The UK’s Right to Work Rules Have Changed. Does Your Contractor Actually Need a Check?
Yes, some independent contractors now need prescribed UK Right to Work checks but not all. From 1 October 2026, the regime covers more than conventional employees, including qualifying worker contracts, individual subcontractors and certain online matching services. A self-employed label, invoice or contractor agreement does not settle the issue. The actual relationship, the individual providing the service, the location of work and the statutory definitions matter.
The contractor loophole that was never quite a loophole
For years, many businesses divided their workforce into two tidy categories: employees, whose immigration status HR checked, and contractors, whose paperwork Procurement filed. The distinction was administratively convenient. It was not always a reliable description of how work was performed.
A software engineer hired through an intermediary might attend daily stand-ups, work exclusively for one client and provide services personally. A genuinely independent consultancy might instead agree to deliver a defined project using its own team. Both might issue invoices. Their legal relationships are not necessarily the same.
That is the significance of the UK changes effective 1 October 2026. They broaden the Right to Work framework to certain arrangements beyond employment. But they do not turn every freelancer into an employee, nor make a UK immigration check automatic for every overseas service provider.
What changed on 1 October 2026?
The Home Office’s revised checklist identifies four relevant situations: employment under a contract of service or apprenticeship; engagement under a qualifying worker’s contract; engagement of an individual subcontractor; and operation of an online matching service that supplies details of individual service providers to prospective clients or customers. The exact statutory definitions and exceptions remain essential.
The extension is prospective: government operational guidance states that the new provisions do not retrospectively create liability for arrangements entered into before 1 October 2026. However, organisations should assess renewals, replacements, new arrangements and any separately applicable obligations rather than assuming older files need no attention.
Who needs a check? Start with the contract, not the label
Employees
An individual employed under a contract of employment is squarely within the prescribed checking framework. Checks should take place before work starts, using an accepted route.
Workers
A worker’s contract can bring an individual into scope where the person undertakes to perform work or services personally and the recipient is not simply a client or customer of the individual’s own business. The precise facts matter.
Individual subcontractors
Engaging a person as an individual subcontractor can fall within the expanded framework. An invoice headed “self-employed” does not by itself exclude the arrangement.
Companies and genuine business-to-business services
Contracting with a separate supplier company does not automatically mean every member of that supplier’s team is directly subject to the same check by the end client. Look at who is engaged, who performs the work, applicable extended-liability rules and whether the arrangement is genuinely business-to-business.
Overseas contractors
A person working entirely outside the UK for a UK client does not automatically need a UK Right to Work check solely because the customer is British. Work location, immigration position and contractual structure require assessment.
Online matching platforms
Some services that connect individual service providers with customers fall within the expanded regime. Platform operators should examine their precise role and statutory obligations rather than assuming they are merely advertising services.
Four situations that expose the grey areas
1. The sole-trader designer working at a UK client site
A designer invoices monthly as a sole trader but must personally perform the services under the client’s direction. The organisation should not assume the self-employed label settles the Right to Work question. Review whether the statutory worker or individual-subcontractor provisions apply.
2. The specialist consultancy supplying a team
A consultancy contracts to deliver a cybersecurity project and chooses which employees perform the work. The end client should review supplier diligence and any extended-liability exposure, but should not automatically treat every consultant as its own directly engaged individual subcontractor.
3. The freelancer working from another country
A developer performs the entire assignment in another country and never enters the UK to work. A UK customer relationship alone is not the same as performing work in the UK. Local immigration, tax and employment rules may still matter.
4. The agency chain with substitutions
A client uses an agency, which engages another supplier, which sends an individual. Who is responsible for checking and retaining evidence? A substitution can change the individual actually performing the work. The answer depends on the relevant engagement and supply-chain rules, not a generic clause promising compliance.
Identity verification is not a Right to Work check
KYC and identity checks can establish that someone is who they claim to be. A prescribed Right to Work check goes further: it establishes the person’s entitlement to undertake the work in question through an accepted Home Office route, with the required timing, identity matching and record retention. A passport upload or generic facial-match result does not automatically create a statutory excuse.
