Wesbridge Associates — UK immigration advisers
    For Businesses
    For Individuals
    Resources
    AboutBlog

    UK Immigration Civil Penalty: Complete Employer Guide to Fines and Defence Strategies

    Navigate UK immigration civil penalties with expert guidance. Learn about fines up to £60,000 per worker, defence strategies, and protecting your sponsor licence with professional support.

    Wesbridge Associates26 min read

    Reviewed by Wesbridge Associates team on

    A UK immigration civil penalty is a financial fine issued by the Home Office to an employer who employs an individual without lawful permission to work in the United Kingdom. Under current legislation, fines reach up to £45,000 per illegal worker for a first breach and up to £60,000 per illegal worker for repeated breaches within a three-year period. Employers can defend against these penalties by establishing a statutory excuse through compliant right-to-work checks, lodging a formal administrative objection within 28 days, or appealing to the County Court.

    The UK illegal working regime operates under sections 15 to 25 of the Immigration, Asylum and Nationality Act 2006. Under Section 15 of the Act, an employer is liable to pay a civil penalty if they employ an adult subject to immigration control who is disqualified from employment by reason of their immigration status. This applies if the individual has not been granted leave to enter or remain in the UK, or if their leave is invalid, has ceased to have effect (whether by reason of curtailment, revocation, or expiry), or is subject to a condition preventing them from accepting the employment in question.

    The civil penalty scheme imposes strict liability. The Home Office does not need to prove that an employer intended to breach the law, knew about the worker's lack of permission, or acted negligently. The simple fact of employing an individual without valid work authorization triggers liability automatically unless the employer can prove they established and maintained a statutory excuse.

    Civil Penalties Versus Criminal Offences

    It is vital to distinguish between a civil penalty under Section 15 and a criminal offence under Section 21 of the Immigration, Asylum and Nationality Act 2006 (as amended by the Immigration Act 2016).

    • Civil Penalty (Section 15): Imposed on businesses when illegal working occurs without the requirement to prove intent or knowledge. The remedy is financial, although it carries severe administrative consequences for sponsor licence holders.
    • Criminal Offence (Section 21): An employer commits a criminal offence if they employ an individual while knowing, or having reasonable cause to believe, that the employee does not have the right to work in the UK. The criminal offence carries penalties of up to five years in prison, an unlimited fine, or both. A civil penalty notice can be converted into a criminal investigation if evidence shows management had reasonable cause to believe the worker was disqualified.

    The February 2024 Penalty Increases

    On 13 February 2024, the Home Office implemented the draft Code of Practice on Preventing Illegal Working, which tripled the starting maximum fines for employers. The baseline fine structure applies across England, Wales, Scotland, and Northern Ireland:

    Breach LevelMaximum Fine Per WorkerMitigation Reductions AvailableFast Payment Option (30% Discount)
    First Breach (Tier 1)£45,000Reporting (-£10,000)<br>Cooperation (-£5,000)<br>Checking Practice (-£5,000)Yes (reduces starting fine or post-mitigation total if paid in 21 days)
    Repeat Breach (Tier 2)<br>(Within 3 years)£60,000Reporting (-£10,000)<br>Cooperation (-£5,000)<br>Checking Practice (-£5,000)No (full assessed amount must be paid within 28 days)

    For businesses employing multiple unauthorized workers, these sums compound immediately. An employer discovered with four illegal workers on a first breach faces a starting exposure of £180,000 before mitigation analysis.

    The Core Defence: Establishing a Statutory Excuse

    A statutory excuse is an employer's absolute legal defence against a civil penalty. If an employer correctly carries out prescribed right-to-work checks before employment starts, they will not be liable for a civil penalty if that employee is later found to be working illegally.

    To establish a statutory excuse, an employer must carry out verification using one of three prescribed methods:

    1. A manual right-to-work check using original physical documents from Home Office List A or List B.
    2. An online right-to-work check using the Home Office online service (via a share code and date of birth).
    3. A digital identity verification check using Identity Document Verification Technology (IDVT) via a certified Identity Service Provider (IDSP) for British and Irish citizens.

