Storing the Forms Electronically
An electronic system is not merely a filing cabinet with a screen. The regulation prescribes integrity controls, a quality assurance program, an indexing system, an audit trail on every action, and signature standards whose failure makes the form itself improperly completed.
The rule in short
An employer may generate or store the forms electronically only in a system with reasonable controls for integrity and against unauthorized alteration, a quality assurance program with regular evaluations, an indexing and retrieval system, and the ability to reproduce legible hardcopies. Every creation, update or correction must produce a secure permanent record of date, identity and action. A defective electronic signature makes the form improperly completed.
Moving verification records into a software system removes some risks and creates others. Legibility ceases to be a problem, retrieval becomes fast, and the retention calculation can be automated. In exchange, the employer takes on a set of obligations that attach to the system itself, and a failure at that level can make every form it holds improperly completed.
The five requirements a system must meet
The regulation lists what an electronic generation or storage system must include. Reasonable controls to ensure integrity, accuracy and reliability. Reasonable controls designed to prevent and detect unauthorized or accidental creation, addition, alteration, deletion or deterioration of a stored form, including any electronic signature. An inspection and quality assurance program evidenced by regular evaluations, including periodic checks of stored forms. A retrieval system with an indexing system. And the ability to reproduce legible and readable hardcopies.
The third of these is the one employers most often lack. A quality assurance program is not a feature a vendor supplies; it is an activity the employer performs. Regular evaluations of the system and periodic checks of the stored forms have to happen, be recorded, and be producible. An employer whose only evidence of quality assurance is the vendor's marketing material has not met the requirement.
Legibility and the indexing obligation
The regulation defines its terms with unusual precision. Legibility means an observer can identify all letters and numerals positively and quickly, to the exclusion of all others. Readability means the observer can recognize groups of letters or numerals as words or complete numbers. Reasonable data compression is permitted, but the employer must ensure that the reproduction process preserves both qualities.
Indexing is defined functionally. An indexing system permits the identification and retrieval, for viewing or reproduction, of the relevant documents and records held in the system. The requirement is satisfied where the indexing is functionally comparable to a reasonable hardcopy filing system, and no separate description database is needed if comparable results can be achieved without one. A complete description of both the system and its indexing must be maintained and made available on request.
| Requirement | What it means in operation | Where employers fall short |
|---|---|---|
| Integrity and anti-alteration controls | Access limits and change detection over stored forms and signatures | Administrative accounts able to edit records without a trace |
| Quality assurance program | Regular system evaluations and periodic checks of stored forms | No recorded evaluations because the activity never happened |
| Indexing and retrieval | Identify and retrieve any record, with the index described in writing | Search works, but no written description of the indexing exists |
| Audit trail | Date, identity and action recorded for every access and change | Trail exists but cannot be exported alongside the form |
| Unrestricted agency access | No contract or license limiting a federal agency's use of the system | Vendor terms restricting third-party access to software or documentation |
| Electronic signature standards | Acknowledgment of reading, affixed at the transaction, identity preserved | A checkbox with no record verifying who produced the signature |
The description obligation is easy to satisfy and easy to overlook. What must be maintained and made available on request is a complete description of the electronic generation and storage system, including all procedures relating to its use, and a complete description of the indexing system. Those are two documents the employer writes, not two features the software has. Their absence is a documentation failure, and insufficient documentation is expressly treated as a violation.
The audit trail and the security program
The security obligation is stated as a program rather than a control. It must ensure that only authorized personnel have access, provide for backup and recovery against loss, ensure that staff are trained to minimize the risk of unauthorized or accidental alteration or erasure, and ensure that whenever a record is created, completed, updated, modified, altered or corrected, a secure and permanent record is created establishing the date of access, the identity of the person, and the particular action taken.
That final clause is the audit trail requirement, and it is exacting. It is not enough to log logins; the trail must capture the action. The regulation adds that an action or inaction resulting in unauthorized alteration, loss or erasure of electronic records is a violation where it is known, or reasonably should be known, to be likely to have that effect. An employer that grants broad edit rights to a shared administrative account is squarely within that sentence.
The regulation forbids an electronic system being subject, in whole or in part, to any agreement that would limit or restrict access to and use of the system by a federal agency on the employer's premises, including personnel, hardware, software, files, indexes and software documentation. Standard vendor terms frequently do exactly that. The point to check is in the software agreement, not in the system.
A related requirement concerns what the system can be asked to produce. At inspection the employer must supply, if requested, any reasonably available electronic summary file containing all the information fields on the stored forms. That is a reporting capability rather than a storage one, and a platform that cannot export its own field data leaves the employer explaining a limitation it accepted at procurement. The production obligations that follow are set out in preparing the production an auditor expects.
Electronic signatures, and the consequence of getting them wrong
Where the form is completed electronically, the attestations must be captured by a system that includes a method to acknowledge that the attestation has been read by the signatory. The signature must be attached to, or logically associated with, the completed form. The system must affix the signature at the time of the transaction, create and preserve a record verifying the identity of the person producing it, and provide a printed confirmation on the employee's request.
