Is Your Business Exposed to a Right to Work Penalty?

UK employers paid £8.1 million in Right to Work civil penalties in Q1 2024 alone. A single undetected illegal worker can cost your business up to £60,000 - and if your records are incomplete, you lose your statutory excuse instantly. Our free 60-second compliance check asks you 6 questions and returns your RTW Compliance Score, your penalty exposure estimate, and a prioritised action plan.

  • IAA Regulated
  • 60 seconds
  • Free PDF report

WORK PERMIT CLOUD · COMPLIANCE TOOL

I need to check if my business is exposed to a Right to Work penalty

Check if someone can legally work in the UK

Answer 6 questions and get your Compliance Risk Score, penalty exposure estimate, and a prioritised action plan. UK employers paid £8.1M in RTW penalties in Q1 2024 alone.

60 seconds

6 simple

Questions

Instant score

Risk rating +

Penalty estimate

Full report

Free PDF +

Action plan

Did you know? A single illegal worker can result in a civil penalty of up to £60,000 per breach. Repeat breaches are capped at £45,000 per worker. If your records are incomplete, you lose your "statutory excuse" instantly.

No credit card. No sales call unless you request one.

Your audit report

Exactly what you'll receive

Not a generic checklist - a personalised penalty exposure assessment based on your specific RTW practices.

  1. 01

    Your RTW Compliance Score (0–100)

    A risk-weighted score calculated across your workforce size, check processes, document retention, follow-up checks, and audit history.

  2. 02

    Penalty Exposure Estimate

    A risk-weighted estimate of your potential civil penalty exposure based on the number of non-UK/Irish nationals in your workforce and the compliance gaps identified. Civil penalties can reach £60,000 per illegal worker under the 2024 regime.

  3. 03

    Free PDF Report and Prioritised Action Plan

    A downloadable report identifying the specific gaps in your RTW process - not a generic checklist, but findings specific to your answers - with three actions ranked by urgency.

Did you know? A single illegal worker can result in a civil penalty of up to £60,000 per breach. Repeat breaches are currently capped at £45,000 per worker. If your records are incomplete, you lose your statutory excuse instantly - even if you did the check originally.

For a complete guide to RTW checks for UK employers,

Read: Complete Guide to Right to Work Checks for UK Employers

What Is the UKVI Register of Licensed Sponsors?

The Register of Licensed Sponsors: Workers is an official Home Office publication listing every UK employer that currently holds a valid sponsor licence. It is updated regularly by UKVI and is the authoritative source for verifying whether an employer can legally sponsor Skilled Workers, Senior or Specialist Workers, and other worker visa categories.

The register shows the employer's name, location, and current licence rating. It does not show all historical changes - which is why understanding your current status and what it means is critical.

Each licensed sponsor is assigned a rating by UKVI. To understand what your rating means for your ability to issue sponsorship,

Read: Sponsor Licence Rating - What Does It Mean?

The penalty regime

The UK Right to Work Penalty Regime - What Employers Must Know

Under the Code of Practice on Preventing Illegal Working (GOV.UK), every UK employer has a legal obligation to check that all employees have the right to work in the UK before they start working. Failure to do so - or failure to maintain adequate records - exposes the business to a civil penalty issued by the Home Office.

  • First offence: Up to £45,000 per illegal worker (increased from £15,000 in January 2024).

  • Repeat offence: Up to £60,000 per illegal worker (increased from £20,000).

  • Statutory excuse: Employers who follow the prescribed check process and retain the required documentation have a statutory excuse - the Home Office cannot impose a penalty even if a worker was not entitled to work.

  • Lost statutory excuse: If you conducted a check but did not retain a copy of the document, or the copy is lost, damaged, or the record incomplete - the statutory excuse is lost, even if the original check was compliant.

  • No check at all: If no check was conducted before the worker started, there is no statutory excuse and the full civil penalty applies from day one.

Read more: London Employers Fined £6.7m - Right to Work Check Mistakes to Avoid

Compliant methods

Three Compliant Methods of Right to Work Checks

According to the Employer's Guide to Right to Work Checks on GOV.UK, there are three methods by which an employer can establish a statutory excuse. The method you use directly affects your risk score in this tool.

