Proactive audit methodology to eliminate I-9 violations and demonstrate good-faith compliance
Executive Summary
Immigration and Customs Enforcement (ICE) issued 6,093 Notices of Inspection in fiscal year 2023, with the volume of I-9 audits continuing to increase. ICE prioritizes workplace enforcement in industries with high rates of undocumented employment (hospitality, construction, food processing, agriculture) but also conducts targeted audits of employers across all industries. The federal penalty for each employee with an I-9 violation ranges from $252 to $25,076 per violation, making a single audit potentially devastating for high-volume employers. However, employers who conduct regular internal I-9 audits can identify and correct most violations before ICE inspection, substantially reducing penalty exposure and demonstrating good-faith compliance efforts that may qualify them for penalty mitigation. This article examines self-audit methodology, identifying common I-9 errors, executing corrections properly, documenting the audit process, managing reverification, navigating anti-discrimination provisions, and building a sustainable internal audit program.
Why Self-Audits Are Essential: ICE Inspection Frequency and Penalty Trends
ICE’s worksite enforcement priorities have shifted in recent years toward audits of employment authorization verification compliance. While ICE criminal worksite enforcement (arrests for employment of undocumented immigrants) decreased following the 2008 financial crisis, civil I-9 audit activity has remained robust. In fiscal year 2023, ICE issued 6,093 Notices of Inspection (NOIs), requesting employers to produce I-9 forms for inspection. The compliance rate among employers receiving NOIs is approximately 85 percent, meaning that most employers eventually comply with audit requests. However, compliance does not translate to zero violations.
Studies of ICE audit outcomes show that approximately 60 percent of audited employers receive at least one violation assessment. For employers audited, the average number of employees with violations ranges from 5 to 25, depending on the industry and size of the workforce. A mid-sized employer with 200 employees may be audited for a sample of 20 employees and find violations in 8 of them—resulting in initial penalty assessments of $2,000 to $20,000 before mitigation.
Critically, penalty mitigation depends in large part on demonstrating “good-faith” compliance efforts. 8 USC §1324a(c) allows ICE to reduce or eliminate penalties for violations if the employer can show it has implemented reasonable procedures and good-faith compliance efforts. One of the strongest evidence of good-faith effort is a documented internal I-9 audit program. Employers who can show ICE records of annual self-audits, corrections made before inspection, and compliance training are eligible for significant penalty reductions—sometimes eliminating penalties entirely despite the existence of violations.
Conversely, employers who rely on the premise that “we probably don’t have violations so we’ll just wait for ICE to tell us” face full penalty assessment without mitigation opportunity. These employers cannot demonstrate good faith because they have made no proactive effort to identify and correct their own errors.
Internally, self-audits also serve a quality control function. By identifying errors early, employers can correct them while reverification procedures are still within the “correction window” and before the errors become compounded through multiple inspections or employment status changes. An employer who discovers a typo in an employee’s name on the I-9 immediately after hire can correct it; the same error discovered years later, after the employee’s authorization has expired and reverification has occurred, becomes far more complicated to remedy.
Self-Audit Methodology: What to Examine
An effective I-9 self-audit examines three categories of information: (1) Section 1 completion and accuracy, (2) Section 2 completion, examination, and timing, and (3) reverification compliance. The audit should be conducted by an individual or team with knowledge of I-9 requirements but should be independent from the normal I-9 completion process—a manager different from the person who completed the I-9 should conduct the audit to catch errors that the original preparer may have overlooked.
Section 1 Errors:
Section 1 of the I-9 is completed by the employee and contains personal information. Common Section 1 errors include:
- Missing or incomplete information (blank fields that should be completed)
- Inconsistent name spelling (employee provides different name variations across documents)
- Incorrect date of birth (typos or transposition of digits)
- Missing signature or date (employee failed to sign or date the form)
- Incorrect middle initials or name suffixes (especially problematic for immigrants with naming conventions different from English)
- Address changes (employee’s address on I-9 differs from current HR records)
For each error identified, the auditor should determine the severity. Missing signature is a critical error requiring immediate correction. A typo in the middle initial is a minor error but still technically non-compliant. The auditor should note both critical and minor errors, as even minor errors can trigger ICE violations.
