Employer Considerations and Responses for LCA and I-9 Audits

There are few phrases in business more charming than “government audit.” It sits somewhere between “surprise root canal” and “reply all.” But when it comes to LCA audits and I-9 audits, panic is a terrible compliance strategy. Employers do not need a dramatic monologue, a shredding party, or a conference-room blame festival. They need records, consistency, trained people, and a response plan that works under pressure.

For companies that sponsor foreign talent or simply hire employees in the United States, these audits are not exotic edge cases. They are part of the normal compliance landscape. An LCA audit usually centers on wage, notice, working conditions, and public access file obligations tied to H-1B-related filings. An I-9 audit focuses on employment eligibility verification, document handling, retention, and whether the employer followed the rules without slipping into discrimination. Different agencies, different paperwork, same core lesson: if your records are messy, your audit will be too.

This guide breaks down what employers should know, what often goes wrong, and how to respond like a calm adult with a binder instead of a stressed raccoon with a stapler.

What LCA and I-9 Audits Are Really Looking For

At a high level, both audits test whether the employer’s paperwork matches reality. That sounds simple until you realize how many companies let hiring, immigration, payroll, HR, and operations all run on different tracks like a marching band with five conductors.

LCA audits commonly focus on whether the employer made the right attestations, paid the required wage, maintained the required records, gave required notice, and preserved a complete public access file. In plain English: if the company promised something to get the filing approved, the government may later ask whether the promise was real, documented, and followed in practice.

I-9 audits generally examine whether Forms I-9 were completed correctly and on time, whether documents were reviewed under the proper rules, whether forms were retained for the proper period, whether corrections were made properly, and whether the employer avoided unfair documentary practices or citizenship-status discrimination.

That distinction matters. An LCA problem may start in immigration but quickly become a payroll, wage, and recordkeeping issue. An I-9 problem may look administrative at first, but it can turn into a discrimination issue if managers ask the wrong employees for the wrong documents in the wrong way. Compliance has a funny habit of becoming interdisciplinary the moment things go badly.

LCA Audit Considerations for Employers

1. Know what belongs in the public access file

The public access file, often called the PAF, is where many employers either shine or spontaneously combust. A strong file is organized, dated, easy to retrieve, and consistent with the filing. A weak file looks like someone stored immigration compliance in a junk drawer.

While the exact contents depend on the case, employers should generally be ready to show documentation such as:

• A copy of the certified LCA
• The wage rate to be paid to the worker
• An explanation of the actual wage system
• The prevailing wage source or documentation
• Evidence of the required notice to workers
• A summary of benefits offered to U.S. workers and H-1B workers
• Additional materials for H-1B-dependent or willful violator employers, when applicable

The key employer consideration is not just whether the file exists, but whether it is complete within the required timeframe and available when requested. A file that becomes perfect only after an audit notice arrives is not a compliance win. That is an arts-and-crafts project.

2. Separate public access records from broader supporting records

A common mistake is assuming that the PAF is the whole story. It is not. Employers also need broader supporting records, including payroll records and wage documentation, that may not all sit in the public access file. This is where internal coordination matters. Immigration may hold the filing copy, payroll may hold wage records, HR may hold notice evidence, and nobody may be fully sure who owns what. That uncertainty is exactly what audits punish.

Smart employers build a record map. In other words: what records exist, where they live, who owns them, and how fast they can be produced. During an audit, speed with accuracy beats frantic heroics every time.

3. Confirm that wage practice matches the filing

An LCA is not just a formality on the road to an H-1B petition. It includes wage-related attestations that can create real exposure if pay practices drift. Employers should compare the filing against actual payroll operations, especially where there have been changes in compensation, work location, leave status, or job duties.

Questions employers should ask include:

• Is the employee being paid at least the required wage?
• Does the actual wage system make sense on paper and in practice?
• Were nonproductive periods handled correctly?
• Were employer business expenses shifted improperly to the worker?
• Did a remote or relocated worksite create notice or amendment issues?

If payroll tells one story and the immigration file tells another, the government tends to believe the one with numbers.

4. Pay attention to worksite changes and notice obligations

Hybrid work, relocation, client-site placement, and reorganization have made LCA compliance trickier than it used to be. A company may think it merely allowed flexibility. An auditor may see a location change that raised notice, wage, or filing questions. That does not mean every move is fatal, but it does mean employers should not treat worksite changes like harmless calendar updates.

Before and after changes, employers should review whether the certified LCA still aligns with the employee’s actual work arrangement. The earlier this happens, the cheaper and calmer the fix usually is.

5. Prepare for dependency and displacement questions where relevant

For employers subject to H-1B dependency or willful violator rules, additional attestations can raise the stakes. These issues are especially sensitive in staffing models, third-party placement environments, and high-volume sponsored-worker programs. If that is your company profile, the right response is not vague optimism. It is documentation, documented inquiry, and documented follow-through.

