Internal Form I‑9 Audits and Employer Compliance

SCHEDULE A CONSULTATION

An internal Form I-9 audit, sometimes called a Form I-9 self-audit, is a voluntary review of an employer’s employment eligibility verification records, practices, and systems. Unlike an ICE inspection, it is initiated by the employer before Homeland Security Investigations serves a Notice of Inspection.

A properly structured internal audit can identify missing Forms I-9, untimely completion, substantive violations, uncorrected technical failures, reverification problems, electronic-system deficiencies, remote document examination errors, and inconsistent practices. It can also give the employer an opportunity to make transparent corrections, improve its procedures, and document its compliance efforts before the government requests the records.

An internal audit must be handled carefully. Improper corrections, selective review of employees based on citizenship status or national origin, requests for specific documents, or identification of serious problems without meaningful remediation may create additional risk.

Internal Form I-9 Audits at a Glance

An employer is not generally required by federal law to conduct a voluntary internal Form I-9 audit. An audit may nevertheless be required by a settlement agreement, court or administrative order, government contract, prior ICE resolution, corporate compliance agreement, or another binding commitment.

Whether or not an employer conducts a self-audit, it remains responsible for properly completing, retaining, and producing Forms I-9. A future ICE inspection may result in penalties for substantive violations and for technical or procedural failures that are not timely corrected after notice.

An effective internal audit ordinarily includes:

Establishing a neutral, consistent, and documented scope;
Comparing payroll and employee records against retained Forms I-9;
Identifying missing, incomplete, or untimely forms;
Reviewing reverification and retention requirements;
Evaluating electronic Form I-9 and remote document examination procedures;
Making transparent, dated, and properly documented corrections;
Giving affected employees a reasonable opportunity to provide information or documentation;
Avoiding citizenship-status and national-origin discrimination;
Updating written policies and training responsible personnel; and
Preserving a record of the audit and the employer’s remediation efforts.

An employer should not begin a self-audit unless it is prepared to address the problems identified. Records showing that the company discovered serious violations but knowingly left them uncorrected may be more damaging than the absence of a prior audit.

What Is the Difference Between an Internal I-9 Audit and an ICE Inspection?

An internal audit is initiated voluntarily by the employer. Its purpose is to evaluate and improve compliance before the government requests the records.

An ICE inspection is initiated by Homeland Security Investigations, commonly referred to as HSI, through a Notice of Inspection or other legal process. Once an NOI is served, the employer generally receives at least three business days to produce the requested Forms I-9. Corrections made after service generally do not eliminate liability for substantive violations existing when the records were requested.

Internal Form I-9 audit	ICE Form I-9 inspection
Initiated by the employer	Initiated by HSI
Usually conducted before government contact	Begins with an NOI or other legal process
Scope may be established using neutral business criteria	Scope is determined by the government’s request
Allows time for planned, documented remediation	Usually requires rapid collection and production
Can improve future compliance and support mitigation arguments	Determines whether violations and penalties should be assessed
Allows policies, systems, and training to be evaluated	May result in notices, civil penalties, or a broader investigation
Employee communication can be planned in advance	Responses may be controlled by deadlines in an HSI notice

Employers that have already received an NOI should refer to the separate ICE Form I-9 Audits and Inspections page and consult counsel before changing or correcting the requested records.

Why Should an Employer Conduct an Internal Form I-9 Audit?

Employers sometimes assume their Form I-9 compliance is adequate because their employees appear authorized to work or because an electronic platform accepted the forms. Neither assumption eliminates potential liability.

Form I-9 paperwork violations exist independently of an employee’s actual authorization to work. An employer may face penalties for missing, late, incomplete, improperly retained, or electronically noncompliant forms even when every employee is lawfully authorized.

An internal audit may help the employer:

Locate missing Forms I-9;
Identify substantive and technical errors;
Determine whether Sections 1 and 2 were timely completed;
Correct inaccurate or incomplete information;
Identify temporary employment authorization requiring reverification;
Calculate retention dates and lawfully dispose of eligible records;
Review remote document examination procedures;
Test electronic storage, retrieval, security, signature, and audit-trail functions;
Identify inconsistent practices among locations or HR personnel;
Correct improper use of the Spanish-language Form I-9 outside Puerto Rico;
Review relationships with staffing companies and contractors;
Establish written policies and escalation procedures;
Retrain HR personnel and hiring managers; and
Document efforts to comply before an ICE inspection.

