Recruitment Agency Insurance UK 2026: PI, JSL & Umbrella Risk
General information — not advice. This guide explains how insurance for recruitment agencies generally works. It is not personalised advice or a recommendation, and it does not take account of your own circumstances. Policy wordings differ between insurers, so always check your own documents and speak to a broker before acting. Regulatory status is set out at the end of this guide.
What is recruitment agency insurance and what does it not cover?
Recruitment agency insurance is a combined programme of professional indemnity, employers' and public liability, cyber and directors' and officers' cover, addressing the risk that you place the wrong person, that a temp causes harm, or that your candidate database is breached. What it does not cover is the exposure that grew most sharply in 2026: joint and several liability for unpaid PAYE in your umbrella supply chain. That is a tax liability, and no policy pays it.
Key facts at a glance
- Joint and several liability rules took effect on 6 April 2026, legislated in the Finance Bill 2025-26 through a new Chapter 11 of the Income Tax (Earnings and Pensions) Act 2003, with equivalent National Insurance rules.
- The change is widely misreported. Agencies do not have to run the umbrella's payroll — the umbrella company keeps the primary duty to operate PAYE. What changed is that if the umbrella fails to pay, another party in the labour supply chain is jointly and severally liable for the shortfall.
- HMRC can pursue that other party for the full unpaid amount and does not have to chase the umbrella first. Where there is a UK recruitment agency in the chain, the agency is generally the party HMRC can pursue for the PAYE and Class 1 NIC shortfall.
- Where the client contracts directly with the umbrella, or the agency is offshore or connected to the umbrella, the end client may be exposed instead. Complex chains with multiple agencies must be analysed worker by worker to identify the relevant party.
- Due diligence does not, by itself, remove the liability. It reduces risk and is strongly expected, but a tidy checklist is not a legal shield — if an umbrella in your chain does not pay its PAYE, you can still be pursued.
- The Fair Work Agency began work on 6 April 2026 as the single enforcement body for UK workers' labour rights, so agencies, umbrellas and end clients can expect more proactive scrutiny of National Minimum Wage, holiday pay and other obligations.
- This is a tax measure, not full regulation. The Employment Rights Act 2025 will define umbrella companies and bring them within the Employment Agencies Act 1973 framework, with regulation widely expected around 2027 — a separate timeline that should not be confused with the April 2026 change.
Recruitment is a business built on other people's risk. An agency introduces a worker to a client, takes a fee or a margin, and walks away — except that it does not walk away. It remains exposed to whether the placement was suitable, whether the checks were done, whether the worker causes harm, whether the client pays, and now whether a third party several steps down the chain accounted for tax correctly.
That last exposure is the one that changed most in 2026, and it is the one no insurance product answers. A tax liability arising under statute is not an insurable loss, so an agency facing a PAYE shortfall assessment from HMRC is facing it with its own balance sheet. The protection is contractual and operational: knowing your supply chain, choosing umbrellas you can stand behind, and structuring your contracts so that recovery against them is realistic.
This guide is for recruitment agencies, employment businesses, staffing companies and executive search firms. It sits in our commercial insights hub and connects to the professional indemnity hub, since PI is the cover doing most of the work in this class.
How does the Insurability Framework apply to a recruitment business?
Recruitment sits awkwardly for underwriters: an office-based business with modest property values and a liability profile that reaches into every client site it supplies. Add sector — construction, healthcare, driving — and the exposure changes completely. Presenting that accurately is what The Insurability Framework™ does here.
The Miller & Partner Method
Four pillars applied to every recruitment placement. The objective is to present a business that knows its supply chain and its sectors — because in this class the risk is not in your office, it is in the sites and the chains your workers pass through.
Underwriter Intelligence
Appetite splits sharply on the sectors you supply. Permanent white-collar placement is straightforward; construction, healthcare, driving and industrial temporary supply are underwritten as if you were in those industries, because your vicarious liability reaches into them. Knowing which markets rate which sectors sensibly avoids a trail of loaded quotes.
Difficult Risk Expertise
Agencies supplying high-hazard sectors, businesses with a prior large injury claim from a placed worker, firms facing an HMRC enquiry into their labour supply chain, and agencies recovering from a client insolvency that took their working capital are all placements the general market handles poorly. These are ordinary submissions here.
Risk Assessment
The uninsured exposures here are contractual and fiscal. Uncapped indemnities given to clients in framework agreements. PI limits set for a fee-based business facing a consequential loss claim. No trade credit cover in a business that pays workers weekly and gets paid in sixty days. And the JSL exposure, which no policy answers at all.
