HR Document Verification: Diploma Checks and Right to Work Compliance for Employers

Employers in the United Kingdom are legally required to verify that every new hire holds the right to work before their first day and, for many roles, that their stated qualifications are genuine. Getting either check wrong carries concrete consequences: civil penalties of up to 60,000 GBP per illegal worker for a repeat breach, and potential negligent hiring claims where an unqualified employee causes harm. This guide explains both obligations in detail, covers the recognised verification methods, and compares manual processes to automated document verification.

Why HR document verification matters in the UK

The obligation to verify employee documents rests on two distinct legal pillars. The Immigration, Asylum and Nationality Act 2006, sections 15-25 makes it a civil offence to employ a person without the right to work. Separately, the common law duty of care and sector-specific regulations require employers to confirm that employees hold the qualifications needed for their role. In regulated sectors such as healthcare (GMC registration), education (QTS), and financial services (FCA fitness and propriety), qualification fraud can trigger regulatory action against the employer.

A 2023 survey by the Recruitment and Employment Confederation found that 1 in 5 CVs contains inaccurate qualification claims. The consequences range from poor performance to safety incidents and regulatory sanctions. Systematic document verification at the point of hire addresses both risks simultaneously.

Right to work checks: the legal framework

Every employer must carry out a right to work check on every employee before their first day of paid work. The check must be applied consistently regardless of nationality, ethnicity, or accent. Selective checking based on perceived national origin constitutes unlawful discrimination under the Equality Act 2010.

The three recognised checking methods

The Home Office Employer's Guide (updated 2025) recognises three methods that establish a statutory excuse — a legal defence against a civil penalty.

An employer who follows one of these methods correctly before employment begins obtains a statutory excuse even if the employee later turns out to have no right to work. An employer who does not carry out a compliant check has no defence.

Follow-up checks

For employees with a time-limited right to work (List B documents), the employer must carry out a follow-up check before the expiry date. Setting a reliable diary system or automated reminder is essential. Missing a follow-up check means the statutory excuse lapses, and the employer becomes liable from that date.

Penalties for non-compliance

The Home Office civil penalty scheme, updated in February 2024, sets the following tariffs.

Criminal prosecution under section 21 of the 2006 Act can result in an unlimited fine and up to 5 years' imprisonment where the employer knew or had reasonable cause to believe the worker did not have the right to work.

Diploma and qualification verification in the UK

Unlike right to work checks, there is no single statute requiring employers to verify academic qualifications for all roles. The obligation arises from sector-specific regulations, professional body requirements, and the employer's general duty of care.

HEDD: the central verification service

HEDD (Higher Education Degree Datacheck) is the official UK service for verifying university degrees. Run by Prospects/Jisc, HEDD connects to the data held by UK universities and can confirm whether an individual was awarded a specific degree. HEDD verification typically returns a result within 2 to 5 working days. It covers degrees awarded by recognised UK higher education providers.

For qualifications awarded outside the UK, UK ENIC (formerly UK NARIC) provides a Statement of Comparability that positions a foreign qualification against the UK framework (RQF/FHEQ).

DBS checks

Where a role involves working with children or vulnerable adults, a DBS (Disclosure and Barring Service) check is required. While DBS checks focus on criminal records rather than qualifications, they form part of the broader pre-employment verification process that HR teams manage alongside diploma checks and right to work verification.

Professional registration checks

For regulated professions, employers must verify that the individual holds current registration with the relevant professional body.

Failing to verify professional registration before employment begins can expose the employer to regulatory sanctions and negligence claims if the employee harms a patient, student, or client.

Manual vs automated HR document verification

The choice between manual and automated verification affects cost, speed, accuracy, and audit readiness. The table below sets out the typical differences for a mid-sized UK employer processing 200 or more hires per year.

Manual processes rely on individual HR officers remembering to request, check, copy, and file every document. The risk concentrates on peak hiring periods — seasonal recruitment drives, graduate intake months, and post-acquisition integrations — when volume overwhelms manual capacity. Automated document verification eliminates these bottlenecks and produces the audit trail needed to demonstrate compliance to the Home Office or to sector regulators.

Building a compliant HR verification process

A robust process addresses both right to work and qualification checks in a single, consistent workflow.

Define document requirements by role

Map each role to the documents required: right to work (all roles), qualifications (where the role demands them), professional registration (regulated roles), and DBS check (roles involving vulnerable individuals). Maintain this mapping in a centralised document rather than relying on individual hiring managers to decide what to check.

Apply checks uniformly

The principle of non-discrimination requires that checks are applied identically to every candidate for the same role. This means checking the qualifications of every candidate, not just those whose CVs look suspicious. Consistent application also strengthens the employer's position if a check uncovers fraud: the decision to withdraw an offer is clearly based on the document failure, not on any protected characteristic.

Use technology for the right to work share code process

The online share code system is now the default for checking the right to work of most non-British and non-Irish nationals. Employers who are still requesting physical biometric residence permits and photocopying them are not following current Home Office guidance. The share code check is faster, more reliable, and produces a digital record. Identity verification technologies can further streamline the identification step.

Retain records for the prescribed period

Right to work check records must be retained for the duration of employment and for two years after the employee leaves. Qualification verification records should be retained for at least the same period. All records must be stored securely and in compliance with the UK GDPR.

FAQ

Can an employer verify a degree directly with a UK university?

Yes, but universities are not obliged to respond and processing times vary widely. HEDD is the more reliable route for UK degrees as it aggregates data from participating institutions and returns results within a defined timeframe.

Does a right to work check need to be repeated for existing employees?

A repeat check is only required where the employee holds a time-limited right to work (List B documents). The follow-up check must be completed before the document's expiry date. There is no requirement to re-check employees who hold a permanent right to work.

What happens if a diploma turns out to be fraudulent after employment has started?

The employer can take disciplinary action up to and including summary dismissal for gross misconduct (misrepresentation). Whether the dismissal is fair depends on the facts: was the qualification a material requirement for the role, and did the employer make its verification process clear during recruitment. Case law (Governing Body of Langdon Park School v Lisle, UKEAT) supports dismissal where the qualification was an essential requirement.

Are digital copies of right to work documents acceptable?

For the manual check method, the employer must see the original document, not a scanned or photographed copy. However, the copy retained for records can be digital (scan or photo) provided it is clear, legible, and stored securely. For the share code and IDVT methods, the entire process is digital by design.

Is HEDD mandatory for all employers?

No. HEDD is a voluntary service. However, it is the only centralised mechanism for verifying UK degrees, and using it demonstrates due diligence. Many employers in regulated sectors include HEDD verification in their standard onboarding process.

---

CheckFile.ai automates diploma and right to work document verification for HR teams. Reduce verification time from days to minutes with a full audit trail. Start your free trial or view pricing.

This article is provided for informational purposes only and does not constitute legal advice. Consult a qualified professional for advice specific to your circumstances.