Print this article
The Hidden Compliance Risk Inside Your Clients’ Operating Companies
Carol R Kaufman
27 April 2026
The author of this article, Carol R Kaufman , founder and CEO of Alternatives TLC , argues that institutions such as family offices must pay close attention to Form 1-9 compliance. Kaufman says the regulatory environment in the US poses a risk for all US companies with 100 or fewer employees – about six million people. The editors are pleased to share this content and we hope it stimulates conversations and, where necessary, action. The usual editorial disclaimers apply to views of guest writers. Email tom.burroughes@wealthbriefing.com and amanda.cheesley@clearviewpublishing.com for comments and responses. Carol R Kaufman When professionals who serve high net worth and ultra-HNW families gather to discuss risk, the conversation almost always turns to the same set of concerns: portfolio concentration, succession planning, tax exposure, insurance coverage, security, reputational risk, governance, and family continuity. These are legitimate and important concerns. But one category of operational risk rarely makes it onto the family office agenda even though it can create immediate financial, legal, and reputational exposure for business-owning families. Businesses that can demonstrate good faith efforts at compliance – documented correction processes, organized files, evidence of internal audits – tend to receive some mitigation. Businesses that can’t demonstrate these efforts don’t. 5. Reliance on professional, electronic I-9 systems is not foolproof. Many, including those that are associated with payroll systems, are flawed. Some don’t alert you when documents expire. For many, changes to the I-9s must be made manually and then uploaded. Form I-9 compliance is like any other compliance; ultimate responsibility can never be fully outsourced. About the author
It’s called Form I-9 compliance. And if your clients own operating companies with employees in the US, they most probably have a I-9 problem they don’t know about.
What Is a Form I-9, and why does it matter now?
Form I-9 is an Employment Eligibility Verification document that has been a federal requirement for every employer in the US since November 6, 1986, including companies with only one or two employees. It is enforced by Immigration and Customs Enforcement and falls under the Department of Homeland Security.
The Form I-9 must be completed for every new employee, regardless of citizenship status. When an employee fills out a W-4, they must fill out Section 1 of the Form I-9, which is completed solely by the employee no later than the end of the first day of employment; Section 2 is completed solely by the employer within three business days of the employee’s start date. Both sections must be accurate, timely, and properly documented.
This sounds straightforward but in practice, it isn’t. The form has precise rules governing who and how the form is filled out, which documents are acceptable, when the form must be completed, how corrections must be made , how long the retention period must be after employment ends, and even how quickly and how the files must be produced if the business receives a federal Notices of Inspection. The January 2025 version of the Form I-9 introduced additional changes that many employers still have not fully absorbed.
What has changed dramatically in 2026 is the enforcement environment. ICE workplace audits – formally initiated through Notices of Inspection – have dramatically increased. They are running more than 30 per cent above prior-year levels. Field offices have been given explicit enforcement quotas. Congress has authorized $170 billion in new immigration enforcement funding. In the past four months,12,000 additional ICE agents have been hired, bringing the total number to 22,000 so they can step up audits between now and 2029. Federal priorities have shifted toward a more systematic review of employer compliance. The result is a less forgiving environment for businesses that have allowed I-9 files to sit unreviewed for years.
For operating companies owned by wealthy families, this creates a specific and underappreciated exposure.
The operating company problem
Family offices are exceptionally good at what they do: coordinating advisors, managing complex entity structures, planning for generational transfer, and optimizing tax outcomes. What they are not typically focused on is the day-to-day HR compliance of the underlying operating companies within the family’s portfolio.
Research consistently shows that HNW and UHNW families are prolific business owners. Studies of multi-generational family wealth suggest that the typical family with a structured office controls not one but five to seven operating entities across their history – including companies created, acquired, and currently active. These entities employ people. Every employee in every one of those entities that filled out a W-4 is required to have filled out a Form I-9.
