ImmigrationGPT

Posted on May 19

Right to Work Verification in 2026: Building Compliant HR Workflows and Avoiding Civil Penalties

#immigration #uk #career #hr

Employers in the UK have a legal obligation to verify every employee's right to work before they start — and in some cases, to repeat that verification when an employee's immigration permission expires. Get it wrong and you're looking at civil penalties of up to £60,000 per worker, plus potential damage to any sponsor licence you hold.

This post covers the full right to work check framework in 2026, including the eVisa transition that changed how digital checks work, the repeat verification requirements that many HR teams still miss, and how to structure your compliance records.

The Legal Framework

The duty to check right to work sits under the Immigration, Asylum and Nationality Act 2006. A correctly completed check gives you a "statutory excuse" — a legal defence if it turns out an employee didn't have permission to work. Without that statutory excuse, there's no defence and civil (and potentially criminal) liability applies.

In 2026, there are three check types:

Manual checks — British and Irish passport holders (and a small set of other documents)
UKVI online service — for employees with eVisa/digital immigration status (share code required)
Employer Checking Service (ECS) — for cases where the Home Office holds the record

The eVisa Transition: What Changed

The biggest shift for HR compliance workflows in the past 12 months is the full move to eVisas. Physical biometric residence permits (BRPs) were phased out as primary evidence.

Implications for your tooling and processes:

OLD WORKFLOW:
  employee -> show BRP card -> HR scans/photos document -> stores copy

NEW WORKFLOW:
  employee -> generate share code at gov.uk/prove-right-to-work
           -> share code valid for 90 days
           -> HR enters share code + employee DOB into UKVI online checker
           -> system returns status + any time limit
           -> HR saves/screenshots result with timestamp

If your onboarding forms still say "please bring your BRP," update them. For any employee on a visa (other than those with permanent/indefinite status in a UK or Irish passport), the share code is now the correct path.

Repeat Verification: The Compliance Gap

This is the failure mode most commonly found in audits.

For employees with time-limited immigration status, you must re-verify before that status expires:

Immigration Category	Repeat Check Required?
Skilled Worker visa	Yes — before visa expiry
EU Settlement Scheme pre-settled status	Yes — before pre-settled status expiry
Graduate visa	Yes — before visa expiry
Settled status / ILR	No
British/Irish passport	No

The pre-settled status case is particularly important. An employee with pre-settled status (EUSS) has a time-limited grant — they need to apply for settled status before it expires. If they don't, they lose their right to work. Your HR system needs to flag the expiry date and trigger a re-check workflow at least 4 weeks before expiry.

Structuring Your Compliance Records

UKVI guidance requires retaining right to work records for the duration of employment plus two years after termination.

For each employee, store:

{
  employee_id: ...,
  check_type: "online" | "manual" | "ecs",
  check_date: "YYYY-MM-DD",
  share_code: "...",           // for online checks
  result_screenshot: "...",    // file path or storage ref
  status_expiry_date: "...",   // null if indefinite
  next_check_due: "...",       // null if no repeat needed
  checked_by: "..."
}

For digital checks, the UKVI online system generates a result page — save a PDF or screenshot of that page with the date. Don't just store the share code; store the outcome.

Civil Penalty Rates in 2026

Penalties increased in 2024 and remain at:

£45,000 per worker — first breach
£60,000 per worker — repeat breach (if the business has received a civil penalty notice in the past 3 years)

Breaches are also notifiable to UKVI's sponsor licensing team. If your business holds a sponsor licence to employ overseas workers on Skilled Worker or other routes, a right to work compliance failure can trigger a licence review — potentially resulting in suspension or revocation.

ECS Requests: When to Use Them

The Employer Checking Service is the route for edge cases:

Employee has an outstanding Home Office application (leave in continuation)
Employee's digital status isn't showing correctly
Confirmation is needed for an employee with an appeal pending

ECS issues a "Positive Verification Notice" (PVN) that gives you a statutory excuse for 6 months. After 6 months, if the employee's status still hasn't resolved, you must submit another ECS request.

Audit Checklist

[ ] Review all employees with time-limited status; confirm next check date is diarised
[ ] Update onboarding docs to remove BRP-only language; add share code instructions
[ ] Confirm record retention policy covers employment duration + 2 years
[ ] Verify HR team knows when to escalate to ECS (outstanding applications, appeals)
[ ] Review pre-settled EUSS employees specifically — flag those approaching expiry

For UK immigration guidance including sponsor register lookups and visa route tools, visit immigrationgpt.co.uk.

General information only — not legal advice. Consult a regulated immigration adviser for case-specific guidance.

DEV Community