UK employers navigate immigration penalties by establishing a statutory excuse through compliant, timely right-to-work checks before employment starts, and by responding within strict statutory deadlines if a Civil Penalty Notice is issued. Liability for illegal working operates under a strict civil regime where fines reach up to £45,000 per worker for a first breach and £60,000 for repeat breaches, alongside severe risks to sponsor licences and corporate operations. Maintaining compliance requires structured verification processes across manual documents, digital share codes, and the Employer Checking Service.
The Legal Framework Governing Illegal Working
Under Section 15 of the Immigration, Asylum and Nationality Act 2006, an employer is liable to a civil penalty if they employ an adult who is subject to immigration control and has not been granted leave to enter or remain in the UK, or whose leave is invalid, has ceased to have effect, or is subject to a condition preventing them from accepting the employment in question.
The civil penalty regime is designed to penalise non-compliance regardless of intention. An employer does not need to know that a worker lacks permission to work in order to be liable for a civil fine. Liability is established simply by the fact of illegal employment, unless the employer can prove they established and retained a valid statutory excuse before the employment commenced.
In parallel to civil liability, Section 21 of the Immigration, Asylum and Nationality Act 2006 (as amended by Section 35 of the Immigration Act 2016) creates a criminal offence. An employer commits a criminal offence if they employ an individual whom they know, or have reasonable cause to believe, does not have the right to undertake the work. The criminal offence carries penalties of up to five years imprisonment, an unlimited fine, or both. Consequently, distinguishing between civil administrative oversight and criminal exposure rests on the employer's state of knowledge, the presence of red flags, and the adequacy of internal verification controls.
The Concept of the Statutory Excuse
A statutory excuse is an employer's legal defence against a civil penalty. To obtain a statutory excuse, an employer must conduct a prescribed right-to-work check before the individual begins any work, including induction training or paid trial periods.
Establishing a statutory excuse depends entirely on following the exact procedures set out in the Home Office Code of Practice on Preventing Illegal Working. If an employer carries out a check incorrectly, checks an unapproved document, or completes the verification even one day after the employee has started work, no statutory excuse is acquired. If that individual is subsequently found to lack permission to work, the employer will have no legal defence against the maximum statutory penalty.
There are two main categories of statutory excuse:
- Continuous Statutory Excuse: Obtained when an employee provides documentation confirming indefinite permission to remain and work in the UK (such as a British passport, Irish passport, or settled status). This excuse lasts for the entire duration of the individual's employment, with no requirement for repeat checks.
- Time-Limited Statutory Excuse: Obtained when an employee has temporary permission to live and work in the UK (such as a Skilled Worker visa, Youth Mobility Scheme visa, or Student visa). This excuse is valid only until the expiry date of the individual's immigration permission. To maintain the statutory excuse, the employer must carry out a compliant follow-up check before that permission expires.
The Three Methods for Conducting Right-to-Work Checks
Employers must use one of three approved methods to conduct a lawful right-to-work check. The choice of method depends on the nationality of the individual, the nature of their immigration documentation, and whether digital verification systems are accessible.
Method 1: Manual Document Verification
Manual verification is restricted to individuals who hold physical documentation proving their right to work, primarily British and Irish citizens, or non-EEA nationals holding specific non-digital endorsements such as wet-ink passport stamps or vignettes.
Manual checks must follow a strict three-step process:
- Step 1 (Obtain): The employer must obtain original documents from either List A or List B of the Home Office acceptable document lists. Photocopies, scanned PDF copies, or photographs of documents are not acceptable.
- Step 2 (Check): The employer must examine the original documents in the physical presence of the document holder, or via a live video link where the physical original document is in the employer's possession. The employer must verify that the documents are genuine, that stamps or endorsements have not expired, that photographs and dates of birth are consistent with the individual's appearance, and that any name differences are explained by supporting evidence such as a marriage certificate or deed poll.
