I-9 data is the employment eligibility verification information employers are required to collect and retain for every person they hire — the completed Form I-9 and, where the employer chooses to keep them, copies of the identity and work authorization documents the employee presented.
It is unusual among HR records in that the obligation to create it, the rules for retaining it, and the restrictions on how it may be used all come from the same place, and the penalties for handling it incorrectly attach to the paperwork itself rather than to any underlying employment decision.
Most HR compliance failures become expensive because of what they reveal about an employment decision. I-9 violations are different: substantive and technical paperwork errors carry penalties on their own, assessed per form, regardless of whether every employee was in fact authorized to work.
An employer with a fully authorized workforce and a filing cabinet of incomplete I-9s has real exposure. Missing dates, unsigned sections, forms completed outside required timeframes, and forms that cannot be located all count.
Because the penalties are per form, the exposure scales with headcount. An organization that has been making the same small error consistently for years has multiplied it across every hire in that period, which is how modest process problems become significant liabilities.
Section 1 must be completed by the employee no later than their first day of employment. The employer's review of documents and completion of Section 2 must occur within three business days of the start date. For employees hired for fewer than three days, both must be complete by the first day.
Late completion is a violation even when the form is otherwise perfect and the employee is authorized. Backdating to conceal lateness is considerably worse than the original lapse, and is a category of error employers should ensure staff understand clearly.
Reverification, where required, has its own timing tied to the expiration of the employee's work authorization — not to any anniversary or review cycle. Missing a reverification deadline creates exposure that persists until corrected.
The verification process carries its own discrimination rules, and employers acting from an abundance of caution frequently violate them.
Employees choose which documents to present from the acceptable lists. The employer may not specify which documents it wants, may not request additional or different documents beyond what is required, and may not reject documents that reasonably appear genuine. Requesting more documentation from employees who appear foreign-born, or who mention a non-citizen status, is unlawful document abuse — even when well intentioned.
The same constraint applies to reverification: it should occur based on documented expiration dates, applied consistently, not on assumptions about a particular employee.
I-9s must be retained for three years after the date of hire or one year after employment ends, whichever is later. That calculation requires knowing both dates, which is why applying a single blanket retention period across all files tends to be wrong in both directions.
Forms should be stored separately from personnel files. The practical reason is inspection: government agencies may request I-9s, and separate storage allows the employer to produce exactly what was asked for without exposing unrelated personnel records. Employers keeping I-9s inside general personnel files must either produce far more than required or extract forms under time pressure.
Whether to retain copies of the underlying documents is a choice, but it must be applied consistently — copying documents for some employees and not others is itself a discrimination exposure. Where copies are kept, they contain identity documents and identifiers that warrant the same protection as any sensitive record.
An I-9 file with document copies contains names, dates of birth, identification numbers, and frequently Social Security numbers, concentrated in a single predictable location. That combination is directly usable for identity fraud.
Access should be limited to the small group with an actual verification role — not to HR generally and certainly not to hiring managers. Electronic storage carries specific requirements around system integrity, audit trails, and the ability to reproduce forms, so employers digitizing I-9s should confirm their system satisfies them rather than assuming any document repository suffices.
Internal review is the standard remediation path, and it has rules. Employers may correct certain errors, but corrections must be made properly — the person who made the original entry corrects it where possible, changes are lined through rather than erased, and corrections are dated and initialed. Completing missing information without indicating when it was added, or replacing an old form with a clean copy, creates a worse problem than the original.
Audits should cover all forms or a genuinely neutral selection. Reviewing only the files of employees who appear foreign-born is itself a discrimination problem.
Employer's Guardian helps employers establish verification processes, timing controls, and retention practices for these records. For a broader discussion of the recurring compliance risks, see I-9 compliance guidance.
This article provides general educational information, not legal advice. Employment eligibility verification requirements are detailed and change over time. Consult qualified counsel before conducting a self-audit or changing your process.