E-Verify requirements by state: who has to use it, and who cannot require it
On this page
- State-by-state guides
- States that require E-Verify for every private employer
- States that require it above an employee-count threshold
- Federal contractors: a separate rule that overrides state law either way
- States that restrict how E-Verify may be used
- E-Verify does not replace Form I-9, and the timing matters
- Multi-state and staffing-agency employers
- A worked example: one agency, three states
- A checklist before opening a role in a new state
- Questions people ask
As of October 2026, there is no federal law requiring every U.S. employer to use E-Verify. It is required for federal contractors covered by a specific contract clause, and separately required by a growing list of state laws, some covering every private employer and some only above a size threshold. California goes the other way and restricts how a private employer may use it. Which rule applies to a given hire depends on where the employee works, not on where the company is headquartered.
This is not legal advice. E-Verify mandates are state statutes that legislatures amend frequently, several with thresholds that have already changed once. The citations below were checked against official state and federal sources as of September and October 2026. Confirm the current rule for your state, and any county or city ordinance layered on top, with a lawyer before relying on it.
State-by-state guides
State E-Verify mandates
| State or jurisdiction | Who must use it | Statute |
|---|---|---|
| Alabama | Every business entity or employer, with no headcount floor | Ala. Code § 31-13-15 |
| Alaska | No mandate and no restriction: the Alaska Statutes contain no E-Verify provision | No statute |
| Arizona | Every employer, for hires after December 31, 2007 | A.R.S. § 23-214 |
| Arkansas | State government employers, including political subdivisions as the act defines them, for hires on or after January 1, 2026; state contractors certify they do not employ illegal immigrants but are not required to use E-Verify | Ark. Code §§ 21-3-901 to 21-3-906 (Act 948 of 2025); § 19-60-105 |
| California | No mandate: state and local governments may not require it; an employer that uses it may check only people who have been offered employment, with a civil penalty of up to $10,000 per unlawful check | Cal. Labor Code §§ 2812 and 2814 |
| Colorado | No mandate: the public-contract worker verification article was repealed effective July 1, 2022; the state may still audit employers' Form I-9 compliance | C.R.S. § 8-2-122 (Art. 8-17.5 repealed) |
| Connecticut | No mandate and no restriction: the last E-Verify bills (SB 221 of 2009, SB 240 of 2010) died in committee | No statute |
| Delaware | No mandate and no restriction: Title 19 (Labor) and Title 29 (State Government, including procurement) do not mention E-Verify | No statute |
| District of Columbia | No District mandate or restriction; most E-Verify use in DC comes from federal contracts carrying FAR 52.222-54 | No statute |
| Florida | Public agencies and public contractors since 2021; private employers with 25 or more employees company-wide since July 2023 | Fla. Stat. § 448.095 |
| Georgia | Employers with more than 10 employees renewing a city or county business license, and employers with 10 or more employees on a public contract over $2,500 | O.C.G.A. §§ 36-60-6 and 13-10-91 |
| Hawaii | No mandate: 2011 and 2012 bills covering public contracts, public hiring and all employers were not enacted; the state vendor compliance certificate does not include E-Verify | No statute |
| Idaho | No E-Verify statute: a 2009 executive order on stimulus-funded state contracts does not name E-Verify, and 2026 bills to create a public-sector mandate failed | Executive Order 2009-10 |
| Illinois | No mandate: the Right to Privacy in the Workplace Act's E-Verify sections were repealed effective December 12, 2025, leaving only the federal rules | 820 ILCS 55 (55/12 and 55/13 repealed by P.A. 104-455) |
| Indiana | State agencies, political subdivisions, and contractors on public services and public works contracts; from July 1, 2026, E-Verify is also a defense for every employer under a new unauthorized-employment law | IC 22-5-1.7; IC 22-5-9 (SEA 76, 2026) |
