Visa and Work Permit Tracking Mistakes HR Teams Make

Visa and work permit tracking mistakes HR teams make

Most US employers who get caught out in an I-9 audit didn't misread the law. They had no single person accountable for immigration dates, and the dates lived in a spreadsheet nobody fully trusted. These six failures cause most of the damage:

• No named owner for immigration compliance
• Dates tracked in a spreadsheet or spread across teams, with no record of who did what
• I-9 records and sponsorship files kept together, or out of sync
• Reverification missed for workers with time-limited authorization
• No plan to produce Forms I-9 within three business days of an ICE Notice of Inspection
• Alerts that start too late, often 30 days out, when an extension needs months

The fix is a named owner, a written procedure and a tracking system that reminds people early and escalates when they don't act. Below are ten specific mistakes, why each one hurts, and what to do about it.

The ten mistakes, in the order they usually bite

1. No single accountable owner. Immigration tasks float between HR, legal and payroll. Each assumes another team has it, and the gap only shows up in an audit.
2. Spreadsheet tracking. Shared sheets get overwritten, copied and forgotten. When the HR coordinator who built it leaves, the knowledge of which rows matter leaves too.
3. I-9s mixed in with sponsorship and personnel files. It makes an inspection response messy and widens who can see citizenship details.
4. Late Section 2. You have three business days from the hire to complete Section 2. Start on Monday, finish by Thursday.
5. Missed reverification. The rule says reverify no later than the date work authorization expires. Let it pass and you may be employing someone you know isn't authorized.
6. Wrong document handling. Accepting expired documents, or asking for more or different documents than Form I-9 requires, can be an unfair documentary practice under INA section 274B.
7. Reminders that live in one person's calendar. They vanish when that person is on leave or moves on.
8. Can't produce I-9s fast. ICE has to give you at least three business days' notice before an inspection. If half your forms are in a filing cabinet at the Phoenix warehouse, three days goes quickly.
9. No written procedure, no rehearsal. The first time your team handles a Notice of Inspection shouldn't be the real one.
10. Systems that disagree. The HRIS says the worker is a senior analyst in Austin. The H-1B petition says analyst, Dallas. Someone will ask why.

What these mistakes cost

Fines are per form. ICE works out a base fine from the share of your forms with errors, then moves it up or down by as much as 25% for five things: business size, good faith, how serious the errors are, whether unauthorized workers were involved, and your history. The dollar range changes every year. ICE's own inspection overview tells employers to check the Federal Register for current figures. On a 200-person payroll, a habit of late Section 2s gets expensive.

Fines aren't the only exposure:

• If a supervisor knows a worker's authorization has lapsed and lets them keep working, that can count as knowingly continuing to employ them, which carries civil fines and possible criminal charges.
• Technical errors found in an inspection must be corrected within at least ten business days. Miss that and they become substantive violations.
• Asking for extra documents can lead to a Department of Justice IER investigation, separate from anything ICE does.
• If an H-1B extension isn't filed on time, the worker may have to stop working mid-project while you sort it out.

Read that list again and almost nothing on it is a legal problem. It's ownership, records, systems and training. A lawyer can tell you the rule. Fixing the process is on you.

How to fix each mistake

No owner, spreadsheet tracking. Within a month, name one person and a backup. Within three, get every expiry date out of the spreadsheet and into a system that records who changed what. Then write it down in plain words: "Maria Lopez owns all visa and permit expiry records and is our single contact for ICE and USCIS."

Mixed files. Split them this week. I-9s and their supporting copies go in one locked store. Petitions, LCAs and case correspondence go in another, with a different access list.

Late Section 2. Create the task on day one of paid work, due three business days later. Still unsigned after two? It goes to the compliance owner.

Missed reverification. Alerts at 90, 60 and 30 days before any time-limited authorization runs out, each assigned to a person. A shared inbox is where reminders go to die.

