Summary: Form I-9 is a document proving the identity and work authorization status of an individual in the United States.
In this guide we explain why Form I-9 is one of the most important aspects of employment compliance in the United States and what you need to do to ensure you follow the I-9 Rules.
What is Form I-9?
Form I-9, Employment Eligibility Verification, is the instrument by which every United States employer must confirm the identity and work-authorization status of each individual hired after November 6, 1986.
The obligation arises from the Immigration Reform and Control Act (IRCA) and applies to citizens and non-citizens alike.
Employers who knowingly hire an unauthorized worker—or who fail to maintain a properly completed I-9—face civil fines that begin in the low hundreds of dollars per violation and escalate, for recurrent offenses, into five-figure penalties, in addition to potential criminal exposure for a documented pattern of violations.
Completion Mechanics and Timing
Section 1 must be completed by the employee no later than close of business on the first day of work for pay. It captures biographical data, immigration status, and a self-attestation under penalty of perjury.
Section 2 is completed by the employer, or its authorized representative, no later than the third business day after the date of hire. The employer must physically—or, pursuant to the 2023 DHS rule, remotely—examine original documents from the Lists of Acceptable Documents and record in Section 2 the document title, issuing authority, number, and expiration date.
List A documents establish both identity and authorization; alternatively, one List B document plus one List C document accomplish the same purpose.
The 2023 alternative procedure permits eligible employers enrolled in E-Verify to review copies of documents electronically and to meet with the employee via live video to confirm document integrity.
Employers adopting remote review must retain clear copies of the identity documents with the Form I-9 and annotate Section 2 to reflect use of the DHS-authorized procedure. Existing “COVID-era” flexibilities expired in July 2023 and may not be used unless the employer has transitioned to the new rule.
Section 3 addresses reverification when an employee’s work-authorization document expires or when the employee is rehired within three years of the original hire date.
Failure to reverify timely converts an otherwise authorized employee into an unauthorized status, exposing the employer to the same sanctions that apply to deficient Section 2 execution.
What Are the Ongoing I-9 Compliance Requirements?
Completed I-9s may be stored on paper, microfilm, microfiche, or in an electronic system that meets the audit-trail and indexing requirements of 8 CFR §274a.2.
Regardless of format, an I-9 must be retained for three years after the date of hire or for one year after the date employment ends—whichever is later.
I-9s must be segregated from general personnel files so that, during a Department of Homeland Security (DHS) Notice of Inspection, the employer may produce all forms within the mandatory three-day response window without disclosing unrelated HR materials.
Anti-Discrimination Guardrails
While the employer must require each employee to complete a Form I-9, it must not specify which documents the employee should present, request more documents than necessary, or reject documents that reasonably appear genuine.
Such actions can constitute an “unfair documentary practice” under the Immigration and Nationality Act’s anti-discrimination provisions—enforced by the Department of Justice’s Immigrant and Employee Rights Section—and subject the employer to additional civil penalties.
Common Compliance Failures and Mitigation
- Untimely completion. Section 2 signed after the third business day remains the leading deficiency noted during DHS audits. Implementing an onboarding checklist that locks payroll activation until a valid Section 2 date is captured mitigates the risk.
- Improper document copying. Copying documents is optional under federal regulation unless the remote-review procedure is used; however, if an employer chooses to copy for one employee, it must do so uniformly for all to avoid discriminatory practice claims.
- Storage silos. Electronic I-9 systems sometimes fail to replicate federal retention rules across multiple entities or divisions. Annual self-audits aligned to the retention calendar ensure expirable documents are reverified and obsolete forms purged.
- Late reverification. Automated ticklers aligned to document expiration dates, coupled with a dual-review process, reduce lapse events.
The Importance of Comprehensive I-9 Management
A well-governed I-9 program synchronizes with the Human Resources Information System (HRIS) and payroll start-date fields, thereby ensuring regulatory timelines are met automatically.
It also dovetails with background-screening workflows so that the contingent offer process remains compliant with ban-the-box and fair-chance laws yet does not delay statutory verification.
Finally, internal audit teams should test samples quarterly, document corrections on the form itself (initials and date), and record the remedial action for evidentiary purposes should a federal inspection follow.