- Step 3 (Copy): The employer must make an unalterable copy of the relevant pages of each document (in format such as PDF or clear photocopy) and record the exact date on which the check was performed. For passports, this must include the bio-data page, photograph page, visa vignettes, and any endorsement pages showing work permissions. For other documents, the whole document must be copied. The copy must be retained securely for the duration of employment and for a minimum of two years after employment ends.
Method 2: The Home Office Online Right to Work Service
The Home Office online checking service is mandatory for individuals holding digital immigration status (eVisas), Biometric Residence Permits (BRPs), Biometric Residence Cards (BRCs), Frontier Worker Permits, or status granted under the EU Settlement Scheme.
Employers cannot establish a statutory excuse by manually reviewing physical BRP or BRC cards, as these are no longer accepted for right-to-work purposes. The online check must proceed as follows:
- Step 1: The job applicant or employee accesses the Home Office online service to generate a nine-character share code, which is valid for 30 calendar days.
- Step 2: The employer accesses the dedicated 'View a job applicant's right to work details' portal on GOV.UK using the share code and the applicant's date of birth. Accessing the individual-facing portal does not establish a statutory excuse.
- Step 3: The employer reviews the digital profile displayed on the screen to confirm the individual's identity, work conditions, validity period, and any limitations on working hours or job categories.
- Step 4: The employer must verify that the photograph on the digital profile matches the individual presenting themselves for employment. This verification can take place in person or via live video link.
- Step 5: The employer must download, save, or print the profile page confirming the right to work (the 'profile' screen showing the individual's photo and permission details) and retain it electronically or in hard copy for the duration of employment plus two years.
Method 3: Identity Document Validation Technology (IDVT)
Employers may use certified Identity Service Providers (IDSPs) utilising IDVT to complete right-to-work checks for British and Irish citizens who hold valid biometric passports or Irish passport cards.
When using an IDSP, the employer retains overall legal responsibility for the check. To secure a statutory excuse through IDVT, the employer must:
- Engage an IDSP certified against the UK Digital Identity and Attributes Trust Framework.
- Ensure the software accurately captures the individual's biographical details and valid passport.
- Receive a clear output report from the IDSP confirming identity and authenticity.
- Independently verify that the photograph and biographical details received from the IDSP match the individual presenting themselves for work.
- Retain the IDSP verification report securely for the duration of employment plus two years.
If the employer detects any discrepancy between the IDSP report and the physical person (such as a clear difference in appearance), they cannot rely on the IDVT check and must carry out a manual check using alternative acceptable documentation.
Acceptable Right-to-Work Documents
The Home Office categorises all acceptable manual documents into List A and List B. Documents from List A confer a continuous statutory excuse, while documents from List B confer a time-limited statutory excuse.
+-------------------------------------------------------------------------------------------------------------------------+
| Summary of Right-to-Work Document Lists |
+-----------------------+----------------------------------------------------+--------------------------------------------+
| Category | Document Types Included | Duration of Statutory Excuse |
+-----------------------+----------------------------------------------------+--------------------------------------------+
| List A | - Current or expired British or Irish passport | Continuous statutory excuse for the full |
| | - Irish passport card | duration of employment. No follow-up check |
| | - UK Certificate of Registration / Naturalisation | required. |
| | with an official document showing NI number | |
| | - Birth / Adoption certificate issued in the UK | |
| | with an official document showing NI number | |
| | - Certificate of entitlement to Right of Abode | |
+-----------------------+----------------------------------------------------+--------------------------------------------+
| List B: Group 1 | - Current passport endorsed with permission to | Time-limited statutory excuse. Expires on |
| | enter/remain in the UK with permission to work | the date the visa or permission expires. |
| | - Current document issued by the Home Office to a | Follow-up check required before expiry. |
| | family member of an EEA national stating right | |
| | to work | |
+-----------------------+----------------------------------------------------+--------------------------------------------+
| List B: Group 2 | - Positive Verification Notice (PVN) from the Home | Time-limited statutory excuse for exactly |
| | Office Employer Checking Service (ECS) | 6 months from the date stated on the PVN. |
| | - Application Registration Card (ARC) permitting | Repeat check required prior to the 6-month |
| | employment, verified by an ECS PVN | expiry date. |
+-----------------------+----------------------------------------------------+--------------------------------------------+
List A Documents (Continuous Statutory Excuse)
List A establishes that the individual has an unrestricted, permanent right to work in the UK. Acceptable documents include:
- A passport (current or expired) showing the holder is a British citizen or a citizen of the United Kingdom and Colonies having the right of abode in the UK.