Document handling. Retrain whoever completes I-9s every year, including the site managers who do it twice a year and forget. The procedure line is short: "Accept any valid List A document, or List B plus List C. Never tell the employee which one to bring."

Late alerts, slow production. First alert at 90 days, sent by more than one channel. And keep I-9s where you can print a clean copy of any of them in an afternoon. Then three business days feels generous.

No procedure, no practice. Once a quarter, pretend the notice arrived this morning. Name a lead, pull every current I-9, check it, and see how long it took.

Data that doesn't match. Quarterly, compare HRIS, I-9s and petitions. If the HRIS says Austin and the petition says Dallas, counsel should hear about it from you, not from an inspector.

The control teams skip most is the separate I-9 folder, because one folder per employee feels tidier. Make the second folder anyway.

Give one person the job, with a backup and an escalation path

Ask "who owns this?" in a struggling HR team and you'll get three different names. That's the problem in a nutshell. At minimum, write down these four roles:

Then agree what happens as an expiry gets closer:

• 90 days out: the owner flags it and tells counsel if a petition is involved.
• 60 days out: the extension is in progress or reverification has started.
• 30 days out: no confirmed action means it goes to the HR Director.
• 14 days out: senior operations is told and someone drafts a contingency plan.
• 7 days out: it reaches an executive, with counsel on standby.

If you want playbook wording, try this: "If a visa or work permit is 30 days from expiry with no confirmed filing or reverification, the HR Director escalates to the COO and outside immigration counsel within one business day."

What your tracking system needs to do

Whatever you buy, or build, it should cover these:

• A change log nobody can edit, showing who changed which date and when
• Alerts by email, SMS or chat at intervals you choose, such as 90, 60, 30, 14 and 7 days
• Role-based access, with I-9 documents stored apart from everything else
• A reverification task created automatically from the expiry date
• A way to reconcile against HRIS and payroll data
• Legible I-9 copies you can produce within three business days
• Encrypted document storage with access logging
• Reports you can export for an auditor

Nice to have:

• E-Verify case status flags
• E-signature for internal sign-offs
• Mobile access for remote and multi-state teams

Pushed to pick one control, I'd choose automatic expiry alerts linked to your HR records. Memory is the weak point, and alerts take it out of the loop. In the demo, ask the vendor to open a real record and show you its change history. Slides don't count.

An alert schedule that leaves room for USCIS

Reverification and petitions run on different clocks. You must reverify no later than the day the current authorization expires, not after. For a worker in H-1B status, the date that limits their stay is the one on their latest I-94 record, which can differ from the petition validity dates, so track the I-94 date too.

Prepare for an ICE Notice of Inspection before you get one

A quarterly mock audit is the best preparation you can do. Work through this list:

1. Pull the I-9 for everyone on payroll, plus leavers still inside the retention window (three years from hire or one year after they left, whichever is later).
2. Check each form is an edition USCIS accepted at the time it was completed.
3. Compare each Section 2 date with the first day of paid work and flag anything later than three business days.
4. Confirm the employer certification in Section 2 is signed.
5. Check document details match the document exactly. A transposed digit in an EAD number is the kind of thing inspectors find.
6. List every employee with time-limited authorization and confirm reverification is done or scheduled.
7. Time the exercise. Could you hand everything over within three business days?

When a real notice arrives:

• Name one response lead straight away.
• Gather the I-9s and any payroll or other records the notice lists.
• Don't backdate or quietly rewrite any form. If counsel advises a correction, strike through, write the right information, then initial and date it with today's date.
• Call immigration counsel before you respond.

Internal audits, a written correction method and a named response lead. That's a defensible process. Rehearse twice and the real letter will feel far less frightening.

A 90-day plan

First 30 days:

1. Name an immigration compliance owner and a backup, and write the role down.
2. Move every I-9 into one secure location, separate from sponsorship files.
3. Turn on 90-day expiry alerts. A shared calendar beats nothing while you choose a tool.