The consequence of failing those standards is stated without qualification. An employer that chooses electronic signature for a required attestation and does not comply is deemed not to have properly completed the form. The defect is therefore not a system problem to be fixed prospectively; it is a verification violation on each affected form, and the volume can be the whole of the workforce hired since the system was adopted.
Migration, continuity and the records that predate the system
Employers change systems. The regulation permits it, provided all systems meet the storage, documentation, security and signature requirements and existing forms are retained in a system that remains fully accessible. Full accessibility is a continuing obligation for as long as the retention measure runs, calculated as described in retaining and destroying records, which can be considerably longer than a vendor relationship.
The practical failure is a decommissioned system whose archive can no longer be read, or whose audit trails were not migrated with the forms. Both surface at inspection, when the trail is requested alongside the record. Because a system decision made for convenience can produce violations across an entire hiring cohort, employers selecting or replacing a platform frequently ask an electronic records compliance counsel to review the vendor terms and the process documentation before migration rather than after. The correction rules that the audit trail must reflect are set out in annotating a form completed late.
Points to carry away
- The system must include reasonable controls for integrity and controls designed to prevent and detect unauthorized or accidental alteration.
- An inspection and quality assurance program with regular evaluations and periodic checks of stored forms is required.
- An indexing system permitting identification and retrieval is required, and a complete description of it must be available on request.
- Every creation, completion, update, modification or correction must generate a secure permanent record of date, identity and action.
- A system agreement that would limit a federal agency's access to the system, its files or its documentation is not permitted.
- Failure to meet the electronic signature standards means the form is deemed not properly completed.
Questions readers ask
Can an employer run more than one electronic system at a time?
Yes, and the regulation contemplates it. One or more systems may be used, each must meet the requirements independently, and each must remain available for as long as the retention obligation runs. New systems may be implemented provided all systems satisfy the electronic storage, documentation, security and signature provisions and existing forms are retained in a system that remains fully accessible. The last condition is the one that catches employers, since a decommissioned system with archived records still has to be readable.
What is required at the moment of inspection?
Three things. The employer retrieves and reproduces only the forms and supporting documents specifically requested, along with their associated audit trails. It provides the agency with the resources needed to locate, retrieve, read and reproduce them, meaning hardware, software, personnel and documentation. And, if requested, it provides any reasonably available electronic summary file, such as a spreadsheet containing the information fields on the stored forms. A system that cannot produce that summary makes the review slower for everyone.
Does a vendor contract satisfy the documentation requirement?
Not on its own. What must be maintained and made available is documentation of the business processes that create the retained forms, that modify and maintain them, and that establish their authenticity and integrity, such as audit trails. A commercial agreement describes what the vendor supplies, not how the employer's own process works. Insufficient or incomplete documentation is expressly treated as a violation, so the gap between a contract and a process description is a real exposure.
Sources
- 8 C.F.R. § 274a.2 — Verification of identity and employment authorizationSets the electronic retention standards, documentation, security and electronic signature requirements in full.
- USCIS — Handbook for Employers M-274, Section 10.1The agency's account of the permitted storage systems and what each requires.
- USCIS — Handbook for Employers M-274, Section 9.0States that an electronic audit trail should reflect all corrections and additions made to the form.
- USCIS — Handbook for Employers M-274, Section 10.3Describes what must be produced from an electronic system on inspection.
- 8 U.S.C. § 1324a — Unlawful employment of aliensPermits retention of an electronic version of the form and sets the underlying obligation.
- ICE — Form I-9 InspectionConfirms that electronic records and their audit trails form part of the inspection.
Pinnacle Law Review is a publication, not a law firm. This article states general rules and cites its sources; it is not advice about any particular case, and the law differs by state and changes over time.
More in Workplace Immigration
What an Employer May Not Do While a Case Is Contested
While a verification mismatch is being contested, an employer may not terminate, suspend, delay training, withhold or lower pay, or take any other adverse action against the worker because of the mismatch. The standstill lasts until the case reaches a final result. Ordinary personnel decisions unconnected to the mismatch remain available, but the employer carries the burden of showing that the decision had an independent basis.
Technical Failures You Are Given Time to Correct
A technical or procedural failure is treated as compliance where the employer made a good faith attempt, unless the agency explained the basis for the failure, allowed at least ten business days to correct it, and the employer did not correct it voluntarily within that period. Uncorrected defects become substantive violations. The rule is unavailable to an employer engaged in a pattern or practice of unlawful employment.
Recruitment Advertising That Excludes Lawful Workers
The statute prohibits discrimination with respect to recruitment or referral for a fee, so a job advertisement that excludes lawful workers on the basis of citizenship status is within its reach without any hiring decision being made. Exceptions exist where the restriction is required by law, regulation, executive order or a government contract, or is determined essential to doing business with a government body. A commercial preference is not among them.