Cloudera's $2 Million PERM Settlement and Two-Year Debarment: Why H-1B and PERM Compliance Matter More Than Ever, and How LaborLess Can Help

On October 16, 2026, the U.S. Departments of Justice (DOJ) and Labor (DOL) announced a major immigration enforcement settlement with Cloudera, a California-based technology company, involving allegations that the company discriminated against qualified U.S. workers during recruitment for positions sponsored through the PERM labor certification process.

The consequences were substantial: a two-year debarment from the PERM program, $1.4 million in back pay for affected U.S. workers, $600,000 in civil penalties, and additional compliance monitoring and reporting obligations. The settlement resolved allegations of unlawful recruitment practices without establishing that every allegation had been proven in court.

For immigration law firms, corporate immigration teams, and employers sponsoring foreign national workers, this is another significant reminder that the federal government is taking employment-based immigration compliance seriously.

The Cloudera settlement concerns alleged discrimination during PERM recruitment, not a failure to post H-1B Labor Condition Applications (LCAs), maintain Public Access Files (PAFs), or publish PERM Notices of Filing (NOFs). Those distinctions matter. But the case also illustrates the broader risks associated with compliance processes that are poorly implemented, inadequately monitored, or difficult to document.

And while LCA posting, PAF maintenance, and PERM NOF posting may seem like relatively minor administrative responsibilities compared with preparing an H-1B petition or employment-based green card application, they are also among the easiest obligations to mishandle.

The Cloudera PERM Settlement: What Happened and Why the DOJ Took Action

DOJ Alleged That Cloudera Used a Separate Recruitment Process That Prevented U.S. Workers From Applying

The DOJ's October 16 announcement described a coordinated enforcement resolution involving Cloudera, a Santa Clara-based data management company.

According to the government's allegations, Cloudera departed from its ordinary recruitment procedures when advertising certain positions connected to PERM labor certification applications.

For regular positions, the company used its public careers website and standard application procedures. But for positions undergoing PERM recruitment, DOJ alleged that Cloudera used a separate process that made it difficult, and in some instances impossible, for U.S. workers to apply.

The most notable allegation involved an email address designated for PERM-related applications.

According to the settlement agreement, Cloudera established an email account to receive applications from U.S. workers responding to PERM advertisements. However, that account could not receive emails from external addresses.

This meant that U.S. workers following the application instructions in the advertisements could submit their materials without those applications actually reaching the company.

DOJ also alleged that Cloudera did not advertise the relevant PERM positions through its public careers website in the same manner as comparable non-PERM positions.

The government concluded that these practices prevented certain U.S. workers from receiving fair consideration for the advertised positions. The allegations concerned recruitment activity occurring from at least March 31, 2024, through January 28, 2025.

The case is especially noteworthy because the alleged problem was not simply an incorrectly completed immigration form. It involved the actual operation of the employer's recruitment process.

An employer could have prepared advertisements, maintained recruitment documentation, and proceeded with a PERM application while still having a fundamental problem: qualified U.S. workers were unable to apply through the designated channel.

That distinction goes to the heart of employment-based immigration compliance. Having a documented process is not enough if the process itself does not function as required.

The Settlement Imposes a Two-Year PERM Debarment and $2 Million in Payments

The government's investigation led to a series of enforcement actions.

DOJ filed its discrimination complaint in April 2026, and DOL suspended processing of Cloudera's PERM applications in May. The settlement was finalized on October 13 and publicly announced on October 16.

Under the resolution, Cloudera agreed to several significant obligations:

Two-year PERM debarment: Cloudera agreed to a period of exclusion from the PERM program, following the earlier suspension of its labor certification processing.

$1.4 million back-pay fund: The company agreed to establish a fund to compensate eligible U.S. workers who were denied fair consideration.

$600,000 in civil penalties: Cloudera agreed to pay penalties to the federal government.

Enhanced compliance requirements: The company must revise relevant recruitment practices and comply with training, monitoring, and reporting obligations, including DOJ oversight extending for three years.

The agreement also requires Cloudera to conduct PERM recruitment in a manner consistent with recruitment for comparable non-PERM positions, including the use of ordinary recruitment channels and applicant-tracking procedures.

These measures demonstrate that the consequences of immigration compliance problems can extend well beyond financial penalties. They can affect an employer's ability to sponsor foreign national employees, require changes to internal hiring practices, and create years of additional government oversight.

Why the Cloudera Case Matters for Other Employers

The PERM program generally requires employers to test the U.S. labor market before sponsoring a foreign national worker for permanent employment in positions subject to labor certification.

That process must provide qualified U.S. workers with a genuine opportunity to apply and be considered.

