ICE Reclassifies Form I-9 Violations and Expands Potential Employer Exposure

By Sheryl Thomas, Rebecca A. Winterscheidt, Benjamin A. Nucci, and Jessica Van Ranken

Introduction

Since 1986, federal law has required every U.S. employer to complete a Form I-9 for each new hire, verifying identity and work authorization through an inspection of specified documents. This obligation applies regardless of company size and generally extends to reverification when an employee’s authorization has an expiration date. Employers using E-Verify must still maintain a completed I-9 for each worker.

Although the United States Immigration and Customs Enforcement (ICE) audits have historically been infrequent, the agency’s expanded staffing has already resulted in increased inspections, particularly for industries and organizations that have not previously been subject to enforcement activity.

In March 2026, ICE published revised compliance guidance that fundamentally reshapes how Form I-9 deficiencies are categorized. The revisions reclassify many previously correctable errors as “substantive” violations, which carry immediate monetary penalties, while simultaneously narrowing the category of “technical or procedural” errors that employers may cure without financial consequence.

The financial stakes are significant: substantive violations carry penalties of approximately $2,500 per deficient I-9, and the statute of limitations runs five years from the date of correction. For organizations of any size, a single audit can result in considerable financial penalties.

Key Changes Under the Updated Guidance

The revised guidelines reflect four major shifts that HR teams, compliance officers, and business owners should understand:

1. Reclassification of Common Errors as Substantive Violations. Numerous I-9 deficiencies that were previously correctable without penalty, such as dating errors, delayed document verification, incomplete Section 2 entries, and use of the Spanish-language form outside Puerto Rico, now trigger mandatory fines as substantive violations.

2. Remote Verification and Electronic I-9 Compliance. The guidance targets errors in alternative document examination procedures, including failure to check the “alternative procedure” box, absence of active E-Verify enrollment, and noncompliance with the electronic I-9 technical standards set forth in 8 C.F.R. § 274a.2(e) through (i) (covering audit trails, electronic signatures, system security, and legible-copy retention).

3. Heightened Scrutiny of Supplement B. Errors in Supplement B that were once considered routine, such as missing rehire dates, late or incomplete reverifications, absent signatures, incorrect document details, and failure to mark the alternative procedure box, now result in mandatory penalties. Failure to complete reverification before an employee’s temporary work authorization expires is treated as especially serious.

4. Civil Penalty Exposure. Each substantive violation and each uncorrected technical failure constitutes a separate chargeable offense. Penalty amounts are established by statute and adjusted annually for inflation, meaning that total fines can escalate rapidly.

What Now Counts as a Substantive Violation

Under the revised framework, the following common deficiencies are now classified as substantive violations carrying mandatory fines:

Penalty Exposure

Each substantive violation is a separate chargeable offense, with fines of approximately $2,500 per deficient I-9. Five statutory factors, business size, good faith, seriousness, involvement of unauthorized workers, and prior violation history, can adjust the base fine by up to ±25%. Of these, good faith (demonstrated through self-auditing, training, and prompt correction) is the factor most within an employer’s control.

A small number of errors remain correctable within a 10-business-day cure window (e.g., using an outdated form version or omitting a business address). However, if not corrected within that period, these also convert to substantive violations. For the full list, see the ICE I-9 Fact Sheet at https://www.ice.gov/factsheets/i9-inspection.

Consider These Practical Steps for Compliance

1. Conduct an internal I-9 self-audit. Have a qualified third-party review all current I-9 files for missing signatures and dates, incomplete Section 2 entries, reverification accuracy, Supplement B maintenance, and proper documentation of any remote verification procedures.

2. Update training for personnel responsible for I-9 completion. Ensure that anyone completing or reviewing I-9 forms understands the new substantive violation classifications, proper document review procedures, and reverification deadlines.

3. Establish a reverification tracking system. Implement calendar reminders or automated alerts to ensure reverification is completed before temporary employment authorization expires. Organizations not yet enrolled in E-Verify may wish to evaluate whether enrollment would reduce compliance risk. E-Verify participation is mandated in Arizona as well as in several other states.

4. Confirm I-9 retention practices. Forms must be retained for three years from the date of hire or one year after the employment relationship ends, whichever is later. A practical approach: maintain the I-9 throughout employment and for three years following separation.

5. Assess electronic I-9 platforms. If your organization uses an electronic I-9 system, verify that it satisfies the requirements of 8 C.F.R. § 274a.2(e) through (i), including audit trail functionality, electronic signature integrity, security protocols, and the ability to produce legible reproductions on demand.

The full impact of ICE’s revised guidance will become clearer as enforcement actions proceed. In the meantime, a proactive review of your I-9 processes is an effective way to reduce risk.