Complete Guide to UK Right to Work Verification: Requirements, Documents & Compliance 2025

To establish a statutory excuse against illegal working civil penalties in the UK, an employer must conduct a compliant right to work check before an individual commences employment. This verification must be completed either via the Home Office online right to work service using a share code, through a certified Identity Service Provider for eligible British and Irish citizens, or by manually inspecting and retaining copies of original acceptable documents from prescribed Home Office lists. Failing to conduct compliant verification before work begins exposes the business to civil penalties of up to £60,000 per unauthorised worker and potential criminal liability.

The Legal Architecture of UK Right to Work Compliance

Every employer in the United Kingdom holds a strict legal duty to prevent illegal working under sections 15 to 25 of the Immigration, Asylum and Nationality Act 2006, as amended by the Immigration Act 2016. The law requires businesses of every size, from sole traders to multinational corporations, to verify that every prospective employee has the requisite legal permission to undertake the specific work on offer before they carry out any duties.

The Statutory Excuse Mechanism

A statutory excuse is an employer's sole legal defence against the imposition of a civil penalty should an employee be discovered working without lawful immigration permission. The statutory excuse does not make an unlawful worker lawful; rather, it shields the employer from financial liability provided the employer can prove that it carried out compliant verification before the employment started.

To establish and retain a statutory excuse, an employer must adhere strictly to the prescribed three-step verification process: obtain the relevant evidence, check the evidence in the presence of the individual, and copy and securely retain the evidence with an unalterable record of the date the check was conducted. Partial compliance, informal visual checks, or retrospective checks carried out after employment has begun provide zero legal protection.

Civil Penalties and Enforcement Framework

On 13 February 2024, the Home Office increased civil penalty thresholds significantly to deter unlawful employment. The financial penalties are assessed under a tiered structure:

1. For a first breach within a rolling three-year period, the starting point for a civil penalty is £45,000 per unauthorised worker.
2. For repeat breaches within a rolling three-year period, the penalty increases to £60,000 per unauthorised worker.

When Immigration Enforcement detects an illegal worker, a Civil Penalty Notice is issued to the legal entity employing the individual. While mitigation reductions may apply if an employer reported the suspected worker to the Home Office, cooperated fully with investigators, and implemented effective document verification systems, the financial baseline remains severe.

Beyond financial penalties, non-compliance triggers grave secondary consequences. If the business holds a Worker or Temporary Worker Sponsor Licence, the Home Office will initiate compliance action that routinely leads to licence suspension or immediate revocation. A civil penalty or revocation also prevents the business from applying for a new sponsor licence for designated cooling-off periods, disqualifies company directors under company law in serious cases, and results in public naming and shaming on the published Home Office quarterly enforcement register.

Criminal Offence of Employing an Illegal Worker

Under Section 21 of the Immigration, Asylum and Nationality Act 2006, as amended by Section 35 of the Immigration Act 2016, an employer commits a serious criminal offence if they employ a person while having 'knowledge' or 'reasonable cause to believe' that the individual lacks the right to work in the UK.

The 'reasonable cause to believe' threshold is an objective legal test. An employer cannot hide behind deliberate ignorance or failure to make reasonable enquiries. If an employer receives information that would lead a reasonable business to suspect an individual's status is invalid, expired, or breached, liability attaches. The criminal offence carries penalties of an unlimited fine and an imprisonment term of up to five years for culpable company officers, managers, or directors.

The Three Prescribed Verification Methods

Employers must understand that right to work verification cannot be conducted using arbitrary methods. The Home Office mandates three specific verification routes depending on the nationality and immigration status of the individual.

+----------------------------------------------------------------------------------------------------+
|                                 DETERMINE THE VERIFICATION METHOD                                  |
+----------------------------------------------------------------------------------------------------+
                                                  |
         +----------------------------------------+----------------------------------------+
         |                                                                                 |
[British or Irish Citizen]                                                        [Non-British / Non-Irish]
         |                                                                                 |
         +-----------------------+                                                         |
         |                       |                                                         |
  [Valid Passport]      [No Valid Passport]                                                |
         |                       |                                                         |
         v                       v                                                         v
  Choice of:              Manual Document Check                                    Digital Verification
  - IDSP (Digital)        (Birth/Adoption cert + NI)                               (Home Office Online Service
  - Manual Document Check                                                           via Share Code)

1. Home Office Online Right to Work Service

The Home Office online verification service is the primary and mandatory checking mechanism for non-British and non-Irish nationals who hold digital status (an eVisa), a Biometric Residence Permit (BRP), a Biometric Residence Card (BRC), or status granted under the EU Settlement Scheme (EUSS).

