Section A: I-9 Audit Checklist Overview
An I-9 audit checklist provides employers with a framework for reviewing Form I-9 records, identifying compliance gaps and assessing potential exposure before a government inspection or investigation. Regular audits can help organizations identify missing forms, incomplete sections, retention issues and other deficiencies that may lead to penalties if discovered during an enforcement action.
Employers are responsible for ensuring Form I-9 is completed correctly for every individual hired after November 6, 1986, who is required to verify employment authorization in the United States. Even where HR processes are well established, errors can accumulate over time through staff turnover, acquisitions, decentralized hiring practices, remote onboarding arrangements and changing compliance requirements.
An effective I-9 audit is about more than checking whether forms exist. Employers should also assess whether forms were completed within the required timeframes, whether supporting procedures complied with applicable DHS requirements at the time of hire and whether records have been retained correctly. Audits should also consider whether errors indicate isolated mistakes or broader weaknesses in compliance controls.
1. Why Employers Conduct I-9 Audits
Many employers undertake internal audits as part of a broader compliance program rather than waiting until they receive notice of a government inspection. An audit can provide an opportunity to identify and address deficiencies before they become the subject of regulatory scrutiny.
Organizations commonly conduct I-9 audits when preparing for a merger or acquisition, following rapid workforce growth, after implementing new onboarding systems or in response to concerns raised through internal reviews. Employers operating across multiple locations may also use audits to assess whether hiring practices are being applied consistently throughout the organization.
Regular reviews can help demonstrate a commitment to compliance. However, identifying deficiencies is only the first stage of the process. Employers should also determine the nature and extent of any issues, evaluate whether corrective action is appropriate and maintain records showing how any remediation was carried out.
2. What an I-9 Audit Checklist Covers
A comprehensive I-9 audit checklist typically examines every stage of the employment verification process. This includes verifying that required forms exist, confirming that each section was completed correctly, reviewing supporting procedures and assessing record retention practices.
Areas commonly reviewed during an audit include:
- Whether a Form I-9 exists for each current employee and any former employee whose records remain within the retention period.
- Whether Section 1 was completed by the employee on time and contains all required information.
- Whether Section 2 was completed within the required timeframe and properly documents the examination of acceptable documents.
- Whether reverification requirements were identified and completed where required.
- Whether corrections were made in accordance with DHS guidance.
- Whether forms have been retained for the correct period and disposed of appropriately when retention obligations ended.
- Whether electronic systems and remote verification procedures complied with applicable requirements.
An audit checklist helps employers review records systematically and consistently. At the same time, checklists alone do not resolve questions about liability, remediation strategies or the potential consequences of deficiencies identified during the review process.
3. Internal Audits and Government Inspections
An internal I-9 audit differs significantly from an ICE inspection. Internal reviews allow employers to assess records on their own timetable and implement corrective measures where appropriate. Government inspections are enforcement exercises conducted under statutory authority and can lead to penalties, compliance orders and, in some cases, further investigation.
One of the most common misconceptions is that an employer can simply review forms shortly before an inspection and eliminate historic compliance issues. In practice, many violations arise from errors made months or years earlier. Some deficiencies can be corrected, while others may remain visible even after remediation efforts have been undertaken.
For that reason, many employers choose to conduct periodic reviews before any government inquiry arises. A well-executed audit can identify issues early, help establish a record of compliance efforts and reduce the likelihood of discovering significant deficiencies only after an inspection notice has been received.
NNU Perspective
An I-9 audit checklist is useful because it shows employers how quickly a basic HR record review can become a legal risk assessment. The issue is rarely whether a form has a missing box or date in isolation, but whether the errors show a wider failure in onboarding, reverification or record control. Employers often underestimate how historic errors, remote hiring practices and old system changes can affect their current exposure. An attorney-led audit gives the employer a defensible view of risk before ICE, DHS or a transaction diligence team asks the same questions.
Section B: Preparing for an Internal I-9 Audit
Preparation is often one of the most overlooked stages of an I-9 audit. Many employers assume the process begins with reviewing forms, but an effective audit starts by identifying where records are held, how they are maintained and whether all relevant personnel and systems are included within the scope of the review.
