- I-9 enforcement has surged dramatically in 2025 and 2026, with ICE inspections running at multiples of prior-year rates and civil penalties reaching up to $28,619 per unauthorized worker for repeat violations
- Every H-1B employer must maintain a Public Access File within one business day of filing the LCA, available for public inspection on one day's notice; missing PAFs are the most common compliance failure found in audits
- Cooperation with USCIS site visits is now codified as mandatory under the H-1B Modernization Rule effective January 17, 2025; refusal to cooperate can trigger petition denial or revocation
- Deemed export rules apply when foreign nationals access controlled technology; biotech companies working with controlled pathogens, biological equipment, or dual-use technology are expected to screen every foreign hire against the Commerce Control List
- A new $100,000 H-1B fee applies to certain overseas hires, and the FY2027 H-1B lottery now uses a wage-weighted selection system that reduces selection odds for entry-level positions common in biotech R&D
- Record retention requirements vary by document type; I-9s must be kept for 3 years from hire or 1 year after termination (whichever is later), while export control records require a minimum 5-year retention
Biotech and pharmaceutical companies depend on global talent to fill specialized roles in drug development, clinical research, and scientific leadership. That dependence comes with significant compliance obligations. From H-1B and L-1 sponsorship requirements to Form I-9 verification, export control screening, and government site visits, the regulatory burden on life sciences employers has grown substantially through 2025 and into 2026. Failure to meet these obligations can result in fines exceeding $28,000 per worker, program debarment, and criminal liability. This guide breaks down each compliance area so that HR, legal, and operations teams can understand what to maintain on file and which deadlines matter most.
Form I-9 Compliance: What Your Team Needs to Know
Every employee hired in the United States must complete Form I-9 to verify identity and employment authorization. For biotech companies with large workforces spread across research campuses, manufacturing facilities, and CRO partner sites, the volume of I-9s creates real exposure when enforcement ramps up.
Current Form I-9 Requirements
The current Form I-9 edition date is January 20, 2025, released by USCIS on April 2, 2025, and valid through May 31, 2027. Employers using the August 1, 2023 edition with a July 31, 2026 expiration date must update their electronic systems to reflect the May 31, 2027 expiration by July 31, 2026. The separate August 1, 2023 edition that already bears a May 31, 2027 expiration remains valid through that date without requiring a system update. Notable changes in the January 20, 2025 edition include reverting the fourth checkbox in Section 1 from "A noncitizen authorized to work" to "An alien authorized to work" to align with statutory language, revised List B document descriptions, and an updated DHS Privacy Notice.
Section 1 must be completed by the employee no later than the first day of employment. Section 2 must be completed by the employer within three business days of the employee's start date. These deadlines are strict, and missing them counts as a substantive violation subject to immediate fines
E-Verify remains voluntary for most private employers at the federal level but is mandatory for companies with federal contracts containing the FAR E-Verify clause. For biotech firms receiving NIH grants, DOD contracts, or other federal funding, E-Verify participation is typically required. A permanent alternative procedure now allows remote document verification for E-Verify enrolled employers in good standing, requiring live video examination and retention of document copies.
Critical deadline: The August 30, 2023 deadline to conduct physical, in-person inspection of any I-9 documents examined remotely during the COVID-era flexibility period has long passed. If a company has not completed in-person document inspection for those forms, it faces immediate per-form penalty exposure.
Penalties for I-9 Violations
Civil penalties effective January 2, 2025, are significant and escalate with repeat offenses:
Substantive and paperwork violations: $288 to $2,861 per form
Knowing hire/continuing to employ (first offense): $716 to $5,724 per worker
Knowing hire (second offense): $5,724 to $14,308 per worker
Knowing hire (third or subsequent offense): $8,586 to $28,619 per worker
Document fraud (first offense): $590 to $4,730 per document
Criminal penalties can reach 6 months imprisonment for pattern-and-practice violations, up to 5 years for employment-verification document fraud under 18 USC 1546(b), and up to 10 to 15 years for broader immigration document fraud under 18 USC 1546(a). ICE can demand I-9 production within as few as 3 business days of issuing a Notice of Inspection.
Common Practices for Biotech HR Teams
- Internal I-9 audits are commonly conducted at least annually, with quarterly spot-checks during high-volume hiring periods. Corrections typically involve drawing a line through incorrect information, entering correct data, and initialing and dating the change. White-out, backdating entries, and destroying originals are prohibited.
- Centralized I-9 storage in a searchable electronic system separate from personnel files, with automated alerts for reverification deadlines and retention expiration dates, is considered a best practice.