Physical BRP and BRC cards are no longer acceptable evidence for manual right to work checks. An employer who accepts a physical BRP card without conducting an online share code check secures no statutory excuse. The online service requires the prospective worker to generate a nine-character share code via the GOV.UK portal, which begins with the letter 'W'. The employer must then input this share code alongside the individual's date of birth into the employer-facing portal on GOV.UK.

2. Manual Document Verification

Manual verification is restricted to individuals who are entitled to use physical documentation to prove their status. This primarily comprises British and Irish citizens who do not possess a digital status, and a narrow category of individuals with non-digital endorsements, such as wet-ink stamps or vignette stickers in valid passports showing indefinite leave to enter or remain.

The manual process requires the employer to physically handle the original documents, inspect them in the presence of the holder (either in person or via live video link with the original document physically in the employer's hands), and take clear, unalterable copies.

3. Identity Document Validation Technology (IDVT) via Certified IDSPs

Employers may use certified Identity Service Providers (IDSPs) operating Identity Document Validation Technology (IDVT) to conduct digital identity checks on British and Irish citizens who hold valid, in-date passports or passport cards.

This method allows remote verification without handling physical documents directly. However, the employer remains strictly liable for the check. To retain a statutory excuse via an IDSP, the employer must verify that the IDSP is certified to the correct Trust Framework level, ensure that the photograph and biometrics match the candidate, and independently confirm that the output confirms British or Irish citizenship.

Step-by-Step Verification Workflows

To ensure an unbroken chain of compliance, HR teams and hiring managers must follow an exact chronological process before any prospective employee performs work, attends paid training, or accesses company systems.

+----------------------------------------------------------------------------------------------------+
|                                 STEP-BY-STEP VERIFICATION WORKFLOW                                 |
+----------------------------------------------------------------------------------------------------+

[Stage 1: Pre-Check Assessment]
- Request right to work evidence before the first day of employment
- Identify the correct route (Online Share Code, IDSP, or Manual)

                                  |
                                  v

[Stage 2: Verification Execution]
- Online Check: Enter 'W' share code + Date of Birth on GOV.UK employer portal
- IDSP Check: Review certified digital identity report for British/Irish citizen
- Manual Check: Inspect original physical documents in candidate's presence

                                  |
                                  v

[Stage 3: Identity & Condition Match]
- Confirm candidate's appearance matches the photograph (in person or live video)
- Check name consistency across documents (or verify official change of name)
- Check work permissions: Are there hour limits (Students) or role limits (Skilled Worker)?

                                  |
                                  v

[Stage 4: Decision Gate]
- Passed unrestricted -> Continuous excuse established
- Passed time-limited -> Record visa expiry date in HR calendar for follow-up
- Pending status / Issue -> Submit Employer Checking Service (ECS) request
- Failed / Ineligible -> DO NOT PERMIT WORK TO COMMENCE

                                  |
                                  v

[Stage 5: Secure Archiving]
- Save full PDF confirmation or certified physical copies
- Record mandatory date stamp: "Check conducted on [Date] by [Name]"
- Retain for duration of employment plus exactly 2 years

Step 1: Pre-Employment Assessment and Route Selection

Before making an unconditional offer or setting a start date, the hiring department must ask the candidate to confirm how they will demonstrate their right to work. An employer must not presume an individual's route based on their accent, race, or origin. All prospective employees must undergo verification.

If the individual states they hold an eVisa, settled status, pre-settled status, or a visa issued under the points-based system, direct them to provide an online right to work share code. If the candidate is a British or Irish citizen, give them the option to verify via an IDSP (if they hold a valid passport) or present original manual documents.

Step 2: Conducting the Digital Check via GOV.UK

When using the online service, the employer must:

1. Receive the nine-character share code from the worker. The code must begin with 'W' (codes beginning with 'R' are for renting property, and 'S' are for general status confirmation; neither provides an employment statutory excuse).
2. Access the dedicated 'View a job applicant's right to work details' page on GOV.UK.
3. Input the candidate's share code and date of birth.
4. View the live profile displayed on the screen. The profile shows the individual's photograph, immigration status, work permissions, and any specific conditions or restrictions.
5. Download and save the entire official Home Office profile as a PDF document. Taking a screenshot or printing a partial web page does not meet the legal standard.

