Proof of right to work is the legally required evidence an employer must verify and record before employment begins, confirming that a worker's nationality or immigration status permits work in the UK. The process has three authorised routes, manual documents, a Home Office online check using a share code, or an Identity Service Provider using Identity Document Validation Technology.
A new starter may arrive with a British passport, a share code, an immigration document, or a less familiar combination of certificates and National Insurance evidence. The difficult part isn't recognising a document. HR must select the correct route, complete the check at the right point in the hiring process, retain an accurate audit trail, and know what to do when the worker's evidence changes later.
That operational detail matters more as physical immigration documents give way to online status records and digital verification. A reliable process must work for mixed workforces, not just for straightforward onboarding cases.
Table of Contents
- Understanding Proof of Right to Work in the UK
- Acceptable Documents for British and Irish Citizens
- Authorised Methods for Conducting Right to Work Checks
- Managing Time-Limited Permissions and Follow-Up Checks
- Automating Compliance Workflows with HRManagement365
- Avoiding Common Mistakes and Civil Penalties
- Securing Your Hiring Process Against Compliance Risks
Understanding Proof of Right to Work in the UK
A candidate accepts an offer, a manager agrees a start date, and HR begins collecting onboarding information. At that point, proof of right to work isn't another optional form. It is the evidence the employer must verify before employment starts to establish that the person is legally permitted to work in the UK.
The evidence depends on the worker's nationality and status. British and Irish citizens generally use an eligible passport or an approved alternative document route. A non-citizen may need to provide a Home Office share code or an eligible immigration document. The employer must use the evidence prescribed by the Home Office rather than accepting a document that merely appears convincing.
The GOV.UK right to work service confirms that employers can inspect original documents in person, use the Home Office online service, or use an identity service provider offering Identity Document Validation Technology. Whichever route applies, the employer must retain the evidence or record the check details, including the date.
The check is a controlled hiring gate
A sound process has four practical stages:
- Identify the route: Establish whether the candidate should complete a manual check, an online share-code check, or an identity service provider check.
- Inspect or retrieve evidence: Follow the relevant Home Office procedure and check that the evidence belongs to the candidate.
- Record the outcome: Preserve the documents or online result, the check date, the reviewer, and any relevant permission expiry.
- Control future action: Create a follow-up task where the worker has time-limited permission.
Practical rule: Treat the check as a controlled HR workflow, not as a document upload. The record must show what was checked, how it was checked, when it was checked, and what decision followed.
The consequences of weak administration are serious. An employer that accepts invalid evidence, misses a follow-up check, or can't demonstrate what happened may struggle to establish a statutory excuse against an illegal-working penalty. The process also has an employee experience dimension. Asking a candidate for the wrong evidence can create avoidable delay or appear discriminatory when the underlying issue is poor routing.
The right question isn't only “what is proof of right to work?” It is also “which proof route applies to this person, and how will the organisation manage the record throughout employment?”
Acceptable Documents for British and Irish Citizens
British and Irish citizens are often treated as simple cases because they usually have an ongoing right to work. In practice, onboarding teams still encounter expired passports, missing passports, birth certificates, adoption certificates, and evidence held across different organisations.
A current British passport can provide an accepted route. A current Irish passport or passport card can also be used. The Home Office checklist also recognises a current or expired British passport in the relevant List A route, which means an expired document isn't automatically useless. HR should still follow the prescribed checklist and record the check rather than making an informal judgement.
Fallback evidence needs the correct combination
Someone without a suitable passport may still be able to prove their right to work through a defined combination of documents. A UK birth or adoption certificate generally needs to be accompanied by official evidence showing the person's National Insurance number and name. That supporting evidence may come from a previous employer or a government agency, subject to the applicable Home Office document requirements.
A certificate of registration or naturalisation can also form part of an accepted route. The key point is that HR shouldn't invent a substitute bundle because the candidate's circumstances are unusual. The Home Office list determines which combinations work.
| Candidate situation | Practical evidence route |
|---|---|
| British citizen with an eligible passport | Passport checked under the applicable manual procedure |
| Irish citizen with an eligible passport or passport card | Passport or passport card checked under the applicable procedure |
| Candidate without a suitable passport | Approved certificate or birth or adoption document, with required official supporting evidence |
| Candidate with digital immigration status | Home Office online check using a share code, where eligible |
The Citizens Advice explanation of proving the right to work is useful for employee-facing guidance because it distinguishes between having a right to work and proving that right during onboarding. That distinction prevents a common mistake: assuming that a candidate's assertion of British citizenship, National Insurance number, or settled status is enough on its own.
