July 28, 2026 | Posted By: Hoyer Law Group, PLLC
If your company completes Form I-9s, pay close attention. U.S. Immigration and Customs Enforcement (“ICE”) has significantly overhauled its Form I-9 Inspection fact sheet, and the changes are not minor. Without any public notice, proposed rulemaking, or announcement in the Federal Register, ICE quietly reclassified dozens of I-9 errors, changed how penalties are calculated, and narrowed the window employers have to fix mistakes. The result is a compliance landscape that is materially more unforgiving than it was even a year ago. A St. Petersburg, FL employment lawyer can help employers understand evolving I-9 compliance obligations and reduce the risk of costly penalties during an ICE audit or inspection.
Employers who have been relying on the ability to cure errors after receiving a Notice of Inspection need to rethink that strategy. Here is what the updated guidance means for your business.
A Major Shift: What Was Once “Technical” Is Now “Substantive”
For nearly 30 years, ICE distinguished between two types of Form I-9 errors. Technical or procedural errors were considered relatively minor and could typically be corrected within 10 business days of receiving an inspection notice. Substantive violations were treated as more serious and carried immediate penalty exposure.
ICE’s 2026 guidance collapses much of that distinction. A wide range of errors that employers have long treated as curable now fall into the substantive category, meaning they can result in immediate fines with no opportunity to fix them first. Examples of violations now classified as substantive include:
A missing employee name or date of birth in Section 1. Missing or undated employee or employer signatures. Failure to properly record document data from List A, B, or C in Section 2, even if the employer kept copies of the underlying documents. Failure to record the employee’s first day of employment. Failure to list the name and title of the employer or authorized representative. Using the Spanish-language version of the Form I-9 outside of Puerto Rico.
These are not obscure edge cases. They are the kinds of administrative gaps that appear regularly in I-9 files, especially at companies that have grown quickly, changed HR personnel, or never conducted a formal internal audit.
Electronic Systems and Remote Verification Are Now High-Risk Areas
The updated guidance also focuses on employers using electronic I-9 systems and the alternative remote document review process made available after the COVID-19 pandemic.
On the electronic side, ICE is treating process failures, not just missing fields, as substantive compliance problems. If your electronic I-9 system has a weak audit trail, uses improper electronic signature practices, or does not meet the Department of Homeland Security’s security standards, those failures can lead to penalties.
Employers using remote document verification face similar risks. Failing to indicate on the form that documents were reviewed remotely, or using that alternative procedure without being actively enrolled in E-Verify at the time, may now result in fines. These are no longer considered minor, correctable oversights.
The Per-Form Penalty Structure Means Exposure Adds Up Fast
One of the most important aspects of I-9 enforcement that employers sometimes underestimate is that penalties are assessed per form. Under the most recent Department of Homeland Security inflation adjustment, the current penalty ranges are:
For paperwork violations, including substantive violations and technical errors that are not corrected: $288 to $2,861 per Form I-9. For knowingly hiring or continuing to employ workers who are not authorized to work in the United States: $716 to $28,619 per worker, depending on prior violations.
For a company with 200 employees, even a modest error rate across I-9 files can translate into exposure in the hundreds of thousands of dollars. For larger employers, the math becomes even more sobering. Employers should approach this not as a theoretical risk but as a concrete financial liability that scales directly with workforce size.
Good-Faith Efforts Help, But They Do Not Eliminate Liability
ICE continues to consider statutory mitigating factors when assessing penalty amounts, including the size of the business, the employer’s good-faith efforts to comply, the seriousness of the violation, and whether prior violations exist. However, the updated guidance is clear: demonstrating good faith does not remove liability for underlying substantive violations. It may reduce the penalty amount, but it does not make the violation go away.
This is a significant change in posture. Under the prior framework, good-faith compliance efforts carried more practical weight. Under the current approach, they are factors in the penalty calculation, not a defense to the violation itself. This further underscores why remediation after the fact is a weaker strategy than getting the forms right in the first place.
What Employers Should Do Now
ICE’s 2026 update is the most consequential shift in I-9 enforcement in decades. Given the breadth of the reclassifications and the per-form penalty structure, employers cannot afford to treat I-9 compliance as a background administrative function.
Employers should take the following steps:
- Audit existing I-9 files promptly. Even companies that have conducted recent internal reviews should revisit their files in light of the new classifications. Errors that appeared correctable before may now fall into a substantive category.
- Update internal compliance protocols. HR teams should be briefed on what now constitutes a substantive violation, and any checklists or training materials should be revised accordingly.
- Establish a regular audit schedule. One-time reviews are not enough. A consistent, recurring audit process provides the best foundation for identifying and addressing problems before an inspection.
- Review electronic I-9 systems. If your company uses electronic I-9 software, confirm that it meets DHS standards for audit trails, electronic signatures, and security controls.
- Verify remote verification compliance. Employers who have used the alternative document review procedure should confirm that those forms are properly annotated and that E-Verify enrollment was active at the time.
- Engage legal counsel for privileged audits. A privileged I-9 assessment conducted with the guidance of an attorney protects your findings under attorney-client privilege and positions your company to address any gaps without creating additional risk exposure.
The Bottom Line
The 2026 guidance reframes I-9 compliance from a paperwork task into a measurable financial exposure. Errors that were once a phone call and a 10-day fix are now line items in a penalty calculation, and the per-form math means even a clean-looking file room can carry six-figure risk. Employers who move now, by auditing, updating protocols, and pressure-testing electronic and remote workflows under privilege, will be in a far stronger position than those who wait for a Notice of Inspection to surface the gaps.
For assistance from an experienced employment lawyer, contact Hoyer Law Group, PLLC today.
This blog is for general informational purposes only and does not constitute legal advice. For advice specific to your situation, please consult a qualified attorney.