I-9 Compliance Requirements Explained

I-9 compliance requirements are simple on paper and unforgiving in practice. Every employer must verify the identity and employment authorization of each employee hired in the United States. The problem is not that employers have never heard of Form I-9. The problem is that many organizations treat the I-9 like onboarding paperwork instead of a federal compliance control.

That mistake creates risk. A missing date, late Section 2, incorrect document combination, or inconsistent remote verification process can turn a routine file review into a preventable compliance problem. I-9 compliance is not just about having the form. It is about having a system that makes completion, review, retention, correction, and audit response consistent every time.

What Are I-9 Compliance Requirements?

I-9 compliance requirements refer to the rules employers must follow when completing, storing, correcting, and producing Form I-9, Employment Eligibility Verification. The form is used to verify that an employee is both who they claim to be and authorized to work in the United States.

The requirement applies to employers across industries and organization sizes. Small businesses, nonprofits, municipalities, healthcare organizations, professional services firms, and growing private-sector employers all carry the same core responsibility: complete the form correctly, complete it on time, and retain it properly.

For organizations already reviewing broader employment risk, I-9 compliance should be included in any HR audit consulting process and connected to onboarding, personnel file management, and documentation controls.

Check Which I-9 Edition You Are Using Today

Start here, because this one has a date on it that has already passed.

As of 31 July 2026, the 08/01/2023 edition printed with a 07/31/2026 expiration is no longer acceptable for new hires. If your onboarding packet, your HRIS, or the PDF in a shared drive still serves that version, every I-9 you complete from here is on an invalid form.

Two minutes of work: open the form your team actually uses, look at the lower-left corner for the edition date and the upper-right for the expiration. If it doesn't say 05/31/2027, replace it before your next hire.

Who Must Complete Form I-9?

Employers must complete Form I-9 for each employee hired for employment in the United States. The requirement generally applies to full-time, part-time, seasonal, temporary, and remote employees.

Form I-9 is not completed for properly classified independent contractors. That point matters because misclassification can create separate legal exposure. If a worker is treated like an employee but classified as a contractor, I-9 compliance is only one piece of a larger HR risk problem.

Organizations with uncertain worker classifications should review classification practices as part of a broader HR compliance consulting engagement.

I-9 Compliance Deadlines Employers Must Follow

The I-9 timeline is one of the most important parts of compliance because deadlines are easy to miss and hard to defend after the fact.

The safest workflow is to build I-9 completion directly into the onboarding process. Do not rely on memory. Do not rely on a supervisor remembering to tell HR. Put the deadline into the system and assign ownership before the employee starts.

Section 1 Requirements: Employee Information and Attestation

Section 1 is completed by the employee. The employee enters personal information, selects the appropriate citizenship or immigration status, signs the attestation, and dates the form.

Employers may help employees understand the form, but the employee is responsible for the attestation. HR should be careful not to steer the employee toward a specific status, answer on behalf of the employee, or make assumptions based on name, accent, appearance, national origin, or documentation presented later.

Common Section 1 mistakes include missing signatures, missing dates, incomplete employee information, incorrect preparer or translator sections, and forms completed after the first day of employment.

Section 2 Requirements: Employer Review and Verification

Section 2 is completed by the employer or authorized representative. The employer reviews the employee’s documents, records the document information, enters the employee’s first day of employment, signs the certification, and dates the form.

The employer is not expected to be a forensic document examiner. The standard is whether the documents reasonably appear to be genuine and relate to the employee presenting them.

That standard does not give employers permission to be casual. Section 2 is where many violations occur because the employer enters the wrong document title, misses an expiration date, records an incorrect issuing authority, completes the form late, or accepts an invalid document combination.

Acceptable I-9 Documents: List A, List B, and List C

Employees choose which acceptable documents to present. Employers cannot demand a specific document, ask for more documents than required, or reject valid documents because another document would be easier for the employer to process.