Claims Advocacy
A serious incident involving a placed worker generates a claim against you, a dispute with your client about who was responsible for supervision, and potentially an HSE investigation at a site you do not control. We manage the insurer relationship and make sure your contractual position with the client is deployed properly rather than discovered late.
What did joint and several liability change on 6 April 2026?
From 6 April 2026, if an umbrella company fails to pay over the PAYE income tax and Class 1 National Insurance due on a worker's pay, another party in the labour supply chain is jointly and severally liable for that shortfall — and HMRC can pursue that party for the full unpaid amount without chasing the umbrella first. Where there is a UK recruitment agency in the chain, that agency is generally the party HMRC can pursue.
This is the most consequential change to hit the recruitment sector in years, and it is also the most misunderstood, so it is worth being precise about what did and did not happen.
What did not change: agencies and end clients do not have to run the umbrella's payroll. The umbrella company remains the employer for tax purposes and keeps the primary duty to operate PAYE and pay HMRC. Earlier proposals would have moved that duty up the chain; the government did not proceed with that model.
What did change: the liability. Joint and several means HMRC has a choice of debtor and can go straight to whichever party is easiest to collect from — which, in practice, is the solvent UK agency rather than the umbrella that has just disappeared. The measure was legislated in the Finance Bill 2025-26 through a new Chapter 11 of ITEPA 2003, with equivalent NIC rules.
Who is the relevant party depends on the shape of the chain:
| Supply chain shape | Who HMRC can generally pursue |
|---|---|
| Client → UK agency → umbrella → worker | The UK recruitment agency |
| Client contracts directly with the umbrella | The end client |
| The agency in the chain is offshore | The end client may be exposed instead |
| The agency is connected to the umbrella | The end client may be exposed instead |
| Multiple agencies in a complex chain | Requires worker-by-worker analysis to identify the relevant party |
That last row matters commercially. Many businesses have labour supply chains involving several agencies, and the legislation requires identifying the umbrella, the agency and the end client in respect of each worker to establish who carries the exposure. That is a data exercise, not a policy decision, and agencies that cannot map their own chain cannot quantify their risk.
Does due diligence on umbrellas remove your liability?
No — and this is the point most likely to give agencies false comfort. Due diligence reduces your risk and is strongly expected, but a tidy checklist is not a legal shield. If an umbrella in your chain does not pay its PAYE, you can still be pursued for the full amount. The practical response is to know exactly who is in your supply chain, favour umbrellas you can stand behind commercially, and take advice on contracts that genuinely lower exposure.
The distinction matters because a lot of sector commentary implies that completing an approved-supplier process discharges the obligation. It does not. What due diligence does is reduce the probability of an umbrella failing and improve your position on recovery — both valuable, neither protective in the legal sense.
What agencies should actually be doing, beyond a checklist:
- Map the chain per worker. Identify the umbrella, every intervening agency and the end client for each placement. You cannot manage an exposure you cannot see.
- Build audit rights into umbrella agreements — explicit rights to receive regular PAYE evidence, to obtain RTI reporting data, and to conduct audit checks when required.
- Reduce the number of umbrellas you work with. A short preferred-supplier list you genuinely monitor beats a long approved list you do not.
- Stress-test the exposure. Model what a failure by your largest umbrella would cost across the workers placed through it, and make sure the number is understood at board level.
- Consider bringing payroll in-house. Some agencies and clients are deciding to run their own payroll rather than use umbrellas at all. Note that this changes the worker's status — contractors may then be treated as agency workers with rights under the Employment Agencies Act and the Agency Workers Regulations, which is a different set of obligations rather than an absence of them.
- Contractual recovery. Indemnities from umbrellas are worth having, but only to the extent the umbrella is solvent when you need them — which, by definition, it may not be.
What does the Fair Work Agency mean for agencies?
The Fair Work Agency began work on 6 April 2026 as the single enforcement body for UK workers' labour rights, consolidating previously separate inspectorates. For recruitment businesses that means more proactive scrutiny of National Minimum Wage, holiday pay and other worker rights across umbrella companies, agencies and end clients alike — enforcement that does not depend on a worker complaining first.
The significance is the shift from reactive to proactive. Historically, enforcement in the labour market largely followed complaints. A single body with consolidated powers and a supply-chain remit can inspect on its own initiative, and agencies are an obvious focus given their position between workers and end clients.
What this changes practically:
- Holiday pay calculation for temporary workers is a recurring area of error, particularly on rolled-up or accrued arrangements, and it is now more likely to be examined without a complaint.
- National Minimum Wage compliance including deductions, unpaid working time, travel time and accommodation offsets — all long-standing problem areas in agency supply.
- Umbrella arrangements come within scope for worker rights as well as tax, particularly once the Employment Rights Act 2025 regulation of umbrellas arrives on its separate timeline.
