UK Right-To-Work Law: Employer Guide To Right-To-Work Checks

Hiring your first team member (or your fiftieth) is exciting - but it also comes with some very real compliance obligations.

One of the biggest is right-to-work law in the UK. Employers have a legal duty to check that every worker they employ has the right to work in the UK - and to carry out those checks correctly.

If you get it wrong, the consequences can be expensive and disruptive (and in serious cases, even criminal). The good news is that, once you understand the rules and set up a simple internal process, right-to-work checks become a straightforward part of onboarding.

This guide breaks down what UK right-to-work requirements mean for employers, how to run compliant right-to-work checks, how to record and follow up properly, and how to avoid common pitfalls that catch out small businesses.

What Is Right-to-Work Law (And Why Does It Matter For Small Businesses)?

“Right-to-work law” is the term people commonly use to describe the UK rules requiring employers to verify a person’s immigration status (or other permission) before they start work.

In practice, this obligation mainly comes from the Immigration, Asylum and Nationality Act 2006 and related Home Office guidance on preventing illegal working (which is updated from time to time).

These rules matter because:

• You must check every employee’s and worker’s right to work before they start working for you.
• You must do the check correctly (it’s not enough to “have a look” at a passport and move on).
• You must keep evidence of the check, in the correct format, for the required period.
• You must avoid discrimination while doing checks (for example, only checking non-UK applicants can create legal risk).

This applies whether you’re hiring:

• full-time or part-time staff
• temporary workers
• casual workers
• fixed-term staff
• zero-hours staff
• interns and work experience (depending on the arrangement)

Even if you’re a tiny business, there’s no “small employer” exemption. Right-to-work checks apply from day one.

Who Needs A Right-to-Work Check (Employees, Workers, Contractors And More)?

A common point of confusion is who needs a right-to-work check. As a rule of thumb, if someone is going to personally carry out work for you in the UK, you should assume a right-to-work check is required.

Employees And Workers

Anyone you employ under a contract of employment or engagement should be checked before work starts. This is part of building solid onboarding documentation - and it sits alongside having a clear Employment Contract in place.

Zero-Hours And Casual Staff

Right-to-work law doesn’t change just because hours are variable. You still need a compliant check before the first shift.

Agency Staff

Agency arrangements can be tricky. In many cases, the agency will carry out the right-to-work check for agency workers - but responsibility can depend on the facts and the contractual arrangements. It’s important to confirm, in writing, who will do the check and who will keep the evidence, and to make sure the process actually happens in practice.

Self-Employed Contractors

This is where small businesses can get caught out. If the individual is genuinely self-employed and you’re engaging a business (for example, a limited company) rather than employing the person directly, the position can be different.

However, if you’re engaging an individual directly and they will be working personally in the UK (especially if the relationship looks more like employment), carrying out a right-to-work check is often a sensible risk-control step.

If you’re unsure about the legal status of your hires, it’s worth getting advice early - misclassification creates multiple legal risks beyond immigration compliance.

How To Do A Compliant Right-to-Work Check (Step-By-Step)

Right-to-work compliance is very process-driven. The safest approach is to create a standard checklist your team follows every time, for every hire.

At a high level, there are three main ways to do a right-to-work check:

• manual check (checking original documents in person)
• online check (using the Home Office online service where the worker has a digital status)
• check via an Identity Service Provider (IDSP) for eligible British/Irish passport holders (using Identity Document Validation Technology)

Which method you can use depends on the individual’s status and what documents they have, so it’s important to follow the latest Home Office guidance.

Step 1: Do The Check Before They Start Work

Timing matters. To benefit from the “statutory excuse” (a key legal protection if you later discover the person didn’t have the right to work), you must do the check before employment begins.

Practically, that means:

• build the check into your recruitment and onboarding process
• don’t let someone start “just for training” or “to help out” until the check is complete

Step 2: Use The Correct Type Of Check

Manual checks generally involve:

• obtaining the original documents
• checking the documents are genuine, belong to the person, and allow the work you’re offering
• copying and recording the documents in the required way

Online checks are used where the individual has an eVisa or digital immigration status. The worker provides a share code, and you verify their right to work online.

IDSP checks may be available where the worker has an eligible British or Irish passport (and you use a certified provider). This can be useful for remote-first teams, but it’s important to follow the rules carefully - “remote hiring” doesn’t remove your right-to-work duties.

Step 3: Make Sure The Permission Covers The Role

Right-to-work compliance isn’t just about whether the person can work in the UK generally. You also need to check:

• any restrictions (for example, limited hours)
• any expiry dates (time-limited permission)
• role limitations (depending on visa conditions)

If the person has restrictions and you ignore them, you can still be exposed - even if you “did a check”.

Step 4: Keep Clear Records

You need to keep evidence of the check. In a compliance audit (or if an issue comes up later), your records are often the difference between being protected and being penalised.

Also remember: right-to-work records are personal data, so you need to store them securely and keep them only for as long as Home Office guidance and your wider data-retention obligations require. This sits alongside wider GDPR practices, including how you manage ex-employee records and retention policies.

Step 5: Don’t Forget Follow-Up Checks For Time-Limited Status

If someone has time-limited permission to work, you’ll need a follow-up check before their permission expires.

In a small business, this is easy to miss unless you have a reminder system (calendar alerts, HR software, or a central tracking spreadsheet). Missing a follow-up check can undo otherwise good compliance.