    Types of Statutory Excuses

    • Continuous Statutory Excuse: Acquired when an employer verifies an individual who holds permanent work rights (documents from List A, such as a British or Irish passport, or an online check confirming settled status or indefinite leave to remain). This excuse lasts for the entire duration of the individual's employment, with no repeat checks required.
    • Time-Limited Statutory Excuse: Acquired when an employer verifies an individual whose immigration permission is temporary (documents from List B, such as a student visa, skilled worker visa, or time-limited digital status). This excuse expires on the date the visa or permission expires. To maintain the statutory excuse, the employer must conduct a follow-up check before the expiry date.

    The Three-Step Process: Obtain, Check, and Retain

    For a manual check to generate a statutory excuse, the employer must follow three strict steps before the worker begins their first day of paid employment:

    1. Obtain: The employer must obtain original, valid documents from List A or List B. Photocopies, scanned copies, or mobile phone images do not establish a statutory excuse.
    2. Check: The employer must check the documents in the physical presence of the holder, or via a live video link where the employer possesses the physical, original document in their hands. The checker must satisfy themselves that:
      • The photographs and dates of birth are consistent across documents and match the person's appearance.
      • The expiry dates for permission to be in the UK have not passed.
      • Any work restrictions (such as maximum weekly hours for students) do not prevent the employee from undertaking the role.
      • The documents are genuine, showing no signs of tampering, alteration, or damage.
      • If names differ across documents, the employee provides supporting documentation explaining the difference (such as a marriage certificate or deed poll).
    3. Retain: The employer must retain an unalterable copy of every document checked (such as a PDF, JPEG, or clear photocopy). The employer must record the date the check was conducted. The record must be kept securely for the duration of employment and for two years after the employment ends.

    Digital Checks and the Home Office Online Service

    Physical Biometric Residence Permits (BRPs), Biometric Residence Cards (BRCs), and Frontier Worker Permits can no longer be used for manual right-to-work checks. Employers must use the Home Office online right-to-work service for individuals holding these digital immigration statuses.

    To establish a statutory excuse via the online service:

    1. The individual must provide their share code (which begins with the letter 'W') and their date of birth.
    2. The employer must access the employer-facing portal on GOV.UK ("View a job applicant's right to work details"). Using the migrant-facing portal does not yield a statutory excuse.
    3. The employer must view the profile page in the presence of the individual (either in person or via live video call) to confirm the photograph matches the individual.
    4. The employer must save or print the full profile page showing the date the check was completed, the employee's photograph, and their exact work permissions.

    How Home Office Enforcement and Compliance Audits Operate

    Home Office Immigration Enforcement visits occur through intelligence-led operations, multi-agency inspections, or random audits of sponsor licence holders.

    Investigation Triggers

    Investigations typically begin through one of four triggers:

    • Data Matching (Inter-Agency Intelligence): HM Revenue & Customs (HMRC) and the Home Office run automated data-sharing protocols. Discrepancies between Real Time Information (RTI) payroll submissions, National Insurance registrations, and immigration status databases automatically generate compliance flags.
    • Allegations and Intelligence Reports: Reports from members of the public, competing businesses, or former employees submitted through the Home Office reporting hotline.
    • Sponsor Compliance Audits: Routine or targeted reviews of organisations registered on the Home Office sponsor register.
    • Joint Agency Enforcement Operations: Multi-agency visits involving the Gangmasters and Labour Abuse Authority (GLAA), the Health and Safety Executive (HSE), local police forces, and the Home Office.

    Powers During Workplace Visits

    Immigration Enforcement officers operate under statutory powers set out in the Immigration Act 1971 and the Immigration, Asylum and Nationality Act 2006. Officers may enter business premises under the authority of a warrant issued by a magistrate, or without a warrant under Section 28CA of the Immigration Act 1971 if they have reasonable grounds for believing illegal workers are on the premises and enter with the consent of the owner or occupier.

    During a visit, enforcement officers have the power to:

    • Inspect right-to-work documentation, personnel files, and electronic HR management systems.
    • Question staff members to verify identity, nationality, and conditions of employment.
    • Examine rotas, shift logs, and payroll records.
    • Arrest individuals suspected of committing immigration offences.