The Cloudera case illustrates why regulators may examine not only whether recruitment was conducted, but whether it was conducted fairly and effectively.

A company might be able to produce copies of advertisements, recruitment reports, and internal instructions. Yet if the underlying application process was inaccessible, malfunctioning, or administered differently in a way that unlawfully disadvantaged U.S. workers, the existence of those documents may not establish compliance.

This is a lesson that extends beyond PERM recruitment. Employers need to understand whether their compliance procedures are actually being carried out, whether the people responsible for those procedures understand their obligations, and whether reliable evidence exists to demonstrate what happened.

For companies with substantial H-1B and PERM programs, those questions deserve attention before an investigation begins.

Federal Immigration Enforcement Is Increasing the Importance of H-1B and PERM Compliance

Project Firewall and the Cloudera Settlement Reflect a Broader Enforcement Strategy

The Cloudera settlement is part of a broader federal effort to scrutinize how employers use employment-based immigration programs.

In September 2025, DOL announced Project Firewall, an H-1B enforcement initiative emphasizing employer accountability, protection of U.S. workers, and increased coordination among federal agencies.

The initiative included expanded use of Secretary-certified investigations and collaboration among DOL, DOJ, USCIS, and other agencies. DOL specifically identified potential consequences of H-1B violations, including back wages, civil monetary penalties, and debarment.

Project Firewall focuses on H-1B compliance, while the Cloudera settlement addresses alleged discrimination during PERM recruitment. They involve different legal provisions and enforcement mechanisms, but both demonstrate that employers should expect government agencies to examine how immigration-related employment practices function in reality.

For immigration law firms, this creates an important opportunity to help corporate clients reevaluate processes that may have remained largely unchanged for years. An employer might have sophisticated immigration counsel preparing petitions and labor certifications while still relying on manual emails, spreadsheets, shared folders, and individual HR contacts to complete associated compliance obligations.

Those systems are not inherently unlawful. But they can make it difficult to identify mistakes, ensure consistent execution, or reconstruct what happened months or years earlier.

The more employees, worksites, and immigration matters an employer manages, the greater the potential for seemingly small administrative errors to accumulate.

Administrative Compliance Requirements Can Create Disproportionate Risk

Consider the difference between preparing an H-1B petition and posting the associated LCA notice.

The petition itself may involve detailed legal analysis, supporting evidence, wage determinations, and careful review by immigration counsel. By comparison, the LCA notice requirement can appear simple: make the required information available to affected workers for the applicable period and maintain evidence that notice was provided.

Yet the simplicity of the requirement can be misleading.

The employer must determine where notice is required, who needs access, how the notice will be delivered, when it must be available, and what documentation should be retained.

The same is true of PAFs and PERM Notices of Filing. These are relatively standardized compliance activities, but their execution depends on coordination among legal teams, HR departments, worksite managers, and sometimes third-party companies.

A single missed posting, incorrect date, incomplete file, or inaccessible electronic notice can create a compliance issue that might otherwise have been avoided.

This is precisely why immigration compliance technology can be valuable. It cannot eliminate every risk, but it can reduce dependence on manual follow-up and establish more reliable records of routine compliance activities.

H-1B LCA Posting Compliance: A Simple Requirement That Is Easy to Get Wrong

Electronic LCA Posting Must Reach the Workers Who Are Entitled to Notice

Under 20 CFR § 655.734, H-1B employers must provide notice of an LCA filing to affected workers through an authorized method, including physical posting or electronic notification.

For notice provided through posting, the applicable requirement is at least 10 days. Employers must also satisfy the regulation's timing requirements for notice in relation to the LCA filing.

Electronic posting can be particularly helpful for employers with remote employees or workers assigned to multiple locations. However, posting a notice somewhere online does not automatically establish compliance.

DOL's Field Assistance Bulletin 2019-3 explains that electronic notification must be practically accessible to affected workers and that those workers must know where to find it.

The guidance also addresses third-party worksites, where affected workers may include employees of a company other than the H-1B petitioner.

For example, an employer that places H-1B professionals at a client's office cannot necessarily satisfy the notice requirement by posting the LCA on an internal webpage accessible only to its own employees. The employer must consider how affected workers at the client location will receive appropriate notice.

Similarly, a publicly accessible website may not be sufficient if the intended workers have no reason to know the posting exists or cannot identify which notice applies to their worksite.

Manual LCA Posting Creates Recurring Documentation Problems

In practice, many immigration law firms and corporate immigration teams coordinate LCA postings through email.

An attorney or paralegal prepares a notice, sends it to an HR representative or worksite contact, and requests confirmation that the notice has been posted.

