A distribution manager at one of our accounts in Conyers called us in late spring. He'd received a visit at the front office from an ICE Homeland Security Investigations agent — an NOI, Notice of Inspection — and his first question was whether he needed to produce Forms I-9 for the temp workers on his floor. The short answer was no, because our agency holds those forms. His follow-up question was better: could he still get pulled into the audit anyway? That one took longer to answer.
The answer is: sometimes, yes. The structure of a staffing arrangement doesn't fully insulate a client employer from ICE scrutiny, especially when investigators believe the client exercises real control over the workforce. And the rule changes ICE quietly implemented in March 2026 made the whole landscape more expensive for everyone on the chain.
In a staffing arrangement, the agency is the legal employer and carries the I-9 obligation. When ICE issues a Notice of Inspection, the three-business-day production window belongs to the agency, not the client site. But a client employer can be pulled into the audit if investigators determine the client shares substantial control over the workforce. Preparation means knowing which forms the agency holds, confirming compliance with the March 2026 reclassification rules, and having a contract that clearly places I-9 responsibility on the agency. The cost of getting this wrong has never been higher: paperwork violations run $288 to $2,861 per form under 2026 penalty schedules.
Why Audits Are Hitting Staffing Arrangements Now
ICE issued roughly 230 Notices of Inspection across the entire country in 2024. In the first half of 2025 alone, that volume ran at approximately ten times that rate. That's a different enforcement environment than most HR teams built their compliance programs around.
Staffing is one of the industries ICE names explicitly as a priority target in 2026. Construction, food manufacturing, hospitality, and retail are on the same list. The reason staffing firms draw disproportionate attention isn't a mystery: a staffing operation that places 40 workers a month generates 480 new I-9 forms a year. More forms means more surface area for errors, and ICE auditors know that. A company with 20 direct employees and one bad hire is a single violation. A staffing firm with a paperwork problem across 200 placements is a different kind of audit outcome.
For Georgia operations, the enforcement environment adds a second layer. Georgia's Illegal Immigration Reform and Enforcement Act (O.C.G.A. § 13-10-91) requires private employers with 11 or more full-time employees to use E-Verify on top of the federal I-9. That obligation runs through the staffing firm for every placement, since the agency is the employer of record. We run E-Verify on every new hire we place, regardless of which client site they're going to. The rule at the federal level is that E-Verify can't be used selectively by site or by client. Any staffing firm that has ever varied its E-Verify practice by account has created exposure it may not know is there.
The point isn't that audits are inevitable. It's that the frequency is high enough now that "we've never had an issue" isn't a compliance posture. We've been telling clients this for most of 2025, and some of them listened before it mattered.
Who Holds the I-9 in a Staffing Arrangement
The legal employer completes, retains, and produces the I-9. In a staffing arrangement, that's the agency. The temp worker is on the agency's payroll and covered by the agency's workers' comp policy, which makes the agency the "employer" for purposes of the Immigration and Nationality Act's employment verification requirements.
That means when an NOI arrives at a client site, the client doesn't need to produce I-9 forms for temp workers placed by the agency. The production obligation belongs to the agency. The three-business-day response window is the agency's to meet, not yours.
Where clients can get pulled in is the joint employer question. The NLRB restored the 2020 joint employer standard in February 2026, which defines a joint employer as a party that exercises "substantial direct and immediate control" over essential employment terms: hiring, firing, discipline, supervision, and wages. If a client is setting the temp workers' schedules, issuing direct discipline, making pay decisions alongside the agency, or handling onboarding paperwork that belongs to the agency, ICE investigators can argue that client is functioning as a joint employer and therefore shares the I-9 obligation.
We've seen this come up in accounts where the client's HR team was collecting document copies from temp workers at orientation "just in case." The intent was reasonable. The effect was muddier: it looked like the client was completing part of the I-9 process, which raised the question of which entity was actually the employer of record. We stopped that practice at two accounts specifically because we didn't want the documentation trail suggesting shared hiring authority.
A clean staffing contract that places I-9 completion, retention, and production responsibility entirely on the agency is the clearest way to maintain the separation. The contract won't override a factual finding that a client exercised real employer authority. But it's evidence of the parties' intent and the operational structure they agreed to.
What ICE Checks First After the NOI
The first thing investigators do with a produced record set is compare it to a payroll list. They ask for both simultaneously: the I-9 forms and a list of all current and recently terminated employees. Every name on the payroll list should have a corresponding I-9. A missing form isn't a paperwork error. It's a failure to verify, which carries the same presumptive weight as a knowing violation.
After the headcount reconciliation, ICE walks each form against the current inspection checklist. That review breaks into three sections.
Section 1 is what the employee completed. Investigators check that the employee provided their full name, date of birth, address, and date of hire. They check that the signature line is dated. They check that Box 4 (immigration status) has any required USCIS number and a listed expiration date. Under the March 2026 reclassification rules, a missing date of birth, a missing signature date, and a blank USCIS expiration date are all substantive violations now. Each one is a separate potential fine.