For organizations with a small workforce and centralized HR function, gathering records may be relatively straightforward. Larger employers often face a different challenge. Forms may be stored across multiple locations, maintained in different electronic systems or created under different onboarding procedures that have evolved over time. Acquisitions, restructurings and changes in HR personnel can further complicate the process.
Before reviewing individual forms, employers should establish the scope of the audit, identify all affected records and determine how findings will be documented. A consistent methodology helps ensure deficiencies are identified and assessed in a uniform manner across the workforce.
1. Identify All Relevant I-9 Records
The first step is determining whether all required Forms I-9 can be located. Employers should account for current employees as well as former employees whose forms remain subject to retention requirements.
Missing forms often present a greater concern than technical completion errors because they may indicate wider recordkeeping failures. During an audit, employers should reconcile personnel records against I-9 records to identify any individuals for whom documentation cannot be located.
Particular attention may be needed where records have been transferred between systems, inherited through corporate acquisitions or maintained by third-party providers. Employers should not assume that the existence of an electronic onboarding platform necessarily means all required forms remain accessible or complete.
2. Determine Which Hiring Procedures Applied
I-9 compliance requirements have evolved over time, particularly in relation to remote document examination procedures and electronic recordkeeping. An audit should take account of the rules that applied when a particular form was completed rather than assessing all records against current procedures.
This issue frequently arises where organizations hired large numbers of employees during periods when temporary remote verification flexibilities were available or where different business units followed different onboarding processes. Understanding which procedures applied at the relevant time can be important when assessing whether a particular form presents a compliance concern.
Employers should also identify whether E-Verify participation, alternative examination procedures or other compliance measures formed part of the organization’s hiring process, as these factors may affect how records are reviewed and evaluated.
3. Establish an Audit Methodology
An effective audit requires more than a cursory review of forms. Employers should establish clear review criteria, determine how findings will be recorded and ensure the same standards are applied consistently throughout the process.
Organizations with large workforces may choose to prioritize high-risk populations, such as recently acquired employees, remote hires or groups onboarded during periods of rapid recruitment. However, any sampling approach should be carefully considered because isolated reviews may not identify broader compliance issues affecting the wider workforce.
Audit findings should be documented in sufficient detail to demonstrate what was reviewed, what deficiencies were identified and what corrective actions were considered or implemented. Maintaining clear records can help support compliance efforts and provide evidence of good-faith review activity if questions arise in the future.
4. Assess Whether Legal Review Is Appropriate
Many employers begin an audit expecting to identify routine administrative errors, only to discover issues affecting large numbers of records. Missing forms, inconsistent completion practices, retention failures and historic onboarding processes can significantly increase compliance risk.
Attorney involvement is not required for every audit. However, legal review is often considered where the workforce spans multiple locations, where prior hiring practices are uncertain, where substantial deficiencies are identified or where an organization anticipates heightened regulatory scrutiny.
One of the most significant risks during an internal audit is focusing solely on identifying errors without considering the consequences of those findings. An effective review should assess not only what deficiencies exist but also how they should be addressed, documented and managed from a compliance perspective.
NNU Perspective
Preparation determines whether an I-9 audit produces useful findings or just a list of disconnected form errors. Employers with multiple sites, acquired workforces or electronic I-9 systems often discover that the hardest part is proving which records exist, which rules applied and which process was used at the time of hire. Poor scoping can leave whole groups of employees outside the review, giving management false comfort. Legal input at the planning stage helps define the audit in a way that supports remediation, privilege and future inspection readiness.
Section C: I-9 Audit Checklist for Employers
The purpose of an I-9 audit checklist is to provide a systematic method for reviewing employment verification records and identifying compliance concerns. Employers should apply the same review criteria consistently across all records included within the audit scope and document findings as they arise.
A checklist helps ensure important issues are not overlooked. However, completing a checklist does not necessarily mean an organization is compliant. Many of the most significant compliance risks arise not from obvious omissions but from patterns of deficiencies that only become apparent when records are reviewed collectively.
The following checklist highlights the key areas employers should examine during an internal I-9 audit.
1. Confirm All Required Forms Are Present
Before reviewing individual forms, employers should verify that a Form I-9 exists for every current employee who is required to complete one, together with any former employees whose forms remain subject to retention requirements.