- Supply chain visibility becomes a compliance requirement in practice. Agencies that cannot say who is in their chain will struggle in an inspection as much as in a tax enquiry.
The same enforcement body features in our hand car wash insurance guide, which covers the labour supply chain angle from the end-user side — useful reading if you supply into sectors where labour compliance is under scrutiny.
Who is liable when a placed worker causes damage or injury?
It depends on who controlled the work, and the answer is frequently "both, to some degree". Courts can find dual vicarious liability where an agency supplies a worker and a client directs them. The agency typically carries responsibility for selection, checks and suitability; the client for supervision, site safety and instruction. Your contract with the client should allocate this explicitly — and many framework agreements allocate it entirely to you.
This is the exposure that makes recruitment insurance genuinely sector-dependent. An agency placing accountants has a very different profile from one placing scaffolders, because the harm a badly-selected worker can do is different by orders of magnitude.
How the responsibility divides in practice:
| Failure | Usually the agency | Usually the client |
|---|---|---|
| Worker lacked the qualification claimed | ✓ — verification is a placement function | |
| No right-to-work check performed | ✓ — and the civil penalty is uninsurable | Shared where the client also engages directly |
| DBS check missing for a regulated role | ✓ — a core suitability failure | |
| Worker injured by unsafe site conditions | ✓ — the client controls the premises | |
| Worker given no induction or task training | Shared — depends on what was agreed | ✓ — supervision sits with whoever directs the work |
| Worker damages client property through carelessness | Possible vicarious liability | Possible, depending on control |
| Worker injures a third party on client site | Frequently argued as dual liability | Frequently argued as dual liability |
The commercial reality is that many client framework agreements contain broad indemnities requiring the agency to hold the client harmless for anything arising from a supplied worker — including matters entirely within the client's control. Those indemnities are frequently uncapped, and an assumed contractual liability wider than your common-law liability may fall outside your insurance. Reviewing framework terms before signature is the single highest-value risk control available to a recruitment business.
What does professional indemnity actually cover for an agency?
Negligence in the recruitment process itself — failing to verify a qualification, missing a reference or DBS check, misrepresenting a candidate's experience, breaching confidentiality, or discriminating in the selection process. It responds to financial loss caused by your professional service, not to physical injury or property damage, which are public liability questions. It is claims-made, so continuity and run-off matter.
PI is the cover doing most of the work in this class, and the claims are more varied than agencies expect:
- Failed verification. A candidate's qualification, registration or licence is not what was claimed. In regulated sectors — healthcare, driving, financial services — the consequences reach far beyond the placement fee.
- Misrepresentation of a candidate. Overstating experience to close a placement, which becomes a claim when the candidate cannot perform and the client suffers loss.
- Reference and disclosure failures — either failing to obtain references, or providing a reference that is negligently inaccurate.
- Discrimination claims arising from the selection or screening process, which can come from candidates rather than clients.
- Confidentiality and restrictive covenants — a claim from a client whose staff you approached, or whose confidential information moved with a placed candidate.
- Loss of documents and data, which overlaps with cyber and needs coordinating between the two policies.
Two structural points. First, limits should be set against client contract requirements and realistic consequential loss, not against your fee income — a placement fee of £8,000 can precede a claim of several hundred thousand where a senior appointment fails. Second, PI is claims-made, so if you sell the business or stop trading you need run-off; our PI run-off guide explains the mechanism and PI after a claim deals with the position once a notification has been made.
Recruitment agency insurance cover checker
Select the profile that best matches your business to see the cover architecture we would normally build. For multi-brand groups, our commercial team can structure the programme on one submission.
Labour supply chain self-check
Tick every item you could evidence today. The first four relate to the April 2026 changes; the rest are what we work through before taking a recruitment business to market.
- You can map the full labour supply chain per worker — umbrella, every intervening agency, and end client
- Umbrella agreements include audit rights — regular PAYE evidence, RTI data and the right to inspect
- JSL exposure stress-tested and understood at board level, with the number modelled for your largest umbrella
- Preferred umbrella list is short and genuinely monitored, not a long approved list nobody reviews
- Client framework indemnities reviewed before signature, with uncapped hold-harmless clauses challenged
- Right-to-work checks performed and recorded for every worker, giving the statutory excuse
- Qualification, registration and DBS verification documented per placement, not assumed from a CV
- PI limit set against client contract requirements and realistic consequential loss, not fee income
- Employers' liability covers temporary workers where you are the employer, with the position clear per contract type
- Cyber cover in force, sized to a candidate database that may hold hundreds of thousands of records
- Client credit exposure monitored — you pay workers weekly and get paid on terms
- Holiday pay and NMW calculations reviewed ahead of proactive Fair Work Agency scrutiny
Recruitment agency placement risk assessor
An indicative view of how your business will be received in the market, and what we would prioritise in the submission. This is general information only — not personalised advice, not a recommendation and not a quotation.