Why Internal Audits Became More Important in March 2026

On March 16, 2026, ICE published revised Form I-9 inspection guidance identifying numerous common errors as substantive violations. Several had historically been treated as technical or procedural failures that employers could correct after receiving written notice from ICE.

Examples ICE now identifies as substantive include:

A missing employee date of birth;
A missing required Alien Registration Number, USCIS Number, Form I-94 number, or foreign passport information;
A missing employee signature date;
Incomplete List A, B, or C document information;
A missing employer representative name or title;
A missing first day of employment;
Use of the Spanish-language Form I-9 outside Puerto Rico;
Improper documentation of an authorized remote examination procedure;
Incomplete preparer or translator information;
Reverification deficiencies; and
Failure to satisfy applicable electronic Form I-9 standards.

ICE’s guidance states that substantive violations may be penalized without the correction period that applies to technical or procedural failures. Employers should expect HSI auditors to apply these classifications, although the defenses available in a particular case may depend on the form edition, facts, timing, and controlling law.

A proactive correction does not retroactively erase a substantive violation. However, OCAHO precedent cited by the Ninth Circuit in DLS Precision Fab LLC v. ICE treats a Form I-9 paperwork violation as continuing until it is corrected or the employer is no longer required to retain the form. A proper correction may therefore stop the continuing violation and begin the five-year limitations period under 28 U.S.C. § 2462. Liability may remain during that period, but correction can prevent the violation from continuing indefinitely and may support mitigation based on good faith.

Once ICE serves an NOI, correcting a substantive violation generally does not eliminate liability for the condition that existed when the form was requested.

When Should an Employer Consider an Internal Audit?

An employer may consider an internal Form I-9 audit when:

The company has never conducted a comprehensive review;
Several years have passed since the last audit;
The employer’s industry or geographic area is experiencing increased worksite enforcement;
The business has grown substantially;
HR personnel or company leadership has changed;
Different offices or locations follow inconsistent procedures;
The company is adopting or replacing an electronic Form I-9 system;
An electronic vendor cannot produce complete records or associated audit trails;
The company used remote document inspection;
Forms I-9 were transferred during a merger, acquisition, or reorganization;
The company discovers missing forms or recurring errors;
A former employee or another person raises a credible compliance concern;
The employer receives Social Security or other government discrepancy information;
The company uses staffing companies, subcontractors, or a substantial contingent workforce;
The employer is preparing for a corporate transaction or government contract;
Management learns that HR personnel made improper corrections; or
The company wants to update its written compliance policies and training.

An audit may also be appropriate after the employer receives an ICE Warning Notice or completes an inspection. That review should be coordinated with counsel so it addresses the government’s findings and any continuing obligations without altering evidence from the prior inspection.

Determining the Scope of an Internal Form I-9 Audit

An employer may review all Forms I-9 within the retention period or use a defined scope based on legitimate, neutral, and nondiscriminatory business considerations. The employer should document why the audit is being conducted and how the forms were selected.

Possible scopes include:

All current employees;
All current and former employees whose Forms I-9 remain within the retention period;
All employees hired during a defined period;
All employees processed through a particular electronic system;
All employees whose forms were completed by a particular office or HR team;
All employees affected by remote examination procedures;
All employees acquired through a merger or acquisition; or
A sample selected through documented, neutral, and nondiscriminatory criteria for an initial compliance assessment.

The employer should not select employees because of citizenship, immigration status, national origin, accent, appearance, surname, language, or perceived foreignness. The audit also should not be used to retaliate against employees who raised complaints or exercised protected rights.

If the audit is limited to a location, period, system, or business unit, the employer should be able to explain the legitimate reason for that limitation. If an initial sample reveals substantial or systemic problems, the employer should consider expanding the review using the same neutral principles.

Should an Internal Form I-9 Audit Be Attorney-Led?

