UK Right to Work Checks: A Complete Technical Reference for HR Systems and Compliance Teams (2026)
Right to work (RTW) compliance sits at the intersection of employment law, immigration status management, and operational HR. For HR tech builders, compliance teams, and engineering managers hiring internationally, understanding the mechanics of RTW checks — and where they can fail — is essential.
This is a ground-up technical reference covering check types, statutory excuse logic, time-limited status handling, and integration points.
The Legal Obligation
Under the Immigration, Asylum and Nationality Act 2006 (as amended), every UK employer must check that each employee has the right to work before employment commences. This applies universally — British citizens included. Selective checking exposes employers to discrimination claims under the Equality Act 2010.
Failure to check — or checking incorrectly — can result in:
- Civil penalties up to £60,000 per illegal worker (as of February 2024 increases)
- Criminal prosecution (up to 5 years' imprisonment for knowing employment of an illegal worker)
- Loss of sponsor licence (for licensed sponsors — catastrophic for tech companies with Skilled Worker visa employees)
Check Modalities: Three Paths
Path 1 — Manual Document Check (List A/B documents)
Applies to: British citizens, Irish citizens, and others with physical evidence of indefinite leave.
Procedure:
- Obtain original documents (not scans, not photos)
- Check the document is genuine and unaltered
- Confirm the holder is the same person (face check)
- Make a clear copy, note the date checked, retain on file
List A (indefinite leave, no follow-up required): UK/Irish passport, birth certificate + NI document, certificate of registration/naturalisation, Biometric Residence Permit with indefinite leave endorsement.
List B (time-limited, follow-up required): Biometric Residence Permit with expiry, current passport with limited leave vignette, Certificate of Application with Positive Verification Notice.
Path 2 — Home Office Online Checking Service (Share Code)
Applies to: Workers with biometric residence permits, EU Settlement Scheme (settled/pre-settled), and anyone with a digital-only immigration status.
This is mandatory for these workers — physical documents alone are insufficient.
The worker generates a 9-character share code at prove-right-to-work.service.gov.uk. The employer enters the share code + date of birth at view-a-share-code.service.gov.uk. The system returns the worker's current immigration status, permission end date, and working restrictions.
System integration note: Share codes are single-use and expire after 90 days. If you're building HR onboarding flows, you cannot store and reuse a share code — each hiring event requires a fresh code from the worker.
Path 3 — Identity Document Validation Technology (IDVT) via Certified IDSP
Applies to: British and Irish citizens only (not visa holders).
Since April 2022, employers can use certified Identity Service Providers (IDSPs) certified to UKDIATF (UK Digital Identity and Attributes Trust Framework) standards to conduct RTW checks remotely.
Key constraint: You must use a provider on the certified list. The check must include identity verification to "Medium" confidence level at minimum.
Why this matters for remote-first tech teams: IDVT enables fully remote hiring for UK/Irish workers without a physical document check. For engineering teams hiring across the UK, this removes a significant operational friction point.
Statutory Excuse Logic: The Employer's Compliance Shield
The statutory excuse is the core of RTW compliance architecture. If your check is conducted correctly and in good faith:
- A civil penalty cannot be levied against you — even if the worker later proves to have had no right to work.
Conditions for a valid statutory excuse:
- Check conducted before employment start (not on day one — before)
- Correct check type used for the worker's status
- Copy retained with date of check recorded
- For online checks: check conducted via the official Home Office service (not via screenshot or third-party)
Statutory excuse duration:
- List A documents: indefinite
- List B (time-limited): only for the period of the documented leave
If List B leave expires and no follow-up check is conducted, the statutory excuse lapses immediately upon expiry. Continuing to employ the worker after that point = no statutory excuse = full exposure to civil penalty.
Time-Limited Status: Follow-Up Check Architecture
For any worker on time-limited leave (Skilled Worker, Graduate, Student, Spousal, BRP with expiry), you need a structured follow-up process.
Recommended data model for HR systems:
worker_id: UUID
rtw_check_date: date
rtw_check_type: ENUM(manual_listA, manual_listB, online_share_code, idvt)
permission_expiry_date: date | null // null = indefinite
follow_up_required: boolean
follow_up_due_date: date | null // typically permission_expiry_date - 90 days
follow_up_completed: boolean
Alert trigger: follow_up_due_date IS NOT NULL AND follow_up_completed = false AND follow_up_due_date <= NOW() + 30 days
For sponsor licence holders, this data should feed directly into SMS/UKVI reporting obligations — workers whose leave expires without a renewal, or who leave the sponsored role, must be reported.
Common Integration Failure Points
| Failure Mode | Risk |
|---|---|
| RTW check captured on/after day 1 | No statutory excuse |
| Share code screenshot stored instead of gov.uk check output | Invalid check (screenshots can be manipulated) |
| IDVT check via non-certified provider | Invalid check |
| BRP holder checked manually (no online check) | Invalid for post-EUSS workers — physical card not sufficient |
| List B expiry not calendared | Statutory excuse lapses silently |
Practical Tools for HR and Compliance Teams
Understanding the intersection of visa categories, permissible working conditions, and check requirements requires deep immigration knowledge. Tools like ImmigrationGPT provide instant, accurate answers on immigration status rules, document requirements, and working restrictions — reducing the cognitive overhead on HR teams who aren't immigration specialists.
For teams managing sponsor licences, the platform also provides access to the register of licensed sponsors (125,000+ companies), allowing quick verification of sponsor status.
Summary: The RTW Compliance Checklist
- [ ] Check type determined by worker's immigration status (not by convenience)
- [ ] Check completed before employment start date
- [ ] For online checks: gov.uk system used, output saved as PDF/screenshot with date
- [ ] For IDVT checks: certified IDSP used, confidence level met
- [ ] Copy retained with check date noted
- [ ] For time-limited leave: follow-up date entered into HR system
- [ ] For time-limited leave: follow-up check completed before expiry date
RTW compliance is straightforward when the process is systematic. The failures that result in civil penalties are almost always process failures, not knowledge failures — a check missed because no one calendared it, or a share code not obtained because the onboarding flow didn't require it.
Build the process. Automate the reminders. Keep the audit trail.
This article is for general information only and does not constitute legal advice. Immigration law is complex and subject to change.
Top comments (0)