How Employers Should Respond to an LCA Audit

Move quickly, but do not improvise

The first rule is simple: read the notice carefully and route it immediately to the right people. That usually means internal HR, in-house legal if available, immigration counsel, payroll leadership, and the business owner for the sponsored population. Delays create risk, but reckless responses create better evidence for the government than the government could have gathered on its own.

Build a response team and assign clear roles:

• Legal or immigration counsel: review scope, preserve privilege where possible, shape response strategy
• HR: gather notices, personnel records, and process history
• Payroll: confirm wage data, dates, deductions, and leave periods
• Operations or managers: confirm actual work location and duties
• Document owner: assemble the public access file and supporting materials in clean order

Audit your own response before sending it

Before producing anything, compare the records against the filing and against one another. Are dates consistent? Are wages consistent? Does the notice proof line up with the filing date? Are job locations consistent with what managers say actually happened? Many employers hurt themselves not because the original issue was massive, but because the production package looked sloppy, incomplete, or contradictory.

If there are gaps, do not hide them. Assess them. Some issues may be correctable. Others may need explanation. Still others may reveal a broader pattern that should be addressed beyond the immediate audit.

Do not overproduce without a reason

There is a special kind of audit panic where employers respond to a targeted request by dumping half the company’s files into a portal like they are feeding a paper volcano. Resist that impulse. Produce what is requested, organized and labeled, with counsel guiding scope where appropriate. Overproduction can expose unrelated problems and make the company look less controlled, not more cooperative.

I-9 Audit Considerations for Employers

1. Timing errors are still the old classic

When employers think of I-9 risk, they often imagine fraudulent documents or dramatic raids. In reality, many problems are painfully ordinary: late completion, missing fields, absent signatures, incomplete document information, forgotten reverifications, or forms kept longer than necessary in one location and missing when actually needed.

The government does not care that the onboarding week was “a little hectic.” Every HR department in America thinks it had a hectic week.

2. Internal corrections must follow the rules

Employers can and should conduct internal self-audits, but correction methods matter. Clean-up done badly can create fresh violations. The goal is to fix the form without making it look altered, backdated, or rewritten by time travelers.

Good correction practices usually include:

• Having the employee correct errors in Section 1 when appropriate
• Having the employer correct employer-side sections
• Drawing a single line through incorrect data rather than using white-out
• Entering the correct information clearly
• Initialing and dating the correction
• Using an explanatory memo when necessary
• Avoiding backdating or silent replacement of forms

Consistency matters here. If some forms are corrected one way and others another way, an auditor may conclude the employer has no disciplined process at all.

3. Avoid selective audits and document abuse

One of the most dangerous employer mistakes is auditing only the workers who “seem foreign,” sound different, hold a certain status, or happen to be under visa sponsorship. That approach can invite discrimination claims. The same goes for asking specific employees for specific documents, demanding proof of citizenship, or treating certain documents as more acceptable than others when the rules do not allow that preference.

In I-9 compliance, bad instincts often wear a costume labeled “extra caution.” Unfortunately, extra caution can still be illegal.

4. Electronic systems are not magic shields

Plenty of companies assume that buying an electronic I-9 platform automatically solves compliance. It helps, but software is a tool, not absolution. Employers still need audit trails, version control, proper retention, access controls, trained users, and procedures for correcting records. A bad process run through fancy software is still a bad process, just with better fonts.

How Employers Should Respond to an I-9 Audit

When the Notice of Inspection arrives

If ICE or Homeland Security Investigations serves a Notice of Inspection, the employer should stay calm, note the deadline, and notify counsel immediately. Then the real work begins.

Employers should gather:

• Current and retained Forms I-9
• A current employee roster
• Lists of terminated employees within the retention period
• Payroll records
• E-Verify records, if used
• Business licenses or organizational documents if requested
• Any policies or procedures relevant to onboarding and verification

Before production, review for missing forms, duplicate forms, inconsistent dates, incorrect reverification, and forms that should have been purged under retention rules but were not. Also separate true technical errors from deeper substantive problems. Not every mistake is equal, and that distinction can matter in how the case develops.

Understand the difference between technical and substantive problems

Some I-9 errors may be technical or procedural and capable of cure within the allowed period. Others are substantive, such as failing to prepare a form at all, failing to sign required sections, or using unacceptable procedures. Employers should not assume every defect is curable, but they also should not assume every defect is catastrophic.

The practical response is to categorize the findings, correct what may properly be corrected, document the correction method, and prepare for follow-up. A disciplined remediation chart can be extremely helpful here, especially in larger workforces.