Step 3: Conducting a Manual Physical Document Check

When conducting a manual check for an eligible individual, the employer must adhere to the Obtain, Check, Copy protocol:

1. Obtain: Demand original documents from List A or List B of the Home Office published guidance. Photocopies, certified true copies, laminated originals that conceal security features, or digital scans emailed by the applicant are strictly invalid.
2. Check: Examine the original documents in the physical presence of the applicant. If the candidate is remote, the applicant must send the original physical document to the employer, and the employer must view the applicant over a live video link while holding the document. The employer must verify:
   • Photographs and dates of birth are consistent with the person standing before them.
   • Expiry dates have not passed (except for British and Irish passports, which may be accepted if expired, provided the photograph remains a clear likeness).
   • Security features such as watermarks, holograms, raised printing, and intact binding show no signs of tampering.
   • Names match across documents. If names differ (for instance, following marriage or deed poll), the applicant must present original supporting documentation (such as a marriage certificate or change of name deed).
3. Copy: Make a clear, unalterable copy of the original document. For passports, copy every page containing the holder's personal details, photograph, nationality, date of birth, signature, biometric details, leave expiry date, and any endorsements containing work restrictions. For all other documents, copy both sides in full.

Step 4: Conducting an IDSP Verification

When using an IDSP for British and Irish citizens, the employer must:

1. Ensure the IDSP is certified against the UK Digital Identity and Attributes Trust Framework to Medium or High profiles of confidence.
2. Instruct the candidate to complete the identity verification through the IDSP platform.
3. Receive the output report and verify that the data matches the applicant.
4. Conduct a visual check (in person or via live video) to confirm that the photograph on the IDSP report matches the prospective employee.
5. Retain the full IDSP validation report alongside the date the identity check was reviewed.

Step 5: Recording and Date-Stamping the Verification

The statutory excuse requires an unambiguous, contemporaneous record of when the verification took place. The employer must record the date the check was conducted. This can be achieved by applying a written or digital endorsement onto the copy:

'The date on which this right to work check was made: [Date] by [Authorised Signatory Name/Initials].'

Simply dating the document with the employment start date is insufficient; the record must reflect the exact calendar date the document was physically or digitally verified by the reviewer.

Step 6: Follow-Up Verification for Time-Limited Permissions

If the worker's status is time-limited (derived from List B or a digital status with an expiry date), the statutory excuse expires on the date their immigration permission ends. The employer must enter the expiry date into a robust HR tracking system and repeat the complete right to work check before that expiry date. If the employee cannot demonstrate an extended or alternative right to work prior to midnight on the expiry date, employment must cease immediately to avoid illegal working penalties.

Comprehensive Document Schedules (Lists A and B)

The Home Office categorises acceptable manual documents into List A and List B. List A documents confer a continuous statutory excuse lasting for the duration of the employment. List B documents confer a time-limited statutory excuse.

List A: Continuous Statutory Excuse Documents

1. A passport (current or expired) showing the holder is a British citizen or a citizen of the United Kingdom and Colonies having the right of abode in the United Kingdom.
2. A passport or passport card (current or expired) showing the holder is an Irish citizen.
3. A document issued by the Bailiwick of Jersey, the Bailiwick of Guernsey, or the Isle of Man, which has been verified as valid by the Home Office Employer Checking Service, verifying that the holder has been granted unlimited leave to enter or remain under the EU Settlement Scheme.
4. A current passport endorsed to show that the holder is exempt from immigration control, is entitled to readmission to the United Kingdom, or has no time limit on their stay in the United Kingdom.
5. A current Immigration Status Document issued by the Home Office to the holder with an endorsement indicating that the named person is allowed to stay indefinitely in the United Kingdom or has no time limit on their stay, when produced in combination with an official document giving the person's permanent National Insurance number and their name issued by a government agency or a previous employer.
6. A birth certificate (full or short) issued in the United Kingdom, the Channel Islands, the Isle of Man, or Ireland, which includes the names of the holder's parents or adoptive parents, produced in combination with an official document giving the person's permanent National Insurance number issued by a government agency or a previous employer.
7. An adoption certificate issued in the United Kingdom, the Channel Islands, the Isle of Man, or Ireland, produced in combination with an official National Insurance document.
8. A certificate of registration or naturalisation as a British citizen, produced in combination with an official National Insurance document.