Why are recruitment agencies a prime cyber target?
Because a recruitment database is one of the richest concentrations of personal data an SME can hold — names, addresses, dates of birth, National Insurance numbers, bank details, right-to-work documents, DBS results and full employment histories, sometimes for hundreds of thousands of people who are not even your clients. Add high-volume payment runs to workers and umbrellas, and the sector combines a valuable data target with a live fraud target.
The data holding is the part agencies consistently underestimate. A twenty-person agency that has been trading fifteen years may hold candidate records numbering in the hundreds of thousands, most of them dormant, all of them personal data, and a large proportion including identity documents uploaded for right-to-work purposes.
The exposures that follow:
- Breach notification and regulatory investigation. A candidate database breach engages UK GDPR obligations including notification to the Information Commissioner's Office within 72 hours where the threshold is met, and notification to affected individuals where there is high risk.
- Identity theft claims from candidates, who are not your clients and have no contractual relationship with you but whose data you hold.
- Payment diversion fraud. High-volume weekly payment runs to workers and umbrellas make an attractive target, and the sub-limit on funds transfer fraud is frequently far below the headline cyber limit.
- Ransomware and operational interruption. An agency whose CRM is encrypted cannot place, cannot timesheet and cannot invoice — the business stops within a day.
- Data minimisation failures. Retaining candidate data indefinitely increases both the breach exposure and the regulatory criticism if a breach occurs.
Practical controls that matter: a documented retention policy that actually deletes dormant candidate records, multi-factor authentication on the CRM, and a hard rule that bank detail changes are verified by telephone using a number already on file. Our cyber insurance page covers the product and the cyber insights hub the wider threat picture.
Why is client insolvency an existential risk in recruitment?
Because of the cash cycle. A temporary staffing agency pays its workers weekly and typically invoices clients on thirty to sixty day terms — so at any moment it is funding several weeks of wages for work it has not been paid for. If a large client fails, the agency has already paid the workers, cannot recover from the client, and still owes PAYE and NIC on those payments. The loss is immediate and it is cash, not profit.
This is the mechanism that kills otherwise healthy staffing businesses, and it is distinct from the insurable exposures elsewhere in this guide because it is a credit risk rather than a liability one.
The arithmetic is unforgiving. An agency placing 120 workers with one client at an average cost of £700 per week is funding £84,000 a week. On sixty-day terms, roughly £720,000 is outstanding at any time on that single account. If the client enters administration, the agency's exposure is that full amount, it ranks as an unsecured creditor, and the workers have already been paid.
What mitigates it:
- Trade credit insurance, which covers non-payment following insolvency or protracted default, and which in this sector is closer to essential than optional where client concentration is high.
- Credit limits per client, set and enforced rather than aspirational, with placement volumes managed against them.
- Concentration monitoring. Knowing what proportion of your outstanding ledger sits with your three largest clients, and treating a rising number as a strategic problem.
- Early warning signals — payment slippage, disputed invoices, changes in ordering pattern — treated as commercial intelligence rather than an administrative annoyance.
- Invoice finance terms understood, particularly recourse provisions, which mean the funder's exposure returns to you when a client fails.
Where an agency has already been through a client failure and is rebuilding, our guides on insurance after insolvency or liquidation and business insurance with CCJs or poor credit deal with the placement position that follows.
What drives the cost of recruitment agency insurance in 2026?
The sectors you supply into, above everything else. An agency placing accountants and one placing scaffolders are underwritten as different industries, because vicarious liability follows the worker onto the site. After that: temporary versus permanent mix, verification process quality, client contract indemnities, candidate data volumes, and claims history.