| Iowa | Executive branch state agencies and the Board of Regents, for their own new hires, by executive order; no private-employer or contractor mandate | Executive Order 15 (October 8, 2025) |
| Kansas | No mandate: SB 196 and HB 2066 (2025-2026), which would have covered all businesses and public employers, died | No statute |
| Kentucky | No mandate: a 2025 bill to require it of all employers and on public contracts (HB 673) was not enacted | No statute |
| Louisiana | No general private-employer mandate: E-Verify is one of two safe harbors from state penalties; required for private employers contracting with a public entity for services in the state | La. R.S. 23:995; La. R.S. 38:2212.10 |
| Maine | No E-Verify mandate: bills failed in 2017, 2018 and 2019; a 1977 law makes knowingly employing an unauthorized noncitizen a Class E crime, with a written good-faith inquiry defense | 26 MRSA § 871 |
| Maryland | No mandate and no restriction: no E-Verify bill since HB 317 (2013), which covered public contracts and grants and did not pass | No statute |
| Massachusetts | No mandate: Executive Branch contractors certify they verify workers' status under federal requirements, without naming E-Verify | Executive Order 481 (2007); G.L. c. 149, § 19C |
| Michigan | Contractors and subcontractors of most state departments, as a condition written into the annual budget act; no private-employer mandate | 2025 PA 22 (fiscal 2025-26 budget) |
| Minnesota | Vendors and subcontractors on state contracts for services over $50,000, by certification | Minn. Stat. § 16C.075 |
| Mississippi | Every employer, regardless of size, since July 1, 2011 | Miss. Code § 71-11-3 |
| Missouri | Public employers, and any business receiving a state or local contract or grant over $5,000 or a state-administered tax credit, abatement or loan; enforcement rewritten from August 28, 2026 | RSMo 285.530 (as amended in 2026) |
| Montana | No E-Verify mandate: since July 1, 2025 every employer must keep either an E-Verify confirmation or a completed Form I-9 with document copies, with state audits and fines; E-Verify users are presumed to act in good faith | MCA 39-2-1601 to 39-2-1608 (HB 226, 2025) |
| Nebraska | Every public employer, and every contractor or subcontractor on a public services contract, with no dollar threshold | Neb. Rev. Stat. § 4-114 |
| Nevada | No mandate: AB 94 (2025), covering public works contractors, died without a hearing | No statute |
| New Hampshire | No E-Verify mandate: employers must obtain and keep work-eligibility documentation, and E-Verify verification is an affirmative defense to a civil suit over a misused Social Security number; mandate bills failed in 2024 and 2025 | RSA 275-A:4-a and 275-A:4-b |
| New Jersey | No mandate: 2026 bills to require it of all employers (S3856/A4638) and of certain contractors (A191) are in committee | No statute |
| New Mexico | No mandate found: no House or Senate bill from the 2023 to 2026 regular sessions mentions E-Verify | No statute found |
| New York | No mandate and no restriction: bills to restrict its use (S3956/A3584) are in committee | No statute |
| North Carolina | Private employers with 25 or more employees in the state; contractors on a county or city contract regardless of size | N.C. Gen. Stat. Ch. 64, Art. 2; § 143-133.3 |
| North Dakota | No mandate: HB 1527 (2023), which would have covered all public and private employers, failed in the House 5-88 | No statute |
| Ohio | Nonresidential construction contractors, subcontractors at any tier, and labor brokers, on private and public projects, from March 20, 2026 | Ohio Rev. Code Ch. 4151 (HB 246) |
| Oklahoma | Public employers, and contractors and subcontractors at any tier, staffing agencies included, on public services contracts | 25 O.S. §§ 1312–1313 |
| Oregon | No mandate: HB 3457 (2025) stalled in committee; employers must notify employees of a federal I-9 inspection within three business days and may not insist on a driver license | ORS 652.752; ORS 659A.347 |
| Pennsylvania | Contractors and subcontractors on public works projects over $25,000 | 71 P.S. §§ 656.1–656.11 (Act 141 of 2022) |
| Puerto Rico | No local mandate; E-Verify is available and FAR 52.222-54 reaches federal contracts there; Act 4-2017 does not require E-Verify | No statute |
| Rhode Island | No mandate: Executive Order 08-01 (2008) required it of state agencies and vendors until Executive Order 11-02 rescinded it in January 2011; 2025 and 2026 Senate bills were not enacted | Executive Order 11-02 (2011) |