List B: Time-Limited Statutory Excuse Documents

List B is divided into Group 1 and Group 2, depending on the nature of the permission and the verification mechanism.

Group 1: Standard Time-Limited Permissions

1. A current passport endorsed to show that the holder is allowed to stay in the United Kingdom and is currently allowed to do the type of work in question.
2. A document issued by the Bailiwick of Jersey, the Bailiwick of Guernsey, or the Isle of Man, which has been verified by the Employer Checking Service, confirming limited leave to enter or remain under the EU Settlement Scheme.

Note on Group 1 Excuse Duration: The statutory excuse lasts until the expiry date of the visa or endorsement.

Group 2: Transitional and Employer Checking Service Permissions

1. A document issued by the Home Office confirming an application for leave under the EU Settlement Scheme on or before 30 June 2021 (a Certificate of Application), together with a Positive Verification Notice from the Employer Checking Service.
2. An Application Registration Card (ARC) issued by the Home Office stating that the holder is permitted to take the employment in question, together with a Positive Verification Notice from the Employer Checking Service.
3. A Positive Verification Notice issued by the Employer Checking Service to the employer, confirming that the named person has an outstanding application, administrative review, or appeal, or has an ongoing right to work.

Note on Group 2 Excuse Duration: The statutory excuse lasts for exactly six months from the date specified in the Positive Verification Notice.

The Employer Checking Service (ECS) and Section 3C Leave

There are situations where an individual holds lawful permission to work, but cannot present an active share code or a standard physical document. This typically occurs when an in-time visa application has been submitted to the Home Office and remains pending decision.

+----------------------------------------------------------------------------------------------------+
|                            EMPLOYER CHECKING SERVICE (ECS) DECISION PATH                           |
+----------------------------------------------------------------------------------------------------+
                                                  |
                                                  v
                   [Does candidate have a pending in-time application, appeal,
                    administrative review, ARC card, or non-digital CoA?]
                                                  |
                         +------------------------+------------------------+
                         |                                                 |
                       [YES]                                              [NO]
                         |                                                 |
                         v                                                 v
            [Submit Request to Home Office                         [Do not use ECS]
             Employer Checking Service (ECS)]                      [Verify via standard
                         |                                          Online or Manual routes]
                         |                                                 |
         +---------------+---------------+                                 |
         |                               |                                 |
         v                               v                                 |
    [Positive Verification          [Negative Verification                 |
     Notice (PVN) Issued]            Notice (NVN) Issued]                  |
         |                               |                                 |
         v                               v                                 v
  [Statutory excuse valid          [NO statutory excuse]         [Check standard rules]
   for EXACTLY 6 MONTHS]           [Employment must cease]
  [Set calendar reminder]

Section 3C of the Immigration Act 1971

Under Section 3C of the Immigration Act 1971, if a migrant holding valid, limited leave to enter or remain submits an application to vary or extend their leave before their existing permission expires, their existing leave and its attached conditions (including work rights) automatically continue in law until the application is decided, withdrawn, or any in-time appeal or administrative review is concluded.

Because an individual on Section 3C leave cannot always generate a standard share code showing a new expiry date, the employer must verify their ongoing work entitlement through the Home Office Employer Checking Service (ECS).

The ECS Workflow

1. Obtain written consent from the prospective or current employee to conduct an ECS verification.
2. Obtain the worker's Home Office reference number (such as their Unique Application Number (UAN), Global Web Form (GWF) number, appeal reference, or ARC number).
3. Access the ECS online portal on GOV.UK and submit an online request.
4. The Home Office verifies its internal databases to confirm whether an in-time application or ongoing Section 3C leave exists.
5. Outcome response:
   • Positive Verification Notice (PVN): The Home Office issues an official document confirming the individual has the right to work. This provides the employer with a statutory excuse that lasts for exactly six months from the date of the PVN. The employer must calendar a repeat check before this six-month period expires.
   • Negative Verification Notice (NVN): The Home Office confirms the person has no lawful right to work. An NVN confers zero statutory excuse. If the individual is a prospective employee, they must not be hired. If the individual is a current employee, the employer must take immediate steps to terminate employment lawfully to avoid illegal working liability.