By day 60:

1. Sweep every I-9 for Section 2 dates, employer signatures and accurate document details.
2. Train everyone who completes I-9s on the List A, B and C rules and on what not to ask for.

And by day 90:

1. Reconcile HRIS data against I-9s and petitions, and send mismatches to counsel.
2. Run your first mock inspection using the checklist above.

Two things not to do. Don't photocopy more documents than your I-9 process needs; extra copies invite questions about why you wanted them. And don't merge I-9 and sponsorship files to save shelf space. If a work visa has already run out, read what to do when an employee's work visa expires.

Structure beats expertise

Most HR teams know the I-9 rules well enough. What they're missing is structure. The employers who get through inspections cleanly usually did three unglamorous things: named an owner, set alerts at 90 days or earlier, and ran a practice audit before anyone made them.

So make it someone's job. Shared responsibility sounds collaborative and works like no responsibility. Give that person a written escalation path and a system that records who did what without anyone having to remember. You won't remove the legal risk. You'll be able to show you managed it.

Where ExpiryEdge fits

ExpiryEdge covers the tracking side of this checklist. You record each visa, EAD or permit expiry against a named owner, and it reminds them by email, SMS, WhatsApp, Slack or Teams at the intervals you choose. If nobody acts, it escalates to a manager.

It can also request the renewed document from the employee and file it against the record. Every reminder and upload is logged, so when a notice arrives your response lead can export the history instead of rebuilding it from inboxes. It doesn't replace your I-9 process or your lawyer.

Start a 14-day free trial (no credit card) and load your next 12 months of expiry dates to see how it works with your team. You can also read how ExpiryEdge supports HR teams.

Sources

• Form I-9 Inspection Overview | U.S. Immigration and Customs Enforcement
• 8 CFR 274a.2, Verification of identity and employment authorization | eCFR

This article is general information, not a substitute for advice from a qualified lawyer. Consult a qualified legal professional about your own circumstances before acting on anything here.

FAQ

What is the three-business-day rule for Form I-9?

There are two. You must complete Section 2 within three business days of the hire, so someone who starts paid work on Monday needs Section 2 done by Thursday. And when ICE serves a Notice of Inspection, you get at least three business days to produce the Forms I-9 it asks for. Both are in 8 CFR 274a.2.

How far in advance should you start an H-1B extension filing?

USCIS accepts an H-1B extension up to six months before the current end date, so start gathering documents about seven months out and aim to file close to the six-month mark. If you file on time, the worker can usually keep working for you for up to 240 days while the petition is pending. Confirm timing with your immigration counsel.

Why should I-9 files be stored separately from sponsorship case files?

No rule demands it, but it's sound practice. When ICE asks for Forms I-9, you hand over exactly those and nothing else. Keeping them apart from petition files and personnel records also limits who sees an employee's citizenship and immigration details, which protects you if a hiring or firing decision is later challenged as discriminatory.

What triggers a DOJ IER anti-discrimination investigation?

Usually a complaint from a worker. Common causes are asking for more or different documents than Form I-9 requires, insisting on a specific document such as a green card, rejecting documents that look genuine, or reverifying people who don't need it. These are unfair documentary practices under INA section 274B, separate from any ICE inspection.

Can ExpiryEdge handle multi-state or remote employee visa tracking?

Yes. ExpiryEdge tracks each document's expiry date wherever the employee works and reminds the named owner by email, SMS, WhatsApp, Slack or Teams. Overdue items escalate to a manager, and the reminder and document history exports as an audit trail. It doesn't give legal advice or file petitions, so you still need counsel for those.

Recommended

• The Role of Expiry Alerts in HR Compliance
• How Supplier Compliance Tracking Works for Procurement Teams
• How Contract Obligation Tracking Works for Businesses
• Expiration Reminder & Deadline Tracking Software | ExpiryEdge