Federal immigration enforcement has intensified, and restaurants are firmly in the worksite-enforcement spotlight.
For operators, that makes Form I-9 compliance more than an onboarding formality. ICE can inspect an employer’s I-9 records, investigate suspected unauthorized employment, and pursue civil or criminal penalties when violations are found.
The federal government has also been testing new ways to connect information across agencies. One controversial effort involved an agreement between the IRS and Immigration and Customs Enforcement (ICE) that allowed ICE to request certain taxpayer address information for non-tax criminal investigations.
| ⚠️ BREAKING — September 8, 2026: A federal appeals court ruled that the IRS unlawfully disclosed confidential taxpayer information to ICE under that process. The ruling blocks this particular data-sharing pathway for ICE to obtain IRS taxpayer information, but it does not give employers a reprieve from worksite enforcement: ICE can still conduct I-9 inspections, investigate suspected unauthorized employment, and pursue employers through other lawful investigative channels. |
For restaurant operators, the practical takeaway is unchanged: inconsistent I-9s, missed reverifications, and weak employment-verification processes can still create significant exposure.
Auditors also look past the individual file: whether a documented I-9 policy exists, whether managers are trained on it, and whether the restaurant has a track record of catching and correcting its own errors. A written procedure and a self-correction history put an operator in a different risk category than one with no consistent process. The checklist below is what that documented procedure looks like in practice.
I-9 and immigration-related civil penalties are adjusted for inflation on a regular basis, and have climbed into a range where paperwork errors alone can become a five- or six-figure problem for a single restaurant group.
A 40-employee restaurant with systemic paperwork errors could reach base fines in the tens of thousands before any multiplier for aggravating factors. A multi-location group with widespread non-compliance can cross into six- or seven-figure exposure. Beyond the fines: sudden staffing gaps if workers are detained, reputational cost from local news coverage, and higher turnover as an aggressive enforcement climate raises anxiety among immigrant workers.
These fine structures are officially codified under 8 CFR § 274a.10. Due to a pause in the federal inflation adjustments, these amounts remain the active, in-force rates.
Section 1 needs to be completed and signed by the employee no later than their first day of work.
Section 2 needs to be completed by the employer within three business days of the employee's start date.
Missing signatures, missing dates, or a Section 2 completed weeks late are among the most common findings in an audit, and they're also the easiest to catch before someone else finds them.
Some List A and List C documents, including certain work authorization documents, carry expiration dates that require reverification. An employer that misses a reverification deadline is out of compliance even if the original I-9 was filed correctly. Build a calendar or automated reminder for every upcoming expiration rather than discovering it during an audit.
An employee gets to choose which acceptable document or combination of documents to present from the I-9 list. Employers cannot demand a specific document, ask for more documents than required, or apply extra scrutiny to certain employees based on citizenship status or national origin. This is a distinct violation from an incomplete I-9, known as document abuse, and it's the specific pattern the Department of Justice has been settling with restaurants over. Fixing under-verification while introducing over-verification trades one violation for another.
If a restaurant is enrolled in E-Verify, whether voluntarily or because federal contractor status or state law requires it, a case needs to be created for every new hire within three business days of the start date, the same window that governs I-9 Section 2. A completed I-9 with no matching E-Verify case is its own audit finding, separate from anything wrong with the I-9 itself.
If a case comes back as a tentative non-confirmation, notify the employee in writing, let them contest it if they choose, and take no adverse action, including firing or cutting hours, while the case is still open. Acting on it before the contest period ends creates a new violation.
Multi-location operators should also confirm that every location is actually covered under the company's E-Verify enrollment. Coverage doesn't automatically extend to a new location added after the original signup.
Did you know: A name/SSN mismatch does not by itself mean an employee is unauthorized to work. Employers should first check their own records and ask the employee to verify the information against their Social Security record.
If a mistake turns up during a self-audit, draw a single line through the incorrect information, enter the correct information, and initial and date the change. Never use correction fluid, and never backdate a form to make it look like it was completed on time. An improperly corrected I-9 can draw more scrutiny than the original error.
Store I-9 forms in a secure system that's easy to search during an audit. Retention runs for three years after the date of hire or one year after termination, whichever is later. An organized, centralized set of records turns an inspection into a quick document pull instead of a days-long scramble across locations.
I-9 compliance lives in HR, but the records surrounding an employee often span payroll, onboarding and workforce systems.
Use the self-audit to check that employee names, Social Security numbers, hire dates and other identifying information are consistent across your records. Mismatches do not automatically mean a worker is unauthorized, but unresolved discrepancies can create wage-reporting problems and warrant follow-up.
Keeping HR and payroll records aligned also makes it much easier to respond quickly if an inspection or records request arrives.
Workstream's HRIS and Compliance tools build these checks into onboarding instead of leaving them for an annual audit. Automated I-9 and E-Verify processing catches missing signatures and dates as they happen, and digital document storage keeps every record centralized, searchable, and ready if an inspection notice arrives.
Run your I-9 self-audit before ICE runs it for you. See how Workstream keeps onboarding records audit-ready.