    The Information Request and Referral Notice

    If officers identify individuals suspected of working without authorization, they will issue a Referral Notice to the business. The Referral Notice states that the employer's case has been referred to the Civil Penalty Compliance Team for consideration.

    Shortly after, the Home Office issues a Request for Information (RFI). The RFI includes specific questions regarding the named individuals, their recruitment dates, their job titles, how their right-to-work checks were completed, and copies of any verification records held. Employers are typically given 10 working days to respond to an RFI. Failing to respond or providing incomplete documentation directly leads to the issuance of a Civil Penalty Notice.

    The Civil Penalty Process: Chronological Stages and Decision Points

    When managing a civil penalty case, employers must adhere to strict statutory deadlines. Missing a procedural window can extinguish the right to defend the business or appeal a penalty.

    [ Referral Notice Issued on Visit ]
                   │
                   ▼
    [ Request for Information (RFI) Received ] ─── (Submit evidence within 10 days)
                   │
                   ▼
    [ Home Office Assessment ]
           ├── No Action Notice Issued (Matter closed: Statutory Excuse accepted)
           │
           └── Civil Penalty Notice (CPN) Issued
                   │
                   ├── Option A: Pay within 21 days (30% Fast Payment Discount applied)
                   │
                   ├── Option B: Request Time-to-Pay Installment Plan (within 28 days)
                   │
                   └── Option C: Lodge Formal Objection within 28 days
                                    │
                                    ▼
                         [ Home Office Considers Objection ]
                                    ├── Penalty Cancelled (Matter closed)
                                    ├── Penalty Reduced (New payment deadline set)
                                    ├── Penalty Upheld (Full balance due)
                                    └── Penalty Increased (New CPN issued)
                                            │
                                            ▼
                         [ County Court Appeal under Section 17 ]
                         (Must file within 28 days of Objection Outcome Notice)
    

    Stage 1: Receipt of the Civil Penalty Notice (CPN)

    The Civil Penalty Notice formally notifies the business of the liability determination. It sets out:

    • The names of the individuals found working illegally.
    • The calculated penalty amount per individual.
    • The total fine due.
    • The deadline for response (28 calendar days from the date of the notice).
    • The Fast Payment Option deadline (21 calendar days from the date of the notice).

    If the employer does not respond within 28 days by either paying the fine, requesting an installment plan, or submitting a formal objection, the Home Office will begin debt recovery proceedings in the County Court without further notice.

    Stage 2: Evaluating the Response Strategy

    Upon receiving a CPN, the employer must immediately choose one of three paths:

    1. Fast Payment: If the employer has no documentary defence, did not conduct right-to-work checks, and is a first-time offender (no breaches in the last 3 years), paying the penalty within 21 days grants a 30 percent discount. For example, a £45,000 fine is reduced to £31,500. Choosing this option ends the dispute and waives the right to object or appeal.
    2. Submit a Formal Objection: If the employer has evidence of a statutory excuse, disputes employment, or believes the penalty was calculated incorrectly, they must lodge an objection within 28 calendar days.
    3. Request a Payment Plan: If the business accepts liability but cannot pay the lump sum without entering insolvency, an application for a structured payment plan must be submitted within 28 days, accompanied by financial evidence (such as management accounts, audited statements, and cash flow forecasts).

    Stage 3: Lodging a Formal Objection

    An objection must be submitted in writing using the Home Office Objection Form within 28 calendar days of the date on the CPN. Under Section 16 of the Immigration, Asylum and Nationality Act 2006, an objection can only be raised on one or more of the following three statutory grounds:

    • Ground 1: The employer is not liable to pay the penalty. (For example, the individual was not an employee, was self-employed via a genuine business-to-business contract, was provided by an employment agency that maintained employer obligations, or was not working at the premises).
    • Ground 2: The employer has established a statutory excuse. (The employer carried out compliant right-to-work checks in accordance with the prescribed regulations before employment began).
    • Ground 3: The penalty amount is too high. (The Home Office failed to apply the correct statutory mitigation deductions, miscalculated the breach level, or made an arithmetic error).