- A passport or passport card (current or expired) showing that the holder is an Irish citizen.
- A document issued by the Bailiwick of Jersey, the Bailiwick of Guernsey, or the Isle of Man, which has been verified by the Home Office Employer Checking Service, confirming unrestricted right to work.
- A current passport endorsement or other document showing the holder is exempt from immigration control, is entitled to readmission, or has indefinite leave to enter or remain in the UK with no expiry date.
- A full birth or adoption certificate issued in the UK, Channel Islands, Isle of Man, or Gibraltar, containing the names of at least one parent, when produced alongside an official document issued by a government agency or previous employer showing the person's permanent National Insurance number and name.
- A certificate of registration or naturalisation as a British citizen, produced alongside an official document showing the permanent National Insurance number.
List B Documents (Time-Limited Statutory Excuse)
List B applies to individuals who have limited permission to remain in the UK. It is subdivided into two groups:
Group 1: Documents establishing an excuse until the document expiry date.
- A current passport endorsed to show that the holder is allowed to stay in the UK and is currently allowed to do the type of work in question.
- A current document issued by the Home Office to a family member of an EEA national who has an ongoing right to work.
Group 2: Documents establishing an excuse for six months.
- A Positive Verification Notice (PVN) issued by the Employer Checking Service (ECS) confirming that the holder has an outstanding application, appeal, or administrative review regarding their immigration status.
- An Application Registration Card (ARC) issued by the Home Office to an asylum seeker stating that the holder is permitted to take up the employment in question, verified via a Positive Verification Notice from the ECS.
- A Certificate of Application (digital or non-digital) issued to or for a family member of an EEA national who submitted a valid application to the EU Settlement Scheme on or before 30 June 2021, accompanied by a Positive Verification Notice from the ECS.
Comparison of Verification Routes
The following table sets out the key operational distinctions, eligibility, and administrative requirements across the available right-to-work checking channels.
+------------------------------------------------------------------------------------------------------------------------------------------------+
| Operational Comparison of Right-to-Work Checking Routes |
+---------------------+-------------------------------+-----------------------------------+------------------------------------------------------+
| Verification Route | Permitted User Category | Interaction Method | Mandatory Record-Keeping Requirement |
+---------------------+-------------------------------+-----------------------------------+------------------------------------------------------+
| Manual Document | British, Irish, and non-EEA | Physical, in-person examination | Hard copy or secure electronic scan of relevant |
| Check | nationals with eligible | of original documents, or live | pages, marked with date check performed (e.g., |
| | physical vignettes / stamps | video with physical doc in hand | 'the date on which this check was made: [Date]'). |
+---------------------+-------------------------------+-----------------------------------+------------------------------------------------------+
| Home Office Online | Holders of eVisas, BRPs, | Online portal verification using | Downloaded PDF or printout of the full 'profile' |
| Service | BRCs, Frontier Worker status, | 30-day share code and date of | page showing permission details and employee photo, |
| | and settled/pre-settled EUSS | birth, with live/video face match | retained alongside the date of verification. |
+---------------------+-------------------------------+-----------------------------------+------------------------------------------------------+
| Certified IDSP | British and Irish citizens | Digital upload of biometric | Certified IDSP verification output file, stored |
| (IDVT) Route | holding valid biometric | passport data through certified | securely alongside independent internal confirmation |
| | passports or passport cards | software platform | that photo matches applicant. |
+---------------------+-------------------------------+-----------------------------------+------------------------------------------------------+
| Employer Checking | Individuals with pending in- | Online submission via Home Office | Positive Verification Notice (PVN) document issued |
| Service (ECS) | time visa applications, ARCs, | ECS portal requesting manual | by Home Office confirming 6 months of work clearance |
| | or Section 3C leave status | verification of records | from notice date. |
+---------------------+-------------------------------+-----------------------------------+------------------------------------------------------+
The Home Office Enforcement Process and Penalty Calculation
Home Office enforcement operations are conducted by Immigration Enforcement teams and compliance officers. Investigations arise through intelligence-led operations, unannounced on-site compliance visits, data-sharing protocols with HM Revenue and Customs (HMRC), and notifications from other law enforcement bodies.