Avoiding discrimination while applying the rules
Employers must apply the same verification standard to everyone. They shouldn't ask a British or Irish candidate for extra evidence just because the person doesn't have a current passport, and they shouldn't reject someone because their evidence isn't the most familiar format. The correct response is to assess the documents against the authorised list and, if necessary, explain what additional evidence is required.
A structured HR system can help by presenting the relevant checklist, recording the evidence type, and keeping the reviewer's decision visible. It can't replace the legal judgement required by the Home Office guidance, but it can reduce inconsistent handling between recruiters, HR administrators, and line managers.
Authorised Methods for Conducting Right to Work Checks
The UK process now has three authorised check types. The appropriate method depends on the candidate's nationality, immigration status, and document type, so a single “upload your passport” workflow won't work for every employee.
| Check Method | Target Candidate Profile | Evidence Required |
|---|---|---|
| Manual document-based check | Candidates whose status and documents can be checked manually | Original eligible documents, copied or recorded in line with Home Office requirements |
| Home Office online check | Candidates with digital status who can provide a share code | Share code, date of check, online result, and required record of the outcome |
| Identity Service Provider check | Eligible candidates whose documents can be validated through an approved identity service provider | Identity document validation result, relevant document record, check date, and audit evidence |
Manual checks
For a manual check, the employer inspects the original documents in the permitted way and confirms that the documents relate to the candidate. The employer then keeps a clear copy or record, with the check date. Manual checks remain important for candidates whose evidence isn't available through the online service.
Online checks
A candidate who has eligible digital status can provide a share code. The employer uses the Home Office service to access the result, checks the displayed information against the candidate, and retains the result with the date and outcome. A screenshot or downloaded result should sit within the employee's controlled record rather than in an unstructured inbox.
Digital identity service checks
An Identity Service Provider can use Identity Document Validation Technology for eligible cases. This route may reduce manual handling, but it doesn't remove the employer's responsibility to select the correct route and retain evidence. Physical biometric residence cards or permits can no longer be used as standalone proof, so workflows must prevent outdated evidence from being treated as valid.
For a broader onboarding process, an employee onboarding guide can help teams place right to work checks alongside contracts, payroll information, equipment, and induction tasks. The check itself remains a distinct compliance control.
HR teams designing a repeatable process can also review right to work checks for employers for a more focused treatment of employer responsibilities.
Managing Time-Limited Permissions and Follow-Up Checks
A right to work check on the start date doesn't always close the task. Some workers have ongoing permission, while others have time-limited permission that requires a follow-up check. The Home Office checklist separates these cases through List A and List B documents. List A covers ongoing rights, while List B applies to time-limited permission and requires follow-up action.
The practical risk appears months after onboarding. A recruiter may have completed the initial check correctly, but the organisation may not know who owns the next check, where the expiry date is recorded, or what evidence should replace an old document when the worker moves to an online status.
A workable follow-up framework
Start with the original outcome. Record the check method, evidence type, reviewer, check date, permission category, and expiry date where applicable. Don't store only a scan without the surrounding decision record.
Create ownership before the employee starts. Assign the follow-up task to a named HR team or role, with escalation to an appropriate manager. A calendar reminder in an individual's diary is fragile because responsibility can disappear when the employee changes role or the administrator leaves.
Re-check through the correct route. If the worker's evidence has changed from a manual document to a share code, the follow-up record should show that transition. The new online result doesn't erase the original check. Both records help demonstrate the employment history and the organisation's response to changing evidence.
Update the controlled record. Store the new result, date, reviewer, and any new expiry information in the employee record. Keep the old evidence according to the organisation's retention policy and applicable data protection requirements.
The Home Office employer guide was updated in 2025, and a draft version is scheduled to take effect on 1 October 2026, according to the GOV.UK employer guidance. The draft notes that expired physical biometric residence permits aren't acceptable proof and describes the use of manual checks, the online service, and registered digital verification providers according to the worker and document type.
This means HR systems need transition logic, not just an expiry field. They should support mixed evidence states and prompt a human review when the evidence route changes.
Automating Compliance Workflows with HRManagement365
Spreadsheets often begin as a practical solution. HR adds a document link, a check date, and an expiry reminder. Over time, records become scattered across shared drives, email threads, recruitment folders, and individual calendars. The organisation may have completed the checks, yet still struggle to prove which version was reviewed and whether the follow-up was completed.
HRManagement365 can be configured as a UK and EU HR solution powered by Hubdrive and Microsoft technology. It is based on Microsoft Dynamics 365, Power Platform, and Dataverse, and can extend standard functionality through HRManagement365 integrations, customisations, workflows, and HR applications.
