Immigration Compliance Checklist for Mid-Market Companies (50-500 Employees)

For mid-market companies sponsoring foreign talent on H-1B, L-1, O-1, or TN visas, immigration compliance has become one of the highest-stakes operational risks in 2026. ICE worksite audits are running at roughly ten times the FY2024 rate, the Department of Labor launched a first-of-its-kind H-1B enforcement initiative, and USCIS site visits are now mandatory to cooperate with under the H-1B Modernization Rule. A single I-9 audit at a 200-person company can generate six-figure penalties if common errors go uncorrected. This guide covers every compliance obligation mid-market employers face in 2026, from I-9 verification and LCA requirements to anti-discrimination rules and state E-Verify mandates, with practical steps HR teams can act on today.

I-9 Employment Verification: The Foundation of Every Compliance Program

Every U.S. employer is required to complete Form I-9 for each person hired, verifying both identity and employment authorization. For mid-market companies with dozens or hundreds of hires per year, I-9 errors compound quickly and represent the single largest area of penalty exposure during an ICE audit.

Current Form I-9 Requirements and Deadlines

The current Form I-9 is edition 01/20/2025, valid through 05/31/2027. USCIS released it on April 2, 2025, with minor changes from the August 2023 version. Two versions of the prior 08/01/2023 edition exist: employers using the version with a 07/31/2026 expiration date are required to transition to the 01/20/2025 edition by that date, while employers using the 08/01/2023 version bearing a 05/31/2027 expiration may continue using it, though electronic I-9 systems are expected to be updated to the newest edition by 07/31/2026.

What employers and employees are required to do:

• Section 1 (Employee): The employee is required to complete this section no later than the first day of employment. The employee attests to citizenship or immigration status and provides work authorization details where applicable.
• Section 2 (Employer): The employer is required to complete this section within three business days of the employee's start date. The employer examines original, unexpired documents from List A (identity and employment authorization combined) or List B (identity) plus List C (employment authorization). Any valid document combination the employee chooses is to be accepted. Specific documents are not to be requested.
• Section 3 (Reverification): Completed when an employee's work authorization expires. The same form or a new one may be used, entering the new document information and expiration date.

Remote verification is now permanently available, but only for employers enrolled in E-Verify and in good standing. The procedure requires receiving front-and-back document copies, conducting a live video interaction with the employee, and checking the "alternative procedure" box in Section 2.

Critical note: The physical re-inspection deadline for I-9s completed under temporary COVID flexibility (March 20, 2020 to July 31, 2023) was August 30, 2023. Employers who have not yet completed re-inspection are already out of compliance and face heightened risk in the current enforcement environment. Employers enrolled in E-Verify may alternatively apply the permanent remote verification procedure described above.

Record Retention Rules

I-9 retention follows a specific formula: each form is retained for three years from the date of hire or one year after the date of termination, whichever is later. I-9s are to be stored separately from general personnel files to protect immigration status and national origin information. If ICE issues a Notice of Inspection (NOI), all I-9s are to be produced within three business days (this is the statutory minimum; ICE may grant additional time).

Common I-9 Errors That Trigger Penalties

The most frequent I-9 violations found during ICE audits include missing forms entirely for current employees, failing to complete Section 2 within the three-business-day window, accepting expired documents, not reverifying expiring work authorization on time, and using outdated form editions. Technical errors like a missing middle initial or incorrect date format receive a 10-business-day correction window (at minimum) before penalties apply. Substantive violations, such as a missing signature or an entirely blank section, do not receive a correction opportunity.

Strong compliance practices vs. common gaps for mid-market employers

• Strong: Electronic I-9 system with built-in error checking and E-Verify integration; designated I-9 administrator with trained backup; annual company-wide internal audits; automated reverification reminders triggered 120 days before document expiration; written response protocol for ICE Notices of Inspection.
• Weak: Paper-based I-9 storage in employee personnel files; no designated compliance owner; audits only after receiving a government notice; reverification tracked manually or not at all; no written plan for responding to an ICE visit.

H-1B and Work Visa Compliance: LCA, Public Access Files, and Site Visits

Companies that sponsor employees on H-1B, H-1B1, or E-3 visas carry specific obligations tied to the Labor Condition Application (LCA) filed with the Department of Labor. These requirements persist for the entire duration of the worker's employment, not just at the time of filing.

LCA and Public Access File (PAF) Obligations

For every certified LCA, a Public Access File is to be maintained and made available for public inspection within one working day of a request. The PAF contains the certified LCA (Form ETA 9035/9035E), the worker's actual rate of pay, a full explanation of the actual wage system, the prevailing wage rate with its source documentation, proof that posting requirements were met, and a summary of benefits offered to U.S. and H-1B workers alike.

