"Talkers are no good doers," explains a pragmatic criminal in one of Shakespeare's tragedies.[1] Sweet words are no substitute, and no match, for action when it is needed.

How else can we explain that over 7 million unau­thorized individuals are a part of the workforce and that the government has identified most of these workers and their employers and yet has failed to do so much as to instruct them that they may be subject to legal sanction for breaking the law?[2] For all the talk about the "immigration crisis," remarkably little progress has been made in dampening the economic allure of illegal immigration.

The illegal workforce is too big to address through police action alone. The quickest gains to enforce­ment, at the least effort and expense, will come through giving employers the incentive to follow the law and steer clear of illegal labor. Specifically, the gov­ernment needs to target its enforcement efforts to encourage employers to verify the work statuses of employees they have reason to believe may be unau­thorized to work, as they are already required to do by law, and to cease employing unauthorized workers.

The best approach to this problem is the use of "no-match" letters. These letters inform an employer that the Social Security Administration (SSA) was unable to match its employees' wage reports (submit­ted through a standard W-2 form) with the informa­tion in its records.

The bulk of no-match letters concern unauthorized workers.[3] Because no-match letters are so well tar­geted and easy to act on, they would be among the least burdensome means of improving workplace immigration-law compliance for law enforcement, employers, and employees. At the same time, they promise to be very effective at helping honest employers to sort out unauthorized workers and encouraging businesses to stick with legal labor.

In 2007, the Department of Homeland Security (DHS) chose to use a carrot, not a stick, to per­suade more employers to use no-match letters to determine whether their employees are authorized to work in the United States and to terminate those who are not. It issued a new rule clarifying that receipt of a no-match letter "may," depending on the circumstances, constitute constructive knowl­edge that a worker is unauthorized and granting employers a safe harbor from immigration enforce­ment actions based on no-match letters when they take certain simple actions, such as double-check­ing their records.[4] DHS drafted an insert, to accom­pany no-match letters, explaining how to take advantage of the safe harbor.

Anti-enforcement groups were quick to protest, admitting that this new approach would actually have an impact on illegal employment.[5] Last Octo­ber, a federal court issued a preliminary injunction against enforcement of the new rule and mailing of the inserts on the grounds that DHS did not suffi­ciently justify its change in policy, may not have the statutory authority to promise an additional safe harbor from anti-discrimination lawsuits on the basis of actions taken in response to the receipt of no-match letters, and did not conduct a required "regulatory flexibility analysis."[6] In response, DHS has proposed a supplemental rule, effectively resolving the court's three concerns.[7] If litigation over the letters continues, as is probably inevitable, the new rule will likely hold up in court.

The Bush Administration deserves praise for attempting to use no-match letters in immigration enforcement; but with time to act running out, and little likelihood that the next Administration will focus on workplace enforcement, the Bush Admin­istration must move quickly to implement the sup­plemented rule. Sending out a full round of the updated no-match letters this year could be enough to cement the new policy in place.

Congress, meanwhile, should clarify the law to put a quick end to the litigation and to allow SSA to share no-match data directly with DHS to tar­get law-enforcement efforts more effectively. At a time when the failure of immigration policy is on many voters' minds, the Administration and Con­gress need to act soon to demonstrate that they are more than just talkers when it comes to illegal immigration.

The No-Match Letter

No-match letters are not new. They are a tested component of the Social Security system, in use for nearly 30 years.[8] SSA is required to track work­ers' wage histories for the purpose of calculating Social Security benefits and collects this informa­tion from the W-2 forms that employers submit each year for each of their employees. Each year, SSA receives between 8 million and 11 million W-2 forms containing names and Social Security numbers (SSNs) that do not match the informa­tion in its records.[9] It sends each of these workers a letter alerting the worker to this discrepancy, explaining the possible consequences of not receiving credit for earnings, and giving guidance on how to fix the problem.

Beginning in 1994, SSA started sending no-match letters to employers who submitted 10 or more W-2 forms that could not be matched to SSA records or who have no-matches for more than one-half of 1 percent of their workforces.[10] These letters inform employers of the no-matches and explain common reasons for them, such as typo­graphical errors, name changes, and incomplete W-2 forms.[11] The majority of the individuals named in the no-match letters sent to employers are aliens unauthorized to work in the United States.[12]

Social Security no-match letters, then, are a pow­erful tool for the enforcement of immigration law that has been underutilized. Yet, although the "knowing" employment of an alien unauthorized to work in the United States is illegal under the Immi­gration Reform and Control Act of 1986 (IRCA),[13] the legal significance of receiving a no-match let­ter-which may give an employer reason to sus­pect that a worker is not authorized-to this inquiry was never made clear. Under Immigration and Naturalization Service (INS) regulations, knowledge that an employee is unauthorized can be actual or "constructive," which is "knowledge which may be fairly inferred through notice of cer­tain facts and circumstances."[14]