MethodHow It WorksStatutory Excuse?Best For
Manual document checkInspect original passport / BRP / share code document in person.Yes - if done correctly and retainedSmall employers, occasional hires
Online Home Office check (Share Code)Worker generates a share code; employer verifies via gov.uk/view-right-to-work.Yes - digital record retained automaticallyAny employer - especially for visa/BRP holders
Certified IDSP / IDVT digital checkAccredited Identity Service Provider verifies ID remotely using biometric chip data.Yes - highest confidence levelEmployers hiring at volume or remotely

From March 2026, the right to work check obligation was expanded. Sponsors must now check the status of all self-employed contractors, zero-hours workers, and directly engaged agency workers - not just payroll employees. Non-compliance with the expanded scope carries the same £60,000 per-worker penalty.

Read the new rules

How we score you

What the 6 Questions Assess

Each question maps to a specific area of RTW compliance risk. Together, they generate a composite score and a personalised penalty exposure estimate.

  1. 01

    Employee count

    Establishes the scale of potential exposure - larger organisations face higher aggregate penalty risk.

  2. 02

    Non-UK workers

    Directly determines penalty exposure estimate - each non-compliant worker represents up to £60,000 liability.

  3. 03

    Who checks

    Assesses the reliability of your check process - owner/director informal checks are highest risk; certified IDSP/IDVT is lowest.

  4. 04

    2-year retention

    Tests statutory excuse maintenance - missing retention is one of the top civil penalty triggers.

  5. 05

    Visa follow-ups

    Assesses follow-up check compliance - a lapsed statutory excuse from a missed renewal is an immediate penalty risk.

  6. 06

    Audit history

    Gauges overall audit culture - 'Never' or 'had a Home Office visit' are the two highest-risk indicators.

Understanding your RTW score

Three risk bands - and your penalty exposure

Your score is risk-weighted based on your workforce size, the proportion of non-UK nationals, and your process maturity across all six areas. The penalty exposure estimate is calculated by multiplying your non-UK workforce size by the applicable penalty tier.

75 – 100

Low Risk

Penalty exposure

Minimal

Continue current practices. Schedule next audit within 12 months. Consider digital IDSP/IDVT tool to automate.

Recommended Action: Try our certified RTW app - 5 free checks included.

45 – 74

Moderate Risk

Penalty exposure

Up to £45,000

Active gaps that could trigger a penalty if audited now. These are fixable.

Recommended Action: Book a free 15-min Health Check with WPC to prioritise fixes.

0 – 44

High Risk

Penalty exposure

Up to £60,000+ per worker

Serious compliance failures. Statutory excuse likely compromised. Penalty risk is live.

Recommended Action: Contact WPC immediately for an emergency compliance review.

A 'Low Risk' score does not mean zero risk. The Home Office can still identify undocumented workers during an inspection if records are not in the correct format. Our tool identifies process gaps, not individual worker status.

Avoid these gaps

The Most Common Right to Work Mistakes That Cost Employers

These five failure modes account for the majority of UKVI civil penalties we see. Each one is a sufficient trigger on its own.

  • Not re-checking time-limited workers before visa expiry. Once a time-limited visa expires, the statutory excuse lapses immediately. Many employers conduct the initial check but fail to set reminders for renewal - creating an undetected gap.

  • Delegating checks to untrained staff. Line managers or admin staff conducting informal checks without training frequently miss expired documents, miss BRP expiry dates, or accept incorrect document lists. This is the most common reason employers fail Home Office inspections.

  • Paper records that cannot be located. A check you cannot prove you conducted might as well not have happened. The Home Office requires you to retain copies of RTW documents for the duration of employment and for 2 years after it ends.

  • Not checking EU nationals after Brexit. EU, EEA, and Swiss nationals who arrived after 31 December 2020 require a right to work check exactly like any other non-UK national. Pre-settled and settled status must be verified via the share code system - physical EU passports are no longer acceptable as a standalone check.

  • Using the wrong document list. Accepting a document from List B when the worker should be on List A (or vice versa) invalidates the statutory excuse. The correct list depends on the worker’s immigration status.

See more: Right to Work Checks for EEA/Swiss Workers - Must-Knows for Employers

Who must check

Who Must Conduct Right to Work Checks?

All UK employers - regardless of size, sector, or nationality of their workforce - are legally required to conduct right to work checks before a worker’s first day of employment. There are no exemptions based on company size or industry.

  • Sole traders and micro-businesses with 1–2 employees.

  • NHS Trusts, local authorities, and public sector bodies.

  • Staffing agencies and labour providers (who must check the workers they supply).

  • Charities, voluntary organisations, and non-profits.

  • Employers using self-employed contractors or zero-hours workers - expanded obligation from March 2026.

Trusted by thousands

Why UK Employers Trust WorkPermitCloud for RTW Compliance

One of the UK's most experienced immigration advisory firms.

