The umbrella industry has always had its share of good operators and bad ones. For years, the consequences of that gap were largely felt by contractors who ended up with non-compliant providers, and occasionally by HMRC chasing unpaid tax. Agencies and end clients could, in practice, keep a degree of distance from what happened further down the supply chain.
April 2026 changes that. With the introduction of joint and several liability for PAYE, the financial risk of umbrella non-compliance moves up the chain. If an umbrella fails to operate PAYE and National Insurance correctly, HMRC can recover the full tax debt from the recruitment agency or end client involved, not just from the umbrella. The liability is joint and several, meaning HMRC can pursue any party in the chain for 100% of the debt, regardless of who caused the problem.
This shift has redefined agency-umbrella relationships and made PSL access crucial for umbrella companies’ survival.
The stated intent: weed out the non-compliant
This isn’t an unintended consequence of the legislation. Policy commentary around the draft rules openly describes JSL as a lever designed to change which umbrella companies agencies will work with, and to drive non-compliant providers out of the market.
The logic is straightforward. Before JSL, an agency could argue it had done its checks and distance itself from a non-compliant umbrella’s failures. From April 2026, that argument carries far less weight. If the tax hasn’t been paid correctly, the agency is exposed. “We did our checks” won’t be a defence. What matters is whether the agency can demonstrate strong, documented governance and show that the umbrellas on its PSL were genuinely operating to the required standard.
The result is that agencies have a powerful commercial incentive to tighten their PSLs significantly, work only with umbrella companies they are confident will comply, and remove marginal or unverifiable providers before they become a liability. Literally.
What umbrella companies now have to demonstrate
Meeting the new standards isn’t a box-ticking exercise. It requires real infrastructure, ongoing operational commitment and the ability to provide evidence on demand. Here is what agencies are now expecting umbrella companies to demonstrate as a minimum.
Independent accreditation and auditing
Self-certification is no longer sufficient. Umbrella companies need to provide evidence of independent accreditation that covers how they actually operate, not just what their policies say. That means third-party audits are carried out regularly, with up-to-date certificates and reports that can be shared with agency partners for governance purposes.
Transparent PAYE reporting and RTI compliance
Agencies need ongoing confidence that PAYE obligations are consistently met, not just reassurance. Umbrella companies must: (1) provide regular summaries of PAYE and National Insurance liabilities for all contractor populations; (2) deliver clear evidence of timely Real Time Information submissions to HMRC; and (3) confirm successful clearance of all related payments. This compliance information should be part of a standard reporting cycle, available proactively, not just upon request.
Clear, itemised payslips
This might seem like a contractor-facing issue, but payslip clarity is increasingly part of compliance conversations too. A single, consolidated payslip that clearly shows PAYE and National Insurance deductions, explains any other deductions, and handles pension and statutory payments transparently is now an expectation rather than a differentiator. Ambiguous payslips raise questions, and in a JSL environment, agencies want to avoid them.
A simple, explainable pay model
If an umbrella company can’t clearly explain what is deducted from a contractor’s pay and why, including margin, employer costs, pension contributions and statutory payments, that’s a problem. Agencies need to understand and explain the pay model to their clients and contractors. Complexity that can’t be accounted for is a red flag.
Contractual clarity and audit rights
Contracts must go beyond commercial terms by specifying audit rights, evidence provisions, response times, and responsibilities for resolving issues. Umbrella resistance to these terms is revealing.
Defined escalation routes and responsive support
Quick, direct answers are critical when pay or information issues arise. Agencies now expect named contacts for queries, clear escalation paths, and contractor support that resolves issues efficiently.
Why meeting these standards is genuinely demanding
Meeting the new requirements takes significant investment of time and money. Independent accreditation, regular PAYE reporting, and maintaining documentation all demand ongoing operational resources.
For well-resourced umbrella companies that have been investing in compliance infrastructure for years, the transition to the new standards is demanding but manageable. The foundations are already there. The work is in formalising, documenting and demonstrating what already exists.
For smaller umbrella companies, or those slower to invest in governance and systems, the picture is different. The cost to reach the required standard is high, the timeline is tight, and falling short carries severe commercial consequences: losing access to agency PSLs and contractor volume, without which the business is not viable.
A likely consolidation
The industry is heading towards consolidation. That’s not a dramatic prediction. It follows directly from the mechanics of what’s happening.
Agencies are expected to reduce the number of umbrella companies on their PSLs, conduct more intensive due diligence, insist on accreditation, and be far more reluctant to add new providers without strong evidence of compliance. The days of long-tail PSLs with dozens of umbrella partners are likely numbered.
For contractors, this will mean fewer umbrella options through any given agency, but those options should be more reliably compliant and professionally run. For agencies, a tighter PSL with well-governed partners is a more defensible position under JSL than a broad list that makes oversight difficult to maintain.
The umbrella companies that will come through this period are those that have treated compliance as a genuine operational priority, invested accordingly, and can clearly demonstrate that investment. Those who haven’t, or those who left it too late to build the necessary infrastructure, face a much harder road.
What this means in practice
From April 2026, PSL access is the gateway to commercial viability for umbrella companies. The standards required to secure and maintain that access are now higher, more specific and more rigorously enforced than at any previous point in the industry’s history.
The legislation’s intent is clear. The market response from agencies is already underway. And the operational demands on umbrella companies are real and significant.
For the well-prepared, this is a chance to show the value of doing things right. For those unready, the window to act is closing fast.
—
At SmartWork, we have invested significantly in the systems, processes and accreditations needed to meet the new standards. If you’d like to understand more about how we approach compliance and what that means in practice, you can read more here.