| Rating factor | Why it moves the premium | Mitigation |
|---|---|---|
| Sectors supplied | The single largest factor. Construction, healthcare and driving carry the harm your workers can cause. | Declare the split accurately by fee income; vague descriptions invite cautious assumptions. |
| Temporary vs permanent mix | Temporary supply brings ongoing vicarious liability; permanent placement largely ends at the introduction. | Report the split and be clear who employs temporary workers under each contract type. |
| Verification process | Documented per-worker checks are the primary defence to a professional indemnity claim. | Record qualification, registration, DBS and right-to-work checks per placement, dated. |
| Client contract indemnities | Uncapped hold-harmless clauses create assumed liability wider than common law, which may be uninsurable. | Review framework terms before signature; challenge uncapped indemnities as standard. |
| Candidate data volumes | Cyber rating scales with records held, and agencies hold far more than they think. | Retention policy that actually deletes dormant records; MFA on the CRM. |
| Umbrella usage | Not directly insurable, but underwriters read supply chain governance as a proxy for overall control. | Short monitored preferred list, audit rights, chain mapped per worker. |
| PI limit purchased | Client frameworks frequently specify minimums well above what fee income would suggest. | Test the limit against contract requirements and realistic consequential loss. |
| Claims and notifications | A large injury claim from a placed worker weighs heavily and narrows the sector panel. | Evidence process change — see our claims history guide. |
| Client concentration | Credit exposure and contractual leverage both worsen with concentration. | Trade credit cover and enforced credit limits per client. |
| International placement | Overseas jurisdictions bring different liability regimes and, sometimes, US exposure. | Declare territorial scope precisely; check jurisdiction clauses in the wording. |
| Continuity of PI | Claims-made cover means a gap leaves earlier placements unprotected. | Never lapse; map retroactive dates across all prior years. |
| Financial standing | Working-capital intensity makes filings and funding arrangements relevant to underwriters. | See our CCJ and poor credit guide where the picture is mixed. |
Premium ranges depend so heavily on sector mix, turnover and limits that a generic figure would mislead. The shape is consistent: a permanent-only professional agency with documented process sits comfortably in the professional indemnity market at modest cost; adding temporary supply into industrial or construction settings moves it up substantially; and healthcare or high-volume umbrella-based supply with a claims history narrows the panel to specialists. As everywhere in this class, the largest single exposure — joint and several liability for umbrella PAYE — does not appear on the premium at all, because it is not insurable.
What are a recruitment agency's core legal duties?
Four regimes apply together: the Employment Agencies Act 1973 and the Conduct Regulations 2003, governing how agencies operate and what they may charge; the Agency Workers Regulations 2010, giving equal treatment rights after twelve weeks; right-to-work checking under immigration law, where the penalty is uninsurable; and UK GDPR for the candidate data you hold. The April 2026 JSL rules now sit alongside them as a tax obligation.
Employment Agencies Act and Conduct Regulations
The framework distinguishes employment agencies, which introduce workers for permanent engagement, from employment businesses, which supply temporary workers under their own contracts. The Conduct Regulations govern information to be provided to work-seekers and hirers, restrictions on charging work-seekers, and requirements around suitability checks. The Employment Rights Act 2025 will bring umbrella companies within this framework, with regulation expected on a later timeline than the April 2026 tax measure.
Agency Workers Regulations 2010
Agency workers become entitled to equal treatment on basic working and employment conditions after twelve weeks in the same role with the same hirer. Getting the qualifying-period calculation wrong is a recurring source of claims, particularly where assignments are broken and resumed.
Right to work
Checks must be performed and recorded before employment begins. A correctly performed check gives a statutory excuse against the civil penalty; an absent one does not. The penalty itself is not insurable under any policy — a point covered in more detail in our hand car wash insurance guide, which deals with the same regime from the end-user perspective.
National Minimum Wage and holiday pay
NMW compliance including deductions, unpaid working time and travel time, and correct holiday pay calculation for irregular-hours workers. Both are now subject to proactive Fair Work Agency scrutiny rather than complaint-driven enforcement.
Tax and the labour supply chain
Off-payroll working rules where relevant, and from 6 April 2026 joint and several liability for PAYE and Class 1 NIC unpaid by umbrella companies in your chain, under the new Chapter 11 of ITEPA 2003 and the equivalent NIC provisions.
Data protection
Candidate data is personal data and frequently includes special category data and identity documents. Lawful basis, retention limits, security of processing and breach notification all apply, and the volumes agencies hold make this a material obligation rather than a formality.
Real recruitment agency claims and what they cost
The three composites below reflect the loss patterns this sector produces: one verification failure in a regulated setting, one framework indemnity that captured a client's own failing, and one umbrella collapse producing an uninsurable HMRC assessment. These are illustrative composites written for this guide — not real clients and not actual claims — and the figures are indicative examples rather than settlements we have handled.
Case study 1 — Unverified registration in a healthcare placement
The situation: An agency placed a nurse into a private hospital for a series of night shifts. The registration number supplied had lapsed four months earlier following a fitness-to-practise process. The agency's onboarding had verified registration at first placement eighteen months previously but had no process for re-checking at renewal dates. A medication error during a shift caused serious harm to a patient.
Claim type: Professional indemnity — negligent verification, with a parallel claim against the hospital.
