I-9 Verification, Section by Section: Requirements, Storage Rules, and the Mistakes That Lead to Fines

May 8

Form I-9 has a deceptive reputation for being simple. It’s been around since 1986, it’s only a couple pages long, and most established employers have completed hundreds (if not thousands!) of them. So it might be surprising to learn that I-9 violations are among the most common compliance findings during federal audits — and that the majority of them come not from hiring unauthorized workers, but from paperwork errors made on people who were fully authorized to work.

This post walks through both sections of the I-9, what's actually required, who is responsible for it, and where employers most commonly run into problems.

Section 1: What the Employee Completes and When

Section 1 is completed by the employee, but enforcing the deadline is the employer's responsibility. The form must be completed no later than the end of the employee's first day of work. Employers can — and often should — send it to the employee before their start date, since it can be completed any time after the offer has been accepted.

What employers cannot do is request the form before an offer has been made and accepted; doing so is a violation regardless of intent.

Section 1 collects the following information:

Full legal name and any other names used
Address and date of birth
Social Security number — required only if the employer uses E-Verify, otherwise optional
Email address and phone number — optional
A citizenship or immigration status attestation — the employee selects one of four options: U.S. citizen, U.S. national, lawful permanent resident, or alien authorized to work until a specific date. Employees selecting the last option must provide either an Alien Registration Number, Form I-94 number, or foreign passport information.

Do new hires have to fill out Section 1 themselves?

The employee must sign and date the form themselves. If an employee needed help — because of a disability or a language barrier — the preparer/translator certification at the bottom of Section 1 must be completed and signed by whoever assisted. If no help was provided, that section stays blank.

If an employee indicates they're authorized to work until a specific date, that date triggers reverification obligations when it arrives.

Section 2: What the Employer Verifies, and How

Section 2 is the employer's responsibility and must be completed within three business days of the employee's first day of work. There’s only one exception to that rule: for employees hired to work for your company for fewer than three days, Section 2 must be completed by the employer on day one of the hire’s employment.

To complete this section, the employer must examine the new hire’s documents establishing identity, employment authorization, or both, then record what was presented on the form.

The I-9 organizes acceptable documents into three lists:

List A documents establish both identity and employment authorization in a single document — a U.S. passport being the most common example. An employee presenting a List A document doesn't need to provide anything else.
List B documents establish identity only.
List C documents establish employment authorization only. An employee without a List A document presents one from each of Lists B and C.

The complete list of acceptable documents is maintained and updated by USCIS on their website. You can view the list here.

So, what are the employer’s obligations for verifying documents?

The employer's standard when examining documents is that they must reasonably appear genuine and relate to the person presenting them. Employers aren't expected to catch sophisticated forgeries. They are expected to actually look — either in person or through an authorized remote process.

Can an employer examine the documents remotely?

In some cases, yes. DHS introduced an alternative procedure allowing certain employers to examine documents remotely rather than in person. This option is available only to employers enrolled in E-Verify in good standing, and it comes with specific requirements around video examination and record retention.

We recommend seeking out current DHS guidance (or talking to your HR Business Partner!) to confirm whether your situation qualifies, since this area has continued to develop.

What if an employee presents extra documents?

One common error in Section 2 is recording more documents than the form requires. If an employee presents a List A document, that's what gets recorded — full stop. Asking for additional documents, or steering an employee toward a specific document rather than accepting their choice from the acceptable list, creates exposure under federal anti-discrimination provisions. Collecting extra documentation doesn't add protection; in fact, it adds legal risk.

Retention and Storage: How Long to Store I-9s, Where to Store Them, and Why It Matters

How long do employers need to keep I-9s?

The retention requirement is three years from the date of hire, or one year from the date employment ends — whichever is later. For short-tenure employees, the termination date usually controls. For long-tenure employees, the hire date typically does.

The practical approach is to calculate the destruction date at separation and log it then, rather than trying to reconstruct timelines years later when an audit arrives.

Where should I-9s be stored? Do they have to be kept separate?

USCIS permits storing I-9s inside the general personnel file but recommends against it. There are two main reasons why:

The first issue is audit exposure. When ICE issues an inspection notice, employers have three business days to produce their I-9 forms. Hunting through individual personnel files under that deadline is slow, and it hands auditors visibility into unrelated employee information in the process.
The second issue is discrimination risk. The I-9 contains national origin and immigration status information that most managers and supervisors have no reason to access. Keeping it bundled with the rest of the personnel file creates unnecessary opportunity for that information to surface in decisions it shouldn't touch.

A dedicated I-9 file for each employee with access limited to HR personnel handles both problems cleanly.

Can I-9s be stored electronically?

Electronic storage is permitted, but the system must meet specific DHS requirements, including:

Controls preventing unauthorized alteration
A secure audit trail logging who accessed each form and when
The ability to produce legible copies on demand.

Commercial HR platforms vary widely on whether they actually meet these standards — it's worth confirming directly with the platform you’re considering using rather than assuming compliance comes with the subscription!

The I-9 Errors That Show Up Most Often in Audits

These mistakes appear consistently across industries and company sizes, and they tend to be systemic. Most errors come from onboarding moving fast and I-9 completion being treated as a formality rather than a compliance task with real consequences.

We encourage our clients to perform an internal audit and identify any of the following issues rather than risk waiting for an external audit:

Late Section 2 completion. Employers have three business days from the employee's first day of work to complete Section 2, and that deadline doesn't flex for a busy onboarding week. Late forms are a violation regardless of whether the employee was authorized to work.
Missing signatures. Section 1 requires the employee's signature, Section 2 requires the employer representative's signature, and the preparer/translator certification requires a signature whenever someone helped the employee complete the form. Blank signature sections are considered a serious violation.
Incomplete or inaccurate document recording. Every required field in Section 2 needs to be filled in accurately — document title, issuing authority, document number, and expiration date where applicable. Abbreviated titles, transposed numbers, or blank fields all can create issues during a formal HSI audit.
Over-documentation. Employers are required to accept any document from the acceptable list that the employee chooses to present. Asking for a specific document, or requesting more documents than the form requires, violates anti-discrimination provisions even when the intent is simply to be thorough.
Retention failures. I-9s discarded before the retention period ends, no process for calculating destruction dates at separation, or forms stored inside personnel files with no dedicated I-9 storage system all leave employers exposed during an audit.

Get Your I-9 Process in Compliance

If your I-9 process has gaps — or if you're not sure whether it does — there’s no shame in seeking assistance! Cool Hand Consulting works with employers at whatever level of involvement makes sense for their business needs:

Our HR compliance audits include a thorough review of I-9 records, storage practices, and completion procedures, with a clear picture of where things stand and what needs to change.
For employers who want the process handled rather than just reviewed, our fractional HR services cover I-9 completion, document review, storage, and retention tracking on an ongoing basis.
We also design and run custom onboarding workflows — with role-specific checklists — so that I-9 compliance is built into the process from day one rather than added on after the fact.
And for teams managing this in-house, we offer targeted training for HR staff and managers covering completion requirements, acceptable documents, and how to prepare for an audit before one lands on your desk.

Have an HR Question? Let us Help!

This post is intended for general informational purposes only and does not constitute legal advice. Employment law requirements vary by state, industry, and employer size, and they change over time. Nothing here should be relied upon as a substitute for advice from a qualified employment attorney or HR professional familiar with your specific situation.