Mastering Workforce Compliance: Essential Form I-9 Recordkeeping and ICE Audit Preparation for Employers

Published August 11, 2026

Form I-9 compliance is a mandatory responsibility for nearly every U.S. employer. Businesses must verify the identity and employment authorization of covered employees, maintain accurate records, and produce those records when requested by authorized federal agencies.

A failure in workforce compliance can result in civil penalties, operational disruption, and additional scrutiny from Immigration and Customs Enforcement (ICE). Employers should treat Form I-9 recordkeeping as an ongoing compliance function rather than a one-time onboarding task.

This guide explains the essential recordkeeping requirements, internal audit practices, electronic storage standards, and procedures for responding to an ICE audit.

Form I-9 Compliance Requirements for Employers

The Immigration Reform and Control Act requires employers to verify the identity and employment authorization of individuals hired in the United States after November 6, 1986. Form I-9, Employment Eligibility Verification, documents that process.

Employers must:

• Complete Form I-9 for each covered employee.
• Ensure the employee completes Section 1 on time.
• Complete the employer review and verification section within the required deadline.
• Retain the form for the required period.
• Make the form available for inspection by authorized government officials.
• Apply verification procedures consistently and without discrimination.

Employers must use the current Form I-9 provided by U.S. Citizenship and Immigration Services. They must not require employees to present specific documents or additional documents beyond those permitted by the form and its instructions.

The Department of Justice’s Immigrant and Employee Rights Section enforces federal prohibitions against citizenship-status discrimination, national-origin discrimination, unfair documentary practices, and retaliation. Employers should review the DOJ’s Form I-9 and E-Verify resources when designing verification procedures.

How Long Employers Must Retain Form I-9

Employers must retain each Form I-9 for the longer of:

1. Three years after the employee’s first day of employment; or
2. One year after the date employment ends.

The later date controls. Employers should calculate the retention date separately for every employee.

For example:

• An employee hired on January 1, 2026, and terminated on June 1, 2026, generally requires retention through January 1, 2029.
• An employee hired on January 1, 2020, and terminated on June 1, 2026, generally requires retention through June 1, 2027.
• A current employee’s Form I-9 must remain available throughout employment and until the applicable post-termination retention period has expired.

USCIS provides a retention and storage resource to help employers calculate the applicable date.

Employers should securely destroy forms after the retention period ends. Keeping obsolete forms indefinitely increases privacy exposure and creates unnecessary records that may be reviewed during an audit.

Best Practices for I-9 Recordkeeping

A reliable recordkeeping program should allow an employer to locate, review, protect, and produce every required form without delay.

Maintain a Separate I-9 File System

USCIS recommends storing Forms I-9 separately from general personnel files. Separate storage provides several advantages:

• It limits access to sensitive identity and employment authorization information.
• It simplifies production during an ICE audit.
• It reduces the risk of disclosing unrelated personnel information.
• It allows HR personnel to conduct targeted reviews.

Employers may use paper, electronic, or hybrid storage systems. Regardless of the format, the records must remain complete, legible, secure, and accessible.

Use a Retention Tracking Process

Employers should maintain a tracking system that records:

• Employee name and identification information.
• First day of employment.
• Employment termination date, if applicable.
• Form I-9 retention deadline.
• Date of destruction, when the retention period expires.

Automated reminders can help prevent premature destruction. However, software does not replace legal review. The employer remains responsible for confirming that the retention calculation is correct.

Retain Document Copies Consistently

Copies of documents presented for Form I-9 are generally optional unless a specific procedure requires them. If an employer chooses to copy or scan documents, it must retain those copies with the corresponding Form I-9 or employee record.

Employers must apply the copying practice consistently. Selectively copying documents for certain employees can create discrimination concerns.

Employers using an authorized remote examination procedure must follow the applicable requirements, including retaining clear copies of documents examined when required. Employers should confirm current requirements through USCIS Form I-9 Central.

Electronic Form I-9 Storage Standards

Electronic storage is permitted, but an electronic I-9 system must satisfy federal standards. Employers should not assume that every HR platform automatically meets those requirements.

Under USCIS guidance, an electronic system must include:

• Controls that protect system integrity, accuracy, and reliability.
• Safeguards against unauthorized or accidental creation, alteration, deletion, or deterioration of records.
• An indexing process that allows individual records to be located promptly.
• The ability to produce legible and readable paper copies.
• A quality assurance process that periodically evaluates the system.
• A secure audit trail documenting changes to electronic records.

The audit trail should identify:

• The date of access or modification.
• The individual who accessed the record.
• The action taken.

Employers must also maintain documentation describing the business processes used to create, modify, store, retrieve, and authenticate electronic Forms I-9. USCIS provides detailed guidance in the Handbook for Employers, Form M-274.

An electronic system that cannot produce legible records, preserve an audit trail, or prevent unauthorized modification can create violations across multiple employee files.

Conducting an Internal I-9 Audit

An internal audit allows an employer to identify deficiencies before receiving an ICE audit notice. It should be conducted under a written and consistent process.