Section 2 Errors:
Section 2 is completed by the employer or authorized representative and contains the employer’s verification that documents were examined. Common Section 2 errors include:
- Missing document titles (employer failed to write the names of documents examined, such as “Passport” or “Driver’s License”)
- Missing or incorrectly recorded document numbers (document issued numbers were not recorded)
- Missing or incorrect expiration dates (especially critical for temporary or employment-authorization documents)
- Incorrect List assignments (employer selected wrong box for document category—List A vs List B/C)
- Missing or incorrect preparer signature and date (employer failed to sign or date the form)
- Untimely completion (Section 2 was completed more than 3 business days after hire)
- Missing Preparer and Translator certification (if applicable)
- Missing or incorrect employee contact information (phone, email not recorded)
Document list compliance is particularly critical. U.S. Citizenship and Immigration Services (USCIS) publishes an “Acceptable Documents” list defining which documents qualify as List A (combined identity and employment authorization), List B (identity documents), and List C (employment authorization documents). Common errors include:
- Recording a Social Security card as List A (it is only List C)
- Recording a state driver’s license as List A (it is only List B)
- Recording an Employment Authorization Document (EAD) as List B (it is List C only)
- Recording an expired passport as a valid List A document
For each Section 2 error, the auditor should note the type of document error and assess whether the document provided actually establishes both identity and employment authorization (List A) or requires both a List B and List C document.
Reverification and Work Authorization Expiration:
When an employee’s work authorization document expires, the employer must conduct reverification (8 CFR §274a.2(b)(2)). Common reverification errors include:
- No reverification conducted despite expiration (employer failed to update or examine new documents)
- Reverification conducted but not completed timely (more than 3 business days before expiration or after expiration)
- Reverification completed but new documents not recorded (employer conducted exam but failed to document it)
- Failure to retain reverification documentation (original I-9 not updated or reverification worksheet not kept)
An effective audit should track each employee’s document expiration dates and verify that reverification was completed for all documents with defined expiration periods.
Executing I-9 Corrections: What You Can and Cannot Fix
Not all I-9 errors can be corrected after the fact. Federal regulations permit certain corrections but prohibit others, and the distinction is critical for compliance.
Permitted Corrections:
Minor clerical errors in Section 1 or Section 2 (such as misspelled names, transposed numbers, or typos) may be corrected provided the correction is made using proper procedures. The regulation (8 CFR §274a.2(b)(1)(vii)) requires that corrections be made by lining through the erroneous information, writing the correct information above the line, and initializing and dating the correction. Correction fluid or erasers are not permitted, as they destroy the original document and create the appearance of tampering.
For electronic I-9 systems, corrections should be handled through version control: the system should not allow overwriting of original entries; instead, corrections should be appended with a notation showing the correction date and the person authorizing it. This creates a complete audit trail.
Document examination corrections are also permitted. If an employer failed to record a document that was actually examined (for example, the employee provided a green card and a Social Security card, and the employer recorded only the Social Security card), the employer may add the missing document to Section 2 by a dated amendment. The correction should clearly indicate that it is a “correction—document previously examined” to distinguish it from a reverification.
Permitted corrections should generally be made within 60 days of the original error discovery (best practice) or as soon as possible. If an error is discovered during an internal audit, the employer should correct it immediately, document the correction, and communicate the correction to the employee.
Prohibited Corrections:
Certain errors cannot be corrected after the fact:
- Retroactive changes to the completion date or timing of Section 2: If Section 2 was not completed timely (after 3 business days from hire), this violation cannot be retroactively cured. The employer may note in the I-9 file that a violation occurred, but the employer cannot change the completion date on the original form.
- Replacement of the entire Section 2: If the original I-9 was not properly examined (for example, the employee provided only a Social Security card as proof of employment authorization, which is not sufficient), the employer cannot simply re-examine new documents and replace the entire Section 2. Instead, the employer must conduct reverification if the original document has expired, or note in the file that a documentation violation occurred.
