Repeat Right to Work Breaches: Why the £60,000 Penalty Applies and How to Avoid It
Most small employers know there's a civil penalty for employing illegal workers. Far fewer know that the penalty doubles if it's their second breach within three years — and that the generous reduction options available first time around are largely unavailable second time.
The difference between a first and repeat breach is the difference between a potential £24,500 penalty (first breach, both mitigations applied and faster payment: £45,000 − £5,000 − £5,000 = £35,000, then −30% for paying within 21 days) and a £50,000 penalty (repeat breach with both mitigations but no faster payment option: £60,000 − £5,000 − £5,000). For a business with multiple affected workers, multiply accordingly.
This guide is for informational purposes only and does not constitute legal advice. For advice on your specific situation, consult a qualified immigration solicitor.
What counts as a repeat breach
The Code of Practice on Preventing Illegal Working (February 2024) defines a repeat breach under the heading "Employment of illegal workers within the previous three years" — specifically where the employer "has been issued with a civil penalty or warning notice in respect of a breach of the Act for one or more illegal workers which occurred within three years of the current breach."
Three things to note:
The clock starts from the date of the previous breach, not the date of the penalty notice. If you received a civil penalty in January 2024 for a breach that occurred in September 2023, and a new breach is discovered in August 2026, you may technically be outside the three-year window (breach-to-breach: August 2026 vs September 2023 = just under three years). The dates of the underlying breaches matter, not just when the notices were issued.
A warning notice counts. Even if your first breach resulted in a warning notice rather than a financial penalty, it still counts as the first breach for the three-year window. A warning notice is not a free pass.
Criminal prosecution counts too. If you were convicted under Section 21 of the Immigration, Asylum and Nationality Act 2006 (knowingly employing someone without the right to work), that also starts the three-year window for repeat breach purposes.
What the penalties look like
First breach: Maximum penalty of £45,000 per illegal worker. Starting point depends on mitigating factors, which can reduce the penalty. Faster Payment Option available: 30% reduction if paid within 21 days.
Repeat breach (within three years): Maximum penalty of £60,000 per illegal worker. Starting point is higher. The same two mitigating factors apply (self-reporting and active cooperation), but the Faster Payment Option is not available to repeat offenders.
The mitigation structure:
| Factor | First breach reduction | Repeat breach reduction |
|---|---|---|
| Self-reported the illegal worker before detection | -£5,000 per worker | -£5,000 per worker |
| Actively cooperated with the Home Office | -£5,000 per worker | -£5,000 per worker |
| Faster Payment (full payment within 21 days) | -30% of penalty | Not available |
So a repeat offender who self-reported and cooperated can get to £50,000 per worker. One who didn't self-report or cooperate faces the full £60,000.
The cooperation factor in detail
The Code of Practice specifies what "active cooperation" means. It requires that you "provided Home Office officials with access to your premises, recruitment, and employment records" and "responded promptly, honestly and accurately to questions asked during Immigration Enforcement visits."
This is not just being polite when officers arrive. It means opening your records immediately, not delaying access to documents, and answering questions honestly. Obstruction — even subtle delays or directing officers away from relevant files — may cost you the £5,000 mitigation.
How to self-report and get a URN
The self-reporting reduction requires that you reported "suspicion about them to our UKVI Helpline on 0300 790 6268 before we identify the illegal worker." The key word is "before." Once the Home Office has already identified the worker — for example, during an unannounced visit — the self-reporting reduction is gone.
When you report, you must "state that you are reporting illegal working in your workforce and request a URN" (Unique Reference Number). The URN is the acknowledgement that counts — keep it, because you'll need to reference it later.
For repeat offenders who haven't self-reported, the maximum realistic penalty is £55,000 per worker (£60,000 minus £5,000 for cooperation only).
Challenging a repeat-breach civil penalty
The objection process is the same regardless of whether it's a first or repeat breach. You can object within 28 days of the due date specified in the Civil Penalty Notice on the grounds that:
- You are not liable to pay the penalty (for example, you have a statutory excuse from a correct right to work check)
- You have a statutory excuse that the Home Office hasn't recognised
- The penalty level is too high given the circumstances
The objection must be in writing. The Home Office will respond with an Objection Outcome Notice, which will either cancel, reduce, or maintain the penalty.
The statutory excuse defence is the strongest ground — if you conducted a compliant right to work check and kept the records, you have no liability regardless of whether the employee had the right to work. The check, not the outcome, is what creates the excuse. See our guide to right to work record keeping for what those records need to look like.
The practical implication for compliance systems
Repeat breaches often follow a pattern: the first breach reveals a systematic gap in the employer's process (no follow-up checks, no visa expiry tracking, records not kept), a warning notice or penalty is issued, the employer fixes the immediate problem but doesn't build a durable system, and a second breach occurs because the underlying process weakness wasn't addressed.
The three-year window is long enough for a seasonal employer, a growing business, or a team with staff turnover to find themselves with a new compliance gap before the first one's shadow lifts.
Building a system that prevents repeat breaches means:
- Tracking every follow-up check due date — not just the current hire's check, but every employee with time-limited permission. Miss any one of them and you may have an illegal working situation developing without realising it.
- Setting reminders well ahead of expiry — not just at expiry, but at 90, 30, and 7 days before, so you have time to act before the grace period starts.
- Keeping records reliably — a defensible record for every check, retrievable on demand.
Use our follow-up check timeline calculator to generate full countdown schedules from any visa expiry date, and our RTW penalty risk calculator to understand your current exposure.