Right To Work Check

What a right to work check does

A right to work check is a hiring control that verifies a person can legally be employed in a given country before work begins. It sits at the intersection of workforce onboarding, identity verification, and employment compliance, because the organisation is trying to confirm both who the person is and whether they may lawfully take the role.

Why it matters in identity governance

In practice, the control helps reduce fraudulent hiring, impersonation, and the risk of onboarding someone whose documents or status do not support employment. That makes it more than a paperwork step: it is a trust decision that affects who is allowed into internal systems, premises, payroll, and access-controlled processes.

When the check is weak, the downstream problem is often not just regulatory non-compliance. A bad hire may also lead to access being granted to accounts, devices, facilities, or sensitive business information based on an unverified employment decision.

Documents, digital proof, and verification evidence

Right to work checks can rely on physical identity documents, digital status checks, or a combination of both, depending on local law and employer policy. The important point is that the employer should verify the evidence against the legal standard that applies in that jurisdiction, rather than treating a document as automatically trustworthy.

Good checks look for consistency across names, dates of birth, document validity, and policy requirements. Where digital verification is available, it can improve consistency and reduce manual error, but the control still depends on the quality of the source system, the completeness of the evidence, and the organisation’s ability to recognise fraudulent or altered material.

How the control fits into hiring and access

A right to work check should be treated as part of a broader onboarding workflow, not as an isolated HR formality. The outcome should influence whether employment proceeds, whether the person can be sponsored or hired, and when internal access is issued.

That is why this control often overlaps with identity governance, joining process approvals, and employment record keeping. It also creates an audit trail that helps demonstrate that the organisation applied a consistent, lawful hiring decision rather than relying on informal review.

Risk and Threat Considerations

Weak right to work checks can enable identity fraud, unlawful hiring, and avoidable compliance exposure. They can also create a security opening if an unverified person is given employee-level access before their eligibility and identity have been properly established.

Failure mechanism: The check is bypassed, performed inconsistently, or accepted on the basis of forged, altered, or insufficient evidence, allowing a false employment decision to propagate into downstream access and records.

Impact: The organisation may face regulatory penalties, audit failure, payroll or tax errors, reputational harm, and unnecessary exposure of systems or data to a person who should not have been onboarded.

Practitioner Guidance

Governance implication: Treat right to work evidence as a controlled hiring input with named ownership, not as an ad hoc HR task. The control works best when the organisation defines who may approve exceptions, what evidence is acceptable, and when access or employment must be paused pending verification.

What to watch for: Inconsistent document review, rushed onboarding, and exception handling without documented approval are common signals that the control is losing reliability. If the hiring workflow cannot prove what was checked and when, it will be difficult to defend the decision later.

Related resources from NHI Mgmt Group

• What breaks when a right to work check is completed after employment starts?
• Who is accountable if a landlord or letting agent fails a right to rent check?
• What should teams get right when moving from a DIY RBAC check to a managed authorization service?
• How should employers and verification teams design digital right to work and DBS checks so more people can complete them online without weakening assurance?