Section 2 is what the employer completed. Investigators look at whether List A or the List B and C combination is filled in with complete document titles, issuing authorities, document numbers, and expiration dates. They check that the employer's name, title, signature, and the date of that signature are all present. The date in Section 2 has to reflect when the employer actually examined the documents, which must be within the first three business days of employment. A missing employer title or an undated Section 2 are both substantive violations under the current guidelines.
Supplement B matters for any worker whose employment authorization document has expired since the original I-9 was completed. If a worker had a work authorization document with an expiration date and the employer didn't reverify at the right time, that's an error investigators catch. For staffing agencies with high turnover and workers on temporary work authorizations, this section produces the most overlooked violations.
Retention is the last thing the audit covers, and it's where some employers create problems by being too organized in the wrong direction. I-9s should be stored separately from general personnel files. The retention period is three years from the start date or one year from termination, whichever comes later. An employer that destroys I-9s too early (because they're mixing them with personnel files and applying a different retention schedule) is missing forms that investigators expect to find.
The March 2026 Rule Change That Redrew the Penalty Map
Before March 16, 2026, the enforcement framework that governed I-9 audits came mostly from a 1997 INS guidance memo called the Virtue Memorandum. It drew a clear line between substantive violations (no cure window, immediate fines) and technical or procedural errors (10-business-day correction window after being cited). Most common paperwork mistakes landed in the technical category.
ICE updated its Form I-9 Inspection fact sheet on March 16, 2026, and quietly reclassified a dozen-plus errors from technical to substantive. The practical effect is that errors most employers and most staffing agencies had been treating as correctable now generate fines with no cure period.
The reclassified list covers: missing date of birth in Section 1, missing date next to the employee signature, no expiration date in Box 4, missing name or title of the employer representative in Section 2, and incomplete or incorrect List A, B, or C document information. Use of the Spanish-language I-9 form outside Puerto Rico is also now substantive.
A staffing firm that completed I-9 forms before March 2026 and hasn't gone back through them against the new guidelines has a portfolio of forms that looked compliant under the old rules and are now substantive violations waiting to be found in an audit. That's not a hypothetical for most operations. It's math.
Penalties under the current schedule run $288 to $2,861 per Form I-9 for paperwork violations on a first offense. An agency with 500 active placements and a systematic error on a single field would face between $144,000 and $1.4 million in exposure before any charges related to the workers themselves. An employer that knowingly hired unauthorized workers faces a separate range of $288 to $28,619 per worker.
ICE does factor in good-faith compliance efforts when it calculates penalty amounts. An employer that ran an internal self-audit, documented what it found, and corrected errors before the inspection will have a meaningfully different negotiation than one that didn't. That documentation is worth having. It doesn't eliminate the fine for substantive errors under the new rules, but it affects the formula.
Audit Readiness Checklist for Temp Worker Placements
This checklist is for client employers whose workforce includes temp workers placed by a staffing agency. It covers what you should confirm before an NOI arrives, not after.
Confirm who holds the forms. Ask your staffing agency for written confirmation that they complete, retain, and will produce I-9 forms for all placed workers. If the contract is silent on this point, get it added. A contract that places the obligation on the agency is also the document that clarifies you're not a joint employer for I-9 purposes.
Ask about the March 2026 self-audit. Any staffing agency that hasn't gone back through its I-9 portfolio under the March 2026 reclassification guidelines is operating with unquantified exposure. Ask directly whether they've run that review and what they found. A good agency has done it and can tell you.
Check your own I-9 practice for direct hires. If you have any employees on your own payroll (not through the agency), those I-9s are your obligation. If you haven't reviewed them against the current substantive-violation list, budget a day for it. Five to ten minutes per form is a reasonable estimate. A roster count tells you whether any forms are missing before an auditor does.
Store I-9s separately from personnel files. This is a best practice ICE itself recommends. A file cabinet or electronic folder that holds only I-9 records means your production response to an NOI is faster, and it limits what an ICE agent sees when they're reviewing documents.
Know your response contacts. The three-business-day window is short. Know who at your staffing agency handles compliance inquiries and what that person's process is when an NOI arrives at one of their client sites. If you're the client and ICE shows up at your facility, your first call should be to the agency, not to try to produce records yourself.
For a broader look at what a staffing contract should address before work begins, our staffing agency SLA guide covers the agreement terms that protect both sides in a Georgia light industrial arrangement. And for the foundational compliance picture on I-9s and E-Verify in Georgia, including the state mandate that applies on top of the federal requirement, the I-9 and E-Verify compliance guide for Georgia employers walks through where the two systems differ and why running one doesn't mean you've covered the other.
We run I-9 and E-Verify compliance across 27 accounts in Gainesville, Lawrenceville, Conyers, Smyrna, and the Atlanta metro. We completed a portfolio review under the March 2026 guidelines this spring and updated our standard I-9 completion checklist to reflect the reclassified error list. If you want to understand how I-9 compliance works in a staffing arrangement at your facility, or if you're evaluating a Georgia staffing partner who can document their I-9 practice, Schedule a Call and tell us what you're working with.