- Match employee rosters against Form I-9 records.
- Identify any employees for whom no Form I-9 can be located.
- Confirm former employee records have been retained where required.
- Identify duplicate, incomplete or inaccessible records.
- Verify that electronic records remain retrievable and legible.
Missing forms often represent one of the most serious issues identified during an audit and may warrant further investigation to determine whether the problem reflects isolated recordkeeping failures or broader compliance concerns.
2. Review Employee Completion of Section 1
Section 1 should generally be completed by the employee no later than the first day of employment. Employers should review whether required information was provided accurately and whether the employee completed all mandatory fields.
- Confirm employee name and other required personal information are complete.
- Verify the employee signed and dated Section 1.
- Review citizenship or immigration status selections.
- Confirm any required additional information was provided.
- Review preparer or translator certifications where applicable.
Repeated Section 1 deficiencies across multiple records may indicate training issues, inconsistent onboarding procedures or weaknesses in compliance oversight.
3. Review Employer Completion of Section 2
Section 2 is often one of the most heavily scrutinized areas during an inspection because it documents the employer’s review of employment authorization and identity documents.
- Confirm Section 2 was completed within the required timeframe.
- Review document information for completeness and accuracy.
- Verify issuing authorities, document numbers and expiration dates were recorded where required.
- Confirm the employer representative signed and dated the certification.
- Review whether document examination procedures complied with applicable requirements at the time of hire.
Where large numbers of forms contain similar Section 2 errors, employers should consider whether the issue reflects an individual mistake or a systemic compliance problem affecting multiple hiring personnel.
4. Review Reverification and Rehire Records
Employers should assess whether reverification obligations were identified and completed where required. Failure to reverify employment authorization when required can create significant compliance exposure.
- Identify employees whose work authorization required reverification.
- Confirm reverification was completed on time.
- Review rehire records where applicable.
- Verify updated information was recorded correctly.
- Assess whether any expired work authorization documents were overlooked.
Organizations with large workforces frequently discover that reverification tracking presents greater challenges than initial onboarding compliance because obligations may arise years after the original hire date.
5. Review Retention and Recordkeeping Practices
An audit should extend beyond individual forms to examine whether the organization is maintaining records appropriately.
- Confirm records are retained for the required period.
- Identify forms that should have been retained but cannot be located.
- Identify records that may have been retained longer than necessary.
- Review electronic storage procedures and access controls.
- Assess whether records can be produced promptly if requested during an inspection.
Retention failures can create significant difficulties during an ICE inspection because an employer may be unable to demonstrate compliance even where forms were originally completed correctly.
6. Evaluate Audit Findings as a Whole
One of the most important stages of any audit occurs after individual forms have been reviewed. Employers should assess whether findings reveal isolated administrative mistakes or recurring compliance issues affecting multiple records, locations or business units.
- Identify recurring error patterns.
- Assess whether deficiencies are concentrated within particular departments or hiring periods.
- Evaluate whether existing policies remain effective.
- Consider whether additional training may be required.
- Determine whether corrective action or legal review should be undertaken.
Employers often discover that the greatest value of an audit lies not in identifying individual errors but in revealing broader compliance weaknesses that would be difficult to detect through routine day-to-day HR processes.
NNU Perspective
A checklist helps employers find problems, but it does not tell them what those problems mean. The same error can carry different risk depending on timing, scale, workforce group, document type, prior corrections and whether the pattern suggests a failed compliance process. ICE will look beyond isolated mistakes to whether the employer had reliable controls. An attorney-led review turns checklist results into a risk profile, with priorities for correction, escalation and evidence management.
Section D: Correcting Errors Identified During an I-9 Audit
Identifying deficiencies is only one part of the audit process. Employers should also determine whether errors can be corrected, how corrections should be documented and whether any deficiencies create ongoing compliance exposure. While some issues can be addressed relatively easily, others require careful assessment to avoid creating additional problems or obscuring the original record.
One of the most common misconceptions is that any error discovered during an audit can simply be fixed by updating the form. In practice, DHS guidance distinguishes between permissible corrections and actions that may undermine the integrity of the employment verification record. Employers should therefore approach remediation carefully and consistently.
