The short version
- Form I-9 is universal (8 U.S.C. §1324a); E-Verify is not, unless a specific trigger — most often the FAR clause 52.222-54 — makes it contractual.
- The FAR clause requires enrollment within 30 days of contract award and verification of assigned employees within 90 days, and can require company-wide E-Verify use once enrolled.
- Most audit findings are timing and paperwork, not authorization status: late Section 2 completion, missing signatures, wrong document combinations, and un-reverified expirations.
- I-9s must be kept for three years after hire or one year after termination, whichever is later, and produced within three business days of an ICE Notice of Inspection.
Two different obligations, easy to conflate
Every employer in the United States has to complete Form I-9 for every new hire. Almost none of them are required to use E-Verify. The two get treated as one obligation on a lot of jobsites, and that confusion runs in both directions — contractors who believe E-Verify is mandatory everywhere, and contractors with a federal contract who don't realize the clause in their own contract just made it mandatory for them.
Form I-9 comes from the Immigration Reform and Control Act of 1986, codified at 8 U.S.C. §1324a, with procedural rules at 8 CFR §274a.2. E-Verify is the federal system that checks I-9 data against Social Security Administration and Department of Homeland Security records — voluntary, unless a specific trigger makes it a contract requirement. For contractors, the most common trigger is the Federal Acquisition Regulation's E-Verify clause.
Form I-9: what has to happen, and when
Section 1 is the employee's: name, attestation of citizenship or work-authorized status, signature, completed no later than the first day of employment for pay. Section 2 is the employer's: within three business days of that first day, physically examine original, unexpired documents establishing identity and work authorization and record them — either one document from List A, or one from List B plus one from List C.
Section 3 covers reverification: when a document recorded in Section 2 has an expiration date, the employer must reverify before it expires, using the current version of the form. A worker whose employment authorization document lapsed months ago and was never reverified is functionally undocumented on paper, regardless of actual status.
The FAR clause: 52.222-54
Executive Order 12989, as amended, requires federal agencies to include an E-Verify clause in covered solicitations and contracts, implemented as FAR 52.222-54, Employment Eligibility Verification. When it's in your contract, three obligations follow. First, enroll in E-Verify within 30 calendar days of the contract's award date if you aren't already enrolled. Second, once enrolled, use E-Verify to confirm employment eligibility for new hires — company-wide in most enrollment configurations, not only for employees assigned to the federal contract. Third, verify employees assigned to perform work on the contract within 90 days of the contract's award or the employee's assignment, whichever is later.
The clause generally applies to contracts with a period of performance over 120 days and a value above the simplified acquisition threshold then in effect, subject to exceptions — work performed entirely outside the United States, contracts solely for commercially available off-the-shelf items, and a few others. It flows down to subcontracts for services or construction above the same threshold, with a narrower carve-out for subs supplying only COTS items. Read your own clause and current contract terms; exact triggers and dollar thresholds are set in the FAR text in effect at the time, not assumed from a prior job.
Enrolling, and staying enrolled correctly
Enrollment runs through E-Verify.gov and requires signing a Memorandum of Understanding with DHS and the Social Security Administration. The MOU sets the rules for use: run E-Verify consistently, only after a job offer is accepted and Form I-9 is completed, and never selectively based on a worker's citizenship, national origin, or perceived immigration status. Selective or delayed use is itself a compliance finding, separate from anything on the I-9 form, and can draw a discrimination referral under 8 U.S.C. §1324b.
California layers on its own restriction. Labor Code §2814 prohibits a private employer from using E-Verify to check an existing employee or an applicant who hasn't received a job offer, except where federal law requires it — which a FAR-clause contract does — and requires the employer to notify an affected employee within 30 days of learning of a tentative-nonconfirmation mismatch from the system.
The paperwork errors that actually get cited
ICE and DHS audits rarely turn on whether someone was actually authorized to work. They turn on whether the form was completed correctly and on time. The recurring findings:
- Section 2 completed later than three business days after the start date.
- Missing signatures, dates, or a preparer/translator certification where one was used.
- Document combinations that don't satisfy the List A, or List B plus List C, requirement — most often an expired document accepted as current.
- An outdated edition of the I-9 form. USCIS revises the form periodically, and using a retired edition after its expiration date is a violation even when every field is filled out correctly.
- No Section 3 reverification for a work-authorization document that had an expiration date.
- Asking for more or different documents than the employee chooses to present — over-documentation, itself a form of discrimination under §1324b.
Retention: the form outlives the job
Retain each I-9 for whichever is later: three years after the date of hire, or one year after employment ends (8 CFR §274a.2(b)(2)(i)(A)). Standard audit posture is to keep I-9s in a file separate from the personnel file, so a document-production request doesn't require handing over unrelated personnel records. On a federal contract, keep the E-Verify case verification number and confirmation alongside the I-9 — the two records are reviewed together.
What an ICE worksite audit looks like
An inspection starts with a Notice of Inspection, giving the employer three business days to produce I-9s for current and former employees within the retention window. ICE can follow with a Notice of Suspect Documents or a Notice of Discrepancies. If violations are substantiated, a Notice of Intent to Fine follows, with separate civil-penalty ranges for paperwork violations and for knowingly employing an unauthorized worker — the current per-violation amounts are published and periodically adjusted for inflation by DHS, so confirm the current figure rather than an old one. For a federal contractor specifically, a knowing-hire finding also risks suspension or debarment from future federal awards, on top of the fine.
Cited to the statute
8 U.S.C. §1324aIRCA employment-eligibility verification requirement; Form I-9.8 CFR §274a.2I-9 completion procedures and retention rule (later of 3 years from hire or 1 year from termination).FAR 52.222-54Employment Eligibility Verification clause requiring E-Verify enrollment and use for covered federal contracts.Labor Code §2814California restriction on private employers' use of E-Verify, and mismatch-notice requirement.
This article is educational and does not constitute legal or tax advice. Statutes and agency requirements change; confirm current rules with the California DIR, the U.S. Department of Labor, the IRS, or qualified counsel before relying on them. Aeternus Dynamics is a compliance and advisory firm, not a law or accounting firm.