Common Right-to-Work Mistakes (And How To Avoid Them)

Most right-to-work breaches we see aren’t deliberate - they happen because the business is busy, the hire is urgent, and the process isn’t documented.

Here are some common traps and how to avoid them.

1) Checking Some People But Not Others

You should carry out right-to-work checks for every hire, regardless of nationality, race, or accent.

Only checking “non-UK sounding” applicants creates a discrimination risk. It also creates a compliance risk because it leads to inconsistent record-keeping.

2) Accepting Copies Without Following The Rules

The rules are specific about what you must review and how. A quick photo of a document sent over WhatsApp is not the same as a compliant check (unless you’re using an approved method and meeting the relevant requirements).

3) Not Matching The Check To The Person’s Status

Some individuals must be checked online, not manually. Others can be checked using documents. The method matters.

If you’re not sure, don’t guess. Confirm which check applies, and document it.

4) Forgetting To Check Again When Permission Expires

Time-limited permission requires follow-up. A simple reminder system can save you serious stress later.

5) Treating Right-to-Work Checks Like “Background Checks”

Right-to-work checks are a legal requirement, but they’re not the same thing as vetting or screening.

If you’re also running screening as part of hiring, make sure you do it carefully and consistently. For example, there are legal considerations around background checks, and you’ll want to avoid over-collecting data or applying checks inconsistently.

6) Asking The Wrong Questions In Interviews

You can ask whether a candidate has the right to work in the UK - but be careful about how you ask and what else you ask during recruitment.

Questions that stray into nationality, ethnicity, or assumptions about immigration status can be risky. It’s worth training anyone involved in hiring to avoid illegal interview questions and to stick to a consistent process.

What Happens If You Don’t Comply With Right-to-Work Law?

Right-to-work law has teeth. If you employ someone who doesn’t have the right to work (or doesn’t have the right to do the work you’re offering), you can face civil penalties and, in serious situations, criminal consequences.

Civil Penalties

If you don’t carry out compliant checks, you may lose the “statutory excuse” and face a civil penalty.

The Home Office can impose significant fines. The maximum penalty levels can change and depend on the circumstances (including whether it’s a first or repeat breach), so you should always check the latest Home Office guidance for the current figures.

Criminal Liability

Where an employer knowingly employs someone without the right to work (or has reasonable cause to believe they don’t have it), there may be criminal liability.

Even if you never reach that threshold, an investigation can take time and energy away from running your business - which is why setting up your compliance “from day one” matters.

Business Disruption And Commercial Fallout

Beyond legal penalties, right-to-work issues can trigger:

• loss of key staff and operational disruption
• reputational damage
• problems with partners, funders, or clients who expect compliance
• additional scrutiny if you later apply for a sponsor licence

If your growth plans include hiring overseas talent, it’s also worth understanding how sponsor compliance works and what can go wrong if a licence is withdrawn or revoked. (If that’s on your radar, the risks are worth planning for early.)

How To Build Right-to-Work Checks Into Your Hiring Process

The best way to stay compliant is to treat checks as a normal part of onboarding - like setting up payroll or issuing a contract.

Here’s a practical approach that works well for small businesses.

Create A Simple “Hiring Pack”

Even if you don’t have a dedicated HR team, you can standardise your onboarding with:

• a written right-to-work checklist (what you check, how, and where you store it)
• standard wording in offer emails explaining that employment is conditional on a compliant right-to-work check
• clear role documentation and start dates
• proper employment paperwork (including a Employment Contract)

If you’re also using trial periods, make sure you’re clear on your approach to probation - but remember, probation doesn’t reduce your right-to-work obligations. The check must still be done before day one.

Use Consistent Processes For Every Hire

Consistency is what keeps you compliant and reduces discrimination risk. A good rule is:

• everyone gets checked
• everyone gets checked at the same point in the process
• everyone’s evidence is stored in the same place

Train Anyone Involved In Hiring

If more than one person in your business hires staff (for example, store managers or team leads), make sure they know:

• what they can and can’t ask during recruitment
• what documents or online statuses they should expect to see
• when to escalate questions to a manager or adviser

Set Up A Follow-Up Reminder System

For time-limited permission, set a reminder at least 2–3 months before expiry, so you’re not scrambling at the last minute.

If you miss the expiry and the worker can’t prove continued permission, you could be forced into a fast (and stressful) decision about suspending work while you check their status. Having a plan beats panic every time.

Be Clear About “Work” Arrangements

Right-to-work checks also intersect with broader employment compliance. For example, while it’s possible to engage people informally in the early days, working without a contract can create disputes and confusion about expectations - and it can make it harder to demonstrate that your onboarding systems are consistent if you’re ever questioned by regulators.

Solid documents and a consistent onboarding process help protect your business on multiple fronts.

Key Takeaways

• Right-to-work law requires you to check that every worker you employ has the right to work in the UK before they start.
• Right-to-work checks must be done using the correct method (manual, online, or via an IDSP where allowed), and you need to check any restrictions on work.
• You should keep clear, secure records of the check and follow Home Office guidance and GDPR-aligned retention practices, as these documents contain personal data.
• If a worker has time-limited permission to work, you must diarise and complete follow-up checks before their permission expires.
• Inconsistent checking can create discrimination risk, so build a standard process and apply it to every hire.
• Non-compliance can lead to serious civil penalties and, in some cases, criminal consequences - so it’s worth setting up your process properly from day one.

If you’d like help putting compliant hiring processes in place, including onboarding documents and practical guidance on right-to-work law, you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.