Umbrella Company Joint and Several Liability: What UK Recruitment Agencies Must Have in Place

For years the umbrella model let agencies keep contractors off their own payroll while someone else carried the tax risk. That ended with the umbrella company reforms taking effect from 6 April 2026. Where a worker is supplied through an umbrella company and there is a UK agency in the chain, HMRC can now pursue that agency for the full amount of unpaid PAYE and Class 1 National Insurance. There is no reasonable-care defence of the kind that exists under IR35. Liability is joint, several and absolute.

If your temp desk uses umbrellas at all, this is now an operational process, not a legal footnote. Here is what has to be in place.

What Changed

The Finance Bill measures insert a new chapter into ITEPA 2003 so that, from 6 April 2026, responsibility for umbrella PAYE sits with the agency closest to the end client, or with the end client where no agency exists. If the umbrella under-deducts, mis-declares or simply disappears, HMRC does not have to prove the agency knew. It only has to show the agency was in the chain.

The Due-Diligence Process Agencies Need

• An approved umbrella list, reviewed quarterly. Accreditation (FCSA, Professional Passport or equivalent), Companies House filings, VAT registration, and evidence of PAYE reference numbers. A list nobody has looked at since April is not due diligence.
• Payslip sampling every month. Pull a sample of worker payslips per umbrella and reconcile gross-to-net against the assignment rate. Under-deduction shows up here first.
• Contractual protections. Right-to-audit clauses, indemnities, and a requirement that the umbrella notifies you of any HMRC enquiry within days, not months.
• A single record per placement showing which umbrella, which worker, which rate, and when each check was last completed. If HMRC calls, this file is what determines whether the conversation takes an afternoon or a year.

Why This Is an Admin-Capacity Problem

None of the above is complicated. All of it is time-consuming, repetitive and easy to drop when consultants are busy, and the regime is designed so that dropping it costs the agency money. A temp desk running 150 contractors across six umbrellas needs someone whose job is the monthly reconciliation and the quarterly review, not a consultant doing it on a Friday afternoon.

This is exactly the kind of work agencies hand to structured administrative support: the checks are defined, the evidence is documented, and the output is a compliance file that is always current. Smaller desks get the same outcome with a dedicated virtual assistant who owns the umbrella file alongside right-to-work and reference chasing.

Keep the Evidence Where You Can Find It

Store each check against the placement record in your CRM rather than in a consultant's inbox. Agencies running GoHighLevel can trigger the monthly payslip-sample task automatically per active umbrella and log completion against the contractor. The same discipline applies to candidate data generally, which we cover in our guide to GDPR and candidate data when outsourcing.

Agencies in London and the larger regional temp markets are the most exposed simply because they run the most umbrella volume. The regime does not scale with turnover; the checks do. Build the process once, resource it properly, and the liability stays theoretical.