The 28-Day Grace Period for Pending Applications

Where an existing employee's visa expires and they assert they have submitted an in-time extension application, Home Office guidance allows employers a 28-day statutory grace period to obtain an ECS verification. During these 28 days from the date of the visa expiry, the employer's previous statutory excuse is preserved while they wait for the ECS to process the request and issue a PVN. The employer must submit the ECS query immediately upon the expiry date to rely on this grace period.

Specific Visa Routes, Conditions, and Work Restrictions

Employers must verify not only that a worker has permission to work, but that the role on offer complies with the specific conditions attached to their visa route. Permitting an employee to work in breach of their visa conditions constitutes illegal employment.

+---------------------------------------------------------------------------------------------------+
|                                 VISA CONDITIONS & WORK RESTRICTIONS                               |
+---------------------------------------------------------------------------------------------------+
| Route                  | Primary Work Rights             | Prohibitions & Restrictions             |
+------------------------+---------------------------------+-----------------------------------------+
| Skilled Worker         | Full-time for Sponsoring        | No employment outside sponsored role    |
|                        | Employer in authorised SOC code | (except eligible supplementary work)    |
+------------------------+---------------------------------+-----------------------------------------+
| Student Route          | 10 or 20 hours/week in term     | No permanent full-time vacancies;       |
| (Degree Level)         | Full-time during vacations      | No self-employment; No sports coaching  |
+------------------------+---------------------------------+-----------------------------------------+
| Graduate Route         | Unrestricted employment in any  | Prohibited from working as a            |
|                        | sector or skill level           | Professional Sportsperson or Coach      |
+------------------------+---------------------------------+-----------------------------------------+
| Youth Mobility Scheme  | Unrestricted employment         | No professional sportsperson/coach;     |
|                        |                                 | Business premises restriction applies   |
+------------------------+---------------------------------+-----------------------------------------+
| EU Settlement Scheme   | Full, unrestricted right        | Must maintain continuous residence      |
| (Settled / Pre-Settled)| to work across all sectors      | (Pre-settled status subject to rules)   |
+------------------------+---------------------------------+-----------------------------------------+

1. The Skilled Worker Route

Workers sponsored under the Skilled Worker route hold permission tied to a specific sponsor, a specific Standard Occupational Classification (SOC) code, and a specified work location.

• Primary Sponsored Role: The worker may only perform the duties described on their active Certificate of Sponsorship (CoS).
• Supplementary Employment: A Skilled Worker is permitted to undertake supplementary employment without an additional CoS only if the secondary work meets three cumulative criteria:
  1. The work does not exceed 20 hours per week.
  2. The work takes place outside the working hours contracted for the primary sponsored role.
  3. The work is in an occupation that is either listed on the Immigration Salary List (or eligible shortage lists) or is in the same SOC 2020 code as the job for which their primary CoS was assigned.

An employer hiring a Skilled Worker for secondary employment must obtain evidence of their primary sponsorship, confirm their working hours in the primary role, verify the SOC code alignment, and maintain a secondary timesheet audit trail.

2. The Student Route

Students studying in the UK at degree level or above are subject to strict statutory working conditions under Appendix Student of the Immigration Rules:

• Term-Time Limits: Maximum of 20 hours per week for degree-level courses (or 10 hours per week for below degree-level courses). A 'week' is legally defined by the Home Office as a period of seven consecutive days beginning on a Monday and ending on a Sunday.
• Vacation Periods: Full-time work is permitted during university vacations and after the official course completion date.
• Absolute Prohibitions: Students cannot be employed as professional sportspersons, sports coaches, or entertainers. Crucially, a student cannot be employed in a permanent full-time vacancy (unless they have completed their course and submitted an in-time application under the Skilled Worker or Graduate route before their Student visa expired).
• Mandatory Evidence: To establish a statutory excuse when employing a student, the employer must obtain and retain academic term and vacation dates. This must be an official letter or schedule printed on academic institution letterhead or taken from the university's official website, clearly detailing the specific semester dates, reading weeks, and holiday schedules applicable to the student's exact course.

3. The Graduate Route

The Graduate route grants unsponsored work permission for two years (or three years for doctoral graduates). Holders of Graduate permission have unrestricted work rights across any commercial sector and skill level. The sole restriction is an absolute prohibition on working as a professional sportsperson or sports coach.

