I-9 Compliance in 2027: Best Practices for Employment Verification
6/27/2026
Form I-9 is unusual among payroll compliance obligations: technical paperwork errors carry penalties even where every employee is authorized to work. There is no tax consequence, no employee harm, and no dispute about eligibility — just a per-violation penalty for a form completed incorrectly.
That makes I-9 compliance a documentation discipline rather than a judgment exercise, and it makes the self-audit the single highest-return activity in the area.
The Two Deadlines
Section 1 — the employee's attestation. Must be completed and signed by the employee no later than the first day of employment. Not before accepting a job offer, and not after the first day. An employee may complete it earlier once an offer has been accepted, but the first day is the outer limit.
Section 2 — the employer's review. The employer must examine documentation and complete Section 2 within three business days of the first day of employment. Where employment is for fewer than three business days, Section 2 must be completed by the end of the first day.
Both deadlines run from the first day of employment, meaning the day the employee begins work for pay. This is the same trigger as new hire reporting, which makes onboarding the natural home for both controls.
Our I-9 training on proper completion and E-Verify covers the form in detail, and The I-9 — Proper Completion And Verification For New Hires walks through it section by section.
The Rules That Generate Most Violations
The employee chooses which documents to present. This is the rule most often broken, and breaking it creates a discrimination claim rather than a paperwork violation. The employer may not specify which documents an employee must produce, may not request more or different documents than are required, and may not reject documents that reasonably appear genuine and relate to the person.
Presenting an employee with a preferred document list, or asking for a specific document "to make it easier," is document abuse.
One document from List A, or one from List B plus one from List C. Not both a List A document and additional documents. Requesting extra documentation after acceptable documents have been provided is over-documentation.
Documents must be examined physically or through an authorized alternative procedure. Employers enrolled in E-Verify and in good standing may be eligible to use an authorized alternative procedure permitting remote examination of documents, subject to specific requirements including retaining copies and conducting a live video interaction. Employers not eligible for that procedure must examine documents in person — a remote hire requires an authorized representative to do so on the employer's behalf.
Note the consequence of using an authorized representative: the employer remains liable for that person's errors. Using a notary, a manager at another location, or a family member of the employee are all permitted and all carry the employer's liability for what they do.
Copies of documents are optional unless required. Retaining copies is permitted, must be applied consistently to all employees to avoid a discrimination issue, and is required where an alternative remote procedure is used.
Reverification
Required when an employee's temporary employment authorization expires. The rules that get missed:
- Do not reverifyS. citizens or noncitizen nationals, ever
- Do not reverify based on the expiration of a List B identity document such as a driver's license — identity does not expire for I-9 purposes
- Do not reverify a Permanent Resident Card in most circumstances, even though the card itself has an expiration date
- Do reverify before the expiration of temporary work authorization, using Supplement B
- Track expiration dates and initiate reverification in advance, not on the expiration date
The Permanent Resident Card point is a frequent error in both directions. Reverifying a lawful permanent resident because their card expired is a discrimination risk; failing to reverify genuinely temporary authorization is a substantive violation.
Note also that certain categories carry automatic extensions of work authorization, sometimes lengthy, evidenced by a receipt notice rather than a new document. Treating an employee as unauthorized when an automatic extension applies is both a discrimination risk and an unnecessary termination.
Retention
Retain the Form I-9 for three years after the date of hire, or one year after employment ends, whichever is later.
Practical implications:
- The retention clock is not the general payroll retention period, and it produces different disposal dates
- Store I-9s separately from personnel files. An inspection is limited to the I-9 and related documents, and commingling them exposes the whole personnel file.
- Store them so they can be produced within three business days of an inspection notice
- Electronic storage is permitted subject to system requirements including audit trails and indexing
- Purge on schedule. Retaining I-9s beyond the period means retaining documents that can generate findings without any corresponding obligation to keep them.
That last point is genuinely useful. An expired retention obligation is an opportunity to reduce exposure, and departments that never purge accumulate decades of forms that can only produce findings.
See our payroll recordkeeping requirements page and Payroll Records: What To Keep, What To Toss.
The Self-Audit
Penalties for substantive and uncorrected technical violations are assessed per form, and they are adjusted for inflation annually. For an employer with hundreds of I-9s and a systemic completion error, the aggregate is material.
The self-audit is the remedy, and how you conduct it matters:
Audit the whole population or a neutral sample. Auditing selectively — by name, by apparent national origin, or by employee category — creates a discrimination problem worse than the paperwork errors you are fixing.
Correct, do not recreate. Draw a line through incorrect information, enter the correct information, and initial and date the change. Never backdate, never use correction fluid, and never replace a form with a clean one dated as of the original hire. A recreated form is worse than a flawed one, because it misrepresents when the work was done.
Only the appropriate party may correct their own section. The employee corrects Section 1; the employer corrects Section 2. An employer cannot fix an employee's attestation.
A missing form should be completed now, dated now. Do not date it as of the hire date. Attach a memo explaining when the omission was discovered and corrected.
Document the audit itself — scope, method, findings, corrections, and dates. Good-faith correction is relevant to penalty mitigation, and the record is what demonstrates it.
Our Are Your I-9s Audit Ready? session covers audit readiness, and Form I-9 Requirements covers completion standards.
