An employment arrangement with no guaranteed minimum hours. The employer offers work when available and the individual can usually accept or decline shifts. The arrangement is designed for genuinely variable demand, but statutory rights such as holiday pay, minimum wage, discrimination protection, and sick pay can still apply.
What the arrangement means in practice
A zero-hours contract is defined by uncertainty of supply, not by a lack of employment relationship. The key practical feature is that work is offered when needed, so the arrangement is best understood as flexible scheduling with legally significant employment consequences.
That flexibility makes the term useful for organisations with fluctuating demand, but it also means the legal and operational reality can differ sharply from a simple “casual” label. The contract may still create obligations around pay, leave, notice, and fair treatment, depending on local law and the individual’s status.
Why organisations use zero-hours arrangements
Employers usually use these arrangements to match labour to variable demand, seasonal peaks, project work, or unpredictable service volumes. The attraction is cost and capacity control, but the real trade-off is that staffing certainty shifts away from the worker and back toward the organisation.
That trade-off matters because a zero-hours model can be efficient only when demand truly varies. If the same people are repeatedly scheduled in a predictable pattern, the arrangement may function more like regular employment in practice than its label suggests.
Worker rights and classification issues
The absence of guaranteed hours does not remove statutory protections. Holiday entitlement, minimum wage compliance, sickness rights, discrimination protection, and other employment safeguards can still apply, so the contract label never settles the legal analysis on its own.
Classification is often where disputes arise. The important question is not just whether hours are guaranteed, but how the relationship operates day to day, how work is assigned, and whether the worker has genuine freedom to accept or decline shifts.
Operational implications for scheduling and pay
For employers, the main operational issue is consistency: shift allocation, cancellations, recording hours worked, and paying correctly for time actually performed. A flexible contract still needs disciplined administration, because ambiguity around hours can quickly become a payroll, compliance, or employee-relations problem.
Workers also need clarity on availability expectations, notice for shifts, and how rejected work affects future offers. Where the arrangement is informal in practice, misunderstandings about commitment and income predictability are common.
Risk and Threat Considerations
Zero-hours arrangements can create legal, financial, and workforce risk when they are used as a substitute for genuine flexibility rather than a response to genuinely variable demand. Poorly managed scheduling, unclear status, or inconsistent pay treatment can lead to disputes, enforcement action, and reputational damage.
Failure mechanism: The arrangement breaks down when working patterns become regular enough that the contractual label no longer matches operational reality, or when the employer fails to track hours, entitlements, and statutory protections accurately.
Impact: The result can include underpayment, leave miscalculation, claims of unfair treatment, status challenges, and loss of trust in workforce management.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST CSF 2.0 sets the technical controls, while ISO/IEC 27001:2022 defines the regulatory obligations.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST CSF 2.0 | GV.OC-03 — Roles, Responsibilities, and Authorities | Clarifies accountability for worker status, scheduling, and pay governance |
| GV.RM-01 — Risk Management Strategy | Supports deciding when flexible labour models create material legal and operational risk | |
| PR.AT-01 — Awareness and Training | Applies where managers and payroll teams must understand entitlement and scheduling rules | |
| Recommendation — Assign clear ownership for shift allocation, pay accuracy, and worker-status review. Treat zero-hours staffing as a managed risk decision, not just a cost-control choice. Train managers and payroll staff on entitlement, notice, and status implications. | ||
| ISO/IEC 27001:2022 | A.5.2 — Information security roles and responsibilities | Relevant for assigning accountability over workforce administration and compliance controls |
| Recommendation — Define accountable owners for contract governance, payroll controls, and compliance review. | ||
Practitioner Guidance
Why practitioners should care: The practical question is whether the arrangement is being used for true demand variability or merely to transfer risk to workers. Employers should make sure scheduling practice, payroll handling, and entitlement calculations match the legal and operational reality of the role, not just the contract wording.
Common misunderstanding: A zero-hours label does not mean “no rights” or “no obligations.” It only means there is no guaranteed minimum hours commitment, while many employment protections may still apply.
Related resources from NHI Mgmt Group
Deepen Your Knowledge
Free weekly newsletter
Subscribe to the NHI & AI Identity Journal
The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.
Bonus 33% off our NHI Course when you subscribe.
Reviewed and updated by the NHIMG editorial team on October 20, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org