1. Correct Technical and Administrative Errors Properly
Many audits uncover routine administrative issues such as missing dates, incomplete fields or clerical mistakes. Where corrections are appropriate, they should generally be made in a manner that preserves the original information and clearly identifies when the correction was made.
Employers should avoid backdating forms, using correction fluid or attempting to conceal original entries. Transparency is an important part of the correction process. A properly documented correction demonstrates that the employer identified an issue and took steps to address it, whereas an undocumented amendment may raise questions during a future inspection.
Where multiple records contain similar errors, employers should also consider whether additional training or procedural changes are needed to prevent the same issue recurring.
2. Address Missing Forms and Significant Deficiencies
Missing Forms I-9 often present greater challenges than technical completion errors. If an audit reveals that no Form I-9 exists for a current employee, the employer should assess the circumstances and determine the most appropriate corrective action based on current DHS guidance.
Similarly, forms containing substantial omissions may require more extensive remediation than forms with minor clerical deficiencies. In some situations, employers may need to complete a new form while maintaining records explaining why the action was taken and preserving the original documentation where appropriate.
The existence of missing forms may also indicate wider compliance concerns. Where multiple records cannot be located, employers should consider whether broader recordkeeping failures or historic onboarding issues contributed to the problem.
3. Review Historic Hiring Practices
Audit findings sometimes reveal deficiencies linked to historic onboarding procedures rather than isolated employee files. Changes in HR personnel, acquisitions, remote hiring practices and evolving compliance requirements can all contribute to recurring patterns of errors.
Employers should evaluate whether deficiencies are concentrated within particular time periods, locations or hiring teams. Identifying the source of recurring issues can help determine whether compliance improvements are needed beyond correcting individual forms.
Where audit findings suggest systemic problems, remediation may involve policy updates, training initiatives, revised onboarding procedures or broader compliance reviews in addition to corrections at the individual record level.
4. Document Corrective Action Carefully
An audit should create a clear record of what was reviewed, what issues were identified and what action was taken in response. Maintaining audit documentation can help demonstrate a good-faith effort to assess compliance and address deficiencies.
Employers should retain records showing the scope of the review, the methodology used and any corrective measures implemented. Consistent documentation may also assist in explaining why certain actions were taken if questions arise during a future inspection.
The objective is not simply to correct forms but to establish a defensible compliance record. Organizations that identify issues but fail to document remediation efforts may find it more difficult to demonstrate the steps taken to address deficiencies.
5. Recognize When Audit Findings Require Further Review
Some audit findings warrant a more detailed assessment before corrective action is undertaken. Examples may include widespread completion errors, large numbers of missing forms, questions relating to electronic systems, acquired workforces or concerns regarding historic verification practices.
In these situations, the legal and compliance implications often extend beyond the individual forms under review. Decisions about remediation may affect potential liability, future audit exposure and the organization’s ability to demonstrate good-faith compliance efforts.
Many employers begin an audit expecting to identify a handful of administrative issues and instead uncover patterns affecting substantial portions of the workforce. Where that occurs, determining the most appropriate response may require a broader evaluation of compliance risk rather than a form-by-form correction exercise alone.
NNU Perspective
Correction is where many self-audits create new problems. Employers may be tempted to clean up forms quickly, but backdating, overwriting entries, inconsistent annotations or undocumented replacement forms can make the record look worse during an inspection. A good remediation plan separates correctable technical errors from issues that need explanation, escalation or wider policy repair. Legal review helps ensure the audit file shows good-faith compliance rather than a rushed attempt to conceal historic failures.
Section E: When to Seek Legal Review of Audit Findings
Not every I-9 audit requires attorney involvement. Many employers identify minor administrative issues that can be addressed through routine corrective action and improved internal procedures. However, some audit findings raise broader compliance concerns that extend beyond individual forms and warrant a more detailed legal assessment.
One of the challenges employers face after completing an audit is determining the significance of what they have found. A handful of isolated errors may present a very different level of risk from recurring deficiencies affecting hundreds of records. The ability to distinguish between technical mistakes and indicators of wider compliance failures often becomes more important as the scale of identified issues increases.
1. Widespread Errors Across Multiple Records
Where an audit identifies the same deficiency across large numbers of Forms I-9, the issue may indicate weaknesses in onboarding procedures, training or compliance oversight rather than isolated employee file errors.
