Department of Homeland Security Issues long awaited final Electronic I-9 rules

In April 2005 when Public Law 108-390 went into effect allowing for employers to sign and retain I-9 employment eligibility verification forms electronically, employers and immigration practitioners alike may have been justifiably confused as provisional guidance from the Department of Homeland Security’s ICE (Immigration Customs and Enforcement) division on their web page http://www.ice.gov/pi/news/factsheets/i-9employment.htm was introduced. ICE guided employers to “interpret the law”(!), and advised employers to “note that there is no single government-wide electronic signature or record-keeping standard. However, some federal agencies have provided electronic record-keeping standards for their own transactions with the public…[which] may serve as a helpful reference for employers until DHS issues regulations to govern the storage of Forms I-9.” For over a year, employers and their counsel had to guess about what standards would comply with the law and fit within the enforcement agency’s vague guidance. Despite tangible benefits in terms of paperwork reduction, many employers opted to wait for something more concrete before investing in an electronic I-9 program and institutional training.

In June 2006, ICE issued an interim rule which provisionally codified standards that employers wishing to use electronic I-9 completion and storage systems should observe. Building on their initial guidance, most of the standards outlined in the provisional rule reflected IRS electronic recordkeeping guidelines, and covered criteria such as accessibility, accuracy, security, and quality of data being captured and systems being used for electronic storage. http://edocket.access.gpo.gov/2006/E6-9283.htm.

Some four years later, an advance copy of final rules modifying 8 CFR 274a.2 has been issued (http://www.justice.gov/eoir/vll/fedreg/2010_2011/fr22jul10.pdf), so presumably interested parties have had sufficient time to comment on the interim rules prior to finalization, unlike some notorious instances of agency “legislation by decree” in which policy “clarifications” were later deemed to have unlawfully omitted the normal public comment period. http://www.jacksonlewis.com/legalupdates/article.cfm?aid=1579.

The final version of the rule contains standards which will be familiar to employers who currently use electronic I-9 systems and the vendors who market such systems. As before, the final rule “permits employers to complete, sign, scan, and store the Form I-9 electronically, as long as certain performance standards… are met.” Changes in the final rule are relatively minor, amounting in most instances to clarifications:
-employers must complete a Form I-9 within three business (not calendar) days;
-employers may use paper, electronic systems, or a combination of paper and electronic systems;
-employers may change electronic storage systems as long as the systems meet the performance requirements of the regulations;
-employers need not retain audit trails of each time a Form I-9 is electronically viewed, but only when the Form I-9 is created, completed, updated, modified, altered, or corrected; and
-employers may provide or transmit a confirmation of a Form I-9 transaction, but are not required to do so unless the employee requests a copy.

This rule does not include any changes to I-9 form content or acceptable documents, but an acceptable document change did occur in 2008 (73 FR 76505) and 2009 (72 FR 2838 - correction). Therefore, while there was nothing dramatic or surprising in the final rule, employers can now rest assured that electronic I-9 completion and storage standards appear to be final.
 

Legislation to Increase I-9 Penalties Introduced in Congress

New legislation that would expand penalties for employers who knowingly hire unauthorized workers has been introduced in the House of Representatives. The “Criminal Penalties for Unauthorized Employment Act of 2010” (H.R. 4627), introduced by Representative Frank Kratovil (D-Md.), would significantly increase imprisonment terms, criminal fines, and civil fines that can be levied against an employer or individual with “hiring authority.” A person with “hiring authority” is anyone who has “direct authority to make a decision to hire or to recruit or refer for a fee, an individual for employment.”

Currently, criminal penalties for knowingly hiring unauthorized workers apply only if a “pattern or practice” can be shown. An entity or individual may be fined $3,000 and an individual may be imprisoned for up to six months for the entire “pattern or practice.”

The proposed legislation would impose criminal penalties for each unauthorized worker, and criminal penalties would increase with each subsequent conviction:
- For a first offense, a fine of $2,500 and/or imprisonment of up to 1 year
- For a second offense, a fine of $5,000 and/or imprisonment for up to 2 years
- For a third or subsequent offense, a fine of $10,000 and/or imprisonment for up to 5 years

The bill also would increase the civil penalties assessed:
- For a first offense, a fine ranging from $1,000 – 5,000 (currently $250 – $1,000)
- For a second offense, a fine ranging from $5,000 – 10,000 (currently $2,000 – $5,000)
- For a third or subsequent offense, a fine ranging from $10,000 – 20,000 (currently $3,000 – $10,000)
 

 

Stay tuned as Jackson Lewis will continue to follow this legislation and update readers through this blog.

When Shopping for I-9 Software, Don't Forget the Data Security

Due to the dramatic increase in ICE worksite enforcement actions in 2009, employers are taking steps ensure their I-9 compliance, and utilizing such tools as internal audits, training, and implementation of I-9 software. I-9 software can often help to minimize the disorganization and clerical errors that can result in an absolute nightmare upon receipt of an ICE inspection notice. In response to growing employers’ compliance efforts, software companies are rushing “feature-rich” I-9 software packages to market. And while employers tend to scrutinize the user features available when selecting I-9 software, many are overlooking a vital feature – data security.

Once I-9 software has been implemented by your company, proper data security is required to protect your employees’ stored personal data. Minnesota state agencies using a Texas-based I-9 software provider with inadequate data security recently discovered that the personal data of nearly 500 employees may have been made accessible through the software provider’s web site, displaying employee names, dates of birth, hire dates, and Social Security numbers. This is a wake-up call to many employers that data security is a feature that cannot be overlooked when selecting I-9 software.
Employers should always ask their software provider to outline the software’s data security features. Compare them to features offered by other providers. Generally, you want to ensure that all user accounts are properly password protected, a sophisticated encryption method is used to encrypt the data, and if the data is stored remotely by the software provider, measures are taken to ensure that data is protected from external hackers and that the data is properly isolated to ensure that it is not erroneously accessed by another user.
I-9 software is an excellent tool to use in the quest for I-9 compliance, and a fear of a potential data compromise should not prevent you from implementation. Most software packages have adequate data security features, and a few have substantial ones. However, employers should be aware of the importance of data security when shopping for an I-9 software package, and should move data security to the top of their list of questions for their potential providers.