Coordinate communications

Choose a single point of contact. Managers should know not to speculate, freelance, or hand over unrelated records without review. That is not obstruction. That is basic governance. During an audit, loose internal communication creates almost as much risk as loose paperwork.

Common Employer Mistakes That Make Audits Worse

• Treating immigration compliance as one person’s side hobby. If one overwhelmed HR generalist holds the whole system together with sticky notes and hope, the system is not actually together.
• Failing to train front-line staff. The best written policy in the world cannot save a hiring manager who thinks a green card holder must show a green card “just to be safe.”
• Ignoring remote work changes. Worksite changes, remote examination procedures, and location-based compliance questions must be tracked.
• Keeping records everywhere and nowhere. Documents spread across inboxes, drives, vendors, and desk drawers are not a recordkeeping strategy.
• Waiting for an audit to discover the company’s process. By then, the process has already testified against you.

Best Practices for Staying Audit-Ready

Create a repeatable compliance system

Employers with the best outcomes usually do boring things very well. They standardize procedures, centralize records, train the right people, and run periodic reviews. Boring is underrated. Boring is what keeps fines from becoming board-level agenda items.

A practical audit-ready framework includes:

• A written policy for immigration and employment verification compliance
• Defined ownership of LCA files, I-9 files, and supporting records
• Periodic internal audits performed consistently across populations
• Manager and HR training on document acceptance and anti-discrimination rules
• A calendar for reverification, retention, and purge timing
• A response playbook for agency visits, subpoenas, and notices
• Legal review for high-risk issues such as worksite changes, third-party placements, and large remediation projects

Use examples to pressure-test your system

Example 1: A software company has complete H-1B petitions on file but no usable public access files for several workers. The legal team can prove the petitions were approved, but not that the required public-facing records were organized and available on time. That is a classic case of assuming approval equals compliance. It does not.

Example 2: A multi-state employer uses remote onboarding but does not consistently document how documents were examined or who acted as the authorized representative. The forms look mostly complete until an audit asks the obvious question: who verified what, when, and under which procedure? Suddenly “mostly complete” becomes “not remotely reassuring.”

Experience From the Field: What These Audits Often Feel Like Inside a Company

In real life, employer experiences with LCA and I-9 audits usually follow a similar emotional arc. Day one is disbelief. Day two is document hunting. Day three is the moment everyone realizes that compliance is not just about law; it is about operations, memory, version control, and whether anyone ever wrote anything down in a place other people could actually find.

Many employers discover that their biggest problem is not a malicious practice but a fragmented one. The immigration team may believe payroll has the wage support. Payroll assumes legal has it. HR believes the notice was posted because “that is what we always do.” The manager remembers the employee moved from Chicago to Denver two years ago but never flagged it because the work was remote and the employee was excellent. None of these facts sound dramatic by themselves. Together, they create the kind of messy narrative auditors love and employers hate.

Another common experience is learning that good faith is helpful, but only when paired with good records. Employers often say things like, “We definitely complied,” when what they really mean is, “We intended to comply.” Audits are not grading intentions. They are grading evidence. If the public access file cannot be produced cleanly, or if the I-9 correction trail looks improvised, the company may spend weeks explaining something that would have taken ten minutes to document correctly in the first place.

Employers also tend to underestimate how much front-line training matters. In many audit-related reviews, the root cause is not that leadership endorsed noncompliance. It is that local staff made ad hoc decisions under pressure. Someone asked for a passport because it seemed easiest. Someone forgot to date a correction. Someone completed Section 2 late because the onboarding manager was out sick. Someone copied a process from an old form version and kept using it long after the rules changed. This is why strong employers train not only HR leaders but also recruiters, onboarding staff, site managers, and anyone else who touches the process.

One especially revealing employer experience is the “discovery by self-audit” moment. Companies that perform internal reviews often find patterns they never saw before: the same missing field across one office, inconsistent reverification practices after a system migration, public access files that are complete for current workers but thin for former ones, or notice documentation that exists in screenshots no one labeled. The good news is that self-audits create a chance to fix the system before the government asks the same questions. The bad news is that many employers wait until a notice arrives before treating self-audit as a priority.

The employers that come through these situations best are rarely perfect. They are prepared, organized, and honest about what they know. They respond quickly, avoid panic-driven decisions, preserve documentation, engage counsel when needed, and fix root causes instead of polishing symptoms. In other words, they act like compliance is part of running a business, not a temporary seasonal allergy.

Conclusion

For employers, LCA and I-9 audits are not just paperwork events. They are stress tests of whether the company’s promises, policies, payroll practices, and hiring procedures line up in the real world. The right response starts long before any notice arrives. Build clean files. Train your people. Review your process. Treat worksite changes and document handling seriously. And when an audit does arrive, respond with structure, accuracy, and restraint.

Because in immigration compliance, the companies that look calm are usually not lucky. They are ready.

SEO Tags