The businesses most at risk aren’t the large ones. Large companies typically have HR departments, employment counsel on retainer, and compliance infrastructure. The vulnerable businesses are the smaller operating companies in the family’s portfolio: the restaurant group, the construction firm, the specialty retailer, the medical practice, the landscaping business, the light manufacturer. These are businesses with 10, 25, or 75 employees – run by an owner, an office manager, or a bookkeeper who handles HR as one of a dozen responsibilities.
While ICE doesn’t reveal statistics on errors, private legal and audit firms consistently reveal at least one error in the vast majority of I-9s , with paper forms having an average error rate of 95 per cent and electronic forms not far behind, at 75 per cent.
In recent internal I-9 audits I have conducted for clients with anywhere from 14 to 88 employees, I’ve found these numbers to be surprisingly accurate. More than 90 per cent of the Form I-9s I review contain at least one error. Not fraud – errors. Missing I-9s. Wrong versions of the Form I-9 used. Missing dates. Incorrect document notations. Corrections made with whiteout rather than a single strikethrough. Forms not retained for the proper retention period. These are exactly the types of findings that trigger fines in an ICE audit, and they are extraordinarily common.
To the employer, these may seem like clerical errors. To an ICE auditor, these are violations.
The fine schedule is increasingly unforgiving. Signaling a continued trend of increased workplace enforcement, on March 16, 2026, ICE issued new rules that significantly raised the threat of penalties for employers. The top paperwork violations traditionally classified as “technical” errors were reclassified to “substantive” errors.
Previously, one Form I-9 paperwork error could be cured within 10 days of the audit. As of March 16, 2026, the cure period has gone so an error or missing form is now considered an immediate “substantive” violation starting at $288 per form and going up to $2,861 per form. A business with 50 employees and common filing mistakes could easily face six figures in penalties without a single allegation of unauthorized employment and with all employees being US citizens.
What happens when ICE comes knocking
While ICE raids continue to be headlined, they are an after-effect of prior discovery; an ICE investigation or audit. The audit process begins with a Notice of Inspection, giving the employer three business days to produce all Form I-9s for current and recently terminated employees. Three business days. For a business that has never organized a Form I-9 binder, doesn’t’ have a tracking system, and has been storing forms in drawers, filing cabinets, and elsewhere – with no backup – this is a crisis, not a compliance exercise.
ICE is allowed to take your documents with them to review them. After their review, the employer receives a Notice of Suspect Documents and/or a Notice of Discrepancies and the process moves toward fines, which are calculated per form and multiplied by the number of incorrect forms.
The single most important thing a business owner can do is conduct an internal self-audit before ICE does it for them. This means reviewing every employee’s Form I-9, checking for errors, correcting them properly , not too late .
An opportunity hidden in plain sight
There is a reason why this issue hasn’t received much attention among the professionals who serve wealthy families: Form I-9s are not a sophisticated wealth strategy. I-9 compliance is unglamorous. It’s paperwork. It’s a federal form that most business owners – if they sign it – sign it and file it away and never think about it again.
But the enforcement environment of 2026 has made that indifference an expensive one. And the families most exposed are not the ones with large, professionally managed businesses. They’re families with portfolios of smaller operating companies – the businesses that built wealth, employ people from the local community, that are run by committed owners who are simply unaware of what is now a significant and imminent risk.
The professional who surfaces this issue – regardless of whether they’re a private banker, an estate attorney, a tax accountant, an insurance advisor, a wealth manager, a security specialist, or a governance consultant – provides a value that transcends their primary role: each has the ability to ask a single pointed question that may help protect the asset that often matters most to the family. The business itself.
That is worth a conversation.
Carol R Kaufman is the founder and CEO of Alternatives TLC, LLC, an operational and HR compliance consulting firm based in Hawthorne, New Jersey. She specializes in Form I-9 compliance training and educating business owners and their staff, conducting internal audits, and building the systems and processes companies need to stay compliant before an ICE auditor arrives. She works with small and mid-sized family-owned businesses across a wide range of industries and is a recognized resource for employers navigating the current Form I-9 enforcement environment.