- Front-line staff training (receptionists, security, HR coordinators) on how to respond to an ICE inspection is a widely adopted compliance practice. Designating a specific contact who manages the response and contacts legal counsel immediately is standard procedure.
- E-Verify enrollment is required for companies that hold federal contracts or operate in a state with a private-employer mandate (Arizona, Alabama, Mississippi, South Carolina, Florida for 25+ employees, Georgia for 11+ employees, North Carolina for 25+ employees, and several others).
H-1B and L-1 Compliance for Sponsored Employees
Biotech and pharma companies sponsoring workers on H-1B, L-1A, or L-1B visas carry specific ongoing obligations that extend well beyond the initial petition filing. The Department of Labor and USCIS both enforce these requirements actively, and violations can result in back-wage orders, fines, and debarment from the H-1B program.
LCA Posting and Public Access Files
Every H-1B petition requires a certified Labor Condition Application. The employer must post the LCA notice at two conspicuous locations at each worksite for 10 consecutive business days, starting on or within 30 days before the LCA filing date. If an H-1B worker is assigned to a third-party site (a CRO lab, partner hospital, or contract research facility), the LCA must also be posted there.
The Public Access File (PAF) must be created within one business day of filing the LCA and made available to any member of the public within one working day of a request. According to DOL Fact Sheet #62F, the PAF must contain the certified LCA, the wage rate offered, a description of the actual wage system, the prevailing wage determination and its source, documentation of posting compliance, and a summary of benefits offered to both U.S. and H-1B employees. PAF deficiencies remain the single most common compliance failure found in government audits.
PAFs must be stored at the employer's principal U.S. place of business or the worksite listed on the LCA. They must be kept separate from personnel files and retained for one year beyond the last date any H-1B worker was employed under that LCA.
Wage Compliance Under Increased Scrutiny
Every H-1B worker must be paid the higher of the actual wage or the prevailing wage for the position and geographic area. Prevailing wage levels are determined using Occupational Employment and Wage Statistics data, requested through the DOL's Foreign Labor Certification portal. Common SOC codes for biotech positions include 19-1042 (Medical Scientists, Except Epidemiologists), 19-1021 (Biochemists and Biophysicists), 19-2031 (Chemists), and 11-9121 (Natural Sciences Managers).
The DOL launched Project Firewall in September 2025, with at least 175 active H-1B investigations reported as of November 2025. This initiative allows the Secretary of Labor to certify investigations based on "reasonable cause" without needing a formal complaint. Penalties for willful wage violations reach $9,624 per violation (effective January 15, 2025), and willful violations involving displacement of U.S. workers can exceed $67,000 per violation. Back wages must cover the full difference between the required wage and actual compensation for all affected workers. Program debarment of at least 1 year (and up to 3 years for willful violations involving displacement) is also available as a remedy. Employers determined to be willful violators are additionally subject to random DOL investigations for up to 5 years.
A March 2026 Notice of Proposed Rulemaking would significantly increase prevailing wage floors. If finalized, this rule would raise the average certified wage by approximately $14,000 per year and push the majority of current LCA-certified positions below the new minimums. Entry-level biotech positions (postdocs, associate scientists, research associates) would be most affected.
H-1B Dependent Employer Rules
A company qualifies as H-1B dependent if H-1B workers exceed specific thresholds: more than 7 of 25 or fewer total employees, more than 12 of 26 to 50 employees, or 15% or more of 51+ employees. Many mid-size biotech firms with concentrated R&D teams cross these thresholds. Dependent employers filing for non-exempt workers must attest to non-displacement of U.S. workers (within 90 days before or after the petition) and demonstrate good-faith recruitment efforts. Workers earning $60,000+ annually or holding a master's degree or higher in the specialty are exempt from these additional requirements.
L-1 Compliance for Intracompany Transfers
L-1B employees must demonstrate specialized knowledge of the organization's products, services, or processes, with one year of continuous qualifying employment within the preceding three years. L-1B status is limited to 5 years. L-1A (managers and executives) allows up to 7 years. Workers at unaffiliated employer worksites must not be principally controlled by the host entity. USCIS FDNS site visits now routinely cover L-1 petitions, so the same documentation readiness expected for H-1B applies.
Deemed Export Rules: The Overlooked Compliance Area
A deemed export occurs when controlled technology or technical data is shared with a foreign national inside the United States. Under the Export Administration Regulations (EAR), this is treated as an export to that person's most recent country of citizenship or permanent residency. U.S. citizens, lawful permanent residents, and protected individuals (refugees, asylees) are exempt.
