E-Verify requirements in Utah: 150 employees, and a shield instead of a fine

As of September 2026, Utah requires only its largest private employers, those with 150 or more employees, to register with and use a status verification system such as E-Verify for new hires, under Utah Code section 13-47-201, the Private Employer Verification Act. That threshold was raised from 15 employees to 150 effective May 4, 2022, a tenfold jump that took the large majority of Utah businesses out of the mandate. Utah's law is also unusual among mandate states in what it does not do: it does not set a direct fine for a covered employer that skips registration. Instead, it offers a liability shield to employers who do register, and the practical cost of noncompliance is losing that shield, not a penalty written into the statute itself.

Who is covered

The 150-employee threshold is a straightforward headcount test, without the company-wide-versus-in-state distinctions that complicate a state like Florida's or Tennessee's rule; the statute counts employees of the private employer, without a separate carve-out for how many of them work specifically in Utah.

What a covered Utah employer must do, and by when

1. Confirm headcount against the 150-employee line before assuming the Act does or does not apply.
2. Register with a status verification system, such as E-Verify, if covered and not already registered.
3. Complete Form I-9 for the new hire in full, on the standard federal timeline.
4. Verify the federal legal working status of the new employee before hiring, using the registered system. Utah's statute frames this as a precondition of hiring rather than a post-hire step with a separate business-day clock the way some other states phrase it.
5. Exclude H-2A and H-2B hires made under the employer's own petition from this process, since the Act does not reach them.

Records to keep

Utah's statute does not spell out a state-specific retention schedule for the verification record separate from the federal one, so the standard practice is to follow federal Form I-9 retention: the later of three years after hire or one year after employment ends. Because the point of registering is to be able to invoke the liability shield described below if a hiring decision is ever challenged, keep the case result in a form that is easy to produce years later, not just a note that a check was run.

Penalties: why Utah's law is a shield, not a fine

Utah's Private Employer Verification Act does not set out a criminal or civil penalty for a covered employer that fails to register or fails to verify a new hire. That is a deliberate difference from Alabama, Arizona, Mississippi, South Carolina, and the other mandate states, which each attach a fine, license consequence, or both to noncompliance. What the Utah statute does instead is grant liability protection to an employer that does verify: a covered employer that uses a registered status verification system cannot be held civilly liable either for hiring an unauthorized worker whose check came back clear, or for declining to hire someone whose check came back showing they were not authorized.

The practical consequence of skipping registration, then, is not a fine from a state agency; it is that the employer loses access to that shield and is left to defend a hiring decision, in a lawsuit or an investigation, without the specific statutory protection the Act would otherwise have provided. For a large employer that is also thinking about federal exposure for knowingly hiring an unauthorized worker, or about a wrongful-hiring-decision claim from a rejected applicant, that gap matters even though it does not show up as a line-item penalty in the Utah Code.

A worked example: what the shield is actually worth

This is an invented example to show what the liability shield protects against, not a real company. A 200-employee Utah logistics company registers with E-Verify as required and runs a new warehouse hire through it, receiving a confirmation. Two years later, a rejected applicant for a different role sues, claiming the company's hiring decision was discriminatory. Separately, immigration enforcement later determines the warehouse hire's documents were fraudulent.

For the warehouse hire, the company's registered, good-faith use of the verification system is the protection the Act is built around: it cannot be held civilly liable for that specific hiring decision because the check came back clear at the time, even though the documents later turn out to have been fraudulent. That protection does not extend to the unrelated discrimination claim from the rejected applicant, which is a different legal question the Act was never written to address. The shield is narrow and specific to the verification decision itself, not a general defense against every claim an employer might face over its hiring practices.

Compare that to a similarly sized company that never registered. If it faced the same fraudulent-documents situation, it would have no equivalent statutory protection to point to, and would need to rely entirely on whatever general defenses apply outside the Act, such as showing it reviewed the documents in good faith under the ordinary federal I-9 standard.

How this sits on top of Form I-9

E-Verify runs off the data already entered on Form I-9 and cannot be used before the I-9 is complete. Utah's statute requires verification in addition to the I-9, not instead of it, and a Utah employer under 150 employees, which is most Utah employers since the 2022 change, still owes a correctly completed I-9 for every hire under federal law even though the state Act does not reach it.

What a staffing agency placing workers into Utah must do

A staffing or recruiting agency is the "private employer" of its own placed workers for purposes of this statute, so the agency's own total employee count, not the headcount at the client site, decides whether the 150-employee threshold applies to the agency. A national staffing firm well above 150 employees is covered for its Utah hiring even if its Utah office is small, since the statute counts the employer's total employees rather than a Utah-specific figure. A smaller, regional Utah agency under 150 employees is not covered by the mandate and can register voluntarily to access the same liability shield larger employers get automatically once registered. Either way, a client's own registration status does not extend to the agency; the shield attaches to whichever entity is the actual employer of record for the worker in question, which for a staffing placement is ordinarily the agency, not the client.

A compliance checklist for Utah employers

1. Count total company employees against the 150-employee threshold; do not assume an older 15-employee figure still applies.
2. If covered, register with a status verification system and verify each new hire before they start.
3. Complete Form I-9 in full for every hire regardless of whether the state Act applies.
4. Exclude H-2A and H-2B hires under the employer's own petition from the state verification step.
5. Keep the verification record in a form that can be produced years later if the liability shield is ever invoked.
6. If under 150 employees, weigh registering voluntarily for the liability shield against the administrative cost of running checks the state does not yet require.
7. If using a staffing agency for Utah roles, confirm the agency's own total headcount and registration status, since the shield follows the employer of record, not the client.
8. Remember the shield covers the verification decision itself, not every claim an employer might face; do not treat registration as a general defense beyond that narrow scope.

For where questions about a candidate's work authorization belong in the interview process itself, see work authorization questions in interviews. For how Utah compares with the other states that mandate E-Verify, see E-Verify requirements by state.