An attorney-led audit can help an employer define the scope, apply current legal standards, distinguish substantive from technical issues, supervise corrections, evaluate discrimination concerns, and develop a remediation plan.

Counsel may also identify when a paperwork problem presents potential knowing-employment, fraud, obstruction, or criminal exposure requiring coordination with employment counsel or a white-collar criminal defense attorney.

Attorney involvement does not make the underlying Forms I-9, payroll records, or ordinary business documents privileged. Those records generally remain subject to production during a lawful government inspection.

Depending on the circumstances, confidential communications made for the purpose of obtaining legal advice and attorney work product may receive legal protection. The employer should structure communications carefully and avoid unnecessarily circulating legal assessments.

A Step-by-Step Internal Form I-9 Audit Process

The appropriate process depends on the employer’s workforce, systems, locations, and risk profile. A comprehensive audit commonly includes the following steps.

1. Define the purpose, scope, and responsible team

Create a written audit plan identifying:

Why the audit is being conducted;
Which employees, locations, and time periods are included;
The neutral criteria used to determine the scope;
Who will review the records and supervise corrections;
How legal questions will be escalated;
How employees will be notified and given an opportunity to respond;
How findings and corrective actions will be documented; and
When the audit and remediation are expected to be completed.

The plan should also address confidentiality, secure handling of personal information, and preservation of records. If the employer has received an NOI, subpoena, litigation hold, or credible notice of an investigation, it should consult counsel before destroying any record or treating the review as a routine self-audit.

2. Create an accurate workforce roster

Reconcile the company’s Forms I-9 against reliable personnel and payroll data. The roster should ordinarily identify:

Current employees;
Former employees still within the Form I-9 retention period;
Hire and termination dates;
Rehires;
Employees with temporary work authorization;
Work locations and employing entities;
Individuals supplied by staffing companies or contractors; and
Persons classified as independent contractors.

The purpose is not simply to count the forms in storage. It is to determine which employing entity was required to complete a Form I-9, whether a form exists for every covered hire, and whether the company is retaining forms it is no longer required to keep.

Worker classification questions should be reviewed separately. Calling a worker an independent contractor does not control if the facts establish an employer-employee relationship.

3. Confirm the correct retention population

Employers must retain Form I-9 throughout each employee’s employment. After employment ends, the employer must retain the form until the later of:

Three years after the employee’s first day of employment; or
One year after the employee’s employment ends.

Forms that have reached the end of the retention period may ordinarily be destroyed under a consistent records policy. Before doing so, the employer should confirm that no NOI, subpoena, litigation hold, settlement obligation, investigation, or other preservation duty applies.

Keeping expired records indefinitely can unnecessarily enlarge the population available for inspection and increase the amount of sensitive personal information the employer must safeguard.

4. Review each Form I-9 under the rules applicable when it was completed

The auditor should review the edition of Form I-9 and the legal requirements in effect on the date of completion. A document should not be treated as unacceptable merely because it no longer appears on the current Lists of Acceptable Documents if it was acceptable when originally presented.

The review should evaluate, as applicable:

Whether Section 1 was completed no later than the employee’s first day of employment;
Whether Section 2 was completed within the required timeframe;
Whether the employee and employer signed and dated the required attestations;
Whether the employee selected only one citizenship or immigration-status box;
Whether required immigration numbers and expiration information were entered;
Whether the documents recorded were a permissible List A document or a permissible combination of List B and List C documents;
Whether document titles, issuing authorities, numbers, and expiration dates were fully recorded;
Whether the employer recorded the employee’s actual first day of employment;
Whether a preparer or translator properly completed Supplement A when required;
Whether reverification or rehire entries in Supplement B or an older Section 3 were timely and complete;
Whether receipts, automatic extensions, and temporary evidence were handled correctly;
Whether remote examination requirements were satisfied; and
Whether electronic signatures, records, and audit trails satisfy federal requirements.

An expired document does not automatically require reverification. Employers generally reverify expiring temporary employment authorization, not an expired U.S. passport, Permanent Resident Card, or List B identity document. Reverification decisions should be made based on the employee’s authorization and the rules applicable to the document—not the employee’s citizenship or national origin.