Settlement: The patient's claim against the hospital settled at £480,000. The hospital pursued the agency, arguing that supplying an unregistered practitioner was the operative failure. Contribution agreed at £312,000, plus £74,000 defence and expert costs, against a £2m PI limit. The hospital terminated the framework agreement and two other clients did not renew.
Lessons: Verification at first placement is not verification. Registration status changes, and in regulated sectors a re-check at each registration renewal date — automated against the register — is the control. The commercial consequence exceeded the claim: framework loss and reputational damage in a small market cost more than the settlement.
Renewal impact: PI premium increased approximately 120% and the limit was raised to £5m. Two markets declined; placement required a specialist healthcare staffing insurer with a condition requiring automated registration monitoring.
Case study 2 — Framework indemnity capturing the client's own failure
The situation: An agency supplied a warehouse operative to a logistics client under a framework agreement signed two years earlier. The operative was injured using a pallet truck he had not been trained on; the client had provided no task-specific induction. The framework contained an indemnity requiring the agency to hold the client harmless against all claims arising from or connected with supplied workers, without carve-out for the client's own negligence, and uncapped.
Claim type: Employers' liability, with a contractual indemnity dispute.
Settlement: Damages, care and loss of earnings £164,000. On the facts the client's failure to induct was the operative cause and the agency's common-law share would have been modest. The indemnity, however, required the agency to cover the client's liability in full. The insurer accepted the employers' liability element but reserved on the contractual indemnity as an assumed liability wider than common law. Resolved after five months with the insurer contributing £118,000 and the agency bearing £46,000 plus £29,000 of its own legal costs.
Lessons: The agency's actual fault was small; its contractual exposure was total. Liability assumed under contract beyond the common-law duty commonly falls outside cover, and an uncapped hold-harmless with no carve-out for the client's own negligence is exactly that. A single negotiated clause at signature would have removed the entire uninsured element.
Renewal impact: Premium increased approximately 45%, with a condition requiring framework indemnities to be reviewed and reported at renewal.
Case study 3 — Umbrella collapse and an HMRC assessment
The situation: An agency supplied 74 industrial workers through an umbrella company that had been on its approved list for three years, with due diligence completed annually and certificates on file. In late 2026 the umbrella ceased trading, having failed to pay over PAYE and Class 1 NIC for the preceding four months. HMRC assessed the agency as the relevant party in the labour supply chain under the joint and several liability rules.
Claim type: None available — a tax liability, not an insurable loss.
Settlement: Assessed PAYE and NIC shortfall £287,000. The agency's due diligence file was accepted as evidence of good practice but did not remove the liability, which is what the legislation provides. Professional fees defending and negotiating the position £41,000, partly funded by legal expenses cover. Recovery against the umbrella produced nothing, the company being insolvent. Net cost to the agency approximately £328,000, entirely uninsured.
Lessons: This is the exposure that no policy answers and the reason it belongs on the board agenda rather than the insurance schedule. The due diligence was genuinely good and reduced nothing. What would have reduced the loss is a shorter preferred-supplier list with more active monitoring, audit rights exercised rather than merely contracted for, and a modelled understanding of what a single umbrella failure would cost — which the agency had never calculated.
Renewal impact: No direct insurance impact, since no policy responded. The agency brought payroll in-house for the majority of its temporary supply the following year.
How should you manage a recruitment agency claim?
Establish two things before saying anything substantive: which policy responds, and what your client contract actually says about indemnity. Recruitment claims frequently sit across professional indemnity, employers' liability and public liability, and the contractual position determines whether you are defending your own share or the client's as well. Notify at circumstance stage, because PI is claims-made.
- Deal with any injury or safeguarding issue first. Where a worker or a third party has been harmed, the immediate response comes before any commercial or insurance consideration. Where a vulnerable person is involved, follow the safeguarding route.
- Notify your broker at circumstance stage. Not when a claim letter arrives. A client complaint about a placement, an HSE contact, an ICO notification or a candidate grievance can all be circumstances that may give rise to a claim, and PI is claims-made.
- Retrieve the client contract and read the indemnity schedule. This determines whether you are exposed to your own share or the client's entire liability. It changes the strategy completely and it needs to be known on day one, not month three.
- Assemble the verification file for that worker. Qualification, registration, DBS, right-to-work, references, and the dates each was checked. In a professional indemnity claim this file is the defence.
- Establish who controlled the work. Induction records, supervision arrangements, site instructions and the assignment schedule. The division of responsibility between agency and client turns on control, and the contemporaneous documents settle it.
- Do not admit liability or agree apportionment with the client. The commercial pressure to preserve a framework account is intense and it prejudices both the policy and your position on the indemnity dispute.