| South Carolina | Every private employer, regardless of size, since January 1, 2012 | S.C. Code § 41-8-20 |
| South Dakota | No mandate: HB 1209 (2026), narrowed in conference to employers with more than 25 employees, died when the Senate rejected the conference report on March 11, 2026 | 2026 HB 1209 (not enacted) |
| Tennessee | Employers with 35 or more full-time-equivalent employees; smaller employers may use the statute's document alternative instead | Tenn. Code § 50-1-703 |
| Texas | State agencies for their own hires, and contractors and subcontractors on certain state contracts including all TxDOT highway work; no general private-employer mandate | Government Code Ch. 673; Transportation Code § 223.051 |
| Utah | Private employers with 150 or more employees | Utah Code § 13-47-201 |
| Vermont | No mandate and no restriction; the standard state contract terms (Attachment C) contain no verification clause | No statute |
| Virginia | State agencies; employers averaging more than 50 employees on state agency contracts over $50,000 | Va. Code §§ 40.1-11.2 and 2.2-4308.2 |
| Washington | No state mandate or restriction; some cities and counties have required it of their own contractors or employees | No statute |
| West Virginia | No general mandate: new employees of service providers working on the State Capitol Complex; a separate state law requires work-authorization checks and records | W. Va. Code §§ 15-2D-3 and 21-1B |
| Wisconsin | No mandate: AB 281, covering state contracts and public employers, was vetoed April 3, 2026 and the override failed | 2025 AB 281 (vetoed) |
| Wyoming | No mandate: bills requiring employers to verify status died in 2009 and 2011, and a 2025 bill criminalizing unauthorized employment was not introduced | No statute |
I-9 process guides
| Guide | What it covers | Source |
|---|---|---|
| I-9 authorized representative | Who can examine documents on the employer's behalf for a remote hire, and why the employer keeps the liability | USCIS I-9 Central; Handbook for Employers (M-274) |
| I-9 reverification | When a work-authorization document's expiration requires reverifying with Supplement B, and the rehire-within-three-years rule | USCIS I-9 Central |
| I-9 audit checklist | A form-by-form self-audit before ICE does, including the current civil penalty ranges | ICE Form I-9 Inspection fact sheet; 8 CFR 274a.10(b)(2) |
| E-Verify tentative nonconfirmation | The 10-day and 8-day deadlines and the no-adverse-action rule after an E-Verify mismatch | e-verify.gov |
| I-9 retention rules | The three-years-or-one-year retention formula and paper versus electronic storage rules | 8 CFR 274a.2; Handbook for Employers (M-274) |
Each row links to a full guide with the statute, rule or agency source, checked as of September or October 2026.
States that require E-Verify for every private employer
| State | Statute | Since | Notable detail |
|---|---|---|---|
| Alabama | Ala. Code § 31-13-15, Beason-Hammon Act (§ 31-13-9 is the separate condition on state contracts, grants and incentives) | Employers with 1+ employees since April 1, 2012 | The statute does not set a direct fine for failing to enroll; the practical consequence is losing the act's liability shield for hiring an unauthorized worker |
| Arizona | A.R.S. § 23-214, Legal Arizona Workers Act | Every employer, for hires after December 31, 2007 | Verification records must be kept for the duration of employment or three years, whichever is longer |
| Mississippi | Miss. Code § 71-11-3, Mississippi Employment Protection Act | Every employer, regardless of size, since July 1, 2011 (phased in by size from 2008) | Individual homeowners hiring for non-commercial work on their own property are exempt |
| South Carolina | S.C. Illegal Immigration Reform Act, as amended 2011 | Every employer since January 1, 2012 | New hires must be run within three business days; enforcement is through business license probation or suspension, not a direct fine |
Mississippi reached every employer by steps rather than at once: public bodies, public contractors and private employers of 250 or more from July 2008, then 100 or more, then 30 or more, and every remaining employer from July 1, 2011. The 30-employee figure still quoted in a lot of summaries was the third of those steps, not the rule that applies now.