As a result of this general language, some employers are uncertain as to whether receiving a no-match letter would amount to constructive knowledge that an employee is unauthorized to work and that the employer is thus subject to civil and criminal liability for violating the law. Over the years, INS issued a number of informal guidance letters to employers who had inquired about this issue. Though these letters did vary somewhat in their advice, they generally explained that while "mere receipt of an SSA no-match letter" alone would usually not prove to be constructive knowl­edge, "employers cannot turn a blind eye to SS no-match letters and should perform reasonable due diligence."[15] INS, however, never released any public statement on the matter.[16]

Many employers took advantage of this uncer­tain state of affairs. According to a report by SSA's Inspector General, over 70 U.S. employers had more than 5,000 no-match employees apiece in 2002. Six employers had more than 15,000 apiece, and one topped out at 36,000.[17] Unauthorized labor is rampant across entire industries, such as food services and agriculture. The Western Grow­ers Association, for example, estimates that "50 to 80 percent of the workers who harvest fruit, vege­tables, and other crops are illegal immigrants,"[18] while the National Council of Agricultural Employ­ers puts the figure at 76 percent.[19] Incredibly, such employers routinely claim that even those enor­mous figures-even when accompanied by such telltale signs as multiple employees submitting the same SSN, SSNs with all zeros, and SSNs with the Area Number "666"[20]-are not sufficient to confer constructive knowledge that their workers were unauthorized.[21]

In August 2007, INS promulgated a formal rule on no-match letters to ensure greater uniformity of enforcement and "to eliminate ambiguity regarding an employer's responsibilities upon receipt of a no-match letter."[22] Specifically, the rule added to the definition of "constructive knowledge" an example of a circumstance that "may, depending on the total­ity of relevant circumstances," indicate constructive knowledge: "written notice to the employer from the Social Security Administration reporting earn­ings on a Form W-2 that employees' names and cor­responding social security account numbers fail to match Social Security Administration records."[23] This provision, though more specific and legally binding, is otherwise very similar to the informal advice that INS had issued previously.[24]

In addition to clarifying the definition of "con­structive knowledge," the new regulation created a safe harbor for employers who receive no-match letters. An employer will not be considered to have constructive knowledge, based on receipt of a no-match letter, that an employee is unauthorized to work in the U.S. if the employer (1) checks its records to ensure that it did not make a clerical error; (2) asks the employee mentioned in the letter to confirm the accuracy of his or her information; (3) if necessary, asks the employee to resolve the issue with SSA within 90 days of receipt of the let­ter; and (4) if the issue was not resolved, attempts to re-verify the employee's employment eligibility without using any documents containing a dis­puted Social Security number.[25]

According to the new regulation's preamble (though not the regulation itself), employers who take these steps would also enjoy a safe harbor from government lawsuits under IRCA's anti-dis­crimination provision, which prohibits discrimina­tion on the basis of national origin and citizenship status.[26] Failure to take these steps does not mean that an employer possesses knowledge that an employee is unauthorized to work, but merely that DHS may, as before, use receipt of the letter as evi­dence of constructive knowledge of that fact.

To inform employers of the safe harbor and their obligations under IRCA, SSA revised its no-match guidance. The proposed no-match letter for 2007 (since withdrawn due to a court injunction) adds an additional "common reason" for a no-match: "The name or Social Security number reported is false, or the number was assigned to someone else."[27] The new letter also states clearly that the letter "does not, by itself, make any statement about an employee's immigration status" and that the employer should follow the instructions in the DHS insert accompanying the letter.

The DHS insert (also enjoined by the court) advises employers, through a series of questions and answers, of what steps they should take in response to having received the no-match letter.[28] It advises recipients not to disregard the no-match letter, because if any employees named in the letter are found to be unauthorized, DHS could "deter­mine that you have violated the law by knowingly continuing to employ unauthorized persons," which would lead to civil and criminal sanctions. Instead, employers should follow the four steps described above to take advantage of the safe-har­bor provision.

The new rule and accompanying letters were an attempt to inform employers of their obligations under IRCA and of the risk they run by turning a blind eye to their employees' false or forged creden­tials. That this rule would have been successful had it been fully implemented last year, convincing employers to do their due diligence when they have reason to believe that an employee might not be authorized to work within the United States, is indicated by the great speed with which groups that oppose the enforcement of immigration law moved to challenge it.