- Where HMRC is involved, separate the tax track entirely. A PAYE assessment under the joint and several liability rules is not an insurance claim. Get specialist tax advice immediately, and use legal expenses cover for representation where the policy allows.
- Fix the process and document the fix. Whether it was a lapsed registration, an unreviewed indemnity or an unmonitored umbrella, the corrective action is what you present at renewal and what keeps the panel open.
Glossary of recruitment agency insurance terms
- Agency Workers Regulations 2010
- Legislation giving agency workers equal treatment on basic working and employment conditions after twelve weeks in the same role with the same hirer.
- Assumed liability
- Liability accepted under contract that is wider than the common-law duty. Frequently falls outside insurance, which is why uncapped framework indemnities matter.
- Claims-made
- The basis on which professional indemnity operates: the policy responding is the one in force when the claim or circumstance is notified, not when the placement was made.
- Conduct Regulations 2003
- The Conduct of Employment Agencies and Employment Businesses Regulations, governing information to work-seekers and hirers, charging restrictions and suitability checks.
- Dual vicarious liability
- Where both agency and client are found liable for a worker's actions because both exercised a degree of control.
- Employment agency vs employment business
- An agency introduces workers for permanent engagement; an employment business supplies temporary workers under its own contracts. The distinction drives which duties apply.
- Fair Work Agency
- The single enforcement body for UK workers' labour rights, which began work on 6 April 2026 with proactive powers over National Minimum Wage, holiday pay and related obligations.
- Framework agreement
- A master supply contract with a client. Where the indemnity schedule is uncapped and lacks a carve-out for the client's own negligence, it can create liability no policy will follow.
- Funds transfer fraud
- Loss from payment to a fraudster's account following business email compromise. Frequently sub-limited far below the main cyber limit.
- Joint and several liability (JSL)
- The rules effective 6 April 2026 under which another party in the labour supply chain is liable for PAYE and Class 1 NIC an umbrella fails to pay, with HMRC able to pursue that party for the full amount first.
- Off-payroll working
- The rules determining employment status for tax where workers provide services through intermediaries.
- Relevant party
- The party HMRC can pursue under the JSL rules — generally the UK recruitment agency, or the end client where the agency is offshore, connected to the umbrella, or absent.
- Right-to-work check
- The statutory check giving an excuse against civil penalties for illegal working. The penalty itself is not insurable under any policy.
- Run-off cover
- Professional indemnity maintained after the business stops trading or is sold, covering claims arising later from earlier placements.
- Umbrella company
- A business that employs workers on behalf of a recruitment agency or end client and supplies their labour under a contract of employment.
- Vicarious liability
- Liability for the acts of another. In recruitment it turns on who controlled the work, which is why the agency-client contractual allocation matters so much.
Frequently asked questions about recruitment agency insurance
Joint and several liability rules took effect, legislated in the Finance Bill 2025-26 through a new Chapter 11 of ITEPA 2003 with equivalent National Insurance rules. If an umbrella company fails to pay over the PAYE and Class 1 NIC due on a worker's pay, another party in the labour supply chain is jointly and severally liable for that shortfall — and HMRC can pursue that party for the full unpaid amount without chasing the umbrella first. Where there is a UK recruitment agency in the chain, that agency is generally the party HMRC can pursue.
No, and this is the point most widely misreported. Earlier proposals would have made the agency responsible for operating PAYE, but the government did not proceed with that model. The umbrella company remains the employer for tax purposes and keeps the primary duty to operate PAYE and pay HMRC. What changed is the liability if they fail to do so — joint and several liability means HMRC has a choice of debtor and will generally pursue the solvent UK agency rather than the umbrella that has ceased trading.
No. A PAYE and NIC liability arising under statute is a tax debt, not an insurable loss. Professional indemnity does not respond, directors' and officers' cover does not respond, and no specialist product exists for it. Legal expenses cover may fund representation in a dispute with HMRC about whether the liability arises at all, but it will never fund the liability itself. This is a balance-sheet risk to be managed contractually and operationally, which is why it belongs on the board agenda rather than the insurance schedule.
It reduces your risk and is strongly expected, but it is not a legal shield — the legislation is explicit that doing the due diligence does not by itself remove the liability. If an umbrella in your chain does not pay its PAYE, you can still be pursued for the full amount. What genuinely helps is knowing exactly who is in your supply chain, working with a short preferred list you actively monitor rather than a long approved list, building audit rights into your umbrella agreements, and stress-testing what a single umbrella failure would cost.
