Right to Work & Sponsor Compliance Audits
Corporate Immigration Compliance · IAA-regulated advice in Birmingham and London
Sponsor Licence Compliance Support
Corporate immigration compliance extends beyond holding a sponsor licence. Every UK employer has a legal duty to prevent illegal working and the consequences of getting it wrong include civil penalties of up to £60,000 per illegal worker, criminal prosecution, and reputational damage.
Overview
What is Corporate Immigration Compliance?
Corporate immigration compliance refers to the legal obligations that UK employers must meet when employing individuals who are subject to immigration control. At its most fundamental level, this means conducting correct Right to Work checks on every employee before employment begins—not just overseas nationals, but all workers. This duty applies to every UK employer, regardless of size, sector, or whether they hold a sponsor licence. Failure to carry out a compliant check removes the statutory excuse that would otherwise protect an employer from a civil penalty if an illegal worker is later discovered.
For licensed sponsors, the compliance obligations go further. Sponsors must maintain accurate records for each sponsored worker in line with Appendix D of the sponsor guidance, report changes in worker circumstances within 10 working days through the Sponsor Management System, and ensure that sponsored roles remain genuine and appropriately paid throughout the period of sponsorship. UKVI conducts compliance visits—announced and unannounced—to assess whether employers are meeting these duties. Where failures are identified, the consequences range from a formal warning or civil penalty through to downgrading, suspension, or revocation of a sponsor licence. V Immigration assists employers with Right to Work compliance, sponsor licence duties, internal audit preparation, staff training, and strategic advice following any Home Office enforcement action.
Compliance Overview
Key Areas of Corporate Immigration Compliance
Right to Work Checks
Employers must obtain, check, and retain evidence of every employee’s right to work in the UK to establish a statutory excuse against civil penalties. (Best suited for: All UK employers, including those without a sponsor licence)
Read moreSponsor Licence Duties
Licensed sponsors carry additional obligations including Appendix D record keeping, reporting SMS updates within 10 working days, and maintaining genuine roles. (Best suited for: Organisations holding or applying for a UK sponsor licence)
Read moreCompliance Audits & Risk Management
Proactive internal reviews of Right to Work records, sponsor files, SMS history, and HR processes against current Home Office expectations to ensure audit readiness. (Best suited for: Employers seeking audit readiness or responding to compliance gaps)
Read moreSide by side
Compare right to work check methods
A summary of the ways a UK employer can check someone’s right to work, when each method applies and what records to keep. Check with us before relying on a method, as the right check depends on the person’s status.
Manual document check (List A or List B) When to use itWhen the person shows original documents from List A or List B, such as a British passport. Not for eVisa holders, who must be checked online. Follow-up check needed?List A: no. List B: yes, when leave ends or after 6 months What you keepA clear copy of each document and a dated record of the check Key points
- You must hold the originals, even if checking by live video
- Scans, screenshots and expired BRPs are not acceptable
- Facial matching technology, if used, must come from a registered provider
Home Office online check (share code) When to use itPeople with an eVisa or other digital immigration status. They give you a share code starting with ‘W’, which you enter with their date of birth. Follow-up check needed?Yes, if permission is time-limited: re-check on or before it ends What you keepA PDF or HTML copy of the profile page, with photo and date Key points
- Share codes last 90 days; codes starting ‘R’ or ‘S’ are not accepted
- Viewing the person’s own screen or a printout is not enough
- British and Irish citizens cannot get a share code
Digital check by a registered provider (RtW DVSP) When to use itBritish or Irish citizens with a passport or Irish passport card, using a provider on the government’s digital identity register. Optional: offer a manual check if preferred. Follow-up check needed?No. A correct check gives a continuous statutory excuse What you keepThe provider’s check output, including photo, document image and registration confirmation Key points
- You stay liable if the check is not done as prescribed
- Passports up to 6 months expired, if the provider offers this
- GOV.UK previously called this identity document validation technology (IDVT)
Employer Checking Service (ECS) When to use itWhen the person cannot show documents or use a share code, for example a pending in-time application, appeal or review, an Application Registration Card or Crown Dependency permission. Follow-up check needed?Yes. A Positive Verification Notice lasts 6 months What you keepThe Positive Verification Notice issued by the Home Office Key points
- The Home Office aims to reply within 5 working days
- Existing worker with a pending application: up to 28 days’ grace
- No grace period before work starts; consider delaying the start
Wider Right to Work Scheme (from 1 October 2026) When to use itBusinesses engaging people on worker’s contracts, as individual sub-contractors or through online matching services, where the work started on or after 1 October 2026. Follow-up check needed?Yes, if time-limited. The same three check methods apply What you keepThe same check records. Contractors in a chain also keep contract and identity evidence Key points
- Contractors can face ‘extended liability’ for workers further down a chain
- Contracts must require checks, allow audits and control substitution
- Not retrospective: earlier contracts are not caught just because work continues
Based on the Home Office employer’s guide to right to work checks and the civil penalty code of practice, both in force from 1 October 2026. Penalty figures are the starting points before any reductions.