A practical internal audit includes the following steps:

1. Define the scope. Determine whether the review covers all current employees, selected locations, a particular hiring period, or a specific business unit.
2. Prepare an employee roster. Use payroll or HRIS records to identify current employees and former employees whose forms remain within the retention period.
3. Reconcile the roster against the I-9 files. Identify missing forms, duplicate records, and forms retained for individuals outside the required period.
4. Review each form. Check Section 1, the employer verification section, applicable supplements, signatures, dates, document information, and required reverification entries.
5. Review timeliness. Confirm that the employee and employer completed their respective sections within the required deadlines.
6. Document findings. Maintain an audit memorandum identifying the review dates, personnel involved, scope, deficiencies, and corrective actions.
7. Implement systemic corrections. Update onboarding procedures, training, quality controls, and retention processes based on recurring errors.

Employers should provide employees with appropriate notice when an internal audit requires employee action. The review must not single out individuals based on citizenship status, national origin, accent, appearance, or perceived immigration status.

Correcting Form I-9 Errors

Corrections must preserve the original information and demonstrate what was changed. Employers should generally:

• Draw a single line through incorrect information.
• Enter the correct information clearly.
• Initial and date the correction.
• Avoid white-out, erasure, concealment, or backdating.
• Have the employee correct Section 1 errors.
• Have an authorized employer representative correct employer sections.
• Attach a dated explanation when the original preparer or representative is unavailable.

If an employer discovers that a current employee has no Form I-9, the employer should not backdate a new form. The employee and employer should complete the form using the applicable current dates, and the employer should attach a memorandum explaining the circumstances.

Because correction procedures can affect potential liability, employers should consult a business immigration attorney before undertaking a large-scale audit.

Preparing for an ICE Audit

An ICE audit begins when the employer receives a Notice of Inspection (NOI). Under ICE guidance, the employer generally receives at least three business days to produce the requested Forms I-9.

ICE may also request supporting records, including:

• Payroll records.
• Lists of current and terminated employees.
• Articles of incorporation.
• Business licenses.
• Other records identified in the NOI.

Employers should establish an internal response protocol before receiving an NOI. That protocol should identify:

• The person responsible for receiving government notices.
• The company’s outside immigration counsel.
• The records custodian.
• The secure location for collecting responsive records.
• The process for preserving records and communications.
• The method for confirming the production deadline.

Upon receiving an NOI, employers should:

1. Record the date, time, and method of service.
2. Calendar the three-business-day production deadline.
3. Notify executive leadership, HR, and legal counsel.
4. Preserve relevant records.
5. Collect Forms I-9 within the retention period.
6. Gather supporting documents specifically requested by ICE.
7. Review the production for completeness and legibility.
8. Submit the records through the required method and retain proof of production.

Employers should not alter or destroy Forms I-9 after receiving an NOI. Any correction strategy must be reviewed with counsel.

Possible ICE Audit Outcomes and Penalties

ICE may issue several types of notices after reviewing the records, including:

• A compliance letter.
• A notice of technical or procedural failures.
• A notice of discrepancies.
• A notice of suspect documents.
• A warning notice.
• A Notice of Intent to Fine.

ICE identifies substantive violations such as failure to prepare or present a Form I-9, untimely completion, missing required information, and failure to meet electronic recordkeeping standards. ICE may also assess penalties for uncorrected technical or procedural failures.

Civil penalty amounts are subject to statutory and annual inflation adjustments. The amount may depend on the violation percentage, business size, good-faith compliance, seriousness of the violations, involvement of unauthorized workers, and prior violation history. Employers should consult the current ICE Form I-9 inspection guidance and current Federal Register notices for applicable penalty ranges.

If ICE issues a Notice of Intent to Fine, the employer generally has 30 calendar days to request a hearing before the Office of the Chief Administrative Hearing Officer. Failure to respond within the deadline can result in a final order.

Do not ignore an NOI, Notice of Discrepancies, Notice of Suspect Documents, or Notice of Intent to Fine. Each notice carries specific procedural requirements and deadlines.

Strengthen Workforce Compliance Before an Inspection

Employers should review their Form I-9 program at least annually and after significant changes to:

• HR personnel.
• Payroll or HRIS systems.
• Corporate structure.
• Work locations.
• Remote onboarding procedures.
• E-Verify participation.
• Federal or state employment verification requirements.

Blasingame Law LLC provides business immigration solutions, internal I-9 audits, workforce compliance guidance, HR training, and support during government inspections. Our firm combines more than thirty years of corporate and private-practice immigration experience with a personalized approach to employer compliance.

If your company needs an I-9 audit, retention review, electronic system assessment, or immediate assistance responding to an ICE notice, contact Blasingame Law LLC or schedule a consultation with an experienced business immigration attorney. A proactive review can identify weaknesses before they become costly compliance violations.

This article provides general information as of August 11, 2026. It does not constitute legal advice. Employers should obtain advice regarding their specific workforce, records, locations, and compliance history.