
The Home Office updated its sponsor guidance and its employer's guide to right to work checks in 2026. Multi-factor authentication for SMS users, the phasing out of Level 2 Users and an extended Right to Work Scheme all affect sponsors. Here is what changed.
Sponsor licence holders work to a set of guidance documents that change several times a year. Two documents matter most for day-to-day compliance: Part 3 of the sponsor guidance (sponsor duties and compliance), and the employer's guide to right to work checks. Both were updated in 2026.
Multi-factor authentication
Mandatory for Sponsor Management System users from 3 September 2026.
Level 2 Users phased out
New Level 2 Users could only be added before 9 September 2026. Plan who will hold Level 1 access.
Right to Work Scheme extended
From 1 October 2026, checks also cover workers' contracts, individual sub-contractors and online matching services.
eVisas, not BRPs
BRPs stopped being issued on 31 October 2024. A manual check of an expired BRP is not acceptable proof of right to work.
Sponsor guidance Part 3, version 08/26
Version 08/26 of Part 3 has applied since 28 August 2026. Its changes include:
- Level 2 Users are being phased out. New Level 2 Users could only be added before 9 September 2026. If your organisation relied on Level 2 access for day-to-day reporting, make sure enough Level 1 Users are in place, and keep at least one Level 1 User at all times.
- Multi-factor authentication became mandatory for Sponsor Management System (SMS) users from 3 September 2026.
- Inactive sponsor licences: a retitled section invites sponsors whose licence is no longer used to surrender it.
- Right to work: new text reflects the extension of the Right to Work Scheme to other working arrangements for employment starting on or after 1 October 2026.
The practical message: review who holds SMS access, retire shared or inactive accounts, and make sure every user has working multi-factor authentication. Sponsor guidance Part 1 also explains that a sponsor may lose its licence if SMS user details are not kept current.
The right to work guide, 1 October 2026
The employer's guide to right to work checks was reissued and came into force on 1 October 2026. The biggest change is scope. Alongside employees, the Right to Work Scheme now covers people engaged under a worker's contract, individual sub-contractors, and people whose services are offered through online matching services, for work that started on or after 1 October 2026.
Other points sponsors should have in place:
- eVisas, not BRPs. Biometric Residence Permits stopped being issued on 31 October 2024. A manual check of an original, expired BRP is not acceptable proof of right to work. For eVisa holders, use the Home Office online check with a share code.
- Employer Checking Service. Where someone has an outstanding application or appeal, a Positive Verification Notice gives a statutory excuse for six months from the date in the notice. Diary the follow-up.
- Keep the evidence. Retain a clear copy of the check for the duration of employment and for two years afterwards, then destroy it securely.
- Penalties. Employing someone illegally without having done the prescribed checks can mean a civil penalty of up to £60,000 per illegal worker, and in serious cases criminal prosecution.
For a sponsor, a right to work failure is also a sponsor-duty failure, so these rules sit at the heart of licence compliance.
Duties that have not changed
The core reporting duties are the same: most changes about a sponsored worker must be reported within 10 working days, and most changes about the business within 20 working days. We explain them in detail in sponsor licence reportable events.
Part 3 also reminds sponsors that complying with UK employment law includes the National Minimum Wage, the Working Time Regulations, pension enrolment where required, and making sure workers are aware of their employment rights.
What to do now
- Audit your SMS users: remove leavers, retire shared accounts and confirm multi-factor authentication works for everyone.
- Plan for the end of Level 2 access, with enough Level 1 Users to cover reporting.
- Check that every right to work record for a sponsored worker is an online check or ECS result, not an expired BRP.
- Diary follow-up checks before time-limited permission ends, and six-month PVN follow-ups.
- Review whether any contractors or gig-style workers now fall inside the Right to Work Scheme.
Who should own what
2026's changes touch IT, HR and operations at once, so agree who owns each part:
- Authorising Officer: overall accountability, and sign-off that the SMS user list is correct.
- Level 1 Users: day-to-day reporting, now without Level 2 support, so make sure there are enough of them.
- HR: right to work checks, follow-up dates, contact details and the reporting log.
- Operations and rota managers: telling HR straight away when a sponsored worker changes site, role or hours, or stops turning up.
- Payroll: flagging any pay reduction for a sponsored worker before it is processed.
How ProRota helps
Available in ProRota today: right to work records with follow-up dates, visa expiry monitoring, attendance and absence records, and an address and contact history with periodic verification. For security companies specifically, see sponsor licence compliance for security companies.
Sponsor Licence Readiness adds a compliance file for every sponsored worker, reportable-event countdowns in working days, and a mock audit report.
Frequently asked questions
Is multi-factor authentication mandatory for the Sponsor Management System?
Yes. The sponsor guidance reflects mandatory multi-factor authentication for SMS users from 3 September 2026.
Can a BRP still be used for a right to work check?
BRPs stopped being issued on 31 October 2024, and a manual check of an expired BRP is not acceptable proof of right to work. eVisa holders should be checked with the Home Office online service using a share code.
How long must right to work evidence be kept?
The employer's guide says to retain a clear copy of the check for the duration of employment and for two years afterwards, then destroy it securely.
Who does the Right to Work Scheme cover from 1 October 2026?
As well as employees, it covers people engaged under a worker's contract, individual sub-contractors and people offered through online matching services, for work starting on or after 1 October 2026.
Sources
- GOV.UK: Workers and Temporary Workers, guidance for sponsors Part 3: sponsor duties and compliance (version 08/26)
- GOV.UK: Workers and Temporary Workers, guidance for sponsors Part 1: apply for a licence
- GOV.UK: Right to work checks, an employer's guide (1 October 2026)
This article is general information, not legal advice. Guidance changes; always check the current version of the sources above.