Why This Matters for Biotech and Pharma
Biotech companies face extensive deemed export controls. Key Commerce Control List categories include ECCN 1C351 (human and animal pathogens and toxins), ECCN 1C353 (genetic elements and genetically modified organisms containing gene sequences specific to controlled pathogens), and ECCN 2B352 (biological processing equipment including fermenters, centrifugal separators, and containment systems). A January 2025 Bureau of Industry and Security interim final rule added new controls on high-parameter flow cytometers and certain proteomics instruments, with a presumption of denial for Country Group D:1/D:5 destinations (including China), Macau, and designated Country Group E destinations.
A deemed export license is required when the technology has an ECCN on the Control List and a license would be required to export that technology to the foreign national's home country. The fundamental research exclusion protects basic and applied research where results are ordinarily published, but it does not cover proprietary, restricted, or classified research. This distinction is critical for commercial biotech operations that may conduct both published academic collaborations and proprietary drug development.
Employer Obligations Under Export Control Rules
- Screening every foreign national hire against the Commerce Control List before granting access to controlled technology, equipment, or biological materials is required. This applies to employees, contractors, visiting scientists, and temporary consultants.
- A Technology Control Plan (TCP) addressing physical security (restricted lab access, locked storage), information security (network segmentation, email controls), personnel screening, foreign visitor protocols, and incident response is part of BIS's requirements for any deemed export license application.
- Coordination between immigration and export control teams is a key compliance consideration. A foreign national's visa status does not determine export control obligations. Someone on an H-1B or L-1 visa may still require a deemed export license depending on their country of citizenship and the technology involved.
Civil penalties for EAR violations reach $374,474 per violation (as of January 15, 2025) or twice the transaction value. Criminal penalties can reach $1 million and 20 years imprisonment. Companies that handle select agents face additional restrictions: nationals of state sponsors of terrorism are categorically prohibited from access to Biological Select Agents and Toxins unless they hold lawful permanent residence.
USCIS Site Visits: Preparation Is Everything
The Fraud Detection and National Security Directorate (FDNS) conducts compliance visits through the Administrative Site Visit and Verification Program. The H-1B Modernization Rule effective January 17, 2025, codified FDNS site visit authority and made cooperation mandatory. Refusing to participate or obstructing a visit now directly triggers petition denial or revocation.
What Happens During a Visit
Visits are unannounced, typically lasting 30 to 90 minutes. FDNS officers will verify that the business exists and operates as described in the petition, tour relevant work areas, review petition documentation, and interview the H-1B employee (sometimes privately), their direct supervisor, and HR staff. Questions focus on job title, daily duties, salary, work location, reporting structure, and whether the employee's actual role matches what was described in the petition.
Triggers for visits include random selection, third-party placements, frequent location changes without filing amendments, a history of Requests for Evidence, complaints, and positions filed at lower wage levels.
Common Preparation Practices
- Per-employee compliance binders typically contain the approved I-129 petition, certified LCA, PAF, 12 to 24 months of payroll records, the current job description matching petition duties, organizational charts, and employee credentials.
- Briefing every H-1B and L-1 employee on their petition terms (job title, duties, salary, worksite) and instructing them to answer truthfully is standard practice.
- Training front-desk and security staff to identify FDNS officers (who carry government-issued ID) and immediately contact a designated immigration liaison is a common compliance practice.
Record Retention Requirements
Proper document retention is the foundation of audit readiness. Requirements vary by document type:
- Form I-9: 3 years from hire date OR 1 year after termination, whichever is later
- Public Access File: 1 year beyond the last date any H-1B worker was employed under that LCA
- LCA payroll records: 3 years from date of creation
- H-1B/L-1 petition copies and I-797 approval notices: Duration of employment plus 1 year after petition validity expires (best practice)
- Export control records: Minimum 5 years from the latest applicable triggering event (export, reexport, transfer, or other transaction termination)
I-9s stored electronically must meet federal standards: legible hardcopy production on demand, integrity controls, audit trails logging all access, field-level search capability, and unrestricted government access during inspections. Purging records after their retention period expires is a widely adopted practice intended to reduce liability from old, correctable errors being flagged during an audit.
2025 and 2026 Policy Changes Affecting Biotech Employers
Wage-Weighted H-1B Lottery (FY2027)
DHS finalized a wage-weighted selection system replacing the random H-1B cap lottery, effective for the FY2027 registration period (published in the Federal Register on December 29, 2025, effective February 27, 2026). Level IV wage positions receive 4 entries (roughly 61% selection probability), Level III gets 3 entries, Level II gets 2, and Level I receives just 1 entry (approximately 15% probability). This structurally disadvantages entry-level research positions common in biotech, including postdocs, junior scientists, and research associates, unless employers offer higher wages. Alma's analysis of the wage-level rule details the practical impact on selection odds by job category.