Step 1: Investigation and Compliance Visits
Immigration officers have statutory powers under the Immigration Act 1971 and the Immigration, Asylum and Nationality Act 2006 to enter business premises under a warrant, or with the consent of the business occupier, to investigate illegal working.
During a visit, officers will:
- Inspect the premises and interview individuals found working on-site.
- Demand immediate access to right-to-work records, employee files, and payroll logs.
- Cross-reference employee identification against Home Office immigration databases.
- Issue a Referral Notice to the business if workers are identified without permission to work.
Step 2: Issuance of an Information Request and Referral Notice
A Referral Notice informs the employer that their case has been passed to the Civil Penalty Compliance Team for consideration. The Home Office then issues an Information Request setting out the suspected breaches and providing the employer with a deadline (typically 10 working days) to submit documentary evidence demonstrating that valid right-to-work checks were completed before employment started.
If the employer cannot supply compliant right-to-work records marked with the date of verification, the Civil Penalty Compliance Team proceeds on the basis that no statutory excuse exists.
Step 3: Calculation of the Civil Penalty
The Home Office calculates civil penalties based on the published statutory framework. The baseline amounts depend on whether the business has received a civil penalty or formal warning within the previous three years.
+--------------------------------------------------------------------------------------------------------------------+
| Civil Penalty Tariff and Statutory Mitigations |
+-------------------------------------------------------+------------------------------------------------------------+
| Element | Statutory Framework Details |
+-------------------------------------------------------+------------------------------------------------------------+
| Maximum Fine (First Breach in 3 Years) | £45,000 per illegal worker |
+-------------------------------------------------------+------------------------------------------------------------+
| Maximum Fine (Repeat Breach in 3 Years) | £60,000 per illegal worker |
+-------------------------------------------------------+------------------------------------------------------------+
| Baseline Starting Point: First Breach | £45,000 per worker |
+-------------------------------------------------------+------------------------------------------------------------+
| Mitigation 1: Self-reporting suspected illegal working| £10,000 reduction per worker from baseline |
+-------------------------------------------------------+------------------------------------------------------------+
| Mitigation 2: Active and significant cooperation | £5,000 reduction per worker from baseline |
+-------------------------------------------------------+------------------------------------------------------------+
| Mitigation 3: Effective document checking practices | £5,000 reduction per worker from baseline |
+-------------------------------------------------------+------------------------------------------------------------+
| Fast Payment Option (First breach only) | 30% discount if total fine paid in full within 21 days |
+-------------------------------------------------------+------------------------------------------------------------+
To calculate the civil penalty:
- Establish the starting point: £45,000 per illegal worker for a first breach, or £60,000 per illegal worker for a repeat breach within a three-year period.
- Apply statutory mitigating factors (First breach):
- Mitigation Factor 1 (Reporting): If the employer discovered the illegal working and reported it to the Home Office before an investigation began, the penalty is reduced by £10,000.
- Mitigation Factor 2 (Cooperation): If the employer provided significant, active cooperation during the investigation (such as providing immediate access to records and premises), the penalty is reduced by £5,000.
- Mitigation Factor 3 (Document Checking Practices): If the employer had established document-checking practices in place, despite failing to secure a statutory excuse for the worker in question, the penalty is reduced by £5,000.
- Apply Warning Notice: If an employer qualifies for all three mitigating factors on a first breach, the Home Office may issue a formal Warning Notice instead of a financial civil penalty.