4. The EU Settlement Scheme (Settled and Pre-Settled Status)

Individuals granted status under the EU Settlement Scheme (EUSS) must prove their right to work using an online share code:

• Settled Status (Indefinite Leave to Enter/Remain): Conveys permanent right to work without time limits. Generates a continuous statutory excuse.
• Pre-Settled Status (Limited Leave to Enter/Remain): Conveys time-limited right to work. The Home Office automatically extends pre-settled status for rolling two-year periods where permanent residence records are maintained. Employers must verify the digital expiry date shown on the online portal and schedule a follow-up check prior to that date.

5. Visitors and Business Visitors

Individuals in the UK as standard visitors or business visitors are prohibited from taking employment or providing services under Appendix V: Visitor. Permitted activities are strictly limited to business meetings, contract negotiations, attending conferences, or gathering facts. An employer who engages a visitor to perform productive operational work, whether paid or unpaid, commits an illegal working offence.

Complex Edge Cases and Nuanced Compliance Scenarios

Immigration compliance frequently presents complex edge cases that require exact adherence to procedural rules.

+---------------------------------------------------------------------------------------------------+
|                                 COMPLEX COMPLIANCE SCENARIOS                                      |
+---------------------------------------------------------------------------------------------------+
| Scenario               | Compliance Rule                                                          |
+------------------------+--------------------------------------------------------------------------+
| TUPE Transfers         | Mandatory 60-day grace period to audit and repeat checks on transfers    |
+------------------------+--------------------------------------------------------------------------+
| Switching to Graduate  | Must verify course completion before full-time post-study work starts    |
+------------------------+--------------------------------------------------------------------------+
| Switching to Worker    | If applying on Student visa, can start full-time role under CoS rules    |
|                        | once in-time valid application is formally submitted                     |
+------------------------+--------------------------------------------------------------------------+
| Remote / Hybrid Staff  | Location of employee controls; manual video checks require physical doc  |
+------------------------+--------------------------------------------------------------------------+
| Name Discrepancies     | Must secure official chain of evidence (marriage cert, deed poll)        |
+------------------------+--------------------------------------------------------------------------+

1. TUPE Business Transfers and the 60-Day Grace Period

When a business acquires employees via a Transfer of Undertakings (Protection of Employment) (TUPE) transfer, the incoming employer inherits the right to work compliance liabilities of the outgoing business. If the previous employer failed to perform compliant right to work checks, the acquiring business becomes immediately exposed to civil penalties.

The law provides the incoming employer with a statutory grace period of exactly 60 calendar days from the official date of the transfer. Within these 60 days, the acquiring employer must:

1. Audit all inherited personnel files.
2. Carry out fresh right to work checks (online, manual, or IDSP) for every transferred employee who lacks compliant, verifiable records.
3. Secure and date-stamp copies of all verification documentation.

If the 60-day window closes without compliant checks having been executed, the statutory excuse is forfeited for any non-compliant transferred staff.

2. Transitioning from Student to Work Visas

A critical point of failure occurs when a student employee transitions into full-time employment. An employer must not allow a student to work full-time in a permanent position until their course is formally complete.

However, concessions exist under the Immigration Rules:

• Student to Graduate Route: A student who has successfully completed their course and submitted a valid Graduate route application can work full-time in an interim temporary capacity while their application is pending, provided they do not fill a permanent vacancy until permission is granted.
• Student to Skilled Worker Route: Under Appendix Skilled Worker, if a student submits a valid, in-time application for a Skilled Worker visa up to three months before their course completion date, they may commence full-time work in the role described on their Certificate of Sponsorship immediately upon application submission, before the visa decision is issued, provided their course was degree level or higher at an eligible higher education provider.

3. Fully Remote, Hybrid, and Overseas Workers

Right to work legislation applies to all individuals who physically perform work in the United Kingdom, regardless of where the employer's corporate headquarters are located or where payroll is processed:

• Work Physically Done in the UK: A full right to work check is mandatory. If an employee is entirely remote and lives in the UK, the employer cannot simply view a scan on a screen. The employer must either use the online share code system (for non-British/non-Irish), use an IDSP (for eligible British/Irish with valid passports), or receive the physical original documents by post and verify them over live video.
• Work Physically Done Abroad: If an employee lives overseas and performs 100% of their duties outside UK territorial waters and territory, UK right to work legislation does not apply. No Home Office right to work verification is required. However, if the employee enters the UK to deliver occasional physical work on UK soil, they must hold valid UK immigration permission and undergo verification.

