The October 2026 Right to Work changes are not a proposal or a reform in motion. They are live. Section 48 of the Border Security, Asylum and Immigration Act 2025 came into force on 1 October 2026, fixed by SI 2026/683 and now carrying full civil penalty exposure. The window to prepare quietly in the background has closed.

The good news is that readiness is achievable. The Home Office guidance, though still being refined through late September 2026, is substantive enough to work from, the enforcement priorities are visible in the published data, and the practical preparation breaks down into a manageable set of steps.

Below is a practical readiness checklist across the five areas that matter most.

One: Map your extended workforce

The starting point is visibility. Most HR teams have a clean picture of their permanent employee base. Fewer have the same level across contractors, casual workers, agency staff, gig workers and subcontractors.

The exercise is straightforward. Work through every arrangement in the business that involves someone providing labour or services, and categorise them:

• Directly employed staff
• Fixed-term or temporary employees
• Contractors engaged by your business
• Agency workers provided by third parties
• Casual and seasonal workers
• Individual subcontractors, including those working through supply chains
• Gig economy or platform workers
  
  

Anyone who falls into categories 3 through 7 is now within scope.

Worth being clear about scope: the Home Office's September 2026 guidance uses a factors-based test. What matters is the substance of the arrangement, not the label on the contract. The key questions are whether individuals are personally carrying out the work, who actually engages them, whether there is a chain of contracts, and whether substitution is permitted. Work carried out entirely outside the UK is explicitly out of scope.

Two: Review your supply chain contracts

The new regime introduces prescribed requirements for businesses to establish a defence against penalties, particularly where extended liability applies. Extended liability is most likely to apply in three scenarios: construction and other work delivered through subcontracting chains, online matching services, and substitution arrangements.

For contracts falling in any of those categories, the following need to be in place:

• Written arrangements requiring the partner to conduct Right to Work checks on any individual they engage
• Prohibitions on unauthorised subcontracting further down the chain
• Provisions permitting your business to audit their compliance
• Undertakings that they will cooperate with Home Office investigations
• Where substitution is permitted, obligations to verify substitute workers before they start, with re-verification at least once per shift or 24-hour period
  
  

Legal teams should be working through the existing contract portfolio now. The renegotiation itself is worth flagging with procurement teams early. Some suppliers will accept new clauses without pushback. Others will use them to reopen pricing conversations.

Three: Update your onboarding processes

The new rules apply to engagements commencing on or after 1 October 2026. That means the onboarding process for any new worker, contractor, agency placement or subcontractor from that date onwards needs to work under the new regime, not the old one.

In practice, that means:

• Updated onboarding checklists reflecting the new categories of worker in scope
• Clear guidance on which check applies to which type of engagement
• Digital verification workflows using a provider that is both OFDIA-registered AND certified for Right to Work
• Where you buy DVSP checks through an intermediary, confirmation of which registered DVSP is actually carrying out the check
• Updated documentation and audit trail requirements, so evidence of each check is retained and retrievable
  
  

Four: Prepare for substitute worker verification

For any business operating with gig economy staff, agency workers or a delivery model that permits substitution, this is operationally the hardest part of the new regime.

Where substitution is permitted, substitutes must be checked before work starts. Responsibility for that check cannot be delegated to the original worker. The business also needs an identity-checking method to confirm that the person turning up to work is the same person the Right to Work check was performed on. The Home Office guidance is not prescriptive about how to do this, but suggests workplace ID cards, periodic face-matching checks, or attendance management systems, with re-verification at least once per shift or 24-hour period.

For platform businesses, this is the operational shift that will require the most work. It is also where the choice of digital verification provider becomes most important, because a check that takes hours to complete is not compatible with a substitute arriving at short notice.

Five: Train your teams

Right to Work has traditionally been treated as an HR issue. Under the new regime, it is a cross-functional one. HR owns the day-to-day checks. Procurement teams sign the supplier contracts. Legal teams draft them. Commercial teams manage the ongoing relationships. Site managers, hiring managers and platform operations teams handle the practical enforcement.

Every one of those functions needs a clear understanding of what has changed. Training does not need to be onerous. But it does need to happen, and it needs to reach everyone whose day-to-day work touches the extended workforce.

One final consideration: the Employer Checking Service gap

Where you cannot complete an online or document-based check, you can request a Positive Verification Notice from the Employer Checking Service, which gives a statutory excuse for six months.

The Home Office aims to respond within five working days but publishes no actual performance data. Unlike landlords, who get an automatic statutory excuse if the equivalent service misses its two-day deadline, employers get no deemed pass. If the Home Office is slow, the risk sits with the employer.

The practical consequence is that Employer Checking Service requests should go in the moment you know you need one. If a start date has to move, move it. Starting someone while the notice is outstanding transfers the whole of the Home Office's delay onto your balance sheet.

Where to start

The October 2026 Right to Work changes are not a small HR update. They are a genuine shift in what compliance looks like for any business with a mixed or extended workforce.

The enforcement data shows the Home Office is using the new regime. The first half of 2026 saw 1,238 penalties issued, worth £74.6 million. That is before Section 48 was even in force. The twelve months ahead are unlikely to be gentler.

If you would like to talk through what the changes mean for your business specifically, or you would like a view on whether your current verification setup is going to meet the new standard, our team is running short readiness conversations through October and November. It is worth 20 minutes of your time.