5. Classify findings and prioritize risk

The employer should maintain a secure audit worksheet or exception log identifying:

Missing forms;
Untimely forms;
Substantive violations;
Technical or procedural failures;
Reverification issues;
Electronic-system defects;
Remote examination errors;
Potential discrimination concerns;
Potential knowing-employment issues; and
The corrective action taken or the reason correction was not possible.

The company should distinguish an internal assessment from an official ICE determination. An internally discovered concern should not be labeled a “Notice of Suspect Documents” or “Notice of Discrepancies,” because those are notices HSI may issue during a government inspection.

6. Make transparent and properly dated corrections

Corrections should preserve the original information and show who made the change, when it was made, and why. Employers should never backdate a Form I-9, use correction fluid, erase original information, overwrite an electronic record without a history, or discard a deficient original form.

The USCIS Handbook for Employers and joint ICE/DOJ internal-audit guidance provide a framework for common corrections.

Correcting Section 1

Only the employee may correct an error or omission in Section 1. The employee should generally draw a line through incorrect information, enter the correct or omitted information, and initial and date the correction.

If a preparer or translator assists with the correction, the applicable certification requirements should also be completed. If the employee no longer works for the employer or is otherwise unavailable, the employer should not change Section 1 on the employee’s behalf. Instead, it may attach a signed and dated memorandum identifying the issue and explaining why the employee could not make the correction.

Correcting Section 2 or Supplement B

The employer or its authorized representative may correct errors in Section 2 and in Supplement B, formerly Section 3. The person making the correction should generally draw a line through the incorrect information, enter the correct or omitted information, and initial and date the change.

If there are numerous errors, the employer may complete the relevant section of the current form and attach it to the original, together with a signed and dated explanation. The original form should be retained.

Correcting a missing Form I-9 or blank section

If a required Form I-9 was never completed or cannot be located, the employer and employee should complete the current version as soon as possible. They should use the actual date of completion, record the employee’s actual first day of employment where required, and attach a signed and dated explanation. The form should never be backdated.

If an entire section was left blank, the responsible person should complete it as soon as possible using the actual completion date and attach an explanation.

Correcting an electronic Form I-9

Corrections must be made through a process that preserves the original record and creates the required permanent history. The system should identify the date of access, the person who accessed the record, and the action taken. A simple overwrite that removes the original entry may create a separate compliance problem.

Correcting document deficiencies

If a correction requires the employee to present documentation, the employer must allow the employee to choose from the acceptable Lists of Documents. The employer should not demand a Permanent Resident Card, Employment Authorization Document, Social Security card, or any other specific document.

The employer also should not require more documents than Form I-9 requires. Requesting particular or additional documents based on citizenship, immigration status, or national origin may constitute an unfair documentary practice.

7. Test the electronic Form I-9 system and its audit trails

An electronic platform does not shift legal responsibility from the employer to the software provider.

Under 8 C.F.R. § 274a.2, an employer retaining Forms I-9 electronically must be able to retrieve and reproduce requested forms and supporting documentation together with their associated audit trails. It must also be able to provide the hardware, software, personnel, documentation, reports, and other data needed to locate, retrieve, and establish the authenticity, integrity, and reliability of the electronic records.

An audit trail is not the only regulatory requirement for an electronic Form I-9 system, but it is an expressly required component of the records that must be available during an inspection. In United States v. KLJ Leasing, LLC, 16 OCAHO no. 1446c (2025), OCAHO held that an audit trail is an essential component of an electronic Form I-9 and that failure to timely produce the associated audit trail constituted a substantive failure to present the complete electronic record.

The internal audit should test whether the system:

Creates secure and permanent records when a form is created, completed, updated, modified, altered, or corrected;
Identifies the date of the action, the person who performed it, and the action taken;
Prevents and detects unauthorized or accidental creation, alteration, deletion, or deterioration;
Limits access to authorized personnel;
Preserves the original record and all correction history;
Captures legally compliant employee and employer electronic signatures;
Produces legible Forms I-9, supporting documents, and associated audit trails;
Can generate requested records within the NOI response period;
Maintains documentation of the system’s business processes and quality-assurance program; and
Allows the employer to retrieve its records if the vendor relationship ends.

