If your medical or care organisation requires JSL recruitment support, Cucumber should be your first port of call.
There is a lot of noise circulating about Joint and Several Liability and its implications for recruitment agencies. Most of it is coming from people who want to sell you something. The Finance Bill 202526 introduces provisions for JSL recruitment agencies that take effect on 6 April 2026. But the question most agency directors are actually asking is simple. Does this apply to us if we run our own PAYE? The short answer, backed by KPMG, Deloitte, the REC, and two independent neutral vendors, is no.
This page is the definitive resource for recruitment agency directors who need to understand JSL without the vendor spin. Every claim is sourced. Every position is cited. And the conclusion is the same one reached independently by every credible analyst who has properly examined the legislation.
The Finance Bill 202526 inserts a new Chapter 11 into ITEPA 2003. It creates joint and several liability between agencies, end clients, and umbrella companies for unpaid PAYE and National Insurance where a worker is supplied through an umbrella arrangement. KPMG confirms the Bill defines “umbrella company” as any person “that carries on a business of supplying labour,” warning this is “much wider than the type of business that might typically be referred to as an umbrella company.”
That broad definition is where the concern starts. But Deloitte draws a critical distinction: agencies running their own PAYE under Section 44 ITEPA 2003 are “fully in control of their own risk.” Since the new Chapter 11 provisions apply specifically where an umbrella company is engaged in the supply of a worker, removing the umbrella from the chain removes the trigger for joint liability. For the full legislative breakdown, read what JSL legislation 2026 actually says about recruitment agencies.
Section 44 of ITEPA 2003 places the PAYE obligation directly on the agency that employs the worker. That obligation is not delegated. It is not outsourced to a third party. The agency deducts tax, pays National Insurance,
and submits Real Time Information to HMRC every pay period. That is the compliance mechanism. It costs nothing additional. And it produces a verifiable, timestamped record held by HMRC itself.
Agencies operating under this model fall under Chapter 7 of ITEPA, which relates to limb worker arrangements. Chapter 11, the JSL chapter, applies to umbrella arrangements. Magnit Global’s whitepaper explicitly makes this distinction. If you want to understand the structural difference in detail, the comparison between own-PAYE agencies and umbrella companies under JSL sets it out plainly.
HMRC’s own guidance states: “The agency or end client will be responsible for making sure PAYE is operated correctly, when an umbrella company employs their workers.” The conditionality in that sentence matters. The trigger is when an umbrella employs the workers. Not when the agency employs them directly.
One vendor in the market is requiring JSL recruitment agencies on their panel to obtain SafeRec accreditation at a cost of GBP 350 per month. They claim this is a compliance requirement under JSL. Before your agency signs anything, consider the following.
SafeRec connects to umbrella payroll software via API and cross-references HMRC tax accounts monthly. It does not have direct HMRC system integration. It cannot independently verify that the correct tax has been paid in real time. It is designed to audit umbrella company payroll, not agency payroll. If your agency does not use umbrellas, there is nothing for SafeRec to monitor. Two out of three neutral vendors confirm their own-PAYE agencies do not
need it. For the full critical analysis, see our guide to SafeRec accreditation for recruitment agencies.
HMRC has explicitly stated that under JSL, due diligence checks do not constitute a defence against liability. Even with SafeRec accreditation, the liable party remains liable. Magnit Global’s whitepaper confirms: “The legislation does not allow a statutory excuse for a relevant party, meaning the liability is absolute.”
This undermines the entire premise of paying for third-party compliance checks as a risk mitigation tool. Your RTI submissions to HMRC are your compliance. They are real-time, verifiable, and held by the revenue authority itself. No third-party product replicates that. The implications are examined fully in our article on why due diligence under JSL is not a defence.
Healthcare recruitment operates differently from the broader staffing sector. Agencies employ workers directly and run their own PAYE. Umbrella companies are rarely used because of the VAT nursing concession. If you insert an umbrella between the agency and the nurse or carer, you risk breaking the concession and making the supply VATable.
Dan Blake, a recognised figure in healthcare staffing, published on 13 March 2026, “There is a lot of noise, and a lot of misinformation, circulating about Joint and Several Liability and what it means for health and social care agency staffing.” He confirmed that vendors are “applying a one-size-fits-all interpretation of the legislation without properly understanding how healthcare staffing actually works.” The sector-specific analysis is covered in full at JSL and healthcare recruitment agencies.
The vendor landscape on JSL is not uniform. Two of the three neutral vendors Cucumber works with confirm that SafeRec is not required for own-PAYE agencies. One vendor disagrees. That vendor has not disclosed which law firm advised their position despite claiming six months of consultation.
Magnit Global, ranked the world’s largest MSP by HRO Today, published a framework in February 2026 that explicitly distinguishes between own-payroll agencies and umbrella routes. Own-payroll agencies undergo a Due Diligence Model that includes credit checks, financial statements, and RTI submissions. No SafeRec. No additional fees. The full market breakdown is on how neutral vendors are responding to JSL.
On current professional analysis, no. Deloitte confirms agencies running their own PAYE under Section 44 ITEPA 2003 are “fully in control of their own risk.” The Chapter 11 JSL provisions apply where an umbrella company is engaged in the supply of a worker. No umbrella in the chain means no trigger for joint liability. There is no case law testing this interpretation.
Not if you run your own PAYE. SafeRec is designed to audit umbrella company payroll. Two out of three neutral vendors confirm their own-PAYE agencies do not need it. Magnit Global’s framework explicitly separates its own payroll agencies from the SafeRec route. The cost is GBP 350 per month for a product designed to monitor umbrellas that your agency does not use.
Chapter 7 covers agency workers employed directly by the agency under limb worker arrangements, who are protected by the Employment Agencies Act 1973 and the Agency Workers Regulations 2010. Chapter 11 contains the new JSL provisions targeting umbrella company supply chains. Own-PAYE agencies fall under Chapter 7, not Chapter 11.
No. HMRC has explicitly stated that due diligence checks do not constitute a defence under JSL. Magnit Global’s whitepaper confirms “the liability is absolute.” Paying for third-party compliance products does not reduce your legal exposure. Your RTI submissions to HMRC are the compliance mechanism.
The Chapter 11 ITEPA 2003 provisions take effect on 6 April 2026.
Document your employment model. Confirm whether you employ workers directly or use umbrella companies. If you run your own PAYE, your RTI submissions to HMRC every pay period are your evidence of compliance. Get independent legal advice from solicitors who understand the distinction between Chapter 7 and Chapter 11. Do not accept vendor characterisations of your obligations without seeing the legislative basis.
Request a consultation, and let’s make your staffing solutions stronger