- Apply Fast Payment Reduction: For first-time breaches where a financial penalty is issued, if the employer pays the full amount within 21 calendar days of the Civil Penalty Notice, a 30 percent reduction is applied to the final calculated sum. The fast payment reduction cannot be combined with an instalment agreement.
For repeat breaches, the starting point is £60,000 per illegal worker. Mitigations 1 and 2 may reduce the fine by £5,000 each, but Mitigation 3 is unavailable, the fast payment option is excluded, and warning notices cannot be issued.
Challenging a Civil Penalty: The Defense Process
When a Civil Penalty Notice is served, employers have strict legal remedies that must be exercised within precise statutory windows. Failing to observe these deadlines makes the penalty immediately enforceable as a civil debt through the courts.
Step 1: Submitting a Formal Objection
An employer has 28 calendar days from the date given on the Civil Penalty Notice to lodge a formal written objection with the Home Office. The objection must be submitted using the prescribed Home Office Objection Form.
An objection can only be brought on one or more of three statutory grounds under Section 16 of the 2006 Act:
- Ground 1 (Not Liable): The employer is not liable to pay the penalty (for example, the individual was not an employee, was an independent contractor, was exempt from immigration control, or held an unrevoked right to work).
- Ground 2 (Statutory Excuse): The employer established and maintained a valid statutory excuse by conducting checks in accordance with the prescribed regulations before employment began.
- Ground 3 (Penalty Amount Incorrect): The amount of the penalty was miscalculated because the Home Office failed to apply statutory mitigation factors, incorrectly treated the breach as a repeat offence, or applied the wrong baseline tariff.
The objection must include full documentary evidence, such as dated right-to-work verification logs, employment contracts, payroll summaries, and proof of cooperation. During the objection consideration period, enforcement action and payment obligations are suspended.
Step 2: The Objection Decision
Following review, the Home Office will issue an Objection Outcome Notice. The outcome will be one of the following:
- Cancel the penalty: The penalty is fully dismissed, either because liability is disproved or a statutory excuse is accepted.
- Reduce the penalty: The Home Office accepts mitigation factors or corrects mathematical errors, issuing a revised penalty amount.
- Maintain the penalty: The original fine remains in place, and the employer is given a revised deadline to pay the balance.
- Increase the penalty: If new information emerges showing greater non-compliance, the Home Office reserves the legal right to increase the penalty amount.
Step 3: Appealing to the County Court
If the Home Office maintains or reduces the penalty, but the employer remains dissatisfied, an appeal may be lodged with the County Court (or the Sheriff Court in Scotland) under Section 17 of the Immigration, Asylum and Nationality Act 2006.
The appeal must be filed within 28 calendar days of the date specified on the Objection Outcome Notice. The grounds of appeal are limited to the same three statutory grounds available during the objection phase.
The County Court considers the matter afresh. The court may:
- Dismiss the appeal and confirm the civil penalty.
- Allow the appeal and cancel the penalty entirely.
- Allow the appeal in part and reduce the penalty amount.
Appealing to the County Court carries cost risks. If the appeal is dismissed, the employer will usually be ordered to pay the Home Office's legal costs in addition to the penalty and their own legal fees. Legal representation from a specialist immigration practitioner is critical before filing court proceedings.
Wider Business Implications of Immigration Penalties
A civil penalty is rarely an isolated financial liability. The collateral consequences often threaten a business's commercial viability and operational status.
Sponsor Licence Suspension and Revocation
For an employer holding a Home Office Sponsor Licence (such as Skilled Worker or Temporary Worker sponsorship), a civil penalty is classified as a significant compliance failure under the Sponsor Guidance.
Under Appendix C of the Home Office Sponsor Guidance, receiving an uncancelled civil penalty triggers mandatory or discretionary licence action:
- Mandatory Revocation: If an employer receives a civil penalty for illegal working and fails to pay it, or has an unexhausted penalty on record that was not successfully challenged, the Home Office will revoke the Sponsor Licence.