Anti-Discrimination Constraints
The I-9 process is subject to anti-discrimination provisions that are enforced independently of the paperwork rules, and the penalties can exceed paperwork penalties substantially.
Prohibited practices include:
- Specifying which documents an employee must present
- Requesting more or different documents than required
- Rejecting documents that reasonably appear genuine
- Treating employees differently based on citizenship status or national origin
- Requiring employment authorization documents from some employees and not others
- Refusing to accept a document because of its expiration date where the document is currently valid
- Requiring a specific document type from a category
The tension employers feel is between thoroughness and non-discrimination, and it resolves in a specific way: be rigorous about the form and permissive about the documents. Complete every field correctly, meet every deadline, retain properly — and accept whatever acceptable documentation the employee chooses to present.
An I-9 Compliance Checklist
- [ ] Section 1 completed and signed by the employee no later than the first day of employment
- [ ] Section 2 completed within three business days of the first day
- [ ] Employee chose their own documents from the acceptable lists
- [ ] No extra or specific documents requested
- [ ] Correct combination — one List A, or one List B plus one List C
- [ ] Documents examined in person, or through an authorized alternative procedure if eligible
- [ ] Copies retained consistently, and retained where an alternative procedure requires it
- [ ] Expiration dates tracked for temporary authorization only
- [ ] No reverification of citizens, nationals, or List B identity documents
- [ ] Automatic extension categories recognized
- [ ] Forms stored separately from personnel files
- [ ] Retention: three years after hire or one year after separation, whichever is later
- [ ] Forms past retention purged on schedule
- [ ] Producible within three business days
- [ ] Periodic self-audit of the full population or a neutral sample, documented
- [ ] Corrections made properly — never backdated, never recreated
If an Inspection Notice Arrives
An I-9 inspection generally begins with a Notice of Inspection giving the employer three business days to produce the forms. That window is the reason storage and retrievability matter more than they appear.
Immediately:
- Note the date and the deadline. Three business days is short, and an extension is not guaranteed.
- Involve counsel before producing anything. This is not a situation to handle internally.
- Produce only what is requested. An inspection is limited to the Forms I-9 and specified related documents. Do not hand over personnel files — which is why I-9s should be stored separately in the first place.
- Stop any in-progress self-audit. Corrections made after receiving a notice look materially different from corrections made before it. Counsel should decide what, if anything, may still be corrected.
- Suspend routine document destruction, including scheduled purges of forms past retention.
- Make a complete copy of everything produced, and record what was produced and when.
What follows. Findings are typically communicated in a notice identifying technical or procedural failures — which may be correctable within a specified period — and substantive violations, which generally are not. Penalties are assessed per form and adjusted annually for inflation, with the total influenced by the violation rate, the employer's size, good faith, the seriousness of the violations, and whether unauthorized workers were involved.
Good faith is a real factor, and documented prior self-audits are the primary evidence of it. This is the concrete reason to conduct and document self-audits rather than treating them as optional hygiene: the file demonstrating you were auditing before anyone asked is what supports mitigation.
Frequently Asked Questions
When must Form I-9 be completed?
Section 1, the employee's attestation, must be completed and signed no later than the employee's first day of employment. Section 2, the employer's document review, must be completed within three business days of the first day — or by the end of the first day where employment will last fewer than three business days. Both deadlines run from the day the employee begins work for pay.
Can an employer tell an employee which documents to bring?
No. The employee chooses which acceptable documents to present, and specifying documents, requesting more or different documents than required, or rejecting documents that reasonably appear genuine all constitute document abuse — a discrimination violation enforced separately from the paperwork rules, with penalties that can exceed paperwork penalties. Provide the acceptable document lists and let the employee choose.
How long must employers keep I-9 forms?
Three years after the date of hire, or one year after employment ends, whichever is later. This is a different retention period from general payroll records, so it produces different disposal dates. Store I-9s separately from personnel files, since an inspection is limited to the I-9 and related documents and commingling exposes the entire file — and purge forms past retention, since keeping them can only generate findings.
When is I-9 reverification required?
Only when an employee's temporary employment authorization expires, using Supplement B. Never reverify U.S. citizens or noncitizen nationals, never reverify based on the expiration of a List B identity document such as a driver's license, and generally do not reverify a Permanent Resident Card despite its expiration date. Be aware that some categories carry automatic extensions of authorization evidenced by a receipt notice rather than a new document.
How do you correct a mistake on a completed I-9?
Draw a line through the incorrect information, enter the correct information, and initial and date the change. Never backdate, never use correction fluid, and never replace the form with a clean copy dated as of the original hire — a recreated form is worse than a flawed one because it misrepresents when the work was done. Only the employee may correct Section 1, and only the employer may correct Section 2.
What are the penalties for I-9 violations?
Penalties are assessed per form for substantive and uncorrected technical violations, and they are adjusted for inflation annually — so a systemic completion error across a large population aggregates materially even where every employee is authorized to work. Separate and often larger penalties apply to discriminatory practices in the verification process. Documented good-faith self-audits and corrections are relevant to penalty mitigation.
Going Deeper
Form I-9 editions, acceptable document lists, penalty amounts, and the availability of alternative remote examination procedures all change. Work from the current form and instructions, and involve immigration counsel before any adverse action based on work authorization.