3,000+

UK sponsors served

£8.1M

RTW penalties Q1 2024

(the gap we're stopping)

4.9★

Google rating · 733 reviews

  • IAA Regulated

    Registration No. F202100311 - you're always in safe hands

  • 5 free RTW checks via our app

    Try our certified digital RTW check tool - no credit card.

  • Cyber Essentials Plus

    Your data secured

  • Human-led compliance reviews

    A qualified consultant calls you to discuss findings.

Run your free RTW compliance check now

Use the free 6-question tool above - it takes 60 seconds and costs nothing. Or speak directly to a WPC compliance consultant.

FAQ

Common questions

What is a Right to Work check and who must carry one out?

A Right to Work (RTW) check is the process by which a UK employer verifies that a worker has legal permission to work in the UK before their first day of employment. Every UK employer must conduct these checks - regardless of company size, sector, or the nationality of their workforce. Failure to check (or failure to retain evidence of the check) means the employer has no statutory excuse and faces a civil penalty of up to £60,000 per illegal worker. Full guidance is on GOV.UK: Checking a job applicant’s right to work.

What is the civil penalty for employing an illegal worker in 2026?

Since January 2024, the civil penalty for a first breach is up to £45,000 per illegal worker (increased from £15,000). For repeat breaches, the penalty is up to £60,000 per illegal worker (increased from £20,000). These penalties are issued by the Home Office and are enforced regardless of whether the employer knew the worker was illegal. The only defence is a statutory excuse - which requires a compliant check to have been conducted and documented before employment started.

What is a "statutory excuse" and how do I get one?

A statutory excuse is the legal defence that protects an employer from a civil penalty even if one of their workers is later found not to have the right to work. To establish a statutory excuse, you must: (1) conduct a compliant RTW check before the worker’s first day; (2) retain a clear copy of the documents checked (or a digital record if using the online share code system or certified IDSP); and (3) for time-limited workers, conduct a follow-up check before their leave expires. If any of these steps are missed or records are lost, the statutory excuse is forfeited - even if you did the original check correctly.

How long must I keep Right to Work documents?

You must retain copies of Right to Work documents for the duration of employment plus 2 years after employment ends. This applies to both manual paper copies and digital records. If you use a certified IDSP/IDVT service, the digital record is retained automatically. Paper copies stored without an audit trail are frequently lost or misfiled - this is one of the top reasons employers lose their statutory excuse during a Home Office inspection.

Can I conduct Right to Work checks digitally or remotely?

Yes. There are three compliant methods: (1) manual document inspection in person; (2) online Home Office share code check (the worker generates a share code at gov.uk/prove-right-to-work and the employer verifies it online - this creates an automatic digital record); and (3) certified IDSP/IDVT digital check using an accredited Identity Service Provider. All three methods establish a valid statutory excuse when conducted correctly.

Do I need to re-check employees whose visas are about to expire?

Yes. For workers with time-limited leave (such as Skilled Worker visa holders, students, or dependants with time-limited work rights), you must conduct a follow-up check before their current leave expires. Once their leave expires, your statutory excuse lapses automatically - even if you conducted a compliant check when they were first hired. The best practice is to use automated expiry alerts rather than manual spreadsheet tracking.

Do Right to Work checks apply to EU workers after Brexit?

Yes - for EU, EEA, and Swiss nationals who arrived in the UK after 31 December 2020, a full Right to Work check is required exactly like any other non-UK national. Their work permission must be verified via the Home Office online share code system - a physical EU passport is no longer an acceptable standalone Right to Work document for new hires. EU nationals with Settled Status or Pre-Settled Status under the EU Settlement Scheme can prove their right to work online.

What happens during a Home Office illegal working inspection?

A Home Office Enforcement team can visit your business with as little as 48 hours' notice - or unannounced in some cases. During the inspection, officers will: check your RTW records for all employees; look for evidence of compliant checks and properly retained copies; interview sponsored workers; and request access to your HR systems. If they identify a worker without the right to work, and you cannot produce evidence of a compliant check, a civil penalty notice will be issued.

What is an IDSP or IDVT tool and should my business use one?

An IDSP (Identity Service Provider) or IDVT (Identity Document Validation Technology) tool is a certified digital platform used to verify a worker’s identity remotely using the biometric chip in their passport or ID document. IDSP checks are particularly useful for employers hiring remotely or at volume. They create a tamper-proof digital audit trail and establish a statutory excuse at the highest confidence level. WorkPermitCloud's RTW app is a certified IDSP tool - try 5 free checks here.

Still have questions?

Have a specific RTW compliance concern? Talk to an Adviser.

Book Free Consultation