Right to Work Checks: UK Employer Compliance Guidance

Hiring your first team member (or scaling up quickly) is exciting - until you remember the compliance side of employment.

One of the biggest “from day one” obligations for UK employers is getting your right to work guidance nailed down. If you get it wrong, the consequences can be serious: civil penalties, reputational damage, disruption to your operations, and tricky employee relations issues.

The good news is that right to work checks are very manageable once you know what the Home Office expects, which checking route applies to which worker, and what evidence you need to keep on file.

Below, we’ll walk you through practical right to work guidance for small businesses, including step-by-step checking routes, common pitfalls, and how to build a process that stays compliant as you grow.

What Is “Right To Work” And Why Does It Matter For Small Businesses?

In plain English, a “right to work” check is how you confirm that a person you employ is legally allowed to work in the UK, and (where relevant) whether they have any restrictions on what work they can do.

These checks sit under the UK’s illegal working regime (including the Immigration, Asylum and Nationality Act 2006). For employers, the key point is this:

• If you carry out the correct checks before employment starts (and follow-up checks when required), you can gain a statutory excuse against a civil penalty for illegal working.
• If you don’t carry out compliant checks, you may be exposed to civil penalties and other legal risk.

For a small business, the practical impact is often bigger than the headline fine. A right to work issue can delay start dates, derail onboarding, trigger urgent HR work, and create uncertainty for customers and your existing staff.

That’s why strong right to work guidance isn’t just “admin” - it’s part of protecting your business, your cashflow, and your ability to grow safely.

What Are The Potential Consequences If You Get It Wrong?

Consequences will depend on the situation, but employers can face:

• Civil penalties (often publicised as up to £60,000 per illegal worker, depending on the circumstances and current Home Office policy)
• Business disruption (loss of staff, paused projects, urgent recruitment)
• Reputational damage
• In serious cases, potential criminal exposure where an employer knowingly employs someone without the right to work

So, if you’ve been meaning to set a consistent onboarding process - this is the moment.

When Do You Need To Carry Out Right To Work Checks (And Who Needs One)?

The safest approach is simple: treat right to work checks as a non-negotiable step in your onboarding workflow, carried out before the person starts work.

As part of practical right to work guidance, most employers should assume they need to check every employee, regardless of nationality, role, hours, or seniority.

Timing: The “Before They Start” Rule

To rely on the statutory excuse, you generally need to complete the check:

• Before employment begins (ideally after accepting the offer but before day one)
• In a way that matches an approved Home Office checking route (more on this below)
• With clear records kept on file

If you allow someone to start work and “sort the documents later”, you’re taking on unnecessary risk.

Do You Need Repeat Checks?

Sometimes, yes.

If the person has time-limited permission to work in the UK, you’ll usually need a follow-up check before their permission expires (or in line with the Home Office guidance for their status).

If the person has an ongoing/indefinite right to work (e.g. certain settled statuses), repeat checks may not be required.

This is one of the areas where tailored advice can be helpful - especially if you have a mixed workforce with different immigration statuses and varying work restrictions.

How To Do A Right To Work Check: The 3 Main Routes (Step By Step)

The Home Office recognises different checking routes depending on the worker’s documents/status. The key is to use the right route for the right person and keep the right evidence.

Below is practical right to work guidance for each of the main routes employers commonly use.

1) Online Right To Work Checks (Using A Share Code)

This is often the required route for people who have an eVisa or digital immigration status (and in those cases, a manual document check won’t give you a statutory excuse).

In practice, the worker provides:

• a share code
• their date of birth

You then use the Home Office online service to view their right to work record.

Good employer practice:

• Make sure the online record confirms they’re allowed to do the work you’re offering (e.g. note any restrictions).
• Keep evidence of the check - for example, save/print the profile page showing the worker’s details, photo, and the date you checked.
• Record the date of the check in your HR system or personnel file.

If you’re drafting or refreshing onboarding paperwork, it’s also worth making sure your Employment Contract and offer process reflect that employment is conditional on satisfactory right to work evidence.

2) Manual Document Checks (Physical Or Eligible Paper Documents)

Manual checks are the traditional approach: you review original documents (or acceptable combinations of documents) and confirm they appear genuine, belong to the individual, and allow them to do the work.

Typical steps include:

1. Obtain the original documents from the worker (not copies alone).
2. Check validity with the worker present, and make sure you’re following the current Home Office rules (for example, whether you must check the originals in person).
3. Copy the documents clearly (both sides where relevant) and keep the copies securely.
4. Record the date the check was completed.

Common sense checks you should always do:

• Does the photo match the person?
• Are dates of birth consistent across documents?
• Do the documents look altered or damaged in a suspicious way?
• Do any work restrictions conflict with the role?

Manual checks can be straightforward, but they require consistency. If different managers “do it differently”, that’s where mistakes (and discrimination risk) can creep in.

3) Digital Identity Verification (IDSP Checks) For British/Irish Passports (Where Applicable)

For some workers (commonly British and Irish passport holders), employers may be able to use an Identity Service Provider (IDSP) to carry out a digital check.