States that require it above an employee-count threshold
| State | Statute | Threshold | Effective |
|---|---|---|---|
| Florida | Fla. Stat. § 448.095 (SB 1718) | 25 or more employees, counted company-wide | July 1, 2023; penalties up to $1,000 per day after repeated noncompliance within 24 months |
| Georgia | O.C.G.A. § 36-60-6 | More than 10 employees, tied to a county or city business license or occupational tax certificate | Phased in starting 2012 |
| North Carolina | N.C. Gen. Stat. Ch. 64, Art. 2 | 25 or more employees in the state | Phased in 2012 to 2013 by employer size; new hires must be verified within three business days |
| Tennessee | Tenn. Code § 50-1-703, Tennessee Lawful Employment Act | 35 or more full-time-equivalent employees | January 1, 2023; smaller employers may use E-Verify or retain the documents listed in the statute instead |
| Utah | Utah Code § 13-47-201, Private Employer Verification Act | 150 or more employees | May 4, 2022; raised from a 15-employee threshold. No direct penalty for not registering; the statute instead gives a liability shield to employers who do |
This is not a complete list of every state with any E-Verify obligation. Several additional states require it only for public employers, state contractors, or employers seeking a state economic incentive, categories we did not attempt to summarize here because the qualifying conditions vary too much to state in one line. Check your state's labor department if your business does any work for a public agency.
Federal contractors: a separate rule that overrides state law either way
Regardless of what the employer's state requires, a federal contract that includes FAR clause 52.222-54 obligates the contractor to use E-Verify. The clause generally attaches to contracts awarded on or after September 8, 2009 that are valued above $150,000, include work in the United States, and have a period of performance of 120 days or more, other than contracts only for commercially available off-the-shelf items; it flows down to subcontracts for services or construction above $3,500. A contractor must enroll within 30 days of the award and, per the clause, verify not only employees assigned to the federal contract but every new hire company-wide, unless it is an institution of higher education, a state or local government, a federally recognized tribal government or a surety under a takeover agreement, which may limit verification to employees assigned to the contract. This applies even in a state, like California, that otherwise bars the state itself from mandating E-Verify.
States that restrict how E-Verify may be used
California runs the opposite direction: it bars state and local government from requiring E-Verify, and adds rules for the private employers who choose to use it anyway. Illinois did the same until December 2025.
- California: under Labor Code § 2812 (AB 1236, 2011), no state or local government entity may require a private employer to use E-Verify as a condition of a contract or business license, or as a penalty, except as federal law or a federal funding condition requires. Under Labor Code § 2814 (AB 622, effective January 1, 2016), it is unlawful to use E-Verify on an existing employee, or on an applicant who has not received an offer, at a time or in a manner federal law does not require or the E-Verify memorandum of understanding does not authorize; employers must pass on federal notices after a tentative nonconfirmation. Misuse carries a civil penalty of up to $10,000 per violation, and each unlawful check is a separate violation.
- Illinois: no longer. The Right to Privacy in the Workplace Act's E-Verify provisions, 820 ILCS 55/12 and 55/13 as amended effective January 1, 2025, were repealed by Public Act 104-455 (SB 2339), effective December 12, 2025, together with the penalties tied to them. The act now addresses mismatch notices from agencies that do not enforce immigration law, such as the Social Security Administration, but has no E-Verify-specific rules.
California does not ban a private employer from using E-Verify. It regulates when and on whom it is used once an employer opts in, which matters for a staffing agency operating in both a mandate state and California.
E-Verify does not replace Form I-9, and the timing matters
E-Verify draws on the information the employee and employer already entered on Form I-9, and cannot be run before that form is complete. A recruiter or onboarding coordinator in a mandate state needs the I-9 finished, not just started, before creating the E-Verify case, and most state statutes above set their own short clock (commonly three business days) for running the check once the I-9 is done. Running E-Verify before the I-9 is complete, or using it during screening before an offer, is not compliance in any state on this page; it is closer to the misuse the E-Verify memorandum of understanding forbids and California specifically penalizes.
