I-9 Employment Eligibility Verification Process for Employers

Form I-9 is one page, free to file, and produces fineable errors on most forms employers complete. Historical reviews of completed I-9s found that nearly three quarters carry at least one error serious enough to draw a penalty. The cost of the form itself is zero, but the cost of getting it wrong compounds across every payroll cycle, every location, and every hiring surge a business runs, since fines are assessed per form rather than per incident. Enforcement has also hardened: ICE has issued thousands of inspection notices in recent years, and its Homeland Security Investigations unit now uses analytics and automated tools to flag discrepancies, so a clerical slip that once went unnoticed can now trigger a full audit. The rest of this guide walks through the process step by step, from who must file to how long records must be kept, because the margin for improvisation on this form has narrowed considerably.

Who must complete Form I-9

Every employer must complete a Form I-9 for every employee hired after November 6, 1986, regardless of citizenship status. The obligation comes from the Immigration Reform and Control Act, and USCIS administers the form itself. Everyone else counts, including executives, part-time staff, seasonal hires, and non-citizens authorized to work.

The form exists to confirm two distinct facts about a new hire, identity and work authorization, and neither one substitutes for the other. A driver's license proves identity. A Social Security card proves work authorization. An employer who confirms only one has not completed the verification the law requires. Both the employer and the employee sign the form under penalty of law, attesting that what appears on it is accurate, a legal obligation that falls on both parties rather than a formality either side can treat loosely.

The current Form I-9: which edition is valid, what changed, and the July 31, 2026 deadline

Using the wrong edition of Form I-9 is itself a fineable violation, and a specific deadline now governs which version is acceptable. USCIS issued a revised form carrying a new edition date and a new expiration date, and employers running electronic I-9 systems must update those systems to reflect the change. The deadline for that update is July 31, 2026: any employer using software to manage I-9s must have that software generating the version bearing the 05/31/2027 expiration date by that date. A vendor's claim of compliance is not the same thing as the system actually producing the current edition, and confirming that directly is an employer's responsibility, not an assumption to make on a vendor's word.

The revised form carries several substantive changes beyond the expiration date. Section 1's fourth checkbox, which once read "A noncitizen authorized to work," now reads "An alien authorized to work," effective April 2, 2025, and April 3, 2025 for E-Verify users. List B document descriptions replaced the term "gender" with "sex," a change applied consistently across both the driver's license/state ID option and the federal, state, or local government ID card option. The instructions also carry updated statutory language and a revised DHS Privacy Notice. None of these changes is cosmetic from an enforcement standpoint: an outdated form version appears explicitly among the errors that trigger penalties, regardless of whether every other field on the form is filled out correctly.

Section 1: employee requirements and common employer errors

Section 1 belongs to the employee, and employers often fail to check that it was completed correctly or on time. Errors here rank among the most common sources of I-9 violations because employers treat this section as the new hire's sole responsibility and never check that it was completed correctly or on time. The employee must complete Section 1 no later than the first day of paid work, and the employer cannot ask for it to be filled out before the job offer has been formally accepted. Required fields include full legal name, address, date of birth, and a selection from one of four citizenship or immigration status categories.

The updated fourth checkbox, "An alien authorized to work," has been standard since April 2025, and any employee or employer still using the older "noncitizen" language creates a mismatch against E-Verify records that can appear as a discrepancy during a later review. A separate, frequently overlooked requirement applies whenever someone other than the employee fills out or translates Section 1: that preparer or translator must sign Supplement A, and leaving that signature block blank when assistance was actually provided is a documented violation on its own. Employers bear responsibility for catching a specific set of Section 1 failures before the form moves forward: missing or incomplete signatures, an employee who failed to complete the section by the first day of work, an incorrect or missing citizenship status selection, and a preparer or translator section left blank despite assistance. None of these errors originates with the employer directly, and all of them land on the employer's record during an audit.

Section 2: the employer's document review, what to record, and the three-business-day rule

Employers must personally examine original documents, record specific information accurately, and sign the form, and copies do not satisfy this requirement under any circumstance. The clock on this section runs three business days from the employee's start date, not three calendar days, a distinction that matters for anyone hiring close to a weekend or a federal holiday. For each document presented, the employer records the document title, the issuing authority, the document number, and the expiration date, and every one of those fields must be complete and accurate before the employer signs to attest that the documents appear genuine and belong to the person presenting them.

ICE revised its Form I-9 inspection fact sheet in March 2026 and reclassified more than ten error categories that had previously been correctable technical violations. Missing date of birth, an absent alien number, a missing signature date, incomplete Section 2 document data, and a missing first day of employment now count as substantive violations subject to immediate fines, with no ten-day cure window available to fix them after the fact. ICE also eliminated the longstanding rule that allowed a retained photocopy of a document to cure missing Section 2 data. Employers who relied on that cure window as a safety net, correcting errors after an audit flagged them, no longer have that option for this list of errors. The form has to be right the first time.

