The IR35 Investigation Process: A Guide to HMRC Compliance Checks for Businesses

What is the HMRC IR35 investigation process?

An IR35 investigation is a formal compliance check where HMRC examines whether a business has correctly assessed its contractors' employment status. The process begins with an official opening letter requesting data, moves through a rigorous information-gathering stage, and concludes either with a closure notice or a formal tax assessment (a bill for more tax).

• The Opening Letter: An inquiry formally starts when HMRC sends an initial letter to the business. In the past, these checks were often incorporated into standard employer compliance reviews regarding PAYE and payroll.

  The letter will usually request a breakdown of your accounts for a specific period, copies of relevant contracts, and a list of limited company contractors engaged during that timeframe. HMRC will ask whether the organisation has considered the off-payroll working legislation.

• Response and Evidence Gathering: How your business handles the initial response dictates the direction and duration of the entire inquiry. Providing a comprehensive, legally robust response from the outset can resolve HMRC’s queries and close the check immediately. To build a strong defence, you must collate clear evidence.

What triggers an IR35 compliance check for a business?

HMRC triggers IR35 compliance checks through a combination of risk-based data profiling, sectoral targeting, and random selection. Common triggers include a high volume of Outside IR35 determinations relative to your industry peers, discrepancies in payroll reporting, or a targeted sector-wide sweep into industries known for heavy contractor usage.

While any business engaging flexible labour can be selected at random, HMRC increasingly relies on data analytics to flag anomalies. For instance, if your corporate tax filings indicate a reliance on a large network of personal service companies (PSCs) but your payroll shows minimal Inside IR35 engagements, your risk profile increases. HMRC also runs coordinated compliance campaigns targeting specific sectors, such as banking, technology, engineering, or pharmaceuticals, where contractor usage is traditionally high.

How should a business respond to an HMRC IR35 inquiry letter?

When a business receives an IR35 inquiry letter, the first step is to engage an independent IR35 defence expert before replying to HMRC. You should gather all requested documentation and ensure all communication with HMRC is managed by your defence experts.

To manage the response effectively, companies should follow these best practices:

• Involve specialists immediately: Do not attempt to deal with an HMRC inquiry alone or rely on general corporate accountants. IR35 is a highly specialised area of tax law that requires defence experts with an understanding of HMRC’s specific investigative tactics.
• Respect the deadlines: HMRC usually provides a date by which to respond. Ensure your defence team has enough time to review your compliance files, analyse the contracts, and formulate a robust response. If you cannot meet the date HMRC suggests, then agree to an alternative date with HMRC.
• Maintain written communication: HMRC often requests face-to-face or virtual meetings with company directors or project managers. You are generally under no legal obligation to attend these meetings, but they can be more helpful than insisting on written-only communication. Just ensure you plan for meetings and have your tax defence expert with you at all times.

How can organisations prepare for an IR35 audit?

Organisations can prepare for an IR35 check by implementing a robust, ongoing compliance process that demonstrates reasonable care. This involves using case-law-backed status assessment tools, conducting regular reviews of working practices, and maintaining an organised compliance file for every contractor engagement.

Proactive preparation is the most effective form of defence. To ensure your business can withstand scrutiny, focus on the following:

• Demonstrate Reasonable Care: To protect your business from penalties, you must prove you took reasonable care when making status determinations. Relying on flawed, oversimplified tools (like CEST) or applying blanket determinations across entire departments does not meet this standard.
• Keep Centralised Compliance Files: Maintain a clear audit trail for every contractor. This file should contain the written contract, the SDS with clear reasoning, evidence of the contractor's independent business infrastructure, and any regular monitoring reports.

What happens if a business disagrees with an HMRC IR35 decision?

If a business disagrees with HMRC's final IR35 assessment, it has the right to appeal the decision formally within 30 days. The process involves entering HMRC's internal review stage or taking the case directly to an independent First-tier Tribunal, where the business must present evidence to prove HMRC's conclusion is incorrect.

Should the inquiry progress to a formal dispute, the burden of proof rests on the business to demonstrate that its determinations were correct.

Witness statements from the hiring managers who worked directly alongside the contractor are vital in these scenarios. Having a dedicated tax defence service ensures you have expert representation throughout the tribunal process.