This can be helpful if:

• you’re hiring remotely
• you need a scalable onboarding process
• you want standardised evidence and audit trails

However, you still need to ensure you’re using the process correctly and retaining the right records.

This is also where HR processes and data protection overlap - because you’re handling identity information and storing it.

How To Stay Compliant Long-Term: Recordkeeping, Repeat Checks, And Consistent Onboarding

Right to work compliance isn’t just about passing the check once. It’s about having a process you can repeat confidently as your team grows.

What Records Should You Keep?

Your records are what back up your statutory excuse - so treat them like important business documents.

As part of sensible right to work guidance, you should keep:

• Copies of the documents checked (or the online check output)
• A clear record of the date the check was completed
• Any follow-up check dates diarised (where permission is time-limited)
• Notes of any restrictions and how your role complies (if relevant)

Tip: Put a standard “Right To Work” section into your onboarding checklist so you don’t rely on memory. If you already have a staff handbook, it may be worth folding this into your broader workplace compliance documentation.

What About Repeat Checks For Time-Limited Permission?

If a worker’s permission expires, you’ll generally need to re-check before that date to keep your statutory excuse.

What that means in practice:

• diarise expiry dates early (don’t wait until the last month)
• build in a buffer so you can resolve delays (e.g. pending applications)
• keep conversations professional and consistent across staff

If you’re unsure how to handle a tricky situation (for example, someone says they have an application pending but can’t provide updated evidence yet), it’s worth getting advice early rather than improvising.

Background Checks vs Right To Work Checks: Don’t Confuse Them

A right to work check is not the same as a general background check.

You can do other checks (references, qualification checks, DBS checks where appropriate), but they don’t replace right to work requirements.

If you’re considering pre-employment screening more broadly, it’s worth reading up on background checks so you stay on the right side of fairness, privacy, and employment law while still protecting your business.

Avoiding Common Pitfalls: Discrimination Risk, Data Protection, And “Informal” Hiring

Most small businesses don’t set out to get right to work wrong. Problems usually come from rushed hiring, inconsistent processes, or well-meaning managers making judgment calls without a clear policy.

Pitfall 1: “We Only Check Non-UK Accents” (Discrimination Risk)

This is a big one.

You should apply right to work checks consistently across your workforce. If you only check certain people based on nationality, race, accent, or name, you risk discrimination claims and serious employee relations problems.

A practical approach is to:

• make right to work checks a mandatory step for all new starters
• use the same checklist and evidence requirements for every hire
• train anyone involved in recruitment and onboarding

Pitfall 2: Over-Collecting Personal Data (UK GDPR Risk)

Right to work checks involve sensitive identity information. You should store documents securely, restrict access to those who need it, and avoid collecting extra data “just in case”.

As your processes mature, your broader employment compliance should match your privacy compliance. For example, if staff use company devices or systems, it can be useful to align onboarding with an Acceptable Use Policy so expectations around business IT use and monitoring are clear from the start.

Pitfall 3: Casual Workers And Trial Shifts “Off The Books”

Hospitality, retail, construction and event-based businesses often hire quickly - and that’s where informal work can happen.

If someone is working for you (even on a short trial), you should think carefully about whether they’re classed as working and what checks and payments apply. As a separate (but related) issue, trial shifts can create wage compliance risks - trial shifts need to be handled carefully.

The simplest rule is: if they’re going to start doing work, get your right to work checks done first.

Hiring Overseas Workers And Sponsorship: What Small Businesses Should Know

Many small businesses now hire internationally - especially for specialised roles where the local talent pool is tight.

However, sponsoring overseas workers is a separate compliance regime. If your business needs to sponsor someone under a work visa route, you’ll likely need a sponsor licence and must meet ongoing sponsor duties.

If you’re checking another company’s status (for example, in a supply chain or secondment scenario), or you’re exploring sponsorship for your own business, it can be useful to understand sponsorship licence checks and the common pitfalls.

Practical Tip: Separate “Right To Work” From “Sponsorship” In Your Process

Right to work checks apply to everyone you employ. Sponsorship obligations only apply if you are sponsoring (or considering sponsoring) a worker under relevant visa routes.

Don’t mash them into one confusing workflow. Instead:

• Have a standard right to work check process for all hires
• Add a separate “sponsorship pathway” only where needed
• Get advice early if you’re unsure which route applies

This keeps your onboarding scalable and reduces the chance of missing a key step.

Key Takeaways

• Right to work checks are a core part of employer compliance, and following the correct process can give you a statutory excuse against civil penalties.
• Complete right to work checks before employment starts, and carry out follow-up checks where a worker has time-limited permission to work.
• Use the correct checking route for the worker: online share code checks, manual document checks, or an IDSP process where applicable (and note that some statuses must be checked online).
• Keep clear records of what you checked and when, and diarise expiry dates so repeat checks aren’t missed.
• Apply checks consistently to all hires to reduce discrimination risk, and store documents securely to stay aligned with UK GDPR.
• If you’re hiring internationally, sponsorship can be a separate compliance regime - build a clear process so nothing gets overlooked.

If you’d like help putting a compliant onboarding process in place - including contracts, policies, and right to work workflows that fit how your business actually hires - you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.