LCA posting requirements provide employers three options: physical posting in at least two conspicuous locations at the worksite for 10 calendar days, electronic posting on the company intranet for 10 days, or direct individual notice to each affected worker. For third-party worksites, posting at the client location is also required.

Wage compliance requires paying the higher of the actual wage (what the employer pays similarly situated U.S. workers) or the prevailing wage determined by the DOL. The "no benching" rule means the H-1B worker's full salary is required to be paid even during employer-caused nonproductive time, such as gaps between projects.

LCA penalty amounts (January 2025 inflation adjustment, effective January 15, 2025): standard violations carry fines up to $2,364 per violation; willful failures carry fines up to $9,624 per violation; and willful violations involving displacement of U.S. workers carry fines up to $67,367 per violation, plus back wages, program debarment of one to three years, and potential criminal penalties.

DOL's Project Firewall, launched September 19, 2025, marks the first time the Secretary of Labor has personally certified H-1B investigations. The initiative enables interagency data sharing among DOL, DOJ, EEOC, and USCIS, and targets wage underpayments, SOC code misclassification, U.S. worker displacement, and benching.

USCIS FDNS Site Visits

The Fraud Detection and National Security (FDNS) directorate conducts worksite visits for H-1B, L-1A, R-1, and EB-5 petitions. These visits are mostly unannounced, typically last 30 to 90 minutes, and may occur at any location where the sponsored worker performs duties, including remote worker homes and third-party client sites.

The December 2024 H-1B Modernization Rule made a critical change: employer cooperation with FDNS visits is now mandatory under 8 CFR §214.2(h)(4)(i)(B)(2). Before this rule, participation was technically voluntary. Non-cooperation can now result in petition denial or revocation (typically after a Notice of Intent to Deny or Revoke), flagging for future inspections, and documented refusal in the employer's USCIS records.

What to expect during a visit: Officers verify business existence, tour premises, review documents (LCA, I-129, pay stubs, job descriptions), and interview both HR personnel and the H-1B employee, often separately. They ask about job duties, salary, work location, supervision structure, and whether actual duties match the petition. Triggers for a visit include random selection, third-party placements, high filing volumes, lower-wage positions, prior RFEs, and interagency referrals from DOL or ICE.

Common preparation steps among employers with sponsored workers:

• Front-desk and reception staff who are familiar with the FDNS visit protocol and can reach the designated compliance contact immediately help ensure a smooth visit process.
• A readily accessible binder or digital file for each sponsored employee containing the I-129 approval notice, LCA, offer letter, job description, and recent pay stubs is a common practice.
• Consistency between petition details and employee responses regarding job duties, title, and reporting structure is an important factor during site visits.
• For employees who work remotely or at client sites, records showing the location reported to USCIS are typically maintained and updated through an amended petition if the worksite changes.

ICE Worksite Enforcement in 2026

The shift in ICE enforcement between FY2024 and the current environment is dramatic. During FY2024, ICE issued approximately 230 Notices of Inspection. By comparison, a single enforcement action against three Denver businesses in April 2025 resulted in over $8 million in proposed fines, likely exceeding FY2024's entire nationwide collection. By the first half of 2025, the NOI issuance rate had increased to at least 10x the FY2024 pace (as of mid-2025), driven by expanded funding and a workforce that has grown from roughly 10,000 to over 22,000 officers and agents (as of January 2026). New interagency tools include an ICE-IRS memorandum of understanding (April 2025) granting HSI access to individual taxpayer identity information (names and last-known addresses) for persons subject to final removal orders. The MOU is limited to individual taxpayer identity information and does not authorize access to employer records, payroll data, or W-2 information, and is currently subject to federal court challenge.

Industries targeted span hospitality, agriculture, construction, healthcare, manufacturing, food processing, and technology. No sector is exempt, and mid-market companies with 50 to 500 employees fall squarely within ICE's target range for I-9 audits.

How to Respond to a Notice of Inspection

When ICE serves a Notice of Inspection, the employer has three business days (at minimum) to produce all I-9 forms for current employees and for anyone terminated within the past year. ICE may also request payroll records, business licenses, articles of incorporation, and a current employee roster. I-9s are not to be altered, backdated, or destroyed after receiving the NOI.

Having a written ICE audit response plan in place before the Notice of Inspection arrives is a widely adopted practice among mid-market employers. Designating one compliance contact and one backup, preparing a checklist of required documents, and identifying outside counsel in advance are common elements of such plans.