The recipient may then forward the notice to another employee responsible for physically posting it or placing it on an internal electronic bulletin board.

Although this process may satisfy the regulations when implemented correctly, it introduces several opportunities for mistakes.

The notice might be posted at the wrong location, displayed for an insufficient period, removed without documentation, or made available through an electronic system that affected workers cannot access.

Even when the posting was completed correctly, the employer may have difficulty locating the evidence years later.

A confirmation email stating that someone received the posting instructions does not necessarily establish that the notice was displayed properly for the required duration.

These issues become more complicated when employers manage hundreds or thousands of LCAs annually, especially across remote and third-party worksites.

The problem is not necessarily a lack of legal knowledge. It is the difficulty of consistently executing and documenting a repetitive compliance process across multiple people and locations.

Public Access File Compliance Requires More Than Storing a Certified LCA

H-1B Public Access Files Must Contain Specific Documentation

Under 20 CFR § 655.760, H-1B employers must make required LCA documentation available for public examination within one working day after filing the LCA.

A PAF is not simply a copy of the certified LCA. Depending on the employer and circumstances, required documentation includes information about the wage rate, actual wage system, prevailing wage determination, benefits, and evidence of compliance with LCA notice requirements.

Additional documentation may be required for certain employers, including H-1B-dependent employers and willful violators.

A PAF therefore brings together several separate compliance obligations.

An employer may have properly filed the LCA and paid the required wage but still have an incomplete public-access file because the wage memorandum is missing, the benefits documentation was never uploaded, or the posting evidence was stored in a separate email thread.

This creates a practical challenge during a government investigation or public inspection request. Someone must locate the file, identify missing documents, contact the relevant personnel, and determine whether the documentation can be reconstructed.

The more time that has passed since the original filing, the more difficult that process may become.

PAF Retention and Destruction Require Their Own Compliance Controls

Record retention is another area where employers benefit from having a defined process.

The PAF retention rules depend on the relevant employment and LCA circumstances, while certain underlying payroll records are subject to separate retention obligations.

Employers must therefore avoid both premature destruction of required records and uncontrolled retention that leaves large volumes of outdated documentation scattered across systems.

An organized process should identify the applicable retention period, account for relevant changes in employment circumstances, and ensure that authorized personnel can retrieve records while they must be maintained.

For immigration law firms managing PAFs on behalf of multiple corporate clients, centralized recordkeeping also reduces the administrative burden of responding to requests for historical documentation.

PERM Notice of Filing Compliance Is Distinct From Recruitment but Equally Important

PERM NOF Posting Has Its Own Regulatory Requirements

The Cloudera case concerns alleged discriminatory recruitment practices. It should not be confused with a PERM Notice of Filing violation.

Nevertheless, the settlement provides a timely reason for employers to review their broader PERM compliance procedures, including NOF posting.

Under 20 CFR § 656.10, employers generally must provide notice of a PERM filing to the appropriate bargaining representative or, where applicable, through workplace posting.

For the required workplace posting, the notice must be displayed for at least 10 consecutive business days within the prescribed period before filing the PERM application.

Employers must also satisfy applicable in-house media requirements, including electronic or printed communications used in the normal course of recruiting for similar positions.

These requirements differ from H-1B LCA posting rules. In particular, employers should not confuse the PERM NOF's 10-business-day requirement with the H-1B LCA notice period.

The NOF also has specific content requirements, and the employer must retain documentation demonstrating compliance.

PERM NOF Errors Can Occur Even When the Underlying Case Is Otherwise Well Prepared

A PERM application may involve extensive recruitment, prevailing wage analysis, and preparation of supporting documentation. Yet an error involving the NOF can still create a problem.

Examples include posting the notice for the wrong number of days, failing to account for holidays when calculating business days, using an incorrect notice, overlooking applicable in-house media requirements, or failing to retain evidence of posting.

These are not merely theoretical concerns. DOL's BALCA PERM case digest documents cases in which notice-related deficiencies contributed to denial of labor certification, including errors involving required notice content and timing.

For employers and immigration law firms handling substantial PERM volumes, the challenge is ensuring that each notice follows the appropriate process and that the supporting documentation can be produced when needed.

Electronic tools can simplify applicable electronic notice workflows, tracking, and recordkeeping. They do not eliminate any physical posting obligation imposed by the regulations.

That is why the most effective compliance approach combines technology with appropriate legal review and clear responsibility for completing each required step.

How LaborLess Helps Employers Strengthen H-1B and PERM Compliance

For nearly a decade, LaborLess has focused on helping immigration law firms and employers automate the administrative compliance processes associated with H-1B LCAs, Public Access Files, and PERM Notices of Filing.