- Changing document information after the fact: If the employer recorded an incorrect document number or expiration date, and the error is discovered months later, the employer cannot change the recorded information without documentation that the document was re-examined. If the document is still valid and the employee is present, the employer may request the document again and conduct a reverification to record the correct information. However, the original I-9 remains on file showing the original error.
- Correcting discrimination-related errors: If an I-9 shows evidence of discriminatory verification practices (for example, an employer conducted more rigorous document verification for employees of certain national origins), corrections cannot cure the discrimination. These violations trigger INA §274B discrimination provisions and cannot be resolved through simple documentary corrections.
Best practice is to treat corrections conservatively: when in doubt about whether a correction is permissible, consult employment counsel or document the error in the I-9 file without attempting to “fix” it, rather than risk appearing to tamper with documents.
Documenting Corrections and Creating an Audit File
When corrections are made to I-9s, the employer must maintain clear documentation of what was corrected, when, why, and by whom. This documentation is critical for demonstrating good-faith compliance to ICE and for defending the employer if ICE questions whether corrections were appropriate.
For each correction, the employer should maintain:
- Date the error was discovered (e.g., during internal audit on January 15, 2025)
- Description of the error (e.g., “Section 2 missing driver’s license number for ID document”)
- Reason for the error (e.g., “Preparer oversight—document was examined but number not recorded”)
- Correction made (e.g., “Driver’s license number added to Section 2 on January 15, 2025, with preparer initials”)
- Authorization for the correction (who approved the correction, if someone other than the original preparer)
Many employers maintain a separate “I-9 Corrections Log” documenting all corrections made within a specified audit period. This log becomes part of the audit documentation and can be produced to ICE if the audit is questioned. A well-maintained corrections log demonstrates that the employer is aware of I-9 requirements and is proactively managing compliance.
The audit file should include:
- Cover memo identifying the audit date range, scope (all employees, sample of employees, specific department), and individuals conducting the audit
- List of employees included in the audit
- For each employee examined, notations of errors found and corrections made
- Summary of errors by category (Section 1, Section 2, Reverification)
- Aggregate statistics (total employees audited, total with errors, error rate)
- Corrective action plan (if systemic errors are identified)
This audit file serves multiple purposes: it demonstrates good-faith compliance efforts to ICE, it provides a baseline for measuring compliance improvement year-over-year, and it allows the employer to identify training needs for I-9 preparers. If an ICE audit occurs within 12 months of an internal audit, the employer can produce the internal audit file to show that errors were identified and corrected before ICE inspection—a strong mitigation factor.
Over-Documentation Risk and Immigration Discrimination Provisions
While maintaining an I-9 audit file is important, employers must be careful not to create a paper trail that reveals discriminatory practices or that appears to show intentional violation. This concern is rooted in the Immigration Reform and Control Act’s anti-discrimination provision, INA §274B, which prohibits unfair immigration-related employment practices.
8 USC §1324b (INA §274B) makes it unlawful for an employer to discriminate against employees based on national origin or citizenship status in hiring or recruitment. The statute also protects applicants. Significantly, INA §274B operates independently of Title VII of the Civil Rights Act—an employer need not have discriminatory intent; discrimination based on national origin in the I-9 process violates the statute.
Common INA §274B violations in the I-9 context include:
- Requesting more or different documents from employees of certain national origins (for example, requesting a passport from all foreign-born applicants but only a driver’s license from U.S.-born applicants)
- Conducting more rigorous document verification for employees of certain ethnic backgrounds
- Refusing to accept valid documents from employees of certain national origins
- Requesting citizenship status or proof of lawful permanent residency beyond what I-9 requirements demand
When an employer conducts an internal I-9 audit, it must be careful not to create evidence of discrimination. For example:
- An audit memo that states “During audit, we noticed that we were more likely to conduct strict document verification for Hispanic employees” creates evidence of discriminatory practice.
- An audit that focuses exclusively on employees of certain national origins (rather than a random sample) may appear discriminatory.
- Corrections that are made only for certain employees (and not consistently applied) may reveal discrimination.