Multi-state and staffing-agency employers
A company with a headquarters in a no-mandate state can still owe E-Verify compliance for an individual hire, because the statutes above generally look at where the employee works, not where the employer is based. A staffing agency placing workers across state lines should track this per placement:
- A worker placed in Alabama, Arizona, Mississippi or South Carolina is covered by that state's all-employer rule regardless of the agency's size or home state.
- A worker placed in Florida, Georgia, North Carolina, Tennessee or Utah is covered only once the relevant employer or placement counts toward that state's threshold; read the specific statute's definition of "employer," since some count company-wide headcount and some count employees in that state only.
- A client's own federal contract can pull the agency into the FAR clause, separate from any state mandate, if the agency's workers are assigned to that contract.
A worked example: one agency, three states
This is an invented example to show how the thresholds interact, not a real company. Suppose a staffing agency headquartered in Texas, which has no state-level E-Verify mandate for private employers, places 40 contract employees this quarter: 12 in Georgia, 20 in Florida and 8 in Utah.
- Georgia: the agency's Georgia business license already required an E-Verify affidavit under O.C.G.A. § 36-60-6 once it passed 10 employees there, so all 12 Georgia placements need to run through E-Verify regardless of the agency's total headcount.
- Florida: Florida's threshold counts the employer's total headcount, not just Florida headcount. If the agency has 25 or more employees company-wide, all 20 Florida placements are covered under Fla. Stat. § 448.095, even though 20 alone would not have triggered it.
- Utah: Utah's 150-employee threshold is far above this agency's size, so the 8 Utah placements are not covered by the state mandate. The agency can still use E-Verify there voluntarily if it wants one process across all three states.
The lesson from the example: reading only the agency's home-state law, or only the placement-state headcount, produces the wrong answer in both Georgia and Florida here. Check each state's own definition of "employer" against the agency's actual, company-wide facts.
A checklist before opening a role in a new state
- Identify the state where the work will actually be performed, including for a remote hire.
- Check whether that state mandates E-Verify, and at what employee count, against the state's own statute or labor department page, not a secondary summary.
- Check whether the role sits on a federal contract that carries FAR clause 52.222-54 independent of state law.
- If the state restricts E-Verify use, like California, confirm your process does not run a check before an offer and follows that state's notice requirements.
- Complete Form I-9 in full before creating the E-Verify case, and track each state's own deadline for running the check after hire.
- Keep verification records for as long as the applicable state requires, which is not uniform across the states above.
For the paperwork sequence around a new hire more broadly, see the contractor onboarding checklist. For whether your agency needs a state license to operate in the first place, see employment agency license requirements.
Questions people ask
Is E-Verify mandatory for every employer in the United States?
No. There is no general federal mandate. It is required for federal contractors covered by FAR clause 52.222-54, and separately required by state law in a growing list of states, either for all employers or for employers above a size threshold. Everyone else may use it voluntarily where state law allows.
Which state's E-Verify law applies to a remote worker?
Generally the state where the employee actually works. If your company is based in a state with no mandate but hires someone who works from Alabama, Arizona, Mississippi or South Carolina, that state's all-employer requirement can still apply to that hire. Confirm with the specific state agency rather than assuming your headquarters state controls.
Can an employer in California or Illinois use E-Verify voluntarily?
Yes. In California, state and local governments may not require it, and an employer that uses it may run it only on people who have been offered employment, not on applicants before an offer or on existing employees except as federal law requires; misuse carries a civil penalty of up to $10,000 per violation. Illinois had its own rules on employers' use of E-Verify from January 2025, but repealed them effective December 12, 2025, so only the federal rules now apply there.
Does E-Verify replace Form I-9?
No. E-Verify runs off the information already entered on Form I-9 and cannot be used before the I-9 is complete. It confirms work authorization electronically; it does not replace the I-9 itself. See I-9 timing in hiring for when each step happens.