Right-to-work verification for EU hires: document checks that keep an employer out of court

In the EU, hiring a third-country national without valid work authorisation is not a paperwork slip. It is the offence the Employer Sanctions Directive (2009/52/EC) was written to punish, and the liability sits with the employer, not the worker and not the agency. The directive obliges the employer to check that the worker holds a valid residence or work authorisation before employment starts, and to keep a copy of that document for the duration of the job. Skip the check, or keep a worker on after the permit lapses, and the exposure runs to administrative fines and liability for back pay. In several states it also means exclusion from public contracts. This is the operator view of what an EU destination employer has to verify at onboarding. It covers where the checks fail, and why a document that looks valid on paper can still leave you in court.

The directive sets the duty, the member state sets the detail

The Employer Sanctions Directive is a floor, not a uniform rulebook. It requires every employer in the EU to do three things before a third-country national starts: obtain a valid residence permit or other authorisation to stay, verify it covers the work in question, and retain a copy or record of it for the period of employment, available to inspectors. It also requires the employer to notify the competent authority of the start of employment within a period each state sets.

What the directive does not do is harmonise the penalties or the retention period. Each member state transposes the obligations into its own law. It sets its own fines and defines how long the document copy must be held. That last point is set per state and you should confirm the figure for the country of the worksite rather than assume a single EU number. The duty to check is the same everywhere. The arithmetic of the penalty and the filing is local.

A valid permit is not a permit to work for you

The most expensive misreading at onboarding is treating a residence or work permit as a general licence. In most member states the single permit, and the combined work-and-residence permits that preceded it, are employer-specific and job-specific. A permit issued for a welder at one company does not authorise that worker to start at yours. The named employer on the document is part of what makes it valid.

So the check runs past "is this permit genuine and in date" to "does this permit name this employer and this job." A worker who arrives with a valid permit tied to a previous employer is, for your purposes, a worker without authorisation until a new or amended permit is issued. The mechanics of how one document carries both the residence and the work right, and why the variations between states matter, are set out in the single permit, explained. Some states go further and gate the hire on the employer's own status before any permit is issued at all, the recognised-sponsor logic covered in the Dutch GVVA single permit.

Expiry is the trap that turns a legal worker illegal overnight

A permit is a clock. The day it expires, a worker who was lawful becomes, in the eyes of the directive, a third-country national working without authorisation, and the employer who keeps paying them is the one committing the offence. There is no grace built into the directive for an employer who simply lost track of the date.

This is where document checks stop being a one-time onboarding task and become a standing obligation. Every permit on the books needs an expiry date recorded and a renewal window flagged well before it, because renewals are not instant and the application often has to be filed while the current permit is still valid. The concrete failure mode is mundane and common: a permit expires, the renewal was filed late or not at all, an inspection lands, and the employer is found to have employed an illegal worker for the gap. The worker is not the one fined. The defence is a register that tracks every permit's expiry and renewal date and stops payroll continuing past an unrenewed permit.

What the consequences actually look like

The directive requires member states to impose financial penalties scaled to the number of workers, to recover the costs of any return, and to make the employer liable for outstanding remuneration, including wages, social contributions, and taxes the worker should have received. Several states, Germany and Ireland among them, levy administrative fines and can bar a non-compliant employer from future sponsorship or from public procurement. For a company that depends on public contracts, exclusion is a heavier blow than the fine itself.

The back-pay liability deserves its own line. If a worker is found to have been employed illegally, the law generally presumes an employment relationship of at least a set duration and makes the employer pay the wages owed for it, at the level the lawful job would have paid. An employer who underpaid an undocumented worker can end up paying the full lawful wage in arrears, plus the contributions, plus the fine. The cheap hire becomes the expensive one.

The origin side is where a clean file starts

Verification is easier when the document arriving at onboarding was assembled correctly at source. On the origin side, deployment from several countries is itself regulated. The Philippines, through the Department of Migrant Workers (DMW), and Nepal, through the Department of Foreign Employment (DOFE), require attestation of the foreign employment contract by the labour attache or embassy before a worker can be deployed legally. A contract that never cleared that step produces a worker whose paperwork looks thin under inspection.

The same logic applies to qualifications. For a regulated trade, the destination asks two questions: may this person work here, and is this person recognised to do this work. Recognition is opened on the origin side long before the permit is issued. The wider chain of who has to do what, and in which order, is mapped in the employer compliance chain that gates the hire.

Build the check into onboarding, not after it

The verification an employer owns comes down to a short, repeatable routine. Confirm the permit is genuine and in date. Confirm it names your company and the job you are offering. Record the expiry and the renewal window, and put a hard stop on payroll past it. Keep the copy for the period your member state requires. Notify the competent authority within the window it sets. Done before the first shift, this routine is cheap. Done after an inspection, it is the difference between a clean file and a case.

Werklist runs the origin side of this for EU employers from Zagreb, Sarajevo, Belgrade, Kathmandu, Mumbai, and Dubai, so the contract is attested and the permit names the right employer before the worker arrives. If you are planning a placement and want the verification routine mapped to your worksite and your trade, send us a corridor brief. Talk to a consultant.