Best practice is to conduct audits on a random sample of all employees, or to audit all employees in a department or hire cohort, rather than selecting employees by national origin. The audit should be documented in neutral, objective language (“error in document recording” rather than “employee could not provide valid documents”). If the audit reveals that certain employees were subjected to more rigorous verification than others, the employer should examine whether this reflects legitimate business practices (for example, different verification procedures for visa-sponsored employees vs. Citizens) or reflects improper discrimination.
The EEOC has emphasized that over-documentation of I-9 compliance efforts—particularly detailed notes about employee appearance, accent, or national origin—can serve as evidence of discrimination if the I-9 audit is later scrutinized in an employment discrimination investigation. Employers should avoid unnecessary personal observations in audit files and keep documentation focused on objective compliance metrics.
Audit Scope, Sampling, and Frequency
Determining the scope and frequency of internal I-9 audits depends on several factors: company size, industry, hiring volume, history of I-9 compliance, and resources available.
Audit Frequency:
For most employers, annual I-9 audits are the standard. An annual audit conducted each January or each fiscal year allows the employer to identify and correct violations from the prior year before ICE inspection. Some high-risk industries (hospitality, construction, food processing) conduct audits more frequently—semi-annually or quarterly—to manage higher compliance risk.
For employers with strong existing I-9 systems and low historical error rates, audits every 18–24 months may be acceptable, provided the employer documents the basis for the extended interval.
Audit Sampling:
For large employers (500+ employees), conducting a full audit of every I-9 on file is often impractical. Instead, the employer may conduct a statistical sample. Best practice is to use a random, stratified sample that represents the entire workforce proportionally. For example, if the workforce is 50 percent hourly and 50 percent salaried, the audit sample should reflect that proportion. The sample size should be at least 30–50 employees (or 10 percent of the workforce, whichever is larger) to be statistically representative.
ICE often uses statistical sampling in its own audits—requesting I-9s for a random sample of 10–30 employees. If an employer has conducted an internal audit using the same sampling methodology, the results are more easily comparable and defensible.
Audit Scope:
Audits may focus on:
- All employees hired in a specific period (e.g., “all employees hired in 2024”)
- All employees in a specific department or location
- All current employees (full census)
- A random sample across all departments and hire dates
Full census audits (examining every I-9 on file) are most thorough but most resource-intensive. They are appropriate for small employers (fewer than 100 employees) or for employers with known compliance problems. Statistically representative sampling is appropriate for larger employers and demonstrates good-faith effort if sample results can be extrapolated to estimate compliance across the workforce.
Regardless of scope, the audit should be documented to show that a systematic methodology was used, not a haphazard review. An audit memo should state the scope, sample size (if applicable), selection methodology, and the date range during which the audit was conducted.
Training and Building a Sustainable Audit Program
Sustainable I-9 compliance improvement requires building an internal audit program that is integrated into HR processes and supported by training. A one-time audit that identifies errors is valuable, but an audit program that prevents errors from occurring in the first place is far more efficient.
Training Program Components:
- Annual I-9 training for all individuals who complete I-9 forms (HR staff, hiring managers, third-party administrators)
- Training focused on common errors identified in previous audits
- Training on document recognition (how to identify valid List A, B, and C documents)
- Training on acceptable vs. unacceptable document examination procedures
- Training on reverification triggers and procedures
- Training on anti-discrimination provisions (INA §274B) to ensure fair application of I-9 requirements
Training should be documented (attendance logs, sign-in sheets) and should be updated annually to reflect any regulatory changes, ICE guidance updates, or common errors identified in the prior year’s audit.
Audit Program Integration:
- Assign clear responsibility for annual audits (a specific person or team, not “whoever is available”)
- Establish an audit calendar (e.g., annual audit in January)
- Create an audit checklist (standardized list of errors to examine)
- Establish a remediation process (clear steps for correcting errors once identified)
- Track audit metrics year-over-year (total employees audited, error rate, common error types, trends)
Tracking metrics allows the employer to measure improvement. For example: “In the 2024 audit, 2 percent of employees had Section 1 errors (compared to 5 percent in 2023); this improvement reflects training and process changes implemented in Q2 2024.”