Summary of the Immigration Rules and GOV.UK guidance as at 9 October 2026. Rules change often; this is general information, not advice on your case.
Eligibility
Corporate Immigration Compliance & Eligibility Requirements
UK employers and licensed sponsors must adhere strictly to the rules set by the Home Office and UK Visas and Immigration (UKVI). Based on official guidelines, the main operational obligations include the following:
Right to Work Checks
Every UK employer must carry out a Right to Work check on every employee before employment begins, without exception.
Core Conditions:
- Checks must be conducted as a manual check using original documents from specified lists, a Home Office online check (share code) for digital immigration status, or a digital check by a registered Right to Work digital verification service provider (for example, for British or Irish passports).
- Accepting copies instead of originals, or failing to record the check date, are common errors that invalidate compliance.
- Follow-up checks must be proactively conducted before any time-limited permission expires.
Statutory Excuse: This legal protection shields employers from civil liability if an illegal worker is subsequently discovered. It is established by completing a fully compliant check before employment starts and retaining a clear copy of the evidence.
Penalties & Enforcement
Employers found employing someone without the right to work—and who lack a valid statutory excuse—face severe civil and criminal penalties.
Risk Indicators:
- Civil penalties can reach up to £60,000 per illegal worker (for a repeat breach; up to £45,000 for a first breach – these amounts took effect on 13 February 2024, replacing the previous £20,000 maximum).
- The statutory excuse can be lost entirely if checks are:
- Not performed at all
- Performed after employment has already commenced
- Not recorded or filed correctly
Severe Breaches: While employers with a clean compliance history who self-report may see reduced civil penalties, deliberate employment or repeat breaches can result in criminal prosecution, unlimited fines, and up to five years’ imprisonment.
Sponsor Licence Record Keeping
Licensed sponsors are required to maintain highly specific records for each sponsored worker to remain compliant with UKVI regulations.
Expected Information (Appendix D):
- Copies of passports, visa documentation, and clear Right to Work check evidence.
- Up-to-date worker contact details, historical payslips, and accurate records of absences.
- All documentation must be safely retained for one year after sponsorship ends, or until a UKVI compliance officer has fully reviewed them.
Audit Risk: Failure to maintain Appendix D-compliant records stands as one of the most common reasons for adverse findings during an official sponsor compliance visit.
Reporting & Compliance Visits
Sponsors must actively manage their Sponsor Management System (SMS) and prepare for dynamic inspection routines.
Key Reporting Duties (10-Day Window):
- Sponsors must report changes like role adjustments, salary shifts, or title updates within 10 working days of becoming aware.
- Unauthorised absence of more than 10 consecutive working days, or the end of sponsorship (for example termination of employment), must be reported via the SMS.
- UKVI conducts both announced and unannounced compliance visits to audit sponsor files, SMS records, and internal HR processes.
Licence Action: Missing deadlines or failing a visit can result in your licence being downgraded to B-rated status, suspended, or entirely revoked. Proactive internal auditing significantly reduces these operational risks.
All compliance expectations outlined above reflect current official UK government guidance and statutory instruments. A well-prepared business maintains robust HR systems, handles timely reporting through the Sponsor Management System, updates Right to Work logs regularly, and keeps the Appendix D documents ready for UKVI checks.
How we help
Our Corporate Immigration Compliance Services
We help your HR team understand and meet Right to Work and sponsor duties, from written procedures to audits and staff training.
We check your right to work records and statutory excuse, and explain the notice, the deadline and your options. Objecting to the notice, and any appeal to the county court, are outside our IAA Level 1 scope, so we refer you to a solicitor or higher-level adviser straight away.