Anti-Discrimination Compliance Under Section 274B

The DOJ's Immigrant and Employee Rights Section (IER) enforces Section 274B of the INA, which prohibits four categories of conduct: citizenship status discrimination, national origin discrimination, unfair documentary practices (requesting specific or additional documents during I-9 completion), and retaliation against employees who assert their rights.

Section 274B applies to employers with four or more employees for citizenship status discrimination (with no upper limit), and covers national origin discrimination for employers with 4 to 14 employees (employers with 15 or more fall under Title VII/EEOC jurisdiction instead). Mid-market employers face a compliance paradox: they are required to verify work authorization thoroughly without over-documenting, and they are required to avoid both preferring visa holders over U.S. workers and discriminating against authorized foreign nationals.

Recent enforcement reflects both sides of this dynamic. IER has settled cases against employers for requiring permanent residents to show specific documents (penalties exceeding $300,000 in one case), and the relaunched "Protecting U.S. Workers Initiative" now also targets employers who prefer temporary visa holders over qualified American workers.

DOJ IER civil penalties under Section 274B (per the July 2025 inflation adjustment, per 28 CFR §85.5): first order, $590 to $4,730 per affected individual; second order, $4,730 to $11,823; subsequent orders, $7,093 to $23,647. Unfair documentary practices carry penalties of $236 to $2,364 per affected individual.

Practical note: Verification procedures are to be applied identically to every employee regardless of citizenship status or national origin. Any valid combination of List A, or List B plus List C documents, is acceptable. Requesting a specific document, such as a green card, or rejecting valid documents that reasonably appear genuine, may constitute a violation.

E-Verify: Federal and State Requirements

E-Verify is a federal electronic system that compares I-9 data against DHS and Social Security Administration records. While E-Verify remains voluntary at the federal level for most private employers, a growing number of states mandate its use.

States That Mandate E-Verify for Private Employers

Four states require E-Verify for all private employers regardless of size: Alabama, Arizona, Mississippi, and South Carolina. Several others set employee-count thresholds: Florida requires it for employers with 25 or more employees (since July 2023), Georgia for 11 or more, North Carolina for 25 or more, Tennessee for 35 or more full-time equivalent employees, and Virginia for 50 or more employees on qualifying state contracts valued at $50,000 or more.

Ohio's E-Verify Workforce Integrity Act, signed December 2025, took effect March 19, 2026, covering nonresidential construction employers. Texas SB 324 passed the Senate in April 2025 and, if enacted, would require E-Verify for all public and private employers effective January 2027; the bill remains pending in the Texas House. Florida HB 197 (2026 session) proposes eliminating the 25-employee threshold entirely and passed the Florida House in January 2026; it is pending in the Senate. At the federal level, the Accountability Through Electronic Verification Act (S.1151, introduced March 2025) would make E-Verify mandatory for all employers nationwide with phased implementation; the bill was referred to the Senate Judiciary Committee.

State penalties vary widely. Arizona enforces permanent business license revocation for repeat knowing or intentional violations. Florida escalates from $1,000-per-day fines to license revocation. North Carolina imposes penalties ranging from $1,000 to $2,000 per violation for repeat offenses, with a $10,000 penalty for failure to file the required sworn compliance affidavit. California and Illinois take the opposite approach, restricting E-Verify use and penalizing employers up to $10,000 for misuse.

For companies operating in multiple states, mapping each location against the current E-Verify requirements and ensuring the onboarding process handles state-specific rules is an important compliance step.

Export Control Compliance for Employers of Foreign Nationals

A deemed export occurs when controlled technology or source code is shared with a foreign national inside the United States. The government treats that disclosure as an export to the individual's country of citizenship. This applies to visual inspection, oral briefings, shared databases, training sessions, and emails containing controlled technical data.

The rule is governed by the EAR (administered by BIS for dual-use items) and ITAR (administered by DDTC for defense articles). U.S. persons are exempt: citizens, lawful permanent residents, refugees, asylees, and U.S. nationals. All temporary work visa holders, including H-1B, L-1, O-1, TN, and F-1 workers, are subject to deemed export controls.

Companies working with controlled technology in fields such as defense, aerospace, semiconductors, AI, advanced computing, encryption, or biotech are generally required to implement a Technology Control Plan covering physical security, information security, personnel screening, and training. Form I-129 requires an export control certification for H-1B, H-1B1, L-1, and O-1A beneficiaries, creating a documented compliance representation.

Critical note: Restricting job postings to "U.S. citizens only" without a specific, documented export control justification may violate anti-discrimination law under Section 274B.