Acceptable documents: the three-list structure and the rules employers cannot bend

Acceptable documents are organized into three lists, each serving a distinct verification function, and the structure is not something an employer can rearrange to suit convenience. A List A document, such as a U.S. passport or a permanent resident card, establishes both identity and work authorization at once, and presenting one satisfies the entire I-9 verification requirement by itself. List B documents, like a driver's license or a state ID card, establish identity only. List C documents, like a Social Security card or a birth certificate, establish work authorization only. An employee who does not present a List A document must instead present one document from List B and one from List C, and both are required together, since neither list alone covers both facts the form demands.

The revised form makes a point of emphasizing that employees choose which acceptable documents to present, and employers may not demand a specific form of identification instead. This rule has teeth beyond the paperwork itself: making assumptions about which documents to request based on an employee's apparent national origin or immigration status is document abuse, a violation separate from and in addition to any I-9 completion error. An employer who over-verifies employees who appear foreign-born while accepting a casual glance at everyone else's documents is not being cautious, but is creating a discrimination exposure layered on top of the I-9 exposure. The January 2025 revision also updated List B document descriptions, replacing "gender" with "sex," including in the Card (List B option 2) description.

Remote I-9 verification: the alternative procedure, its requirements, and the new pitfalls it creates

This alternative procedure for document review is a legitimate path for employers with distributed hiring, but it comes with conditions that do not bend, and it is only open to employers enrolled in E-Verify and in good standing with that system. An employer outside E-Verify cannot use this procedure at all and must fall back to in-person document review regardless of how the hiring process is otherwise structured.

The procedure requires a live video review of the employee's documents; a static image or scan submitted electronically and reviewed later does not satisfy it. Employers using this alternative procedure must check the specific "alternative procedure" box in Section 2, and skipping that checkbox is a fineable error even when the rest of the review was conducted properly. Three conditions apply together and none is optional: enrollment in E-Verify, staff training on the procedure itself, and recordkeeping of high enough quality to withstand an audit. As distributed hiring has grown more common, so has reliance on this alternative procedure, and with it a set of errors specific to the pathway, from skipped checkboxes to video reviews that don't meet the live-review standard. E-Verify enrollment data show 58,138 employers enrolled in 2025, reflecting how much more common the alternative procedure has become, along with a new set of errors specific to this pathway.

Supplement B: reverification, rehires, and the expiration tracking obligation employers consistently miss

An I-9 completed correctly at the time of hire provides no lasting protection if the employee's work authorization carries an expiration date, because reverification is a continuing obligation that outlives the initial paperwork. Supplement B, formerly Section 3, is the tool for tracking employees whose authorization will expire and for documenting rehires. Reverification has to happen before the current document expires, not after the fact once the employer notices a lapse.

Rehire rules under Supplement B allow an employer to bring back a worker within three years of the original form's date without completing an entirely new Form I-9. Each reverification or rehire event gets its own row in Supplement B, preserving a clear, chronological audit trail of the employee's eligibility history rather than a single overwritten entry that obscures when each update occurred. This recordkeeping discipline matters because reverification tied to immigration status carries particular risk: changes to humanitarian programs such as Temporary Protected Status can strip an employee's work authorization on short notice, creating a reverification obligation that catches employers off guard because nothing about their internal process changed, even though the employee's legal status did. An employer running a technically clean I-9 process at the point of hire can still accumulate violations years later simply by failing to treat expiration dates as an active monitoring task rather than a one-time entry on a form.

I-9 retention rules

Retention for Form I-9 follows a rule distinct from most personnel recordkeeping: the form must be kept for either three years from the date of hire or one year from the date employment ends, whichever of those two dates falls later. An employee who works for the company for only a few months still generates a retention obligation stretching well past the termination date, since the three-year-from-hire clock and the one-year-from-termination clock run independently and the later of the two controls.

Retention applies to the complete form, including Section 1 and Section 2, and, where a preparer or translator assisted the employee, Supplement A, not just the original signed page from the hire date. Copies of documents reviewed during verification, where an employer chooses to retain them, must be kept alongside the form itself, since a retained photocopy no longer serves as a cure for missing Section 2 data but still forms part of the audit record an employer may need to produce. Employers facing an ICE inspection are typically given a short notice period before records must be produced. The retention obligation is only useful if records are organized well enough to retrieve quickly, not simply stored somewhere in a filing cabinet or a server without a system for finding them. Given the tightened enforcement environment and the elimination of several cure windows, retention discipline now carries the same weight as the accuracy of the form itself: a well-completed I-9 that cannot be produced promptly during an inspection offers little protection against the fines that follow.