The rule change
What changed on 16 March 2026
ICE reclassified more than ten previously correctable I‑9 errors as substantive violations. The distinction matters more than it sounds.
Technical violation
10 business days
You are notified, you fix it, and no penalty follows.
Substantive violation
No cure window
The civil penalty applies immediately. $288 to $2,861 per form.
A missing date of birth used to be a paperwork problem. As of March 2026 it is a fine. So is a missing employee signature date, an incomplete preparer certification, and an employer representative's name or title left blank in the Section 2 attestation.
One consequence deserves stating plainly, because it reverses what many employers were told for years: retaining a copy of the document does not cure a missing or incomplete field. There is no safe harbor in the file cabinet. If the field is blank, the violation stands — whether or not the passport scan sits behind it.
The part nobody mentions
The liability moved to the software
Under the electronic-system standards at 8 CFR § 274a.2(e)–(i), an I‑9 platform that does not enforce the new requirements at submission now generates exposure for the employer using it.
“
Producing a completed form is no longer the standard. Producing a form that would survive a 2026 inspection is. An employer choosing an I‑9 platform this year is choosing a liability posture, not a workflow.
Requirement by requirement
Where ZipID stands against each rule
Every category below was reclassified or reaffirmed as substantive in the March 2026 guidance. This is how ZipID handles each one.
Enforcement at submission means the form cannot be filed incomplete. The error never enters the record — so there is nothing to remediate later.
When the letter arrives
You have three business days
ICE issues a Notice of Inspection and the clock starts. Not three weeks — three business days to produce the records. For most employers that window is the whole problem: the forms exist somewhere, across locations, in varying states of completeness, and nobody knows which ones will fail until they are pulled.
ZipID records are indexed, searchable, and exportable on demand, with a tamper-evident audit trail showing every action every user took on every form. The compliance dashboard also carries a substantive-violation risk view — records that would have failed the March 2026 standards had they not been blocked at submission.