It depends on who controlled the work, and courts can find dual vicarious liability where both agency and client exercised control. Broadly, the agency carries responsibility for selection, verification and suitability; the client for supervision, induction and site safety. The complication is contractual: many client framework agreements contain uncapped indemnities requiring you to hold the client harmless for anything arising from a supplied worker, including matters entirely within their control. That assumed liability may sit outside your insurance, which is why reviewing framework terms before signature is the highest-value control available.
Negligence in the recruitment process itself — failing to verify a qualification or registration, missing a reference or DBS check, misrepresenting a candidate's experience, breaching confidentiality, or discriminating in the selection process. It responds to financial loss caused by your professional service rather than to physical injury or property damage, which are liability questions. Set the limit against your client contract requirements and realistic consequential loss rather than fee income: an £8,000 placement fee can precede a claim of several hundred thousand where a senior or regulated appointment fails.
It depends on the contract type, and it needs establishing rather than assuming. Where you supply workers under contracts of employment with you — as an employment business — you are the employer and employers' liability applies. Where workers are engaged directly by the client, or through an umbrella that employs them, the position differs. Getting this wrong produces either a gap in cover or a duplicated one, and it is typically only discovered when someone is injured. Map it per contract type and confirm the position in writing with your broker.
Because your vicarious liability follows the worker onto sites you do not control, so the harm a badly-selected or unsupervised worker can cause differs by orders of magnitude between sectors. An agency placing accountants and one placing scaffolders are underwritten as different industries. Construction, healthcare and driving are rated as if you were operating in them, which is why declaring your sector split accurately by fee income matters — a vague description invites the most cautious assumption available to the underwriter.
More than most agencies assume, because the data holding is larger than they realise. A twenty-person agency trading fifteen years may hold candidate records numbering in the hundreds of thousands — names, dates of birth, National Insurance numbers, bank details, right-to-work documents and DBS results, most of them dormant. Add high-volume weekly payment runs to workers and umbrellas and you have both a data target and a fraud target. Check the funds transfer fraud sub-limit specifically, as it is frequently far below the headline cyber limit.
Where client concentration is significant, it is closer to essential than optional. The cash cycle is the problem: you pay workers weekly and invoice clients on thirty to sixty day terms, so you are permanently funding several weeks of wages for work you have not been paid for. An agency placing 120 workers with one client at £700 a week has roughly £720,000 outstanding on that account at any time. If the client enters administration, the workers have already been paid, you rank as an unsecured creditor, and the loss is immediate cash rather than profit.
It began work on 6 April 2026 as the single enforcement body for UK workers' labour rights, consolidating previously separate inspectorates. The significant shift is from reactive to proactive: enforcement no longer depends on a worker complaining first. Agencies, umbrella companies and end clients can expect more scrutiny of National Minimum Wage compliance, holiday pay calculation, deductions and working time. Holiday pay for irregular-hours temporary workers and NMW treatment of travel time and deductions are the areas where errors most commonly surface.
Look for a broker who asks to see your client framework indemnities before discussing premium, who understands that your sector mix drives the rating more than your turnover, and who will tell you plainly which exposures are not insurable rather than implying a policy covers them. Miller & Partner approaches every placement through the Insurability Framework — underwriter intelligence, difficult-risk expertise, risk assessment and claims advocacy — which is what allows agencies supplying high-hazard sectors, or carrying a serious claim, to be placed on their process rather than their trade code. Start with our professional indemnity hub or the Insurability Framework page.
Important information
Regulatory status. Miller & Partner Limited is an Appointed Representative of Gauntlet Risk Management Ltd, which is authorised and regulated by the Financial Conduct Authority. Miller & Partner Limited is registered in England and Wales and trades from Vivian House, Roman Bridge Close, Mumbles, Swansea SA3 5BG.
This is general information, not advice. This guide is published for general information about how insurance for recruitment agencies works. It is not personalised advice, a personal recommendation, or an offer of cover, and it does not take account of the circumstances of any particular business. No liability is accepted for any action taken, or not taken, on the basis of this guide alone.
Cover, wordings and figures. Cover is subject to insurer acceptance, underwriting criteria, and the full terms, conditions, limits and exclusions of the policy issued. Wordings differ substantially between insurers, so always read your own policy documents. Any premium ranges, limits or claim figures shown are illustrative examples only and are not quotations or indications of price.
Case studies. The case studies in this guide are illustrative composites written for the purpose of explanation. They do not describe real clients or actual claims.
Regulation and legislation. References to legislation, regulators and official guidance reflect our understanding as at the date of publication and may change. Always work from the current published source rather than this guide.
Miller & Partner Limited, Vivian House, Roman Bridge Close, Mumbles, Swansea SA3 5BG. Telephone 01792 001350. FS Register FRN 1029698 — you can check this on the Financial Services Register at register.fca.org.uk.
Instagram
LinkedIn