic internal audits to find and correct errors before ICE does, and train HR staff on the narrow set of acceptable documents. The other systematic issue: discrimination risk. The form and process must be handled identically for citizens and non-citizens; asking for more documents than required or specifying which documents to present can create immigration-related unfair employment practice claims, which carry their own penalties.

In construction, agriculture, and hospitality — sectors with historically higher ICE enforcement focus — I-9 compliance discipline is especially important.

In technology and financial services, I-9 compliance is routine but still generates paperwork penalties when process isn't tight.

In retail and hospitality, high turnover produces high I-9 volume and corresponding paperwork-error risk.

In healthcare, credential verification and I-9 verification intersect; clean HR ops handle both cleanly.

In federal contracting, E-Verify is mandatory and the combined I-9 plus E-Verify process is a standard part of hiring.

In state-level variations, Arizona, Alabama, Mississippi, South Carolina, Utah, Georgia, North Carolina, Tennessee, Florida, and others mandate E-Verify for some or all private employers.

AI improves I-9 compliance in 2026 by automating document examination (detecting tampering, verifying document format, flagging expired documents), guiding new hires through Section 1 completion with inline validation, and performing internal audits at scale across thousands of stored I-9s. Electronic I-9 platforms have become the standard at mid- market and enterprise scale. The risk is over-automation — I-9 compliance still requires human judgment for unusual documents and E-Verify Tentative Nonconfirmations, and AI that rejects legitimate documents can produce discrimination liability.

• Late Section 2 completion. Past the three- business-day window. Common and straightforward to avoid with workflow systems.
• Missing forms. New hires without completed I-9s. Paperwork penalty per missing form.
• Over-documentation. Asking for more or different documents than the employee chooses to present. Creates discrimination liability.
• Expired documents accepted. Documents must be unexpired at the time of examination. Careful review required.
• Poor re-verification tracking. Time-limited work authorization requires re-verification by expiration. Missing this is a compliance gap.
• Sloppy retention. Forms must be retained for the full period, retrievable on demand. Lost records create audit exposure.