Legal publisher LexisNexis reports that on 8 October 2026 the Home Office quietly updated Parts 2 and Appendix D of its Sponsor Guidance, aligning the document with Right-to-Work Scheme reforms and the newly effective Statement of Changes HC 584. The changes formalise mandatory multi-factor authentication (MFA) for all Sponsorship Management System users from 3 September 2026 and phase out the Level 2 User role ahead of its abolition on 8 March 2027. Most significant for HR is the incorporation of HC 584’s enhanced duty to prevent worker exploitation. Sponsors must now record how they monitor accommodation standards, salary payments and contracted hours for all sponsored workers earning below the UK median. Failure to evidence these checks will be treated as a ‘Category A’ breach, triggering immediate licence downgrades or revocation. Appendix D record-keeping rules have also tightened: copies of right-to-work documents must now be stored in a format that supports automated metadata extraction, a nod towards future audit digitisation. Employers must additionally retain logs proving that third-party recruitment partners have carried out initial right-to-work checks. The revised guidance clarifies transitional arrangements for sponsors relying on legacy processes. Organisations have until 29 October to enable MFA across all user accounts and until year-end to migrate stored documents to the new format. LexisNexis notes that the Home Office intends to run “targeted compliance visits” in Q1 2027 focusing on these new requirements. Global mobility teams should schedule a rapid internal audit, ensure IT can support MFA roll-out, and update onboarding workflows to capture the extra audit trail now mandated by Appendix D.
Source: LexisNexis UK – Legal News