Acceptable documents are grouped into three categories:

• List A: Documents that establish both identity and employment authorization.
• List B: Documents that establish identity only.
• List C: Documents that establish employment authorization only.

The employee may present one valid List A document or one valid List B document together with one valid List C document. Asking for extra documents “just to be safe” is not safer. It creates discrimination risk.

Employers should review the official USCIS Form I-9 acceptable documents page when building or updating internal checklists.

I-9 Retention Requirements

Employers must retain Form I-9 for three years after the date of hire or one year after employment ends, whichever is later.

That retention formula matters. Keeping forms too short creates compliance exposure. Keeping forms indefinitely creates unnecessary audit exposure because every retained form may be reviewed if produced during an inspection.

A disciplined retention process should include:

• A clear storage location for active employee I-9s.
• A separate file for terminated employee I-9s still inside the retention period.
• A retention calculation for each terminated employee.
• A destruction schedule for forms no longer required.
• A documented owner responsible for periodic review.

For broader document control, review employee documentation best practices for legal defense.

The Retention Rule People Get Backwards

Three years after hire, or one year after separation — whichever is later. Almost everyone remembers the two numbers and forgets which way the comparison runs.

Row two is the one that trips people. A hire who lasted three months still has an I-9 you keep for three years from the hire date, not one year from separation. Purge on the wrong rule and you've destroyed a record you were required to produce.

E-Verify in Texas: Less Than You Think, For Now

Texas employers ask about this constantly, usually after hearing a version of the rule that applies somewhere else.

Today there's no general E-Verify mandate for private Texas employers. If you're a state agency, a public university, or a state contractor, you're already in. Everyone else is watching S.B. 324, which would extend it to every employer in the state.

One caution: enrolling voluntarily is allowed, but E-Verify carries its own procedural obligations — tentative nonconfirmation handling, notice requirements, timelines. Don't enrol because it sounds prudent. Enrol when you're ready to run it correctly.

Remote I-9 Verification Requirements

Remote work changed the logistics of I-9 compliance, but it did not eliminate the requirement. Employers must still review documents and complete the form correctly.

Some employers may use the DHS-authorized alternative remote document examination procedure if they participate in E-Verify in good standing and follow the required process. That procedure generally includes reviewing copies of documents, conducting a live video interaction, checking the appropriate Form I-9 box, and retaining required documentation.

Remote verification should never be handled through informal shortcuts. “Send me a picture of your documents and I’ll fill it out later” is not a compliance system. It is a future audit problem.

Employers using remote verification should review USCIS guidance on remote examination of Form I-9 documents.

Common I-9 Compliance Mistakes

I-9 mistakes usually come from broken onboarding workflows, unclear ownership, or untrained managers. The most common failures include:

• Late completion: Section 1 or Section 2 is completed after the required deadline.
• Missing forms: The employee was hired, but no Form I-9 exists.
• Incomplete fields: Signatures, dates, document numbers, or employment start dates are missing.
• Invalid document combinations: The employer records documents that do not satisfy List A or List B plus List C requirements.
• Overdocumentation: The employer asks for additional documents beyond what is required.
• Document steering: The employer tells the employee which specific documents to present.
• Poor reverification tracking: Work authorization expiration dates are not monitored properly.
• Improper corrections: HR backdates, erases, or rewrites forms instead of making transparent corrections.
• Scattered storage: I-9s are mixed into personnel files or stored across multiple locations.

How to Correct I-9 Errors

Employers should correct I-9 errors transparently. Do not backdate. Do not use correction fluid. Do not destroy a form simply because an error exists.

A practical correction process should include:

1. Draw a single line through incorrect information.
2. Enter the correct information.
3. Initial and date the correction.
4. Add a brief note if the correction needs context.
5. Retain the corrected form with the original record.

If the form is severely flawed, employers may complete a new Form I-9 and attach it to the original with a written explanation. The key is transparency. A correction should show what changed, when it changed, and who made the correction.