4. Voluntary Workers versus Volunteers

Employers operating in the charity or non-profit sector must distinguish between 'volunteers' and 'voluntary workers':

• Voluntary Workers: Individuals who have contractual commitments (even if unremunerated except for reasonable out-of-pocket expenses) or who receive benefits in kind (such as accommodation). Voluntary work requires an immigration status that permits work (such as a Temporary Work - Charity Worker visa).
• Volunteers: Individuals who have no contractual relationship, no obligation to attend, and receive only reimbursement for actual out-of-pocket expenses. Standard visitors and students can participate in volunteering, but they cannot undertake voluntary work.

5. Managing Name Discrepancies

If an employee's right to work document displays a name that differs from their current legal name or the name provided on their employment application, the employer must establish a clear chain of evidence. Acceptable supporting documents include:

• A government-issued marriage or civil partnership certificate.
• A legal deed poll or change of name deed.
• A Gender Recognition Certificate.
• A decree absolute or final divorce order accompanied by a previous birth certificate.

The supporting document must be inspected in original format, copied, and retained alongside the primary right to work copy, with an explanatory note confirming why the discrepancy exists.

Auditing Evidence: What Home Office Compliance Officers Inspect

During unannounced site visits or pre-licence sponsor compliance audits, Home Office Compliance Officers review right to work documentation under rigorous standards. A single non-compliant record can invalidate an entire HR system's compliance rating.

+----------------------------------------------------------------------------------------------------+
|                                HOME OFFICE AUDIT ASSESSMENT MATRIX                                 |
+----------------------------------------------------------------------------------------------------+
| Audit Area             | Required Evidence                      | Common Caseworker Challenge      |
+------------------------+----------------------------------------+----------------------------------+
| Verification Timing    | Date-stamped copy created BEFORE       | Check conducted on Day 2;        |
|                        | candidate's first day of work          | no statutory excuse exists       |
+------------------------+----------------------------------------+----------------------------------+
| Digital Share Codes    | Full Home Office PDF download          | Retaining only the 9-digit code  |
|                        | showing photograph and status          | or a low-resolution screenshot   |
+------------------------+----------------------------------------+----------------------------------+
| Student Employees      | Official term-time and holiday letter  | Working >20 hours/week during    |
|                        | matching course; timesheet records     | term time; unverified vacations  |
+------------------------+----------------------------------------+----------------------------------+
| Manual Document Copies | Complete copies of all biometric pages | Missing endorsement pages;       |
|                        | and visa stamps; both sides of certs   | partial scans; black-out areas   |
+------------------------+----------------------------------------+----------------------------------+
| Archival Duration      | Exact record retained during tenancy   | Deleting records immediately     |
|                        | of employment PLUS exactly 2 years     | upon employee resignation        |
+------------------------+----------------------------------------+----------------------------------+

Document Inspection Protocols

Compliance officers check for the following specific elements:

1. Format of Copies: Copies must be legible throughout. If a photocopy obscures the holder's photograph, date of birth, or visa endorsement text, the check is deemed invalid.
2. Proof of Verification Date: The copy must contain an immutable date stamp or written statement showing it was checked prior to the employment start date. If an auditor compares an employee's start date on payroll (for example, 1 March 2026) with the right to work check date (for example, 3 March 2026), the employer faces an immediate civil penalty because the check was retrospective.
3. Document Retention Systems: Employers must retain all copies securely for the entire duration of the individual's employment and for an additional two years after the date the employment ceases. After two years post-termination, the records must be destroyed in compliance with the Data Protection Act 2018 and UK GDPR.
4. Student Academic Calendars: Caseworkers will cross-reference payroll hours worked by student visa holders against the retained academic calendar. If a student worked 25 hours during a week that the academic institution designated as term time, both the student and the employer are liable for illegal working breaches.

Common Compliance Mistakes and Civil Penalty Triggers

Many civil penalties arise from operational errors and administrative oversights rather than deliberate illegal hiring. The following are the most frequent points of failure:

1. Accepting Physical BRP/BRC Cards Manually

Following the complete transition to the digital eVisa system, physical Biometric Residence Permits and Biometric Residence Cards are no longer valid for manual checks. An employer who takes a photocopy of a physical BRP card and fails to conduct an online share code check has not established a statutory excuse.

2. Retaining Share Codes Instead of Official Profiles

Receiving a share code from an applicant and noting the code in an email or spreadsheet is legally insufficient. The employer must log into the employer portal, view the profile, confirm the photo matches, and download the official PDF profile. If the employer only holds the nine-character code in its records, no statutory excuse exists.