A right to work record can hold the check method, reviewer, check date, outcome, evidence type, uploaded documents, and permission expiry. Power Automate can be configured to notify the responsible team about upcoming follow-up work, while Dataverse provides a structured location for the associated HR data. These are workflow and configuration choices, so organisations should define their own policies, permissions, retention rules, and escalation paths during implementation.
Connect the record to the employee lifecycle
The most useful design connects right to work evidence with recruitment and employee records. When a candidate becomes an employee, the HR team shouldn't need to re-key the same identity and status information into another spreadsheet. A controlled conversion process can carry the relevant record forward, subject to the organisation's data governance.
Microsoft Teams, Outlook, and Microsoft 365 can support notifications and collaboration around outstanding tasks. Power BI can present management reporting on open checks, upcoming expiries, missing evidence, and checks awaiting review. The dashboard should support decisions rather than expose unnecessary personal information to managers.
The broader discipline of practical compliance automation is relevant here because automation only helps when the underlying process is defined. A reminder can't correct an incorrectly selected check method, and a dashboard can't compensate for incomplete evidence.
A configured HRManagement365 deployment can also integrate with Dynamics 365 Business Central or Finance & Operations where workforce and operational data needs to connect. HRManagement365's Right to Work solution for Hubdrive HR supports structured right to work records, document uploads, visa information, expiry dates, and reminders. Any organisation-specific routing, approval, or integration requirements should be confirmed as part of the implementation design.
The following video provides additional context on using technology to organise HR information and workflows:
Avoiding Common Mistakes and Civil Penalties
The most damaging errors are usually ordinary process failures. HR accepts a document that is no longer valid as standalone proof, records an upload without the check date, or assumes that the initial approval covers a worker whose permission is time-limited.
The Home Office right to work checklist separates List A evidence from List B evidence. That distinction should drive the workflow. If the evidence falls within a follow-up category, the system must create a future task rather than mark the case as permanently complete.
Errors that deserve a control
- Accepting outdated evidence: Physical biometric residence cards and permits can't be used as standalone proof. Route eligible candidates to the Home Office online service or another authorised method.
- Missing the check date: Preserve the exact date and the outcome, not just a copy of the document.
- Failing to compare identity: Check that the evidence relates to the person starting work and resolve discrepancies before the start date.
- Ignoring permission limits: List B cases require a follow-up process. A completed onboarding task isn't enough.
- Applying inconsistent standards: Don't demand different evidence from candidates based on assumptions about nationality or appearance.
The civil penalty regime increased from 13 February 2024, with a maximum penalty of £45,000 per illegal worker for a first breach and £60,000 per illegal worker for repeat breaches, as set out in the Home Office code of practice on preventing illegal working. These are per-worker maximums, so a weak process can create material exposure across a workforce.
The financial risk sits alongside operational and reputational consequences. A failed check can lead to investigation, disruption to employment, difficult conversations with affected workers, and loss of confidence in HR governance. A documented workflow with clear ownership won't remove every risk, but it makes omissions easier to identify and correct.
For a wider governance review, HR leaders may find a compliance approach for HR processes useful when mapping right to work controls alongside other employee lifecycle obligations.
Securing Your Hiring Process Against Compliance Risks
Proof of right to work should remain a live control from recruitment through employment. Employers need to route candidates correctly, use the authorised evidence method, record the outcome and date, and manage follow-up checks when permission is time-limited or the evidence route changes.
The transition to online status and digital verification makes centralised records more valuable, but automation must reflect the Home Office rules. A well-designed HR workflow can prompt action, preserve evidence, limit access, and give HR leaders a clear view of unresolved cases. It shouldn't encourage teams to accept documents that the rules exclude or treat a reminder as proof that a check happened.
Start with a process map. Identify who selects the route, who reviews the evidence, where records are stored, who owns follow-up checks, and how status changes are escalated. A compliance risk audit template can help structure that review before you configure forms, workflows, and dashboards.
HRManagement365 gives UK and EU organisations a Microsoft-based way to connect recruitment, employee records, evidence, expiry management, approvals, reporting, and related employee lifecycle processes. Its value depends on suitable configuration and implementation, so the right design should reflect the organisation's workforce, jurisdictions, data policies, and operating model.
HRManagement365, powered by Hubdrive and Microsoft, can help you structure right to work evidence, automate expiry reminders, and connect compliance records with recruitment and employee lifecycle workflows. Visit HR Management 365 to discuss your requirements, or phone +44 1522 508096 today and send us a message about your UK or EU HR processes.
