How to Dispose of Old Employee I-9 Forms Securely

For New York employers, few compliance missteps carry more risk than mishandling employee I-9 forms. These federal employment eligibility verification documents contain Social Security numbers, passport data, driver’s license numbers, and immigration status information — a combination that makes them among the most sensitive records any business holds. Understanding I-9 form destruction requirements isn’t just a matter of good housekeeping; it’s a legal obligation that, when ignored, can result in federal fines, identity theft liability, and regulatory scrutiny from U.S. Immigration and Customs Enforcement (ICE).

Whether you run a Manhattan law firm, a Long Island restaurant group, or a Westchester medical practice, the rules governing when and how to destroy old I-9 forms apply equally. The federal government mandates specific retention periods, and once those periods expire, retaining forms longer than required actually increases your risk. This guide walks New York businesses through every step of the I-9 disposal process — from calculating retention windows to certified shredding.

Understanding I-9 Retention Periods Before You Shred

Before you can destroy an I-9 form, you must confirm the record is actually eligible for disposal. The federal retention formula is straightforward but requires a calculation for each departed employee:

• Three years from the date of hire — regardless of how long the employee worked
• One year after the last day of employment — whichever is later

For example, if an employee was hired on March 1, 2020, and their last day was June 15, 2021, the three-year rule puts the earliest eligible destruction date at March 1, 2023. The one-year-after-termination rule puts it at June 15, 2022. Because March 2023 is later, you must retain the form until at least March 1, 2023.

For current employees, I-9 forms must be retained throughout their entire employment plus the applicable post-termination window. Many New York HR teams build a simple spreadsheet tracker or use their HRIS system to flag records that reach eligibility each month. Our team at New York Shredding Document Destruction, Inc. recommends pairing this eligibility tracker with a scheduled purge cycle — quarterly or semi-annual — so forms are destroyed promptly once they pass their retention window rather than accumulating for years.

What Makes I-9 Forms High-Risk Documents

Not all HR paperwork carries the same risk profile. I-9 forms are exceptionally dangerous if improperly disposed of because they contain three or more identity-document numbers on a single sheet. A criminal who recovers a discarded I-9 can potentially access Social Security benefit accounts, open credit lines, or create fraudulent employment records. New York businesses — particularly those in densely populated boroughs like Brooklyn and Queens — operate in environments where office recycling bins, building dumpsters, and document pickup services are frequently targeted by identity thieves.

• Employee Social Security numbers
• Passport or visa numbers
• Driver’s license or state ID numbers
• Date of birth and address information
• Immigration authorization codes and alien registration numbers

Simply placing I-9 forms in a recycling bin — or even a regular shredder in a shared office space — fails to meet the standard of “reasonable steps” to protect employee data required under various state and federal data protection frameworks. New York’s SHIELD Act specifically requires businesses to implement reasonable safeguards for private information, which courts and regulators have interpreted to include secure document destruction. Learn more about your compliance obligations under New York law.

The Secure Destruction Process for I-9 Forms

Once you’ve confirmed an I-9 is past its retention date, the destruction process should follow a documented, chain-of-custody protocol. Ad hoc shredding — where an employee feeds forms into a desktop shredder at their desk — does not provide the audit trail regulators may request during an ICE inspection or SHIELD Act complaint investigation.

A proper I-9 destruction workflow includes:

1. Eligibility review: Cross-reference your retention spreadsheet or HRIS flags to confirm each form is beyond its holding period
2. Segregation: Pull eligible I-9s from active personnel files and place them in a locked, labeled container
3. Logging: Record the employee name, hire date, termination date, and destruction-eligible date for each form being destroyed
4. Secure transfer: Place forms in a locked console or sealed bag for transfer to a certified shredding vendor
5. Certificate of Destruction: Obtain written documentation from your shredding vendor confirming secure, compliant destruction

New York Shredding provides locked, tamper-evident consoles for offices throughout New York City, Long Island, Westchester, and the Hudson Valley. Once full or scheduled for pickup, our technicians transport sealed containers directly to our industrial shredding facility. You receive a Certificate of Destruction within 24 hours — the documentation you need for any ICE audit or data breach inquiry. Learn how our process works.

Common Mistakes New York Employers Make with I-9 Disposal

In our experience serving HR departments across the five boroughs and suburban New York, several patterns of mishandling come up repeatedly:

• Retaining forms indefinitely “just in case”: Holding I-9 records beyond their legal window actually increases liability, because you’re maintaining personal data without authorization
• Mixing I-9s with regular recycling: Even if your office recycles paper through a locked bin service, I-9 forms require cross-cut or micro-cut shredding — not pulping or standard recycling
• Using desktop shredders without a log: Strip-cut shredders are generally inadequate for identity documents, and no paper trail exists to prove secure disposal
• Destroying forms for current employees: Some businesses purge records during office moves without confirming employment status — a serious compliance violation
• No separation of I-9 storage from general personnel files: Federal regulations recommend — and best practice requires — storing I-9 forms separately so they can be produced quickly during an audit and destroyed efficiently when eligible

If you manage a multi-location business in New York City’s metro area, consider a centralized shredding program that covers all your offices under a single contract. Our service coverage includes Manhattan, Brooklyn, Queens, the Bronx, Staten Island, Nassau County, Suffolk County, Westchester County, and communities throughout the Hudson Valley.

Keeping Records of Your I-9 Destruction

Federal law doesn’t explicitly require employers to keep a log of I-9 destructions, but auditors and plaintiffs’ attorneys in SHIELD Act litigation have routinely requested proof that records were disposed of in compliance with applicable law. Maintaining a destruction log — even a simple spreadsheet — demonstrates that your company followed a deliberate, systematic process rather than simply discarding documents haphazardly.

Your destruction log should capture:

• Employee name and ID
• Date of hire and date of termination (or last day worked)
• Date the I-9 became eligible for destruction
• Date actually destroyed
• Method of destruction (vendor shredding, in-house cross-cut, etc.)
• Name of person authorizing destruction
• Certificate of Destruction reference number (if vendor shredding)

Store this log indefinitely — it’s a small file that takes up negligible space and provides significant legal protection. Many New York HR professionals keep destruction logs alongside their annual compliance documentation for easy retrieval. For more guidance on your overall records retention program, visit our compliance resources page.

Why New York Businesses Choose New York Shredding

For over a decade, New York Shredding Document Destruction, Inc. has helped businesses across New York City, Long Island, Westchester, and the Hudson Valley protect their sensitive information through certified, HIPAA-compliant shredding services. Our industrial-grade shredding equipment, locked on-site consoles, and Certificate of Destruction give your business the proof it needs for any compliance audit.

Whether you need scheduled shredding, a one-time purge, or hard drive destruction, we serve all five boroughs and surrounding areas with fast, reliable service. Request a free quote today and get your office on a shredding schedule that keeps you protected year-round.

Ready to get started? Contact New York Shredding for a free quote, or explore our full range of shredding services.