I-9 Defense and Audits

An audit typically begins when the government serves a Notice of Inspection. The employer must produce its Forms I-9, and often payroll records, employee lists, and business information, by a short deadline. The agency reviews the forms for missing, incomplete, or improperly completed sections and may issue notices identifying technical errors to correct, substantive violations, employees whose work authorization could not be confirmed, or proposed fines.

Note the production deadline immediately; employers are generally given at least three business days. Do not alter, backdate, or destroy any records. Gather the forms and supporting documents requested, and obtain legal review before producing them so that the response is organized, complete, and accompanied by any explanations the records require.

Yes, and a documented internal audit with lawful corrections is one of the best ways to reduce exposure. Corrections must follow government guidance: the employee corrects Section 1, the employer corrects Sections 2 and 3, changes are initialed and dated with the current date, and the original entry remains legible. Corrections must never be backdated or concealed.

A Form I-9 must be kept for every current employee hired after November 6, 1986. After employment ends, the form must be retained for three years from the date of hire or one year from the date of termination, whichever is later. Forms may be kept on paper, on microform, or electronically if the electronic system meets government standards.

Civil penalties can apply to paperwork violations, such as missing forms, blank or incomplete sections, and late completion, as well as to knowingly hiring or continuing to employ someone who is not authorized to work. Discriminatory verification practices, such as requesting specific documents based on citizenship or national origin, can also be penalized. Penalty amounts are set by regulation, adjusted periodically, and increase with the number of violations and any prior findings.

In most cases, yes. A privileged internal audit identifies problems on the employer’s own timeline, allows lawful corrections, and creates a record of good-faith compliance that can matter if the government later inspects. Audits are particularly valuable before an acquisition, after rapid hiring, or when a company has changed onboarding systems or staff.

Yes. The I-9 rules regulate the verification process itself, so paperwork violations can be penalized even when every employee was in fact authorized to work. A form that was never completed, completed late, or missing required information is a violation regardless of the employee’s actual status.