Large and medium-sized businesses need to be ready for IR35

Large and medium-sized businesses now just have a couple of months left to prepare for the changes to the off-payroll working rules (IR35).


From 6 April 2021, in most cases, the engager (employer) will be responsible for deciding whether to deduct tax and National Insurance Contribution (NICs) from freelancers and contractors, operating via a Personal Service Company (PSC), as if they were employees.


The new IR35 rules do not affect small businesses, as defined by the Companies Act 2006, where they meet two or more of these criteria:

- Annual turnover is no more than £10.2 million;

- A total of fixed and current assets (before deducting current liabilities, long-term liabilities and deferred tax provisions) over £5.1 million; or

- No more than 50 employees.

When a business grows from a small to a medium or large-sized business there is a two-year transition period before the IR35 regulations fully apply to that business.


Engagers are required to undertake this IR35 determination for every contract they agree with a worker. The official guidelines are as follows:

- Pass your determination and the reasons for the determination to the worker and the person or organisation you contract with

- Make sure you keep detailed records of your employment status determinations, including the reasons for the determination and fees paid

- Have processes in place to deal with any disagreements that arise from your determination.

The Government has created an assessment tool, CEST, which can be found here. This can be used to assess whether the engagement is classed as employment or self-employment and a report can be printed out as a record of your assessment if challenged by HMRC.


If the determination results in a contractor being within the IR35 rules, you will need to deduct and pay tax and National Insurance contributions to HM Revenue & Customs via PAYE.


Where an employer fails to correctly identify a disguised employment scheme, the worker’s tax and National Insurance Contributions (NICs) become their responsibility.


Where you hire a contractor via an agency it is the responsibility of the closest intermediary to the PSC to calculate, deduct and pay tax and NICs via PAYE on the contractor’s remuneration.


It is estimated that almost a quarter of the UK’s workforce now works on a contingent basis, either in the public or private sector, and so businesses must be prepared for the changes ahead.


Here are some basic steps that all businesses can take to help them prepare:


Conduct an audit of freelancers and contractors


As it will be the responsibility of the person engaging the services of a contractor to determine whether their work falls inside the new rules, you should carry out an audit of all employees and contractors currently working within your business to determine who may be affected.


Determine who falls under the rules


Last year, many businesses were considering a blanket approach to freelancers, but recent research suggests that more companies are taking a measured approach to ensure they aren’t disadvantaging contractors. You will need to determine whether each contractor falls “inside” or “outside” of the new rules.


This should be done on a case-by-case basis, as you could face serious repercussions for failing to demonstrate reasonable care to correctly classify such roles for employment tax purposes.


If the engager fails to correctly determine status, they will be held liable for any tax charges or NICs and could face a penalty from HMRC.


Communicate all changes 


Once you have determined whether a person falls within the rules or not you should communicate any changes to them. It is important to demonstrate that you are taking reasonable care to assess their status.


If you determine that a person should be within the new rules and you switch them to the PAYE system, as required, they could see their take-home pay reduced considerably. You should take the time to discuss these changes with them.


There is a disagreement procedure created by the Government to be used by the contractor and the organisation paying the fees if all parties do not agree with the determination.


Create an agreement policy


Businesses should prepare an agreement policy for any new contractors they take on from April 2021, which clearly outlines the contractor’s employment status.


Existing contractors might also need their agreements adjusted in light of the IR35 changes if they run into the new financial year.


Consider the costs


Many contractors have indicated that they intend to increase their daily or hourly rate to compensate for their income tax and NICs being deducted by employers.


You should discuss this with contractors as soon as possible so you can factor any additional costs into your employment budget.


If you rely on the services of contractors or freelancers it is important that you prepare your payroll systems and process for these changes.

Accountant Cost in Northampton
By Dexter Stevens • October 29, 2026
Discover accountant costs in Northampton, what affects fees and what accounting packages include. Contact 10CA for a tailored quote.
By Charlie Flockhart • October 28, 2026
The 12 months since the last Budget was delivered have seen significant change. A more challenging global macroeconomic outlook, yet more inflationary pressures...
By Charlie Flockhart • October 5, 2026
According to the latest Hiscox Cyber Readiness Report, almost two in five small businesses in the UK suffered a successful cyber-attack in the last year, with each attack costing an average of £26,650. Globally, cyber incidents cause around 32 hours of operational disruption a year on average. Cyber-attacks are no longer exceptional events, being viewed more as recurring costs, so businesses must prepare themselves financially for the impact. How should you prepare your finances in advance of a cyber-attack? A cyber-attack is slowly and sadly becoming a reality for many SME owners across the UK. To prepare, business owners should assess the potential financial risk a cyber-attack poses and forecast cash flow to ensure their business can survive one. It could also be beneficial to value your data assets to estimate the worth of any lost revenue and recovery expenses. Business owners may also want to keep offline playbooks. These are secure, printed offline copies of critical financial contacts, account numbers and recovery protocols to ensure that your business has key information in the event of a cyber-attack. Additionally, your business should establish strict double-check procedures for unusual payment requests or changes to supplier details to prevent business email compromise. You should also factor cyber insurance premiums into your operational risk management to ensure that you are prepared for any eventuality. What should you do to get your finances back in check after a cyber-attack? Should the worst-case scenario happen, once you are back on track, the first thing you should do is speak with your accountant. Your accountant will help you to calculate the exact monetary value of damaged assets, lost revenue and stolen money so that you know exactly where your business stands. They will then review your financial data and your tax records to establish a baseline for recovery and determine if the business can continue or if restructuring is necessary. Accountants can also help during complex cyber insurance claims by submitting the required evidence to ensure fair financial assessments of the business interruption costs. Once you have received any insurance payments, an accountant can advise on the tax implications.  How can we help? Cyber-attacks are becoming more prevalent for businesses up and down the UK. That is why it is imperative that you receive advice on how you can best prepare your finances in a worst-case scenario. Our team of accountants can help you to prepare your business for a cyber-attack and in the event of a cyber-attack, we can help you pick up the financial pieces. Get in touch with our team for support with preparing your business for a cyber-attack.