I-9 audit checklist: how to self-audit before ICE does

An I-9 self-audit is a form-by-form review of every Form I-9 you are required to have on file, checking for missing information, expired documents, timing failures, and needed corrections, done on your own schedule instead of ICE's. The mechanics are simple: pull each form, check it against a fixed list of common errors, correct what can be corrected the right way, and document what you did. The reason to do it now is that ICE gives as little as three business days to produce records once an inspection starts.

What triggers an ICE inspection, and what happens next

ICE opens a Form I-9 inspection by serving a Notice of Inspection (NOI), which gives the employer at least three business days to produce the Forms I-9 requested, along with supporting documentation such as payroll records. After reviewing what is produced, ICE can issue several different notices, and the type matters:

A self-audit exists to make sure the forms ICE reviews land you in the bottom two rows of that table, not the top ones. Note that legal commentary through 2026 reported ICE narrowing which errors it treats as "technical" versus "substantive," reducing how many mistakes still qualify for the 10-business-day cure period described above. Treat every error you find as if it will not get a cure period, rather than assuming one will be available.

The per-form checklist

1. Is there a Form I-9 on file at all for every current employee hired after November 6, 1986, and for every former employee still within the retention window? A missing form is a substantive violation on its own; see I-9 retention rules for the retention formula.
2. Section 1 completed and signed by the employee, no later than their first day of work, with no missing required fields (name, date of birth, attestation of status, signature, date).
3. Section 2 completed within three business days of the start date, with the date of hire and the date Section 2 was completed both present. See I-9 timing in hiring for the timing rule itself.
4. Documents recorded correctly: either one List A document, or one List B plus one List C document; title, issuing authority, document number and expiration date (if any) all filled in; no List A document combined with a List B or List C document.
5. Certification signed and dated by the person who actually examined the documents, matching the name of whoever conducted the review, including an authorized representative if one was used; see I-9 authorized representatives.
6. Reverification tracked where it applies: any List A or List C document with an expiration date has a plan to reverify by that date, using Supplement B; see I-9 reverification.
7. No prescreening artifacts: nothing in the file suggests documents were requested or reviewed before an offer was extended and accepted.
8. Corrections made the right way: any existing correction uses a single strike-through, the correct entry, and initials and a current date, not correction fluid or an unexplained overwrite.

How to correct what you find

USCIS's own guidance treats self-audits, and the corrections that come out of them, as a good practice, not a problem to hide. Correct an error the same way regardless of who originally made it:

1. Draw a single line through the incorrect information. Do not black it out,
   erase it, or use correction fluid; the original entry should stay legible.
2. Write the correct information next to or above the line.
3. Initial and date the correction with today's date. Never backdate a
   correction to make it look like it was caught at the time of hire.
4. For a missing signature or date the employer cannot supply after the fact
   without misrepresenting when it happened, attach a signed, dated memo to
   the file explaining what was found and when, rather than altering the
   original fields to imply something false.
5. Keep a short audit log: which forms were reviewed, what was found, what was
   corrected, and the date of the self-audit itself. This is your own record
   that the audit happened, separate from the corrected forms.

What a self-audit will not fix

• A missing Form I-9 entirely. There is nothing to correct on a form that does not exist; the fix going forward is completing one now, dated accurately, with a note explaining the gap, and getting advice on the exposure that gap already created.
• Knowing employment of someone without work authorization. A self-audit is a paperwork review. If it surfaces a substantive question about someone's actual authorization to work, that is a different, more serious conversation to have with counsel immediately, not a line to strike through.
• A pattern across many forms. If the same error recurs across dozens of forms, for example, a recruiter who was consistently completing Section 2 more than three business days after hire, fixing each form individually does not fix the underlying process. Address the process, not just the paper.

What a paperwork violation actually costs

Civil penalties for Form I-9 paperwork violations are set by statute and adjusted for inflation, most recently in a Federal Register notice effective for penalties assessed on or after January 2, 2025. As of that adjustment, paperwork violations under 8 CFR 274a.10(b)(2) range from $288 to $2,861 per form, and knowingly hiring or continuing to employ an unauthorized worker carries a much higher range that reaches $28,619 per worker for a third or subsequent offense. Confirm the current figures directly against the Federal Register before using them in a compliance memo, since these amounts step up with each annual inflation adjustment. The range within each tier is not fixed by the number of errors alone; ICE and the courts weigh factors including the size of the business, good faith, the seriousness of the violation, whether the employee was actually unauthorized, and any history of previous violations. A self-audit that shows a documented, good-faith effort to find and fix errors before any inspection is exactly the kind of record that speaks to good faith if a violation is ever assessed.

Setting up a recurring self-audit, not a one-time event

• Schedule a full review at least annually, and after any change in who handles onboarding or I-9 completion.
• Review every new I-9 within a set number of days of completion, rather than waiting for the annual audit to catch a timing error months later.
• Keep a running list of employees with an upcoming reverification date, checked at every audit cycle.
• Store I-9s separately from personnel files, so a self-audit, or an actual inspection, does not require pulling and re-filing entire personnel folders.
• Assign one person as the point of contact for I-9 compliance, so corrections and audit logs do not end up scattered across whoever happened to touch a given form.
• If you use an authorized representative or an agency for remote hires, include their completed sections in the same audit cycle, not as a separate, forgotten pile.

Common mistakes