The Lawsuit

Within two weeks of the new regulation's release, a group of labor unions filed suit in federal court to block it, accusing DHS of attempting to "comman­deer the Social Security tax system for immigration-enforcement purposes."[29] Specifically, they alleged that DHS's revised definition of "knowing" was inconsistent with IRCA, that IRCA denied INS the authority to require employers to re-verify workers' statuses, that the regulation was "arbitrary and capricious" under the Administrative Procedures Act, and that neither DHS nor SSA has statutory authority to use no-match letters as a tool to enforce immigration laws. The unions won first a temporary restraining order and then a preliminary injunction preventing the new rule from going into effect and the new no-match letters from being sent.

District Judge Charles Breyer rejected the unions' broadest, most strident claims. The revised defini­tion of "knowing" was consistent with IRCA, and IRCA did give INS the authority to require employ­ers to re-verify workers' authorizations. There was a "rational connection" between the use of no-match letters in immigration enforcement and evi­dence that the letters reliably indicate immigration violations. And neither DHS nor SSA exceeds its powers by working with the other to use the Social Security program to inform employers of their obli­gations to follow immigration laws and as evidence of violations.

Nonetheless, the court granted a preliminary injunction on the basis of three "serious questions going to the merits of the plaintiffs' contentions" and the fact that the "balance of hardships" if the rule does go into effect "tips sharply in plaintiff's favor" because some employers would fire workers named in the revised no-match letters.[30] In con­trast, the court said, delay in implementation would not irreparably harm the government, which had already waited a year since closure of the comment period to promulgate the final rule and so could wait longer while the merits of the plaintiffs' claims are resolved.[31]

Of the court's three findings supporting the injunction, the only substantive one concerned a provision in the regulation's preamble and similar language in the DHS insert stating that employers would not face government lawsuits under IRCA's anti-discrimination provision when they terminate employees after following the safe-harbor provi­sions described in the rule and the letter. Because these lawsuits are brought by the Department of Justice (DOJ), not DHS, the court questioned whether this provision exceeds DHS's authority under IRCA.[32]

The court's other two adverse findings concerned the procedures followed by DHS in promulgating the new regulation, rather than its substance.

First, the regulation's position that no-match let­ters should put employers on notice of a possible immigration-law violation was "arbitrary and capri­cious," as defined by the Administrative Procedures Act (APA), because it "departs from agency prece­dent without explanation." Agencies may change policies, but "when they do so they must provide a reasoned analysis indicating [that] the prior poli­cies and standards are being deliberately changed, not casually ignored." The court quoted from sev­eral letters to employers, supplied by those chal­lenging the regulation, stating that a no-match letter alone would not be sufficient to establish constructive knowledge regarding the employ­ment eligibility of an employee. Because "DHS has changed course" in its policy, it was required to present a "reasoned analysis" of its decision to com­ply with the APA.[33]

Second, the court ruled that DHS had impermis­sibly failed to conduct a Regulatory Flexibility Act (RFA) analysis. The RFA, among other things, requires the agency to state what steps it has taken to minimize the impact of a regulation on small businesses. DHS had argued that no such analysis was required because the new rule did not "man­date any new burdens on the employer…but merely adds specific examples and a description of a 'safe harbor'" and because the rule was solely interpretive and so not subject to RFA analysis. The court rejected these explanations as inconsistent and stated that the new rule, in fact, "mandates costly compliance" and so would seem to require an RFA analysis.[34]

Because the plaintiffs had raised serious ques­tions about the propriety of the new regulation and had demonstrated likely harm from enforcement, the court granted a preliminary injunction enjoin­ing enforcement of the new regulation.

DHS Responds

Without conceding any of the questions raised by Judge Breyer, in March of this year, DHS issued a "supplemental proposed rule" addressing the court's three findings.[35] Because the court's deci­sion was based on narrow grounds-its opinion did not question whether the new rule was irratio­nal or, in its major provisions, beyond DHS's statu­tory authorities-no change in the rule itself was required, but only additional materials supporting the rulemaking process and one revision in the rule's preamble.

Though DHS disputed that the new regulation constituted a change in policy under the APA, as it had never released a formal policy regarding the legal import of no-match letters,[36] it nonetheless supplied a "reasoned analysis" supporting the new policy, offering two main justifications for its issu­ance of the new rule.

First, the rule was intended to "eliminate ambi­guity regarding an employer's responsibilities upon receipt of a no-match letter" and to "provide greater predictability" for employers taking steps to act on no-match letters.[37] As discussed above, the agency's previous guidance had been in letters to individual employers and had not been entirely consistent.