The employer should perform an actual test production rather than relying solely on the vendor’s representation that the system is compliant.

8. Review remote document examination practices

Employers using a DHS-authorized alternative procedure should confirm they were eligible to use it and followed every required step. Under the current USCIS remote examination procedure, a qualifying employer generally must:

Be enrolled and in good standing in E-Verify for the participating hiring site, or otherwise qualify under an applicable DHS-authorized procedure;
Examine clear copies of the employee’s documents;
Conduct a live video interaction with the employee;
Indicate use of the alternative procedure on Form I-9;
Create the required E-Verify case when applicable; and
Retain clear copies of the documents presented and produce them with Form I-9 if requested.

The employer should apply its chosen procedure consistently at a qualified hiring site. Selective use based on an employee’s citizenship status or national origin can create discrimination concerns.

9. Review E-Verify compliance separately

Form I-9 and E-Verify are related but distinct processes. The audit should determine whether the employer:

Created cases only for employees and locations subject to E-Verify;
Created cases within the required timeframe;
Used accurate Form I-9 information;
Required a photo-bearing List B document when applicable;
Retained copies of photo-matching documents when required;
Gave employees proper notice of tentative nonconfirmations;
Allowed employees to contest without delay or adverse action;
Closed cases properly; and
Limited access to trained and authorized users.

An employer generally should not create late E-Verify cases for an entire historical workforce merely because an internal audit reveals deliberate nonuse. The appropriate corrective action depends on the reason for the omission, the employer’s E-Verify obligations, and the program rules. Inadvertently missed recent cases should be addressed under current E-Verify guidance.

10. Complete remediation and ongoing monitoring

An audit is not complete when the forms have been reviewed. The employer should close the loop by:

Completing available corrections;
Documenting why unresolved issues could not be corrected;
Updating written Form I-9 and E-Verify procedures;
Assigning responsibility for reverification;
Training HR personnel and hiring managers;
Correcting deficient vendor configurations;
Establishing quality-control reviews;
Setting retention and destruction schedules;
Confirming that acquired businesses and remote locations follow the same standards; and
Scheduling follow-up testing to ensure the changes are working.

The final record should identify the audit’s scope and methodology, findings, corrective actions, unresolved items, policy changes, training completed, and responsible personnel.

Communicating With Employees During an Internal Form I-9 Audit

Joint ICE and DOJ guidance recommends a transparent process. The employer should ordinarily explain the reason and scope of the audit, state whether it is independent of or in response to a government directive, provide a process for questions, communicate privately with affected employees, and apply consistent standards.

The employer should not suggest that ICE issued a notice if it did not. It also should not conceal government involvement if the audit is being conducted in response to an NOI, settlement, or other directive.

Sample general employee announcement

The company is conducting an internal review of its Forms I-9 and employment eligibility verification procedures to ensure that its records are complete and comply with federal requirements. The review applies to [describe the neutral scope]. It is [an independent company review/not an independent review and is being conducted in response to describe the government directive accurately].

If the review identifies missing or incomplete information on your Form I-9, Human Resources will contact you privately, provide information about the issue, and explain the steps available to address it. Identification of an error does not necessarily mean that an employee lacks authorization to work. Employees will be permitted to choose which acceptable documents to present when documentation is required. Questions may be directed to [contact information].

Sample individual notice of a Form I-9 deficiency

As part of the company’s internal Form I-9 review, we identified missing, incomplete, or potentially inaccurate information on your Form I-9. This does not necessarily mean that you are not authorized to work.

We are providing you with a copy of the form and information identifying the issue. Please review the materials and contact Human Resources by [date] so we can discuss the appropriate correction. If acceptable documentation is required, you may choose which document or combination of documents to present from the Form I-9 Lists of Acceptable Documents. The company is not requesting any particular document.

If you need additional time, language assistance, or have questions about the process, please contact [name/contact information].

These samples should be adapted to the facts, the employer’s policies, applicable collective-bargaining obligations, and any government notice. Employee-specific communications and responses should be documented.

How Much Time Should an Employee Receive to Resolve an Internal Audit Issue?