    When submitting an objection, the employer must provide a comprehensive bundle of evidence, including clear copies of the original checks, share code certificates, onboarding forms, and employment records.

    Warning on Penalty Increases: Under Section 16(4) of the 2006 Act, the Home Office has the statutory power to increase the penalty on objection if new information indicates that the employer was subject to a higher penalty tier or that mitigation was incorrectly granted.

    Stage 4: The Objection Outcome Notice

    The Home Office Civil Penalty Compliance Team reviews the objection and issues an Objection Outcome Notice. The outcome will be one of the following:

    • Penalty Cancelled: The Home Office accepts the objection in full (e.g., a valid statutory excuse was proven). The penalty is revoked, and no further action is taken.
    • Penalty Reduced: The Home Office accepts partial grounds (e.g., granting mitigation discounts or adjusting the breach tier). A revised penalty notice is issued with a new 28-day payment window.
    • Penalty Upheld: The Home Office rejects the objection. The original fine remains due in full.
    • Penalty Increased: The Home Office finds grounds to elevate the fine.

    Stage 5: County Court Appeal under Section 17

    If the Home Office maintains or reduces the penalty, but the employer remains dissatisfied, the employer can appeal to the County Court (in England and Wales or Northern Ireland) or the Sheriff Court (in Scotland).

    • Deadline: The appeal must be lodged within 28 calendar days of the date on the Objection Outcome Notice.
    • Condition Precedent: An employer cannot appeal to the court without first exhausting the administrative objection process.
    • Nature of Appeal: The appeal is a complete re-hearing of the case on its merits. The court evaluates all evidence afresh and is not restricted to reviewing whether the Home Office acted reasonably. The court can cancel the penalty, reduce the amount, dismiss the appeal, or order the losing party to pay legal costs.

    Calculating Fines and Applying Mitigation Criteria

    The Home Office uses a strict calculation framework set out in the Code of Practice on Preventing Illegal Working to determine civil penalty amounts. The calculation follows a five-step consideration matrix.

    The Five-Step Calculation Matrix

    1. Determination of Breach Level:
      • Tier 1 (First breach within 3 years): Starting point is £45,000 per illegal worker.
      • Tier 2 (Repeat breach within 3 years): Starting point is £60,000 per illegal worker.
    2. Mitigation Factor 1 - Reporting suspected illegal workers:
      • Reduction: £10,000 per worker.
      • Condition: The employer must have reported their suspicion about the worker to the Home Office before the enforcement visit or investigation began.
    3. Mitigation Factor 2 - Active cooperation:
      • Reduction: £5,000 per worker.
      • Condition: The employer must provide full access to premises, staff, and records, respond to RFIs within deadlines, and actively assist officers during the investigation.
    4. Mitigation Factor 3 - Effective checking practices:
      • Reduction: £5,000 per worker.
      • Condition: The employer must demonstrate that they have established right-to-work verification practices across the wider business, even if they failed in the specific instance.
    5. Application of Fast Payment Discount (Tier 1 only):
      • Reduction: 30% of the final balance calculated after applying steps 1 to 4.
      • Condition: Payment must be made in full within 21 calendar days of the CPN issue date.

    Case Calculation Comparison Table

    Assessment FactorEmployer A (First Breach, No Mitigation)Employer B (First Breach, Full Mitigation)Employer C (Repeat Breach, Full Mitigation)
    Starting Maximum Fine£45,000£45,000£60,000
    Reported to Home Office£0-£10,000-£10,000
    Active Cooperation£0-£5,000-£5,000
    Effective Checking Systems£0-£5,000-£5,000
    Subtotal Fine Due£45,000£25,000£40,000
    30% Fast Payment Option£31,500 (if paid in 21 days)£17,500 (if paid in 21 days)Not Available for Repeat Breaches
    Final Fine Payable£31,500£17,500£40,000

    Evidence Requirements and Caseworker Assessment Criteria

    When a caseworker reviews an RFI response or a formal objection, they assess the evidence against published Home Office operating standards. Understanding what caseworkers look for allows employers to construct clear, robust submissions.