Examples may include missing employer certifications, incomplete document information, recurring Section 1 omissions or failures to complete reverification when required. In these circumstances, employers should consider whether the issue affects additional records beyond those initially reviewed and whether broader remediation measures are appropriate.
Large-scale deficiencies may also attract greater scrutiny during a government inspection because they can suggest systemic compliance failures rather than occasional administrative mistakes.
2. Missing Forms and Recordkeeping Concerns
Missing Forms I-9 frequently represent one of the most significant findings uncovered during an audit. An inability to locate required records may expose an employer to greater risk than many routine completion errors.
Where missing forms affect multiple employees, employers should assess whether the issue stems from historic record retention practices, electronic storage failures, acquisitions or deficiencies in onboarding procedures. Identifying the cause is often an important part of determining how the issue should be addressed.
The larger the number of missing records, the more important it becomes to evaluate the potential compliance implications before undertaking remediation.
3. Acquisitions, Mergers and Historic Workforces
Employers that have acquired businesses often inherit Forms I-9 completed under procedures they did not create and may not fully understand. Similar issues can arise where records span many years and involve multiple HR teams, systems or onboarding practices.
Audit findings affecting acquired workforces can present unique compliance challenges because employers may need to assess historic records, successor obligations and the extent to which inherited deficiencies create ongoing exposure.
Where workforce records have passed through multiple ownership structures or administrative systems, legal review can help identify risks that may not be apparent from reviewing individual forms alone.
4. Prior Government Contact or Heightened Enforcement Risk
Employers that have previously received government inquiries, inspection notices or requests for information may face different considerations than organizations conducting routine compliance reviews.
Audit findings identified against the backdrop of prior enforcement activity often require careful evaluation because decisions made during remediation may affect future interactions with enforcement agencies. Similar considerations may apply to employers operating in heavily regulated sectors, government contractors and organizations subject to heightened compliance expectations.
In these situations, an audit should be viewed not only as a record review exercise but also as part of a broader compliance risk management strategy.
5. Benefits of an Attorney-Led I-9 Audit
An attorney-led audit can provide an independent assessment of compliance risks, identify areas requiring remediation and help employers evaluate the significance of audit findings within the broader enforcement landscape.
Beyond identifying errors, legal review can assist with assessing potential exposure, prioritizing corrective action, reviewing internal procedures and preparing for possible government scrutiny. It can also help employers distinguish between technical deficiencies and issues that may indicate more significant compliance concerns.
For many organizations, the greatest value of an audit is not the discovery of individual errors but the opportunity to identify and address vulnerabilities before they become the focus of an ICE inspection, Notice of Inspection or other enforcement action.
NNU Perspective
Employers usually seek legal review after the audit has already exposed a bigger problem than expected. The better approach is to involve counsel when the risk profile suggests missing forms, recurring errors, acquired workforces, E-Verify issues, prior ICE contact or large-scale remote hiring. At that point, the question is no longer just how to correct forms, but how to manage liability, evidence and future enforcement exposure. Attorney-led review helps employers avoid turning a compliance improvement project into an unmanaged admissions file.
Summary
An I-9 audit checklist can help employers identify compliance issues before they become enforcement problems, but the process involves far more than confirming that forms exist. Effective audits review completion procedures, document examination practices, reverification obligations, record retention and wider compliance controls across the organization. Audit findings should be assessed carefully, as recurring errors, missing forms and historic onboarding practices may indicate broader compliance weaknesses rather than isolated administrative mistakes. Employers should also approach remediation with caution, since incorrect corrections can create additional exposure. Regular reviews can help strengthen compliance programs and improve inspection readiness, but where significant deficiencies are identified, legal review may be appropriate to assess risk, prioritize corrective action and prepare for potential ICE or DHS scrutiny.
If your organization is preparing for an internal I-9 audit, responding to identified compliance concerns or seeking to strengthen its employment verification procedures, NNU Immigration can help. Our attorneys advise employers on Form I-9 compliance, internal audits, remediation strategies, ICE inspection preparedness and workforce compliance risk management. Contact us to discuss an attorney-led I-9 audit review and identify potential issues before they become enforcement problems.