- Discretionary Revocation or Suspension: Even where a penalty is paid, the Home Office will assess whether the employer's HR systems are reliable. The licence is routinely suspended, preventing the issuance of any new Certificates of Sponsorship (CoS).
- Curtailment of Sponsored Employees: If a Sponsor Licence is revoked, the Home Office curtails the visas of all sponsored workers within the organisation, typically to 60 calendar days. Sponsored workers must leave the UK or secure sponsorship elsewhere, disrupting the employer's core operations.
- Cooling-Off Period: Following a licence revocation based on a civil penalty, the business is barred by a mandatory cooling-off period of at least 12 months before it can apply for a new sponsor licence.
Director Disqualification and Criminal Sanctions
Under the Company Directors Disqualification Act 1986, the Insolvency Service can bring disqualification proceedings against directors of companies that persistently or egregiously breach immigration legislation. Employing illegal workers is recognised as conduct rendering a director unfit to manage a company, leading to director disqualification for periods between 2 and 15 years.
Where an employer continues to employ individuals with knowledge or reasonable cause to believe that they lack right to work, the matter moves from civil penalties to criminal prosecution under Section 21. Corporate officers, HR managers, and directors can be prosecuted individually alongside the corporate entity.
Public Naming and Commercial Blacklisting
The Home Office publishes a quarterly public register of businesses that have received final civil penalties for illegal working. This register details the business legal name, trading name, registered address, and total fine levied.
Public naming leads to:
- Disqualification from public sector procurement tenders under the Public Contracts Regulations 2015.
- Termination of contracts with tier-one suppliers and commercial clients who mandate strict compliance throughout their supply chains.
- Revocation or refusal of other commercial licences, including alcohol licences, gambling operating licences, and Security Industry Authority (SIA) approvals.
Specific Edge Cases and Complex Scenarios
Compliance failures frequently occur in edge cases where an individual's right to work is conditional, transitioning, or governed by complex statutory provisions.
Student Visa Holders
International students holding Student route permission have statutory work restrictions detailed on their digital status or vignettes. Violating these conditions constitutes illegal working and invalidates the employer's statutory excuse.
Employers must observe the following rules for Student visa holders:
- Term-Time Limitations: Students on degree-level courses are restricted to a maximum of 20 hours of work per week during term time. Students on below-degree-level courses are restricted to 10 hours per week.
- Vacation Periods: Students may work full-time only during official academic vacations, or after their course completion date as confirmed in writing by their education provider.
- Prohibited Work: Students cannot be employed as professional sportspersons, sports coaches, entertainers, or fill permanent full-time vacancies (unless they have submitted a valid Skilled Worker application before their student visa expires and meet specific transitional criteria).
- Required Documentation: To establish a statutory excuse for a student, the employer must obtain and retain a copy of the academic institution's official term dates and vacation schedule covering the entire duration of the individual's study programme.
TUPE Business Transfers
Under the Transfer of Undertakings (Protection of Employment) Regulations 2006 (TUPE), employment contracts automatically transfer from the transferor to the transferee. Right-to-work liabilities also transfer.
- 60-Day Grace Period: The transferee employer is granted a statutory grace period of 60 calendar days from the official transfer date to carry out fresh right-to-work checks on all transferring employees.
- Mandatory Re-Verification: The new employer cannot simply rely on the previous owner's assertions or historical records. If a transferred employee is working illegally and the new employer fails to verify their right to work within the 60-day window, the new employer is fully liable for a civil penalty.
- Action on Identifying Illegal Workers: If a check during the 60-day window reveals an employee lacks the right to work, the employer must take appropriate legal steps to terminate the contract lawfully before the 60 days elapse to avoid civil penalty liability.
Section 3C Leave and the Employer Checking Service (ECS)
Under Section 3C of the Immigration Act 1971, an individual's immigration leave is automatically extended if they submit an in-time application to the Home Office to extend or switch their visa before their existing leave expires. Section 3C leave maintains the work conditions attached to the expired visa while the application, administrative review, or appeal remains pending.
