Every UK employer must carry out a right-to-work check on every hire before employment begins. Since the eVisa transition, BRPs are no longer valid for these checks. Work Permit Cloud advises on the correct methods, record retention, and follow-up obligations.
Talk to an expertEvery UK employer is legally required to verify that each person they hire has the legal right to work in the UK before they start employment, without exception. This requirement applies regardless of the employee's nationality, their length of service, or the nature of the role. Checking a selection of workers, or only checking workers who appear to be from overseas, is both insufficient and potentially unlawful under anti-discrimination legislation.
The purpose of the check is to establish what is known as a statutory excuse: a legal defence that protects the employer from a civil penalty if it later emerges that the worker did not have the right to work. Without a correctly conducted and retained check, the employer is fully exposed to a civil penalty of up to £45,000 per worker for a first breach and up to £60,000 per worker for a repeat breach, regardless of whether they knew the worker lacked permission.
The right-to-work framework is set out in the Immigration, Asylum and Nationality Act 2006 and supported by the Home Office's Employer's Guide to Right to Work Checks, which was most recently updated in June 2025.
The UK completed its transition to a fully digital immigration status system at the end of 2024. Biometric Residence Permits (BRPs) ceased to be issued on 31 October 2024. Critically, for the purposes of right-to-work checks, a manual inspection of a physical BRP, even if the card appears valid and shows a future expiry date, no longer establishes a statutory excuse.
Workers who previously held BRPs now hold their immigration status as an eVisa, a digital record linked to a UKVI account. For these workers, the only method that establishes a statutory excuse is the Home Office online checking service, accessed via a share code generated by the worker. If you have existing employees whose right to work was last verified by a manual BRP check and you have not since conducted an online share code check, your statutory excuse for those individuals is now uncertain and should be addressed urgently.
There is no single method that applies to all workers. The correct method depends on the individual's nationality and immigration status. Using the wrong method, even if the worker genuinely has the right to work, removes your statutory excuse. The three prescribed methods in 2026 are:
This is now the standard and, in most cases, the only valid method for any non-British, non-Irish worker whose immigration status is held digitally. This includes all eVisa holders, EU Settlement Scheme status holders, Skilled Worker visa holders, and all other workers who previously held a BRP.
The worker generates a unique 9-character alphanumeric share code through their UKVI account at gov.uk/prove-right-to-work. The code begins with the letter "W" for right-to-work purposes. The employer enters this code along with the worker's date of birth at gov.uk/view-right-to-work to access the worker's current immigration status in real time. The result shows whether the worker has the right to work, any restrictions, and any expiry date requiring a follow-up check.
The employer must save or print the profile page returned by the online service as the record of the check. The check must be completed before employment starts, and the record must be retained for the duration of employment plus two years.
A manual document check involves physically inspecting an original document from the Home Office's List A or List B of acceptable documents. The employer must verify that the document appears genuine, that it belongs to the person presenting it, and make a clear, dated copy.
List A documents establish a permanent statutory excuse for that employment with no follow-up check required. List B documents establish a time-limited statutory excuse and require a repeat check before the document expires. The most common List A document for British nationals is a valid UK passport. Irish citizens may use a valid Irish passport or passport card.
This method is primarily for British and Irish nationals who do not have or choose not to use digital status. Manual checks on BRPs are not a valid method for establishing a statutory excuse in 2026.
British and Irish citizens with a valid passport or Irish passport card may be verified through a certified Identity Service Provider (IDSP) using Identity Document Validation Technology (IDVT). This is a digital route that provides the same legal outcome as a manual check and establishes a statutory excuse. Use of IDSPs is voluntary. Only certified IDSPs on the Home Office register should be used.
The Employer Checking Service is used when an individual cannot prove their right to work through any of the three standard methods, most commonly when they have a pending application or appeal with the Home Office and their current permission is about to expire or has expired. The ECS issues a Positive Verification Notice (PVN) if the worker has the right to continue working while their application is pending, providing a six-month statutory excuse. The employer must conduct a follow-up check before the PVN expires.
Importantly, the ECS will not issue a PVN where the individual has an eVisa available in a UKVI account. In that situation, the online share code check must be used. The ECS is therefore a fallback mechanism only for cases where online verification is genuinely not possible.
For workers who have time-limited immigration permission, a single right-to-work check at the start of employment is not sufficient. You must conduct a follow-up check before the worker's permission expires to maintain your statutory excuse. The online checking service displays any relevant expiry date, making it straightforward to schedule follow-up checks in advance. Missing a follow-up check deadline exposes you to a civil penalty for the period after the permission expired.
All evidence of right-to-work checks must be retained for the full duration of employment and for two years after employment ends. Records must be accessible for inspection and stored securely in compliance with UK data protection law. For online checks, retain the saved or printed profile page. For manual checks, retain clear, legible copies of the original documents, dated to show when the check was made. Our UKVI compliant HR software manages this record retention and schedules follow-up checks automatically.