Frequently Asked Questions
What is an I-9 audit checklist?
An I-9 audit checklist is a tool used to review employment eligibility verification records for compliance with Form I-9 requirements. It helps employers assess whether forms have been completed correctly, retained appropriately and supported by compliant verification procedures.
How often should employers conduct an I-9 audit?
There is no legal requirement to conduct audits at specific intervals. Many employers undertake periodic reviews annually or every few years, while others conduct audits following acquisitions, rapid workforce growth, implementation of new HR systems or changes to hiring procedures.
Are employers required to perform internal I-9 audits?
No. Federal law does not require employers to conduct internal I-9 audits. However, regular reviews can help identify deficiencies, strengthen compliance procedures and improve preparedness for a government inspection.
What should an internal I-9 audit review?
An internal audit should review whether required forms exist, whether each section was completed correctly, whether reverification obligations were met, whether records have been retained appropriately and whether onboarding procedures complied with applicable requirements.
Can errors found during an I-9 audit be corrected?
Many technical and administrative errors can be corrected. However, corrections should be made carefully and documented properly. Some deficiencies may require more extensive remediation, while others cannot be fully cured after the fact.
What happens if Forms I-9 are missing?
Missing Forms I-9 can create significant compliance exposure. Employers should investigate why records are missing, assess the scope of the issue and determine the most appropriate corrective action based on current DHS guidance.
Can an I-9 audit reduce the risk of ICE penalties?
An audit does not eliminate liability for violations. However, identifying deficiencies early, implementing corrective action and maintaining evidence of good-faith compliance efforts may help reduce the likelihood of discovering serious issues during an ICE inspection.
Should an attorney be involved in an I-9 audit?
Many employers conduct routine audits internally. Attorney involvement is often considered where audits identify widespread deficiencies, missing records, acquired workforces, electronic recordkeeping concerns or other issues that may create heightened compliance risk.
Glossary
| Term | Definition |
|---|---|
| Form I-9 | The Employment Eligibility Verification form used by US employers to verify the identity and employment authorization of individuals hired to work in the United States. |
| I-9 Audit | A review of Form I-9 records and related procedures to identify compliance deficiencies, recordkeeping issues and potential enforcement risks. |
| Internal I-9 Audit | An employer-led review of Form I-9 records conducted before any government inspection or investigation. |
| ICE | US Immigration and Customs Enforcement, the federal agency responsible for conducting Form I-9 inspections and enforcing immigration-related employment laws. |
| DHS | The Department of Homeland Security, the federal department responsible for immigration enforcement and oversight of employment verification requirements. |
| Notice of Inspection (NOI) | A formal notice issued by ICE requiring an employer to produce Form I-9 records and related documentation for inspection. |
| Reverification | The process of updating Form I-9 records when an employee’s temporary employment authorization requires renewal or extension. |
| E-Verify | An online system operated by the federal government that allows participating employers to confirm employment eligibility using information from Form I-9. |
| Remote Document Examination | A DHS-authorized procedure that allows eligible employers to examine certain employment authorization documents remotely instead of conducting a physical review. |
| Good-Faith Compliance | Actions taken by an employer to comply with Form I-9 requirements, including audits, training, corrective action and documented compliance efforts. |
| Record Retention | The legal requirement to retain Form I-9 records for specified periods after hire and termination of employment. |
| Remediation | The process of addressing compliance deficiencies identified during an audit through corrective action, documentation and procedural improvements. |
Additional Resources
| Resource | Description |
|---|---|
| USCIS Form I-9 Central | Official USCIS resource covering Form I-9 requirements, guidance, updates and compliance materials for employers. |
| Handbook for Employers (M-274) | Detailed government guidance on completing, correcting, retaining and managing Form I-9 records. |
| E-Verify | Federal employment verification system used by participating employers to confirm work authorization. |
| ICE Form I-9 Inspection Fact Sheet | Overview of ICE inspection procedures, employer obligations and enforcement processes. |
| ICE Worksite Enforcement | Information on immigration worksite enforcement activity, inspections and employer compliance responsibilities. |
| DOJ Immigrant and Employee Rights Section | Guidance on avoiding unlawful discrimination during employment eligibility verification and hiring processes. |