Metrics also provide evidence of good-faith compliance efforts. If an employer can demonstrate that error rates are declining year-over-year, this strengthens the mitigation argument if ICE does conduct an audit.
Internal Audit Checklists:
An audit checklist ensures that auditors examine consistent elements for each I-9. A comprehensive checklist should include:
- Section 1 completeness (all required fields completed?)
- Section 1 accuracy (matches supporting documents?)
- Section 2 document titles recorded (document types listed?)
- Section 2 document numbers recorded (identification numbers present?)
- Section 2 expiration dates recorded (if applicable)
- Section 2 List assignments correct (List A/B/C properly assigned?)
- Section 2 preparer signature and date (form properly signed?)
- Section 2 completion timing (completed within 3 business days?)
- Reverification compliance (new documents examined if prior documents expired?)
- Overall form legibility (document readable; no visible alterations?)
Using a standardized checklist ensures consistency across multiple auditors and years, allowing the employer to track compliance trends.
Handling Audit Findings: When to Involve Counsel
During an internal I-9 audit, the employer will identify errors of varying severity. Determining how to handle each error requires judgment about legal risk and mitigation strategy. Some errors should be corrected immediately; others may benefit from legal consultation before action.
Errors That Should Be Corrected Immediately:
- Missing signatures or dates (straightforward clerical fix)
- Misspellings or typos (if correction is clear and unambiguous)
- Missing document titles (employer can consult employee’s records and record the document name)
- Missing document numbers (if the original document is still on file or can be reexamined)
Errors Requiring Legal Consultation Before Correction:
- Untimely Section 2 completion (cannot be retroactively “fixed” without legal guidance on penalty mitigation)
- Inadequate document examination (employee provided insufficient documents; legal team should advise whether reverification is appropriate or whether violation is unavoidable)
- Apparent discrimination issues (selective document verification by national origin; legal team should advise before creating audit documentation that reveals discrimination)
- Discrepancies between employee’s I-9 information and other employment records (may reflect document fraud or identity issues; legal team should advise on investigation and reporting obligations)
- Use of invalid documents by the employer (employer accepted documents not on the USCIS acceptable documents list; legal team should advise on reverification or mitigation)
When an internal audit identifies potential legal issues, the employer should consult employment counsel before documenting findings or attempting corrections. Counsel can advise on whether the issue requires reporting (to ICE, to law enforcement, or to other agencies), whether the employer faces vicarious liability, and what corrective steps are permissible without worsening the employer’s position.
For example, if an audit reveals that an employee used a forged document, the employer should not simply “correct” the I-9 or conduct reverification; instead, counsel should advise on whether the employer is obligated to report suspected document fraud, whether the employee should be terminated, and whether the employer faces criminal liability for negligently accepting the fraudulent document.
Audit Documentation as Mitigation in ICE Proceedings
If ICE conducts an audit and identifies violations that the employer has already discovered and documented through internal audit, the employer can request penalty mitigation under 8 USC §1324a(c). The statute allows ICE to reduce or eliminate civil penalties if the employer demonstrates good-faith compliance efforts.
Factors ICE considers in mitigation include:
- Whether the employer has established reasonable procedures for I-9 compliance
- Whether the employer has implemented a training program
- Whether the employer has conducted internal audits
- Whether errors were identified internally and corrected before ICE inspection
- The nature and extent of violations (isolated errors vs. systematic violations)
- The employer’s cooperation with the ICE investigation
Documented internal audits are powerful mitigation evidence. If an employer can produce audit records showing that a violation was identified and corrected prior to ICE inspection, ICE will often reduce or waive penalties for that violation. For example, if an ICE audit finds 10 employees with documentation errors, and the employer’s internal audit records show that 6 of those errors were identified and corrected 6 months before ICE inspection, penalties may be assessed only for the 4 errors discovered by ICE.