Current USCIS Filing Fees and Costs for Employers

The April 1, 2024 USCIS fee rule brought the first major adjustment since 2016. Key employer-relevant fees now include:

• I-129 (H-1B): $780 base filing fee (up from $460), plus $600 Asylum Program Fee ($300 for small employers with 25 or fewer full-time equivalent employees; exempt for nonprofits), plus $1,500 ACWIA training fee (for employers with more than 25 full-time equivalent employees; $750 for employers with 25 or fewer FTE), plus $500 fraud prevention fee
• I-129 (L-1): $1,385 base filing fee (up from $460), plus $600 Asylum Program Fee, plus $500 fraud prevention fee. A separate P.L. 114-113 fee of $4,500 applies only to L-1 petitions filed by employers with 50 or more U.S. employees where more than 50% hold H-1B or L-1 status.
• I-129 (O-1): $1,055 base filing fee, plus $600 Asylum Program Fee
• H-1B registration fee: $215 per beneficiary (up from $10)
• Premium processing: $2,965 effective March 1, 2026, with processing within 15 business days (note: the April 2024 fee rule changed the window from 15 calendar days to 15 business days)
• I-140: $715 base filing fee, plus $600 Asylum Program Fee
• $100,000 supplemental fee (Presidential Proclamation 10973): Effective September 21, 2025, this fee applies to new H-1B petitions for beneficiaries outside the United States or those requesting consular processing. It does not apply to change-of-status filings for individuals already in the U.S. (including F-1 students), nor to extensions, amendments, or change-of-employer petitions for current H-1B holders. The fee is scheduled to remain in effect through September 21, 2026, and is the subject of multiple ongoing federal court challenges, including Chamber of Commerce v. DHS (currently before the D.C. Circuit).

For transparent, flat-fee pricing on all visa categories, see Alma's pricing page. Alma's per-visa fees include attorney time, paralegal support, platform access, compliance tracking, employee communication, and RFE responses at no extra charge.

I-9 Penalty Amounts for 2026

Current penalty amounts reflect the January 2, 2025 DHS inflation adjustment:

• Paperwork violations (per I-9 form): $288 to $2,861
• Knowingly hiring or continuing to employ unauthorized workers: $716 to $5,724 (first offense), $5,724 to $14,308 (second offense), $8,586 to $28,619 (third or subsequent offense) per worker
• Document fraud under INA §274C(a)(1) through (a)(4): $590 to $4,730 (first offense), $4,730 to $11,823 (subsequent) per document. A separate lower tier applies to violations under §274C(a)(5) through (a)(6): $500 to $3,988 (first offense), $3,988 to $9,970 (subsequent).
• Pattern or practice of knowingly hiring: Criminal penalties up to $3,000 per worker plus up to six months imprisonment

ICE applies a five-factor test to determine specific penalty amounts: business size, employer good faith, seriousness of the violation, whether unauthorized workers were involved, and history of prior violations. Demonstrating a strong internal compliance program, including regular audits, documented training, and written procedures, directly reduces penalties under the good-faith factor.

Why Choose Alma for Business Immigration Compliance?

See how companies like yours manage immigration with Alma: client success stories

Traditional immigration firms often leave mid-market companies without proactive compliance support, charging hourly rates that make regular audits and training cost-prohibitive. Alma's tech-enabled immigration platform was built for companies at exactly this stage of growth.

How Alma supports mid-market compliance:

Centralized case tracking and compliance dashboards. Alma's platform gives HR teams real-time visibility into every pending case, upcoming deadlines, document expirations, and LCA posting requirements. Instead of tracking visa statuses across spreadsheets and email threads, everything lives in one system with automated alerts.

Flat-fee, transparent pricing. Alma's per-visa pricing means the cost of each case is known before filing. H-1B cap petitions start at $3,500, extensions at $3,000, and O-1 petitions at $8,000. Every fee includes attorney expertise, paralegal support, RFE responses, and platform access with no hourly billing surprises.

Dedicated attorneys with direct access. Every client works with a dedicated attorney who knows their case and company. Alma attorneys respond within 4 to 6 hours on business days, and bi-weekly status calls with the lead attorney and immigration manager are included at no extra charge.

Industry-high approval rate. Alma maintains an industry-high approval rate across all visa categories, reflecting thorough case preparation, rigorous evidence development, and proactive RFE management.

Scalable for growth. Whether sponsoring 5 workers or 50, Alma's Growth and Enterprise tiers scale with headcount. Volume discounts apply for companies managing larger foreign national populations, and Alma offers preferred rates for portfolio companies of Y Combinator, Techstars, Pear VC, and other partners.

Get started with Alma to discuss your company's compliance needs with an experienced immigration attorney.