There is no single federal deadline that applies to every deficiency discovered during a voluntary internal audit. The employer should provide employees who state they are authorized to work with a reasonable opportunity to resolve the issue. Reasonableness depends on the type of deficiency, the documents involved, processing times, the employee’s efforts, and the surrounding facts.

The three-business-day rule for initial completion of Section 2 does not automatically establish the deadline for correcting a historical form. Likewise, the response period associated with an official HSI Notice of Suspect Documents does not control an independently initiated self-audit.

Some replacement documents may take substantial time to obtain. The employer should consider extensions case by case using objective, nondiscriminatory, and nonretaliatory standards and should document the reason for granting or denying additional time.

If an employee states that the employee is currently unauthorized to work, or the employer otherwise obtains actual or constructive knowledge of current unauthorized employment, the employer should obtain legal advice promptly. The knowing-employment provisions present different issues from an incomplete form.

Avoiding Discrimination During an Internal I-9 Audit

The Immigration and Nationality Act prohibits certain discrimination based on citizenship or immigration status and national origin. It also prohibits retaliation and unfair documentary practices in the Form I-9 process. The DOJ’s Immigrant and Employee Rights Section enforces these provisions.

During an internal audit, employers should not:

Select employees for review because they appear or sound foreign;
Apply different correction standards based on citizenship or national origin;
Demand a specific Form I-9 document;
Require lawful permanent residents to present new Permanent Resident Cards when reverification is not required;
Reverify U.S. citizens or noncitizen nationals because their documents expired;
Request more documents than required;
Assume that an unclear document copy proves fraud;
Treat an employee as unauthorized solely because of a Social Security number mismatch;
Take adverse action while an employee properly contests an E-Verify tentative nonconfirmation; or
Retaliate against an employee for raising concerns or exercising protected rights.

An employee generally chooses which acceptable documentation to present. If a previously recorded document presents a legitimate concern, the employer may explain that the questioned document cannot resolve the deficiency, but it should allow the employee to choose another acceptable document or combination from the lists.

A Social Security no-match or SSN Verification Service result does not determine immigration status or employment authorization. The Social Security Number Verification Service is intended for wage-reporting accuracy, not Form I-9 employment authorization verification, and should not be used as a substitute for Form I-9 or E-Verify.

The Risks of an Incomplete Internal Audit

An employer should not conduct an audit merely to measure the problem and then leave identified violations unaddressed.

An incomplete audit may create records showing that the company:

Knew Forms I-9 were missing or deficient;
Identified expired temporary employment authorization but failed to reverify;
Learned that electronic records or audit trails could not be reliably produced;
Discovered credible concerns that an employee’s documents did not relate to that employee;
Recognized improper remote examination practices;
Found inconsistent procedures but did not retrain personnel; or
Continued using a deficient system after receiving legal or technical warnings.

That information may weaken a good-faith or mitigation argument. In more serious circumstances, it may be relevant to whether the employer had actual or constructive knowledge of unauthorized employment.

The audit plan should therefore include sufficient personnel, time, authority, and resources to complete the review and implement appropriate corrective measures.

Internal Form I-9 Audit Checklist

Before closing an internal audit, the employer should be able to answer the following questions:

Does a required Form I-9 exist for every employee in the audit population?
Were Sections 1 and 2 timely completed?
Are the required attestations signed and dated?
Is the recorded document combination permissible?
Is required document information complete?
Were Supplement A and Supplement B completed when required?
Is reverification current and limited to employees who require it?
Were remote examination procedures used only when authorized?
Can every electronic form and associated audit trail be retrieved promptly?
Are required supporting document copies available?
Are retention and destruction dates accurate?
Were corrections transparent, dated, and attached to the original record?
Were employees given consistent notices and a reasonable opportunity to respond?
Were employees allowed to choose acceptable documents?
Were potential discrimination and knowing-employment issues escalated appropriately?
Were policies, training, system settings, and follow-up monitoring updated?

Frequently Asked Questions About Internal Form I-9 Audits

Is an employer required to conduct an internal Form I-9 audit?

Generally, no federal law requires every employer to conduct a voluntary self-audit. An audit may be required by a settlement, order, contract, prior ICE resolution, or other binding obligation. Even without a mandatory audit, the employer remains responsible for Form I-9 compliance.