    Document Check Caseworker Criteria

    When assessing manual checks, caseworkers verify whether:

    • The check occurred prior to employment: Caseworkers compare the date recorded on the right-to-work document against the start date listed on the employee's contract, first payslip, and HMRC RTI payroll submission. If the check is dated on or after day one of employment, the statutory excuse fails.
    • The document was valid and acceptable: The document must appear in List A or List B of the regulations. Expired travel documents (other than British or Irish passports) do not provide an excuse.
    • The copy is legible and complete: Both sides of identity cards, the photograph page of passports, and any endorsement pages containing visa stamps or conditions must be clearly visible. An illegible photocopy results in the statutory excuse being rejected.
    • The declaration of verification is dated: The copy should contain a written note confirming the check took place, such as: "The date on which this right to work check was made: [Date] by [Name/Signature]". Without a date stamp or contemporaneous audit log, caseworkers will find that the check cannot be proven to have occurred prior to employment.

    Online Share Code Verification Assessment Criteria

    For digital checks, caseworkers evaluate:

    • The portal source: The verification record must be the downloaded summary page from the employer section of the GOV.UK service. An email from the employee containing their share code, or a screenshot of the migrant's view of their status, is legally insufficient.
    • Status validity dates: The caseworker cross-references the download date on the profile page against the employee's visa duration. If the check was completed when the status was active, the excuse stands until the expiry date stated on that printout.
    • Facial match confirmation: Records must demonstrate that the person presenting themselves matched the digital photograph generated on the system.

    Submitting Financial Evidence for Payment Plans

    If requesting a time-to-pay arrangement, caseworkers evaluate whether the business is genuinely unable to pay immediately while remaining commercially viable. Required documents include:

    • Audited financial statements for the last two financial years.
    • Management accounts for the preceding six months.
    • Bank statements for all corporate accounts covering the last three months.
    • A 12-month cash flow forecast demonstrating how the proposed monthly installments will be met.
    • Details of all business debts, credit lines, and director loan balances.

    Failure to provide complete financial records will result in the immediate rejection of the payment plan and referral to debt enforcement.

    Consequences for Sponsor Licence Holders

    For businesses holding a Worker or Temporary Worker sponsor licence, the implications of a civil penalty extend far beyond the direct financial fine. Under the Home Office Sponsor Guidance (Workers and Temporary Workers: Guidance for Sponsors), right-to-work compliance is intrinsically linked to sponsor suitability.

    Mandatory and Discretionary Licence Revocation

    The Home Office Sponsor Compliance Team receives automated notifications of all civil penalties issued to licensed sponsors.

    • Mandatory Revocation: Under Appendix C of the Sponsor Guidance, the Home Office will revoke a sponsor licence if the business is issued with a civil penalty for illegal working and fails to pay it within the required timeframe, or if the penalty is upheld following objection/appeal and remains unpaid.
    • Discretionary Revocation or Suspension: If a sponsor is issued a civil penalty (even if paid), the Home Office will review the sponsor's overall compliance. If the breach indicates systematic failures in recruitment controls, the sponsor licence will be suspended pending a full compliance audit or downgraded to a B-rating.

    Downstream Operational Impact on Sponsors

    If a sponsor licence is suspended or revoked due to an illegal working penalty:

    1. Certificate of Sponsorship (CoS) Freeze: The sponsor cannot assign new Certificates of Sponsorship to incoming international recruits.
    2. Curtailment of Sponsored Employees: If the licence is revoked, all existing sponsored workers will have their visas curtailed (shortened) to 60 days, forcing them to find a new sponsor or leave the UK.
    3. Cooling-Off Period: The business will be subject to a mandatory cooling-off period of up to five years, during which it cannot apply for a new sponsor licence.
    4. Key Personnel Disqualification: Directors, Authorising Officers, and Key Contacts associated with a revoked licence may be barred from serving as Key Personnel on any other sponsor licence for up to five years.

    Common Mistakes and Refusal Triggers

    Many employers receive civil penalties not because they deliberately hired unauthorized workers, but because procedural errors invalidated their statutory excuse. The following mistakes are the most frequent triggers for civil penalty notices:

    1. Post-Commencement Checks

    Conducting a right-to-work check after the employee has already started working is the single most common error. The statutory excuse exists only if the verification happens before employment begins. A check completed on the employee's second day, or during an internal audit months later, cannot retrospectively establish an excuse for the period worked prior to the check.