3. Verifying Documents After Work Commences

A statutory excuse can only be established before employment begins. If an employee starts work at 09:00 on Monday and the HR team completes the verification at 14:00 that afternoon, the statutory excuse is permanently lost for that employee's entire tenure.

4. Relying on Driving Licences and National Insurance Numbers Alone

A UK driving licence does not demonstrate immigration status or nationality and is not an acceptable document under List A or List B. Similarly, a National Insurance number document (such as an NI card or P45/P60) is only valid when paired with an official full birth or adoption certificate, or specific Home Office status letters.

5. Missing Calendar Alerts for Follow-Up Checks

When employing an individual on a time-limited visa, the statutory excuse expires on the date the visa expires. If the employer fails to conduct a follow-up check prior to that date, the employer becomes liable for illegal employment from the day following expiry, unless the employee submitted an in-time application covered by Section 3C leave and the employer requested an ECS verification.

6. Screenshots and Partial Digital Scans

Caseworkers and courts reject low-resolution mobile phone photographs, cropped screenshots of the GOV.UK portal, or incomplete passport scans that miss key endorsement pages. The downloaded digital profile or physical scan must be complete and legible.

Preventing Discrimination Under the Equality Act 2010

Employers must balance strict right to work compliance with their obligations under the Equality Act 2010 and the statutory Code of Practice for avoiding discrimination in right to work checks.

To avoid unlawful discrimination on the grounds of race, nationality, ethnic origin, or colour, employers must adhere to three non-negotiable principles:

1. Universal Application: Apply right to work checks consistently to all job applicants across all roles, regardless of nationality, appearance, accent, or length of residence in the UK. Never single out individuals with non-British accents, foreign-sounding names, or overseas educational backgrounds for additional checks while assuming British-sounding candidates require less scrutiny.
2. No Prejudged Document Selection: Do not instruct candidates on which specific document they must present. For instance, do not state that an applicant must produce a British passport if they are entitled to produce a UK birth certificate combined with a National Insurance letter. Allow the individual to present any valid document combination listed in the Home Office guidance.
3. Digital vs Manual Parity: Do not reject a candidate because their status is held entirely digitally (an eVisa) or refuse to employ a British or Irish citizen because they do not have a valid passport for an IDSP check and must rely on a manual birth certificate verification.

Where an applicant is unable to provide standard documentation due to complex circumstances (such as an ongoing asylum claim or Windrush generation status), the employer must provide a reasonable opportunity for the individual to demonstrate their right to work via the Employer Checking Service before terminating the recruitment process.

Practical Compliance Checklist for Employers

To ensure your organisation maintains an uncompromised statutory excuse across its entire workforce, implement the following standard operating procedure:

• Pre-Employment Stage:
  • Integrate right to work verification as a mandatory condition in all conditional offer letters.
  • Require right to work checks to be fully completed, verified, and dated before the employee's first contracted working day.
• Execution Stage:
  • For non-British and non-Irish candidates, ensure you use share codes starting with 'W' and download the full PDF profile directly from the employer-facing GOV.UK portal.
  • For British and Irish candidates, conduct an IDSP verification or perform an original manual check using valid List A documents.
  • Match the face on the profile or passport with the individual in person or over live video.
  • Apply an explicit date stamp confirming the exact date and reviewer identity.
• Tracking and Governance Stage:
  • Record all time-limited visa expiry dates in a centralised HR system with automated alerts at 90, 60, and 30 days prior to expiry.
  • Maintain verified right to work files in a secure, access-controlled repository for the duration of employment plus exactly two years.
  • Perform annual internal mock audits across a random sample of employee files to identify and remediate documentation gaps.

Employers requiring formal guidance on complex right to work scenarios, Section 3C leave verifications, TUPE audit reviews, or mock Home Office compliance inspections should seek specialist advice from an IAA-regulated immigration law firm.

Reviewed by Wesbridge Associates team on 31 August 2026. We check our published guidance against GOV.UK and current Home Office rules.

Frequently asked questions

Common questions on this topic, answered by our advisers.

Can I use a Biometric Residence Permit to prove my right to work in 2025?

What happens if I can't generate a share code for my right to work check?

How often do employers need to check my right to work status?

Can my employer accept photocopies or digital photos of my passport?

What are the penalties for employers who don't properly check right to work?

Can EU citizens still work in the UK after Brexit?

What should I do if my employer requests right to work documents only from certain employees?