Read more →Risk MitigationHistoric Breach Remediation & Enforcement PreventionRead more →Advisory SupportRetained Advisory Service for Ongoing Legislative UpdatesRead more →Licence RecoverySponsor Licence Suspension: Advice on Your OptionsRead more →UKVI CorrespondenceHome Office Correspondence Review & Strategic AdviceBook a consultation →Good to know
Frequently Asked Questions
Does corporate immigration compliance apply to all employers, or only sponsor licence holders?
It applies to all UK employers. Every employer has a legal duty to prevent illegal working by conducting correct Right to Work checks on all employees before employment begins; since 1 October 2026 this also extends to many people engaged under worker’s contracts, as individual sub-contractors or through online matching platforms. Licensed sponsors carry additional duties on top of this, but the Right to Work obligation applies universally.
What is a statutory excuse and why does it matter?
A statutory excuse is the legal protection that prevents an employer from being held liable for a civil penalty if an illegal worker is later found to have been employed. It is established by carrying out a compliant Right to Work check before employment starts and retaining the required evidence. Without it, an employer faces a civil penalty of up to £60,000 per illegal worker.
What are the civil penalties for employing an illegal worker?
Since 13 February 2024, the civil penalty is up to £45,000 per illegal worker for a first breach and up to £60,000 for a repeat breach within three years (the previous maximum was £20,000). A reduced penalty may apply where the employer has a good compliance record or self-reports the breach. Deliberate employment of illegal workers can result in criminal prosecution, an unlimited fine, and up to five years’ imprisonment.
What is the Employer Checking Service?
The Employer Checking Service is a Home Office service used to verify a worker’s right to work in specific circumstances — for example, where the individual has an outstanding visa application or appeal and cannot demonstrate their status using the online checking service. A positive ECS response provides a statutory excuse for six months.
What happens during a UKVI compliance visit?
A compliance officer will typically review your sponsor files, SMS records, Right to Work check documentation, and HR processes. Visits can be announced in advance or unannounced. Where issues are identified, the licence may be downgraded, suspended, or revoked depending on the seriousness of the findings.
What is TUPE and how does it affect Right to Work compliance?
TUPE — the Transfer of Undertakings (Protection of Employment) Regulations — applies when a business or part of a business is transferred to a new employer. Where staff transfer under TUPE, the new employer is advised to carry out fresh Right to Work checks (it inherits the outgoing employer’s statutory excuse, but is liable if those checks were not done correctly). A 60-day grace period applies from the date of transfer to complete these checks.
Can digital records satisfy Right to Work and Appendix D requirements?
Yes. Records may be kept in digital or physical format, provided they are clear, complete, and accessible. Digital records must be stored securely and must be readily retrievable in the event of a compliance visit. An unalterable copy of the relevant document or check must be retained.
What should I do if I discover a historic compliance failure?
Take legal advice promptly. Self-reporting a breach to the Home Office, combined with evidence of remedial action taken, may be taken into account in any enforcement decision. V Immigration advises on the appropriate steps to address historic failures and reduce exposure to enforcement action.
How often does the Home Office conduct compliance visits?
UKVI has increased its compliance activity in recent years and can conduct a visit at any time — both in response to a specific concern and as a routine check. Sponsor licence holders are at a particularly elevated risk of inspection, though all employers are subject to the possibility of an Immigration Enforcement visit.
How can V Immigration help?
We provide end-to-end corporate immigration compliance support — from Right to Work process reviews and compliance audits through to staff training, sponsor duty advice, civil penalty advice, and retained advisory services. We advise employers across a wide range of sectors from Birmingham and London.
No questions match. Ask us instead.
Related insights
Home Office Compliance Visit: What UKVI Checks and How to Prepare
Last reviewed 11 Oct 2026 · 10 min readEmployersSkilled Worker Sponsorship After July 2025: What the £41,700 Threshold and the New Degree-Level Rule Mean for Your Hiring
Last reviewed 11 Oct 2026 · 5 min readEmployersThe True Cost of Sponsoring a Worker in 2026: Immigration Skills Charge, Fees and the Numbers HR Forgets
Last reviewed 11 Oct 2026 · 4 min readSponsor Licence Compliance Support
V Immigration provides IAA-regulated Sponsor Licence Compliance support, helping UK employers manage compliance duties, audits, Right to Work checks, staff training, and Home Office requirements.