Depending on the individual, the permitted process may involve the Home Office online service, an acceptable manual document check, a registered Right to Work digital verification service for eligible documents, or the Employer Checking Service. Follow-up checks may be required where permission is time-limited.
The hidden risk: outsourcing a task is not outsourcing accountability
The temptation for fast-growing businesses is to insert a warranty into a supplier contract and declare the issue closed. Yet a warranty is not evidence that the correct person was checked, through the correct method, at the correct time. Newer extended-liability provisions make the structure of labour supply relationships especially important.
For HR and Procurement, the better approach is a responsibility map: who engages the individual, who performs the prescribed check, who holds the evidence, who monitors permission expiry and who is notified when someone is substituted? Legal teams should test this map against the actual statutory provisions, not merely the commercial agreement.
What the enforcement debate gets wrong
Illegal-working enforcement is a legitimate compliance concern, but sweeping claims about a new “crackdown on every freelancer” distort the rules. Government guidance sets out expanded categories and penalties; it does not say that every self-employed individual or offshore contractor now needs the same UK check. Equally, businesses should not interpret a contractor label as a safe harbour.
Rather than repeating unverified allegations about particular employers or platforms, the more useful scrutiny is procedural: did an organisation correctly classify the engagement, conduct the prescribed check where necessary and keep adequate evidence? The Home Office also cautions against discriminatory practices in how checks are conducted.
A seven-step audit for HR, Legal and Procurement
• Inventory all UK-facing employees, workers, individual subcontractors, agency arrangements and relevant platform engagements.
• Record who contracts with whom, who performs the services personally and where the work physically takes place.
• Assess each arrangement against the Home Office’s October 2026 definitions; escalate borderline cases for legal review.
• Assign the prescribed checking method and responsible party before work begins where the rules apply.
• Separate identity/KYC records from statutory Right to Work evidence, while protecting personal data.
• Track expiry dates, changes of status, substitutions and any follow-up requirements.
• Review supplier agreements, audit rights and escalation paths; train HR and Procurement not to rely on job titles alone.
Where TFY fits and where it does not
TFY’s contractor-management workflows can help organisations bring onboarding, contractor information, documents and ongoing administration into a more coherent process. That can support the operational side of compliance, especially where teams are spread across HR, Procurement and Finance.
But no contractor management platform should be described as automatically satisfying the Home Office’s prescribed Right to Work process merely because it performs identity verification or stores documents. Organisations must confirm that the specific verification route, evidence and responsibilities meet the applicable legal requirements.
Learn more on TFY's latest guides one:
UK Right to Work Rules for Contractors October 2026 Changes
Book a demo with TFY today to see how it all works.
Frequently asked questions
Does every self-employed person need a UK Right to Work check?
No. The legal definitions and actual arrangement determine whether the prescribed regime applies.
Does an individual subcontractor need a check?
Individual subcontractor engagements are among the categories brought within scope from 1 October 2026; assess the statutory definition and facts.
Does a UK business need to check a contractor working overseas?
Not automatically simply because the client is UK-based. Determine where the work is performed and which rules apply.
Is checking a passport or completing KYC enough?
Not necessarily. A prescribed check must follow an accepted Home Office route and evidence requirements.
Are the October 2026 rules retrospective?
The Home Office states that the expanded provisions do not create retrospective liability for arrangements entered into before 1 October 2026. Review later changes and other continuing duties.
Can an agency or vendor perform the check?
Third parties may assist, but responsibility and any extended liability must be analysed under the applicable rules. Do not assume contractual outsourcing removes exposure.
The bottom line
The question is no longer simply whether a person is on payroll. It is whether the way that person is engaged falls within the legal framework. For companies using flexible labour, the most defensible response is neither to check everybody indiscriminately nor to ignore everyone labelled self-employed. It is to classify the engagement accurately, follow the prescribed process where required and retain evidence that can withstand scrutiny.