Internal I-9 Audit Checklist

An internal I-9 audit should not be a panic exercise. It should be part of routine compliance maintenance.

• Pull all active employee I-9s.
• Pull terminated employee I-9s still inside the retention period.
• Confirm each active employee has a completed Form I-9.
• Review Section 1 for signature, date, and completion errors.
• Review Section 2 for document accuracy, employer signature, and completion date.
• Confirm document combinations follow List A or List B plus List C rules.
• Check reverification needs and expiration tracking.
• Correct errors using a transparent correction method.
• Destroy forms that have passed the retention period.
• Document the audit process and corrective actions taken.

For a broader compliance review process, connect this audit to how to conduct an HR compliance audit and your HR audit consulting service page.

I-9 Compliance for Small Businesses

Small businesses often face the greatest I-9 exposure because HR responsibilities are spread across owners, office managers, supervisors, payroll vendors, and informal onboarding habits. Nobody means to skip the form. The process just does not have enough structure to prevent missed steps.

Small employers should keep the system simple:

• Use one onboarding checklist.
• Assign one I-9 owner and one backup.
• Store I-9s separately from personnel files.
• Audit I-9s at least annually.
• Train any manager who participates in hiring or onboarding.

Small employers in Texas can connect I-9 compliance with broader risk areas by reviewing Texas HR compliance for small businesses and small business HR consulting in Texas.

I-9 Compliance for Public Sector and Nonprofit Employers

Municipalities and nonprofits often have lean administrative teams, decentralized departments, and high turnover in frontline roles. That combination creates I-9 risk because hiring may happen quickly while documentation control moves slowly.

Public sector and nonprofit employers should pay close attention to:

• Seasonal and temporary employees.
• Part-time roles.
• Decentralized department hiring.
• Remote or field-based employees.
• Retention schedules after separation.
• Manager training on what not to ask or request.

For industry-specific support, review public sector HR consulting in Texas and nonprofit HR consulting in Texas.

Penalties for I-9 Noncompliance

I-9 penalties can apply to paperwork violations, knowingly hiring unauthorized workers, continuing to employ unauthorized workers, document abuse, discrimination, and retaliation. The risk grows when errors are systemic because each form can create a separate issue.

Employers should treat I-9 compliance as part of a broader legal defense system. A single missing form may be correctable. A pattern of late forms, missing signatures, inconsistent document review, and poor retention practices signals weak compliance infrastructure.

ICE Changed the Rules in March, and Didn't Announce It

This is the most consequential I-9 development in years, and it arrived as a quiet fact-sheet update.

On 16 March 2026, ICE revised its Form I-9 Inspection fact sheet in a way that supersedes key provisions of the 1997 Virtue Memorandum — the guidance that had governed I-9 enforcement for nearly three decades. There was no Federal Register notice, no proposed rulemaking, and no announcement.

What it did: moved more than ten categories of common error out of “technical” and into “substantive.”

Understand why that matters, because it isn't obvious from the labels. The good-faith exception that grants a 10-day window to correct errors has only ever applied to technical violations. Move an error into the substantive column and the cure period doesn't shrink — it disappears. A missing date of birth in Section 1 used to be a phone call. It's now $288 to $2,861.

If you last self-audited before March, your findings were scored under rules that no longer apply.

How to Build an I-9 Compliance Process That Holds

A reliable I-9 process does not need to be complicated. It needs to be owned, documented, and enforced.

When Outside HR Compliance Help Makes Sense

Outside help makes sense when I-9 errors repeat, HR lacks confidence in the current files, remote verification has been handled inconsistently, or leadership has no clear audit response process.

Faulkner HR Solutions helps Texas employers strengthen HR compliance infrastructure through audits, documentation reviews, onboarding process redesign, manager training, and practical compliance workflows. The goal is not to create more paperwork. The goal is to build systems that reduce risk before a government notice, complaint, or audit forces the issue.

For support, schedule a no-obligation HR compliance strategy call or call 210.446.8730.

Frequently Asked Questions