- Establishing the Excuse: Because the individual's previous visa shows an expired date and their new digital status is not yet issued, the employer cannot use manual document checks or the standard online share code portal.
- Using the ECS: The employer must submit an online request to the Home Office Employer Checking Service (ECS). The employer must input the worker's Home Office reference number, application details, and written consent.
- Positive Verification Notice (PVN): If the Home Office confirms an in-time application is pending, it issues a PVN. The PVN provides a valid statutory excuse for precisely six months from the date of the notice.
- Negative Verification Notice: If the Home Office issues a Negative Verification Notice (NVN), no statutory excuse exists, and the employer must act to terminate employment immediately.
eVisas and the Transition to Digital Status
The Home Office is replacing physical immigration documents with digital immigration status (eVisas). Biometric Residence Permits (BRPs) and Biometric Residence Cards (BRCs) are phased out.
- Existing Checks: An employer who previously completed a compliant check using a physical BRP before its phase-out retains their statutory excuse until the expiry date of the individual's underlying permission. There is no requirement to re-verify existing staff simply because BRP cards expire.
- New Hires: For all new hires holding digital status, employers must use the Home Office online right-to-work service. Physical BRPs presented by new employees cannot be accepted, and attempting a manual check using an expired or unrecognised physical card confers no statutory excuse.
Asylum Seekers and Application Registration Cards (ARC)
Asylum seekers generally do not have permission to work in the UK. However, some are granted permission to work by the Home Office if their asylum claim has been pending for more than 12 months without a decision through no fault of their own.
- Work Permissions: If permitted to work, the individual's ARC will explicitly state 'Work Permitted' or 'Allowed to Work'. Most work permissions are restricted to roles listed on the Shortage Occupation List or Immigration Salary List.
- Verification Step: An ARC cannot be checked manually in isolation. The employer must obtain the physical ARC and then submit an ECS verification request to obtain a Positive Verification Notice (PVN). The statutory excuse lasts for six months from the date of the PVN.
Common Compliance Mistakes and Penalty Triggers
Civil penalties are frequently triggered by minor operational errors and administrative oversights within HR departments. Below are the primary failure points identified during Home Office audits:
1. Conducting Checks After Employment Commences
A statutory excuse is only acquired if the check is completed before the employee begins work. Completing the check on the employee's first afternoon, or several days into employment, eliminates the statutory excuse. If the worker is later found to lack status, the employer is exposed to full liability.
2. Failing to Record the Date of the Check
When conducting a manual check, taking a photocopy of a passport is insufficient on its own. The copy must be marked with an explicit, unalterable endorsement stating the date the check was conducted, such as: "Right to work check completed on [Date] by [Name/Signature]". If the date of verification cannot be proved, caseworkers treat the check as unverified.
3. Accepting Non-Qualifying Documents
Employers frequently accept documents that do not appear in List A or List B. Documents that do not establish a statutory excuse include:
- Driving licences (UK or foreign).
- National Insurance numbers on their own (such as an NI card or P45/P60 without a corresponding birth certificate or naturalisation certificate).
- Bank statements, utility bills, or council tax letters.
- Expired visas or expired non-British/Irish passports without accompanying ECS clearance.
- Visas or endorsements issued by overseas territories without Home Office verification.
4. Relying on Unverified Share Codes
Receiving a share code by email from an applicant does not establish a statutory excuse. The employer must log into the employer-facing portal on GOV.UK, review the profile details, verify the photograph against the individual, and save an electronic or hard copy of the final profile page.
5. Missing Time-Limited Expiry Windows
For workers on List B permissions (such as Graduate or Skilled Worker visas), the statutory excuse expires on the date the visa expires. If an employer fails to carry out a repeat check before that date, the statutory excuse lapses immediately. If the worker continues working without a fresh check or an active ECS submission confirming a pending in-time application, the employer is liable to a civil penalty.
6. Failure to Conduct Face-to-Face or Live Video Matching
Reviewing an IDSP report or viewing an online check is invalid unless the employer confirms that the photograph matches the actual person. The verification must occur either in person or via a live video call with the candidate present.
