Managing HR compliance as you scale in the United Kingdom
Reviewed by Mellow Editorial Team, HR & payroll content team
Growing a UK team from a handful of people to a larger workforce does not change what compliance requires — it just means there are more places for something to go wrong. Here is what you are legally obliged to do, and when it becomes critical to have systems rather than spreadsheets.
Employment contracts and day-one rights
Every employee must receive a written statement of particulars on or before their first day of work. This is not a nice-to-have; it is a legal requirement. The Employment Rights Act 2025 has strengthened day-one rights further, meaning employees no longer need a qualifying period for several key protections. As you scale, review your contract templates regularly. A clause that was adequate when you had five employees may create risk when you have fifty, particularly around working hours, notice periods and remote-work arrangements.
Payroll and HMRC reporting
Running payroll accurately is non-negotiable from your first hire. Under Real Time Information (RTI), you must submit a Full Payment Submission (FPS) to HMRC on or before each payday — not monthly, not after the event. Miss this and HMRC can charge late-filing penalties automatically.
The numbers you need to get right every pay cycle:
- Income tax: deducted at source under PAYE. Employees pay nothing on the first £12,570 of earnings (the personal allowance), then 20% (basic rate), 40% (higher rate) and 45% (additional rate).
- National Insurance: employees contribute 8% on earnings within the standard band, then 2% above the upper earnings limit. Employers pay 13.8% on earnings above the secondary threshold.
- End-of-year obligations: issue every employee a P60 by 31 May. File P11Ds for any taxable benefits in kind by 6 July.
When you are small, a payroll bureau or software handles most of this. As you grow, the complexity multiplies — multiple pay schedules, salary sacrifice arrangements, share options, contractors alongside employees. The point at which a dedicated payroll function or a specialist provider earns its cost comes earlier than most founders expect. If you also have people working across borders, how Mellow runs payroll across six countries on one platform is worth reading.
Pension auto-enrolment
If you employ anyone aged 22 or over who earns above the earnings trigger, you must enrol them in a qualifying workplace pension. Minimum contributions are a 3% employer contribution and a 5% employee contribution, calculated on qualifying earnings. You must also re-enrol eligible workers every three years, even if they previously opted out.
The Pensions Regulator monitors compliance and can issue fixed penalty notices. As you add headcount, keep your enrolment records clean. Common scaling pitfalls include forgetting to enrol workers who cross the earnings threshold mid-year, and failing to process opt-outs within the statutory window.
Leave entitlements and absence management
Every worker is entitled to 5.6 weeks of statutory annual leave per year — that is 28 days including bank holidays for someone working a five-day week. Part-time workers receive a pro-rata equivalent. Statutory Sick Pay applies when employees are ill for four or more consecutive days. Statutory family leave pay — covering maternity, paternity, adoption and shared parental leave — also applies.
These obligations do not change as you scale, but administering them becomes harder without proper systems. When you had three employees you could track leave in a shared document. At thirty, an absence management system is not a luxury; it is how you avoid accidentally breaching entitlements or paying people incorrectly during leave.
Right to work checks and data compliance
You are legally required to check that every employee has the right to work in the UK before they start. Failure to carry out the correct checks — and keep records of them — can result in a civil penalty. The check must happen before day one, not during onboarding.
As your headcount grows, you are also handling significantly more personal data. Under UK GDPR, you must have a lawful basis for processing employee data, maintain a record of processing activities, and respond to subject access requests within one month. If you are scaling quickly, appoint someone with clear ownership of data compliance before a request arrives — not after.
When informal processes become a liability
The practical tipping point for most UK businesses is somewhere between ten and twenty employees. Below that, a founder or office manager can hold compliance together through diligence. Beyond it, the volume and variety of obligations — payroll, pensions, contracts, leave, right-to-work, data — requires documented processes, clear ownership and ideally software that creates an audit trail.
The Employment Rights Act 2025 has also raised the stakes. Stronger day-one rights mean you have less runway to fix a compliance gap before it becomes an employee relations issue or a tribunal claim. Building the infrastructure while you are still small is considerably cheaper than retrofitting it under pressure.
---
Run HR and payroll in United Kingdom with Mellow
Mellow brings HR, payroll and 12 AI agents into one platform — built to handle United Kingdom properly, with payroll included, from £4 per employee per month. The AI agents don't just answer questions; they generate contracts, run cost estimates and draft letters for you.
- United Kingdom payroll software
[Start a free trial →](/register)