$100,000 Overseas Hire Fee
A September 2025 Presidential Proclamation (signed September 19, 2025, effective September 21, 2025) imposes a $100,000 fee on new H-1B petitions for beneficiaries located outside the U.S. without valid H-1B visas. The fee does not apply to extensions, amendments, or changes of status for individuals already in the country. F-1 students changing to H-1B status within the U.S. appear exempt based on USCIS guidance issued October 20, 2025. The proclamation expires September 21, 2026, unless extended, and faces active litigation.
USCIS Fee Increases
The April 2024 fee rule raised the H-1B petition fee from $460 to $780, the registration fee from $10 to $215, and L-1 petition fees by 201% to $1,385. A new $600 Asylum Program Fee applies per petition for employers with 26+ full-time equivalent employees; small employers with 25 or fewer FTEs pay a reduced $300 fee, and nonprofit petitioners are exempt. Premium processing fees increased to $2,965 effective March 1, 2026. Combined with the overseas hire fee, total government filing costs for a single new H-1B worker from abroad can exceed $105,000.
STEM OPT Under Review
DHS is actively re-evaluating OPT and STEM OPT scope through rulemaking. No final rule curtailing the program has issued as of April 2026, but biotech companies that rely heavily on STEM OPT workers for R&D roles are increasingly evaluating contingency plans, including accelerated H-1B sponsorship and early green card processing.
Why Biotech Companies Choose Alma for Immigration Compliance
See how biotech and pharma companies manage immigration programs on Alma's platform
Managing immigration compliance across dozens or hundreds of sponsored employees requires both legal expertise and operational infrastructure. Traditional law firms charge hourly rates that make routine compliance reviews prohibitively expensive, and their systems rarely integrate with HR workflows.
Alma's platform combines experienced attorneys with technology purpose-built for employer compliance. Transparent, per-visa pricing eliminates billing surprises: H-1B petitions at $3,500, L-1 initials at $6,000, and RFE responses included in the base fee. Every case gets a dedicated attorney, real-time portal visibility into case status, and proactive deadline tracking for LCA expirations, visa max-out dates, and reverification windows.
For enterprise clients, Alma provides bi-weekly status calls with a lead attorney, white-glove migration from existing vendors, and compliance dashboards covering the full foreign national population. For individual employees exploring options like the EB-2 NIW or O-1A visa, Alma attorneys have an industry-high approval rate for qualified cases.
Get started with Alma to discuss your company's immigration compliance needs.
Frequently Asked Questions
ICE selects companies for audits based on tips, prior violations, industry-wide sweeps, and data matching with other federal agencies. Biotech and pharma companies are not specifically targeted by industry, but companies with federal contracts, large foreign-national workforces, or prior compliance issues face elevated risk. When ICE issues a Notice of Inspection, the employer typically has 3 business days to produce all I-9 forms. Having a centralized, audit-ready I-9 system is generally considered the single most important preparation step.
Many employers run a full I-9 self-audit annually and spot-check a sample of recent hires quarterly. Additional reviews are common after any merger, acquisition, or significant hiring surge. Self-audits are often performed under attorney-client privilege to protect findings from discovery.
A Public Access File is a set of documents that every H-1B employer must maintain for each certified LCA. Any member of the public, including competing workers, unions, reporters, or government investigators, can request to see the PAF, and it must be made available within one working day. The PAF includes the certified LCA, offered wage, actual wage system explanation, prevailing wage source, posting documentation, and a benefits comparison. Failure to maintain a complete PAF is the most frequently cited compliance deficiency in DOL and USCIS audits.
They apply whenever a foreign national (other than a U.S. citizen, lawful permanent resident, or protected individual) would gain access to technology or source code controlled under the Export Administration Regulations. Not every position triggers deemed export concerns, but in biotech and pharma, roles involving controlled pathogens, biological processing equipment, dual-use gene-editing technology, or proprietary manufacturing processes frequently do. The obligation falls on the employer to screen each position against the Commerce Control List and obtain a deemed export license when required. Violations carry civil penalties exceeding $374,000 per incident (as of January 15, 2025).
Common preparation includes maintaining current compliance binders for every H-1B and L-1 employee, training front-desk staff to identify FDNS officers and contact a designated immigration liaison, and briefing every sponsored employee on the basic terms of their petition (title, duties, salary, worksite). The visit itself typically lasts 30 to 90 minutes and may include a facility tour, document review, and private employee interviews. Under the current H-1B Modernization Rule, cooperation is mandatory, and refusal can result in petition denial or revocation. Alma's platform helps employers maintain audit-ready documentation with automated tracking and real-time case visibility.