How often should an employer conduct an internal I-9 audit?

There is no universal federal schedule. The appropriate frequency depends on workforce size, turnover, hiring volume, decentralization, prior error rates, electronic systems, mergers, remote hiring, and enforcement risk. Many employers use periodic reviews together with smaller quality-control checks of recent hires.

Can an employer correct Form I-9 errors before an ICE audit?

Yes. Properly documented corrections may improve compliance, stop a continuing paperwork violation, and support good-faith or mitigation arguments. A correction does not necessarily erase liability for a substantive violation that already occurred.

Should an employer redo every Form I-9 during a self-audit?

Usually not. Requiring all existing employees to complete new forms without a legitimate reason may create confusion and discrimination concerns. Deficient forms should ordinarily be corrected while preserving the originals. A broader replacement process may be appropriate when systemic defects undermine the integrity of the records, but it should be carefully planned.

Who may correct Section 1 of Form I-9?

The employee must correct Section 1. The employer should not change the employee’s personal information or attestation. If the employee is unavailable, the employer may attach a signed and dated explanation rather than making the correction for the employee.

May an employer ask for a specific document during an internal audit?

No. When documentation is required, the employee generally must be allowed to choose an acceptable List A document or a combination of acceptable List B and List C documents. Demanding a specific or additional document may create discrimination liability.

How long should an employee receive to address a deficiency?

The employer should provide a reasonable period based on the circumstances. There is no fixed deadline for every voluntary audit correction. The employer should consider the nature of the issue, document-processing times, and the employee’s efforts, and should apply extensions consistently.

Does an internal audit protect the employer from ICE fines?

No. Government guidance expressly states that penalties may still be imposed even if an internal audit was performed. A properly completed audit can nevertheless reduce future errors, preserve defenses, support mitigation, and demonstrate concrete compliance efforts.

Are electronic Form I-9 audit trails required?

Yes. Federal regulations require electronically retained Forms I-9 and supporting documentation requested during an inspection to be produced with associated audit trails. The electronic system must also satisfy requirements addressing integrity, security, documentation, quality assurance, retrieval, and electronic signatures.

Does a Social Security number mismatch prove that an employee is unauthorized?

No. A mismatch may result from a name change, typographical error, incomplete records, or other causes. It does not, by itself, establish immigration status or work authorization and should not be the sole basis for adverse action.

Can an employer use a third-party auditor or electronic vendor?

Yes, but outsourcing the work does not outsource liability. The employer remains responsible for violations committed by a third party and should verify the reviewer’s methodology and the system’s legal compliance.

How Myers Immigration Law Assists Employers With Form I-9 Compliance

Myers Immigration Law advises employers on internal Form I-9 audits and employment verification compliance, including:

Attorney-led internal audits and risk assessments;
Form I-9 correction and remediation plans;
Electronic Form I-9 system and audit-trail reviews;
Remote examination and E-Verify compliance;
Reverification and temporary work authorization issues;
Employee communication protocols;
Written policies and Form I-9 training;
Responses to ICE Form I-9 inspections;
Form I-9 fine and OCAHO defense; and
ICE worksite raid preparedness.

If your company is considering an internal audit or has identified a potential Form I-9 problem, please contact Matthew Myers or Myers Immigration Law at (210) 640-7424 or info@myersimmigration.com.

If ICE has already served a Notice of Inspection, subpoena, or Notice of Intent to Fine, preserve the records and obtain legal advice before making corrections or contacting the agency.

About Matthew Myers

Matthew Myers is Board Certified in Immigration and Nationality Law by the Texas Board of Legal Specialization. He advises employers nationwide on Form I-9 compliance, ICE inspections, worksite enforcement, E-Verify, employment-based immigration, and related government investigations.

Sources and Authorities

This page provides general information and is not legal advice. Form I-9 obligations and the appropriate response to a compliance issue depend on the facts, applicable law, form edition, and government guidance in effect at the relevant time. Please consult with an experienced business immigration attorney on your specific facts and circumstances before proceeding with any U.S. immigration strategy.