These obligations are often treated as routine administrative work, but they involve strict timing, documentation, and recordkeeping requirements. LaborLess helps organizations manage those responsibilities more consistently and maintain evidence of compliance activities.

The platform provides several core capabilities:

- Electronic LCA Posting: Centrally manage electronic LCA notices across employer offices, remote worksites, and third-party client locations using websites, electronic bulletin boards, and QR-code-based access methods.

- Automated Posting and Takedown: Automate LCA posting periods and removal, with system-generated records documenting when notices were posted and taken down.

- Automatic Public Access File Creation: Generate and maintain PAFs alongside the LCA workflow, with centralized access to certified LCAs, wage documentation, benefits statements, posting evidence, and other required records.

- Detailed Audit Logs: Track relevant LCA and PAF activity, including user actions, document changes, and timestamps, to support internal compliance reviews and responses to government inquiries.

- PAF Retention Management: Track PAF expiration dates and automate destruction according to configured retention schedules, while allowing relevant dates to be updated when circumstances change.

- PERM Notice of Filing Management: Support electronic NOF posting workflows, automated posting and takedown, and supporting compliance documentation, while employers and counsel address applicable physical posting and other legal requirements.

- Centralized Compliance Records: Give authorized law-firm and employer personnel access to relevant records without relying on disconnected email threads, spreadsheets, or separate document repositories.

These capabilities can make a meaningful difference during an internal audit or DOL investigation.

Instead of asking several employees to reconstruct whether an LCA notice was posted, when it was removed, or where the supporting PAF documents were saved, the employer can retrieve records from a centralized platform.

LaborLess does not replace immigration counsel, conduct PERM recruitment, or determine whether an employer has satisfied every legal obligation. Its value is in automating administrative compliance steps, improving visibility, and preserving records that help demonstrate what was done and when.

Better Immigration Compliance Begins With Reliable Processes

The Cloudera settlement demonstrates the potential consequences when an employer's immigration-related hiring procedures do not operate as the law requires.

It also offers a broader lesson for companies sponsoring H-1B workers and pursuing employment-based green cards: compliance should be evaluated not only by the quality of the legal filings, but also by how reliably the employer performs the operational steps surrounding those filings.

LCA posting, PAF management, and PERM NOF posting may be small components of a much larger immigration program. Yet each has its own requirements, and each creates opportunities for avoidable mistakes.

Employers do not need to wait for a government investigation to identify weaknesses in these processes.

A practical review can begin by asking whether required notices are consistently made available to the correct workers, whether posting periods are accurately tracked, whether PAFs are complete and accessible, and whether the employer can readily produce reliable evidence of compliance.

Where the answers depend on finding old emails or asking individual employees to remember what happened, there may be an opportunity to strengthen the process.

Frequently Asked Questions About the Cloudera Settlement and Immigration Compliance

What was the Cloudera PERM settlement announced in October 2026?

On October 16, 2026, DOJ and DOL announced a settlement resolving allegations that Cloudera discriminated against qualified U.S. workers during PERM recruitment. The resolution included a two-year PERM debarment, a $1.4 million back-pay fund, $600,000 in civil penalties, and additional compliance obligations.

Why did Cloudera face a two-year PERM debarment?

DOJ alleged that Cloudera used recruitment procedures for PERM positions that prevented certain U.S. workers from applying or receiving fair consideration. One central allegation involved an email account that could not receive applications from external email addresses.

Does the Cloudera settlement involve H-1B LCA posting or Public Access File violations?

No. The announced settlement addresses alleged discrimination during PERM recruitment. However, it highlights the broader importance of maintaining effective employment-based immigration compliance processes, including separate H-1B and PERM obligations.

What are the most common H-1B LCA posting compliance risks?

Common risks include posting at the wrong location, failing to provide notice to affected workers at third-party worksites, using inaccessible electronic notices, miscalculating posting periods, and failing to retain sufficient evidence of compliance.

What is required in an H-1B Public Access File?

A PAF generally includes the certified LCA, wage-related documentation, prevailing wage support, an explanation of the employer's actual wage system, benefits documentation, and evidence of required notice, along with any additional records applicable to the employer.

How long must a PERM Notice of Filing be posted?

For the applicable workplace posting requirement, a PERM NOF must be posted for at least 10 consecutive business days within the regulatory period before the PERM application is filed. Employers must also comply with applicable content and in-house media requirements.

Can immigration compliance software prevent a DOL audit?

No. Software cannot prevent a government investigation or guarantee legal compliance. It can, however, help employers perform recurring administrative obligations more consistently, reduce manual errors, and maintain organized documentation for internal reviews or government inquiries.