I-9 Compliance: What U.S. Employers Must Verify and Retain

Every employer in the United States — from a two-person shop to a national chain — must complete Form I-9, Employment Eligibility Verification, for each person it hires for employment in the country. The form is short. The compliance obligations around it are not: strict deadlines, precise document rules, a retention formula that trips up even careful HR teams, and civil penalties that apply per form, per violation.

Here is a hypothetical that plays out often: a growing company gets a Notice of Inspection from Immigration and Customs Enforcement (ICE) and has three business days to produce its I-9s. Files are missing for early hires, several forms were signed late, and no one can find the records for employees who left two years ago. Every one of those gaps is a separate potential violation. This guide walks through what the rules actually require, in the order they arise in the life of a hire.

Who needs an I-9 — and who does not

The obligation attaches to employees hired to work in the United States, including U.S. citizens. It applies even if the person works only a few days. It does not apply to bona fide independent contractors — though misclassifying workers to dodge verification creates its own serious exposure, as explained in our guide to employee versus independent contractor classification. Employers also cannot use a staffing agency arrangement to escape responsibility if they know a worker is unauthorized.

Verification is status-neutral by design. The same form and the same document choices apply to a U.S. citizen, a green card holder, and an employee on a work visa such as an H-1B or TN status. Always use the current form edition posted at I-9 Central on uscis.gov; the edition dated 01/20/2025 is the one in use as of mid-2026.

Completing the form on time

The I-9 process runs on a tight clock at the start of employment:

1. Offer accepted. The form may be completed any time after acceptance, but never before, and never as a screening tool for applicants.
2. First day of work for pay. The employee must complete and sign Section 1 no later than this day, attesting to citizenship or immigration status.
3. Within three business days of the start date. The employer examines the employee's original documents and completes Section 2. If the job lasts fewer than three days, everything is due by the first day.
4. When work authorization expires. For employees with temporary authorization, the employer must reverify by the expiration date using Supplement B (formerly Section 3). Never reverify U.S. citizens or permanent residents.

For documents, the employee — not the employer — chooses what to present: either one List A document establishing both identity and work authorization (such as a U.S. passport or permanent resident card) or one List B identity document plus one List C work-authorization document. Demanding specific documents, or more documents than the lists require, is unlawful.

The retention formula most employers get wrong

USCIS requires employers to keep each Form I-9 for three years after the date of hire or one year after the date employment ends — whichever is later. That is a calculation, not a choice. Run both dates for every departed employee and keep the form until the later one passes.

• An employee hired in 2020 who resigns in 2026: three years from hire passed in 2023, so the form must be kept until one year after termination — 2027.
• An employee hired in January 2026 who quits after two months: one year after termination is early 2027, but three years from hire runs to January 2029, so 2029 controls.

Storage can be paper, electronic, or microfilm/microfiche. Paper originals with handwritten signatures may be scanned into a compliant electronic system and then destroyed, provided the electronic records remain legible, secure, and producible for inspection. Best practice is to keep I-9s separate from general personnel files so an audit does not expose unrelated records — a habit that also helps when handling terminations and severance paperwork cleanly.

Inspections and the price of getting it wrong

ICE enforces employer sanctions under Immigration and Nationality Act § 274A. An administrative inspection usually starts with a Notice of Inspection giving the employer at least three business days to produce its I-9s, often alongside payroll and business records. After review, ICE may issue notices ranging from compliance letters to a Notice of Intent to Fine.

Amounts adjust for inflation, so check current figures on the USCIS penalties page before relying on them. ICE weighs business size, good-faith efforts, the seriousness of violations, any unauthorized workers, and history. A pattern or practice of knowing violations can bring criminal exposure. Because audit responses are deadline-driven and fact-intensive, many employers bring in an I-9 compliance attorney when a Notice of Inspection arrives, or earlier, to run an internal audit before the government does.

Where E-Verify fits

E-Verify is the federal electronic system that compares I-9 information against DHS and Social Security records. It supplements the I-9 — it never replaces it. Federal law makes it voluntary for most employers, with a major exception: federal contractors whose contracts include the FAR E-Verify clause must enroll (within 30 days of award) and verify employees working on the contract. Contracts under 120 days, at or below the simplified acquisition threshold, performed entirely abroad, or limited to off-the-shelf items are generally exempt.

States are a different story. A significant number of states require E-Verify for public employers, state contractors, or all employers above a certain size, and those lists keep changing. Multi-state employers should confirm each state's rule rather than assuming the federal baseline applies.

The other side of compliance: anti-discrimination rules

Overcorrecting is its own violation. Federal law prohibits citizenship-status and national-origin discrimination in verification, including "document abuse" — rejecting valid documents, demanding specific ones, or treating foreign-appearing employees differently. The Department of Justice's Immigrant and Employee Rights Section enforces these rules. Apply one consistent process to everyone: same timing, same document choices, same reverification triggers. Broader workplace rules on fair treatment are covered in our guide to workplace discrimination claims.

Frequently asked questions

Do I need I-9s for employees hired before November 7, 1986?

No. The verification requirement applies to employees hired after November 6, 1986, when the Immigration Reform and Control Act took effect. Continuously employed staff hired on or before that date are exempt. Everyone hired since then — including citizens, part-timers, and short-term hires — needs a completed form on file.

Should we photocopy the documents employees present?

Copying is optional unless you use E-Verify, which requires copies of certain documents. Whatever you choose, be consistent: copying documents for some employees and not others invites discrimination claims. If you keep copies, store them with the I-9 and produce them at inspection.

What should we do if we discover errors in old I-9s?

Correct them transparently. Line through the error, enter the correct information, then initial and date the change — or attach a signed memo explaining larger fixes. Never backdate, use correction fluid, or discard the original. A documented, good-faith internal audit can meaningfully reduce penalty exposure later.

Can we complete the I-9 remotely for a work-from-home hire?

Yes, in two ways: an authorized representative (any adult you designate) can physically examine documents where the employee lives, or, if you are enrolled in E-Verify and in good standing, you may use the DHS alternative procedure for live-video examination. Purely reviewing emailed copies is not compliant on its own.

Building a repeatable routine

I-9 compliance rewards systems over heroics. A workable baseline looks like this:

• Use the current form edition and calendar Section 1 and Section 2 deadlines for every start date.
• Track work-authorization expiration dates and reverify on time — never early, never selectively.
• Apply the retention formula at every separation and purge only after the later date passes.
• Store I-9s (and any document copies) separately from personnel files, ready for a three-day production window.
• Self-audit annually, correct errors properly, and document the effort.
• Confirm whether federal-contractor status or state law obligates you to use E-Verify.

Employers who sponsor workers for visas or permanent residence face additional, overlapping obligations — see our overview of the employment-based green card process for how those duties differ from day-to-day verification.

Sources & further reading

• USCIS — I-9 Central: Retention and Storage
• USCIS — Handbook for Employers M-274, 10.0 Retaining Form I-9
• USCIS — I-9 Central: Penalties
• ICE — Form I-9 Inspection Fact Sheet
• E-Verify — Federal Contractors: Exemptions and Exceptions