    2. Accepting BRP Cards Manually

    Since 6 April 2022, physical Biometric Residence Permits (BRPs) cannot be accepted for manual right-to-work verification. Employers who inspect and photocopy a physical BRP card instead of using the online share code system do not obtain a statutory excuse. If the worker's status is subsequently curtailed or fraudulent, the employer remains fully liable for a civil penalty.

    3. Missing Retrospective Date Stamps

    Taking a photocopy of a passport without recording the date the document was examined fails Home Office audit standards. If a caseworker cannot determine from the copy or an immutable system audit trail exactly when the verification took place, they will treat the check as unproven.

    4. Overlooking Student Term-Time Work Restrictions

    Students on Student visas (formerly Tier 4) have statutory limits on working hours, typically 20 hours per week during term time. Employing a student for more than their permitted hours constitutes illegal working. To establish a statutory excuse for a student employee, the employer must obtain and retain academic term and vacation dates from the student's education provider covering the entire duration of their study program.

    5. Failure to Conduct Follow-up Checks on Expiring Visas

    A time-limited statutory excuse expires on the date the employee's permission to stay in the UK ends. If an employer fails to conduct a repeat check before that date, the statutory excuse lapses instantly. If the employee has submitted an in-time visa extension application, the employer must verify this through the Employer Checking Service to maintain legal protection.

    6. Misunderstanding Acceptable Documents

    Certain documents do not confer a statutory excuse on their own. The following documents are invalid for right-to-work purposes:

    • National Insurance numbers (whether on a card, letter, or P45/P60).
    • UK or international driving licences.
    • Certificates of naturalisation without an accompanying British passport.
    • Expired visas in expired foreign passports.
    • Immigration status documents that do not state work permissions clearly.

    Complex Scenarios and Edge Cases

    Certain employment arrangements and immigration categories present unique legal challenges that require specialized compliance procedures.

    Section 3C Leave and the Employer Checking Service (ECS)

    Under Section 3C of the Immigration Act 1971, an individual's existing immigration leave is automatically extended if they make an in-time application to extend or switch their visa before their current leave expires. During this period, their right to work continues under the conditions of their previous visa.

    Because the individual will not hold a current physical visa or an updated online share code status while their application is pending, the employer must use the Home Office Employer Checking Service (ECS):

    1. The employer submits an online request to the ECS, providing the worker's Home Office reference number or application tracking number.
    2. The ECS verifies whether an outstanding application, administrative review, or appeal is pending.
    3. If confirmed, the Home Office issues a Positive Verification Notice (PVN) to the employer.
    4. A PVN provides a time-limited statutory excuse lasting exactly 6 months from the date stated on the notice.
    5. If the ECS returns a Negative Verification Notice (NVN), the employer has no statutory excuse and must immediately review the employment relationship.

    TUPE Business Transfers and the 60-Day Grace Period

    When a business acquires staff through a transfer under the Transfer of Undertakings (Protection of Employment) Regulations 2006 (TUPE), the transferor's right-to-work records do not automatically transfer a statutory excuse to the transferee.

    Under Home Office guidance, the incoming employer receives a statutory 60-day grace period from the official transfer date. During this 60-day window, the employer must conduct fresh, compliant right-to-work checks on all newly acquired transferring employees. If the employer completes these checks within 60 days, their statutory excuse is secured. If checks are not completed within 60 days, the employer becomes strictly liable for any transferring employees who lack the right to work.

    Digital Identity Service Providers (IDSP) for British and Irish Citizens

    Employers can use certified Identity Service Providers (IDSPs) using Identity Document Verification Technology (IDVT) to verify the right to work of British and Irish citizens who hold valid passports.