Second, the rule was intended to help "smoke out" unauthorized workers.[38] A growing body of evidence, mentioned above, shows that no-match letters often indicate the presence of unauthorized workers, and this is particularly the case in indus­tries where illegal labor is prevalent, such as agri­culture. This kind of evidence implies that employers may have constructive knowledge that an employee is unauthorized to work solely upon receipt of a no-match letter. That analysis is more than sufficient, under the APA's very low "rational connection" standard, for a change in policy to avoid being "arbitrary and capricious."[39]

Additionally, though still disputing the need for a Regulatory Flexibility Act analysis, DHS simply undertook one and published its results as an attachment to the supplemental rule.[40]

The one revision made in the previously released rule was to strike the statement that promised a safe harbor from government anti-discrimination law­suits. This text, as part of the preamble, was not actually a part of the regulation and would not have had the force of law, and in any case, the bulk of such suits are filed by individuals, not the govern­ment. The purpose of the text was to limit DHS's own discretion in filing such lawsuits, which it is permitted to do even though DOJ has primary en­forcement responsibility.[41] DHS stated that it will work with DOJ to update DOJ's guidance on em­ployers' anti-discrimination obligations and revise the language used in its proposed insert accordingly.

With its supplemental rule, DHS has taken a pragmatic approach, addressing all three of Judge Breyer's findings that support the preliminary injunction against implementation of the rule.

Next Steps

DHS is now in a strong position to put its new no-match strategy into action, and it must do so with haste if it is to have an impact, given the uncertainties of enforcement beyond inauguration day in 2009. DHS and SSA should prepare to send out no-match letters for the 2007 tax year that instruct employers on their legal obligations and the serious consequences of turning a blind eye. No doubt the same parties as before, or their allies, will seek further delay in court, but the supple­mented rule will likely stand up to judicial scrutiny. Then the federal government can take this small step toward getting serious about immigration enforcement.

Congress could also act to speed this process. For all its talk of getting tough on immigration and cracking down on companies that continue to employ unauthorized workers, Congress has dropped the ball on no-match letters. DHS delayed publishing its final no-match rule for a year to see whether Congress would enact a comprehensive immigration reform updating and clarifying its authorities to use no-match letters and share no-match data. Comprehensive reform, in the end, went nowhere, and Congress has even failed to act on several enforcement-focused proposals from both Democrats and Republicans that include no-match provisions. It still has an opportunity both to speed deployment of this tool by putting an end to the protracted litigation and even to make the use of no-match letters more effective.

The House's leading immigration enforcement plan, the Secure America Through Verification and Enforcement Act (SATVEA, H.R. 4088), sponsored by Representative Heath Schuler (D-NC), includes strong no-match provisions. This legislation would go a step farther than DHS's new rule, requiring that, in its no-match letters, SSA "instruct employ­ers to notify listed employees that they have 10 business days to correct the mismatch with the Social Security Administration or the employer will be required to terminate their employment."[42] This would, in effect, make failure to take timely action on a no-match letter conclusive evidence that an employer has knowledge that an employee is unau­thorized to work, exposing the employer to civil and criminal penalties.

SATVEA also clarifies SSA's authority to share no-match information with DHS. Specifically, it would "require that information regarding all unresolved mismatch notifications and regarding all multiple use notifications that lead to the identification of an unauthorized user of a social security account number be shared with the Secretary of the Depart­ment of Homeland Security on a timely basis." DHS could then use this information to target its workplace enforcement efforts.

Though over 150 Members of Congress have joined SATVEA as cosponsors, the House leader­ship has refused to schedule a vote on the bill.[43] Unless Congress acts, there will be more time-wast­ing lawsuits, and further delay on implementing no-match immigration enforcement will be inevita­ble. Nonetheless, the Administration should press forward with the new rule, as supplemented, and continue to explore other ways in which SSA and DHS might share information under their current statutory authorities.

Conclusion

Over 7 million unauthorized workers fill Ameri­can jobs. The Social Security Administration's no-match letters already reach the employers of mil­lions of these unauthorized workers, but many do not know what specific steps they should take in response to a no-match letter or that they may face penalties for simply ignoring it. DHS's new safe-harbor rule gives the existing law teeth by inform­ing employers of their obligations and stating DHS's intent to hold employers to them while pro­viding a simple, straightforward process for employers to comply with the law and eliminate the legal uncertainty that they now face.

DHS's response to legal challenge and delay was pragmatic, calculated specifically to address the court's concerns about the new rule without weak­ening it and to begin the implementation process as quickly as possible. The time for action, however, is running short, with only a few months in office remaining for the current Administration and grave doubts that its successor will make immigration enforcement a priority.

Moving forward on no-match letters now could make a difference for years, no matter the immi­gration policy of the next Administration. After all, the new no-match letters, once mailed, cannot be unsent, and the legal advice they provide to employers, especially as concerns constructive knowledge of their employees' work authorization, cannot be taken back. The talkers have done their part, and now it is time for the doers at DHS to act.

Charles D. Stimson is Senior Legal Fellow and Andrew M. Grossman is Senior Legal Policy Analyst in the Center for Legal and Judicial Studies at The Heritage Foundation.