The right-to-work regime must be applied consistently and without discrimination. The law requires that all employees, regardless of their perceived nationality, appearance, or background, are subject to the same check process. Selective checking, even if well-intentioned, can constitute unlawful discrimination. A consistent, documented process applied uniformly to every new hire is the correct approach.
Read the Home Office Employer's Guide to Right to Work Checks on GOV.UK.
Keeping pace with the right-to-work regime, particularly following the complete overhaul of the checking process with the eVisa transition, requires regular process reviews and well-trained staff. Work Permit Cloud provides training for HR teams, policy reviews, personnel record audits, and ongoing advisory support.
We help employers ensure their checking processes are legally compliant, correctly implemented, and capable of withstanding scrutiny from the Home Office, whether during a routine compliance visit or following a civil penalty investigation. Book an appointment or contact us to discuss your right-to-work compliance.
MD Abdul Khalik Shahib
Google review · 5★
I'm very happy to share that I received my visa approval today for a 2-year extension. A huge thank you to my solicitor for the excellent support, professionalism, and guidance throughout the entire process. Everything was handled smoothly, and I truly appreciated the clear communication and dedication from start to finish. I highly recommend their service to anyone looking for reliable and professional immigration support.
Ahsane Elahi
Google review · 5★
I am incredibly grateful to Work Permit Cloud for their outstanding assistance with my visa process. A massive thank you to Mamun, who was an absolute lifesaver. He tolerated me over the weeks with unmatched patience, calmly and warmly answering every single one of my calls and messages. Highly recommend this company and their phenomenal team!
Im-mr Zakaria
Trustpilot · 5★
Alhamdulillah i got my visa extension thank you very much WPC for helped me and with me throughout this journey. My visa was about to expired before getting an additional cos but you guys took the responsibility and did all the paper work and take the risk and eventually got succeed. Thanks a bunch guys.
FAQ
Every UK employer must carry out a right-to-work check on every person they hire, without exception, before employment begins. This applies regardless of nationality, role, length of service, or whether the person has worked for you before. Checking only workers who appear to be from overseas is both insufficient and potentially unlawful under anti-discrimination legislation.
No. BRPs ceased to be issued on 31 October 2024. A manual check on a physical BRP, even one that appears valid and shows a future expiry date, no longer establishes a statutory excuse. For non-British, non-Irish workers, the only currently valid method is the Home Office online checking service, accessed using a share code provided by the worker.
The worker generates a 9-character alphanumeric share code through their UKVI account at gov.uk/prove-right-to-work. Share codes for right-to-work purposes begin with the letter "W". The employer enters this code and the worker's date of birth at gov.uk/view-right-to-work to access the worker's current immigration status in real time. The result page must be saved or printed as the record of the check, and must be completed before employment starts.
A follow-up check is required when a worker has time-limited immigration permission. The first check establishes a statutory excuse for the period of permission shown. Before that permission expires, a fresh check must be conducted to maintain the statutory excuse. Missing a follow-up check deadline exposes you to a civil penalty for the period after the permission expired.
The Employer Checking Service is used when a person cannot prove their right to work through the standard methods, most commonly when they have a pending application or appeal and their current permission has expired or is about to expire. A Positive Verification Notice (PVN) from the ECS provides a six-month statutory excuse. The ECS cannot be used where the individual has an eVisa available — in that situation, the online share code check must be used instead.
All evidence of right-to-work checks must be retained for the full duration of employment and for two years after employment ends. For online checks, save or print the profile page returned by the Home Office online service, showing the date the check was conducted. For manual document checks, retain clear dated copies of the original documents. Records must be stored securely in compliance with UK data protection law.
If you employ a person without the right to work and cannot produce evidence of a correct, prescribed check, you are liable for a civil penalty of up to £45,000 per worker for a first breach, or up to £60,000 per worker for a repeat breach. Liability arises regardless of whether you knew the worker lacked permission. See our Civil Penalty page for full detail on your options on receipt of a penalty notice.
British and Irish citizens with a valid passport or Irish passport card may be verified digitally by a certified Identity Service Provider (IDSP) using Identity Document Validation Technology (IDVT). This provides the same legal outcome as a manual document check and establishes a statutory excuse. Use of IDSPs is voluntary. Only providers on the Home Office's certified register should be used.
Every case is handled by a qualified UK immigration adviser, regulated by the IAA.
From sponsor licence to visa decision — we manage every stage of the GBM process.
Direct WhatsApp lines, named caseworkers, and same-day response from a real team.
3,000+
Businesses Served
7,000+
Visas Approved
360°
End-to-End Coverage
Contact Us Now
No upfront cost · Free Assessment · IAA-regulated adviser
Start Today
Book a free 30-minute consultation. Our IAA-regulated experts are ready to assess your eligibility and guide you through every step.
Or call us directly: +442080872343 · info@workpermitcloud.co.uk