    To ensure a statutory excuse is acquired via an IDSP:

    • The IDSP must be certified to the required Medium or High profiles under the UK Digital Identity and Attributes Trust Framework.
    • The employer must ensure the IDSP verification includes a clear image of the passport biographical page.
    • The employer must independently verify that the photograph generated by the IDSP matches the individual starting employment.
    • Critical Boundary: IDSPs cannot be used to verify non-British or non-Irish nationals. Using an IDSP check for an overseas national holding a visa or settled status does not yield a statutory excuse.

    Dependants and Complex Endorsements

    Dependants of individuals holding Skilled Worker, Student, or Global Talent visas generally have unrestricted rights to work in the UK, with exceptions regarding employment as a professional sportsperson or sports coach.

    When verifying a dependant:

    • The employer must verify the dependant's own digital share code or biometric status, not the primary visa holder's status.
    • The expiry date of the dependant's statutory excuse will align with the expiry date of their individual permission, which typically matches that of the lead applicant.
    • If the primary visa holder's permission is curtailed or revoked, the dependant's right to work ceases concurrently upon formal curtailment.

    Remote Workers and Cross-Border Arrangements

    An individual who works 100 percent remotely outside the UK for a UK company (having never entered the UK to perform work) is not subject to UK immigration control under Section 15 of the 2006 Act, and no civil penalty can be issued for that individual under UK law.

    However, if a remote employee enters the UK (even for short periods, training, or meetings) and performs work without appropriate UK work permission, the employer becomes immediately liable under Section 15. Employers must establish right-to-work verification protocols for all staff members who enter the UK for operational activities.

    Building an Internal Compliance and Defence Strategy

    Preventing civil penalties requires structured, repeatable HR processes integrated into standard recruitment workflows. Employers should implement four foundational compliance pillars.

    1. Robust Onboarding Checklists

    HR systems must prevent an employee from being placed on the payroll or rota until an approved right-to-work verification record has been signed off by a trained manager. The check should form part of the formal conditional offer stage.

    2. Automated Expiry Tracking

    Businesses employing visa holders must maintain a centralized tracking register that flags visa expiries 90, 60, and 30 days in advance. This allows sufficient time to remind workers to lodge extension applications, obtain share codes, or request ECS Positive Verification Notices before existing permissions expire.

    3. Regular Internal Right-to-Work Audits

    Organizations should conduct annual right-to-work audits across their entire workforce. Conducting an audit allows the business to identify historical defects, missing dates, or lapsed permissions.

    Remediation Rule: If an audit discovers an employee without a valid statutory excuse, the employer must immediately verify their status using current systems. While a retrospective check does not protect against past employment periods, it establishes a statutory excuse from the date of the new check forward and limits ongoing liability.

    4. Staff Training and Documented Standard Operating Procedures

    All recruitment staff, line managers, and HR personnel responsible for onboarding should receive structured training on:

    • How to distinguish between List A and List B documents.
    • How to correctly utilize the Home Office Employer Online Checking Service.
    • How to spot document fraud and identity tampering.
    • Proper retention protocols under UK GDPR and immigration rules.

    Practical Next Steps

    If your organization has been visited by Immigration Enforcement, received a Referral Notice, or been served with an Information Request or Civil Penalty Notice, prompt action is essential:

    1. Gather the Documentation: Immediately pull all onboarding files, original check copies, share code profile downloads, employment contracts, and payroll records for the named individuals.
    2. Calculate Deadlines: Note the exact dates on the notice. Identify the 21-day fast payment deadline and the 28-day statutory objection deadline.
    3. Audit the Checks: Review whether the documents held satisfy the requirements of List A, List B, or the Home Office online service, and verify whether the checks occurred prior to the first day of employment.
    4. Formulate the Defence: Determine whether grounds exist to lodge a formal objection under Section 16 (disputing liability, proving a statutory excuse, or claiming mitigation discounts).
    5. Submit the Objection Bundle: Prepare a formal legal representation letter accompanied by an indexed evidence bundle before the 28-day statutory window expires.

    Reviewed by Wesbridge Associates team on . We check our published guidance against GOV.UK and current Home Office rules.

    Need immigration advice?

    Our IAA-regulated advisers can tell you exactly how these rules apply to your case — including what we would not recommend.

    Frequently asked questions

    Common questions on this topic, answered by our advisers.