Establishing an Airtight Right-to-Work Compliance System
To protect the business against civil penalties, sponsor licence revocation, and director liability, employers should establish a centralised right-to-work compliance system.
+-------------------------------------------------------------------------------------------------------------------------+
| Standard Operating Procedure: Right-to-Work Verification Workflow |
+-----------------------+-------------------------------------------------------------------------------------------------+
| Step | Mandatory Operational Action |
+-----------------------+-------------------------------------------------------------------------------------------------+
| 1. Pre-Offer Stage | Confirm right-to-work requirements in conditional offer letter. Request acceptable proof. |
+-----------------------+-------------------------------------------------------------------------------------------------+
| 2. Route Selection | Determine whether check requires Manual, Online Share Code, IDVT, or ECS route. |
+-----------------------+-------------------------------------------------------------------------------------------------+
| 3. Verification | Perform identity matching (in-person or live video) against original document or digital photo. |
+-----------------------+-------------------------------------------------------------------------------------------------+
| 4. Record Generation | Capture copies of all relevant pages; record explicit verification date and checker name. |
+-----------------------+-------------------------------------------------------------------------------------------------+
| 5. Secure Archiving | Upload to secure central HR system; set calendar alerts for follow-up checks on List B staff. |
+-----------------------+-------------------------------------------------------------------------------------------------+
| 6. Pre-Expiry Audit | Initiate repeat check 28 days before visa expiry; submit ECS check if extension is pending. |
+-----------------------+-------------------------------------------------------------------------------------------------+
Step-by-Step Standard Operating Procedure
- Initial Assessment: At the offer stage, identify the verification route required for the candidate (Manual check for British/Irish nationals without digital passports; IDVT for British/Irish nationals with valid biometric passports; Online check for all non-British/Irish nationals holding digital status or BRPs; ECS for pending applications).
- Pre-Employment Execution: Complete the verification before the candidate's first contractual day. Under no circumstances allow an individual to commence training, induction, or shifts without a confirmed check.
- Identity Matching: Compare the individual's face in person or over live video with the photograph on the document or digital profile. Ensure details like dates of birth and names align with payroll data.
- Endorsement and Archiving: Retain a complete copy of the verification output. For manual checks, write the verification statement and date directly on the copy. For digital checks, download the full PDF summary. Store files in a restricted, centralised repository accessible for Home Office audit within 24 hours.
- Tracking and Expiry Triggers: Input all visa expiry dates into a HR management system with automated alerts scheduled at 90, 60, and 30 days prior to expiry.
- Follow-up Protocol: If an employee's visa is approaching expiry, contact them 60 days in advance to request proof of application submission or renewed status. If an application is submitted before expiry, obtain their application reference and request a Positive Verification Notice from the ECS prior to the visa end date.
Internal Auditing and Training Controls
Employers should conduct regular internal audits across their workforce records:
- Quarterly Sampling: Audit a random sample of at least 10 percent of employee files across all branches and business sites to confirm checks contain complete copies and valid date endorsements.
- Annual Complete Review: Conduct a full review of all List B time-limited workers to ensure no follow-up checks have been missed.
- HR Training Programmes: Provide annual training updates to all hiring managers, HR personnel, and site supervisors on changes to Home Office right-to-work guidance, share code mechanics, and eVisa transitions.
Practical Next Steps for Employers
Employers seeking to protect their business from civil penalties should immediately conduct an internal audit of all active employee files to confirm that compliant, dated right-to-work checks are held for every current worker. If missing checks, expired permissions, or incomplete records are identified, employers should seek advice from a qualified immigration adviser to rectify non-compliance, manage follow-up checks, or handle communication with the Home Office Civil Penalty Compliance Team.
Reviewed by Wesbridge Associates team on . We check our published guidance against GOV.UK and current Home Office rules.
Need immigration advice?
Our IAA-regulated advisers can tell you exactly how these rules apply to your case — including what we would not recommend.
Frequently asked questions
Common questions on this topic, answered by our advisers.