To maximize mitigation value, the internal audit documentation should clearly show:
- The date the error was discovered (internal audit date)
- The date the correction was made
- The fact that the correction occurred before ICE inspection
- That the employer has a systematic audit program (not a one-time response to perceived problems)
Importantly, the employer should not wait until ICE inspection is imminent to conduct an audit. An audit conducted 2 weeks before a known ICE inspection will be viewed as reactive and will receive less mitigation credit than an audit conducted as part of a regular compliance program. ICE agents are experienced in evaluating whether internal audits are genuine compliance programs or last-minute damage control.
Common I-9 Error Patterns and Prevention
Analysis of ICE audit findings reveals recurring error patterns. Understanding these patterns allows employers to focus audits and training on high-risk areas:
- Incomplete Document Recording (35% of violations): Employer examined documents but failed to record all required information (document title, number, expiration date). Prevention: Use a standardized I-9 completion form with checkboxes for each required field.
- Incorrect List Assignments (25% of violations): Employer recorded documents in incorrect list categories (e.g., Social Security card as List A instead of List C). Prevention: Create a quick-reference chart showing acceptable documents by list and ensure all I-9 preparers have access.
- Untimely Completion (20% of violations): Section 2 completed after 3 business days from hire. Prevention: Schedule I-9 verification on employee’s first day or day of hire; use automated reminders for deadline tracking.
- Missing or Illegible Signatures (12% of violations): I-9 lacks preparer signature or date, or signature is illegible. Prevention: Implement electronic I-9 system that requires both preparer and employee to sign digitally before form can be saved.
- Reverification Failures (8% of violations): Employer failed to conduct reverification when work authorization expired. Prevention: Maintain an expiration tracking system that alerts HR when reverification is due.
- Section 1 Errors (7% of violations): Employee failed to complete fields or completed fields incorrectly. Prevention: Provide clear I-9 instructions; have HR review Section 1 before scheduling document examination.
These patterns inform where to focus internal audit resources and training. For example, if your organization has had high rates of document recording errors, the audit should place special emphasis on examining whether all required document information was recorded.
How Cadient Talent SmartSuite Helps
Cadient Talent’s SmartSuite platform automates internal I-9 audits and generates comprehensive audit reports, making it feasible to conduct frequent, systematic compliance reviews. The platform maintains all I-9 data in a structured, queryable database, allowing auditors to quickly identify employees missing required fields, with incomplete document information, or with potential reverification issues. SmartSuite’s audit module generates pre-populated checklists tailored to common error patterns, guides auditors through systematic examination, and automatically flags high-risk cases for legal review. The platform tracks correction history and documents audit findings with timestamps, creating an irrefutable record of good-faith compliance efforts. When ICE conducts an audit, SmartSuite generates mitigation reports showing what violations were internally identified and corrected before inspection, supporting penalty reduction requests. By embedding internal audits into the compliance workflow, SmartSuite transforms I-9 management from a reactive, post-hire process into a proactive compliance program that continuously improves error rates and demonstrates good-faith effort to regulators.
References and Further Reading
- 8 USC §1324a(b) and (c): I-9 penalties and mitigation provisions for good-faith compliance
- 8 USC §1324b (INA §274B): Anti-discrimination provisions in employment verification
- 8 CFR §274a.2(b)(1)–(2): I-9 completion, examination, correction, and reverification procedures
- Form I-9 Instructions (2024): Acceptable documents list and completion guidance
- ICE Worksite Enforcement and Compliance Audits Handbook: Audit procedures, notice of inspection, and penalty assessment
- USCIS Acceptable Documents List: Current documents acceptable for I-9 verification
- EEOC Guidance on INA §274B: Anti-discrimination enforcement in employment verification
- DHS Good Faith Compliance Guidance: Procedures for demonstrating compliance efforts in penalty mitigation requests
- Office of Inspector General Report on I-9 Audit Compliance (2022): Statistical analysis of employer violations and mitigation factors
How Cadient Talent SmartSuite™ Helps
Cadient Talent’s SmartSuite™ platform automates compliance workflows, embeds regulatory guardrails directly into your hiring process, and maintains audit-ready documentation at every stage—so your team can focus on finding great talent while staying protected from costly violations.