SIA Compliance and Enforcement: Section 19 Inspections, Penalties & POCA Risks (2026)

Strong SIA compliance and enforcement readiness means UK security firms and facilities managers must follow the Private Security Industry Act 2001 (PSIA 2001) at all times. Under Section 19, SIA investigators can enter regulated business premises and demand deployment rosters, payroll records, and BS 7858:2019 screening files without prior warning. When an inspection uncovers unlicensed deployment (Section 3 or Section 5), licence condition breaches (Section 9), or false records (Section 22), firms and directors face written warnings, business improvement notices, ACS withdrawal, Proceeds of Crime Act 2002 (POCA) asset confiscation, and criminal prosecution.

This enforcement guide is written for Operations Directors, Compliance Managers, and Facilities Management Procurement Leads. It reflects the regulator’s updated October 2026 guidance (Learn how we enforce SIA regulation), which introduced the SIA compliance and enforcement quarterly report. If you are preparing for your annual scheme audit rather than an enforcement inquiry, read our companion guide on SIA ACS assessment preparation. You can also explore our SIA ACS accreditation support and UK compliance consultancy hub, or book a free initial consultation to stress-test your inspection records.

In this guide

• What Are the Statutory Foundations of SIA Enforcement Under the Private Security Industry Act 2001?
• How Do SIA Enforcement Inspection Powers and Improvement Notices Escalate to Criminal Prosecution?
• How Do SIA Investigators Trace Site Breaches Back to BS 7858:2019 Vetting Failures?
• How Can SIA Enforcement Warnings and Payroll Non-Compliance Lead to ACS Withdrawal?
• How Can Primes Master Subcontractor Security Licence Verification Compliance UK and Eliminate Section 5 Risks?
• What Are the Rules on Licence Condition Violations, Licence Dispensation Notices (LDNs), and False Information Offences?
• Practitioner Verification Checklist: What Is the 15-Point SIA Section 19 Inspection Readiness Protocol?
• Incident Response: How Should You Handle an Unannounced SIA Site Inspection or Section 19 Notice?
• Frequently asked questions

What Are the Statutory Foundations of SIA Enforcement Under the Private Security Industry Act 2001?

The Security Industry Authority draws its legal powers from the Private Security Industry Act 2001 (PSIA 2001). This Act sets strict criminal rules across the UK. Under Section 3(1) of the PSIA 2001, it is a summary offence to carry out licensable conduct listed in Schedule 2 without an active SIA licence. Covered work includes manned guarding, door supervision, close protection, cash and valuables in transit (CVIT), keyholding, and public space surveillance using CCTV. Under Section 3(2), non-front-line licences are also required for company directors, partners, managers, and supervisors who oversee licensable security staff.

For security firms and facilities management primes, Section 5(1) of the PSIA 2001 makes it a crime to employ or supply an unlicensed operative in licensable conduct. Section 5(2) provides two alternative statutory defences (a business needs to establish only one of them): either (a) it did not know, and had no reasonable grounds for suspecting, at the time the conduct occurred that the operative did not hold a valid licence, or (b) it took all reasonable steps in relation to the services provided to ensure that the operative would not engage in licensable conduct without a licence. Section 5(3) is not a general defence; instead, it exempts services provided at a time when the operative is entitled to work unlicensed under Section 4(4) via a valid Licence Dispensation Notice (LDN). In addition, Section 6(1) bans using unlicensed wheel-clampers to immobilise vehicles (which applies in practice only to Northern Ireland, since clamping on private land was banned in England and Wales in 2012), while Section 16(2) makes it an offence to falsely claim approved contractor status.

What Are the Private Security Industry Act 2001 Offences and Penalties and Section 19 Inspection Powers?

Managing private security industry act 2001 offences and penalties requires daily readiness for Section 19 of the PSIA 2001. Under Section 19, a person authorised in writing by the SIA can enter any premises owned or occupied by a regulated person (other than premises occupied exclusively for residential purposes as a private dwelling) at a reasonable hour. You must produce any documents or information relating to licensable conduct or regulated services that the inspecting officer requires. Inspectors routinely demand live shift rosters, signed site Assignment Instructions, payroll records, BS 7858:2019 vetting files, and right-to-work checks. Under Section 19(5), intentionally obstructing an authorised officer or failing without reasonable excuse to comply with a requirement is a summary offence punishable by up to six months’ imprisonment, a fine, or both.

How Do SIA Enforcement Inspection Powers and Improvement Notices Escalate to Criminal Prosecution?

The regulator uses a targeted risk model to manage sia enforcement inspection powers and improvement notices. Under the SIA’s published enforcement guidance, operations are run alongside the police, local authorities, and other government agencies. Operations take place for three main reasons: acting on intelligence received, gathering data to direct SIA resources, or testing strategy assumptions. For minor breaches where public safety is not at risk, the SIA usually works with the business first. It may issue a written warning, which can be taken into account in future licensing or enforcement decisions.

When a business shows wider control faults, the SIA can issue a formal business improvement notice. It can also suspend or withdraw scheme approvals under PSIA 2001 Sections 14 to 17, or modify (suspend for whatever period the SIA decides) and revoke individual licences under Section 10 (subject to appeal rights under Sections 11 and 18). Before starting a criminal prosecution, the SIA runs a formal investigation. Investigators check four tests: whether sufficient evidence proves an offence, whether a statutory defence applies, who is liable, and whether prosecution serves the public interest. The SIA keeps most investigations confidential unless public safety is at risk, an arrest warrant exists, witnesses are needed, or the case is already public.

What Is the Deploying Unlicensed Security Operatives Criminal Liability for Directors Under Section 23 and POCA 2002?

Where inquiries find deliberate breaches, falsified records, or repeat faults, the SIA prosecutes offenders in court. Boards must note that deploying unlicensed security operatives criminal liability reaches the boardroom under the PSIA 2001 (specifically Section 23 on criminal liability of directors and officers of bodies corporate, alongside Section 22 on false information). When a corporate offence is committed with the consent or connivance of a director, manager, secretary, or similar officer—or is attributable to any neglect on their part—that officer is personally guilty of the offence and liable to be proceeded against and punished accordingly.

The SIA also prosecutes related offences that harm the security sector, such as fraud, forgery, counterfeiting, and breaches of the Identity Documents Act 2010. After a conviction for Section 3 or Section 5 offences, the SIA can ask the court to confiscate criminal benefit under the Proceeds of Crime Act 2002 (POCA). The Court of Appeal in R v Palmer [2016] EWCA Crim 1049 confirmed that unlicensed security trading under Section 3(1) constitutes criminal conduct for POCA purposes, and in Northern Ireland’s R v Dewart case the court found proportionality satisfied by an order removing the business’s gross takings. Confiscation orders can therefore reach gross contract revenue rather than net profit, subject to a case-by-case assessment of proportionality.

How Do SIA Investigators Trace Site Breaches Back to BS 7858:2019 Vetting Failures?

When SIA investigators find an unlicensed, illegal, or fraudulent guard on site during a Section 19 inspection, they routinely demand the employer’s pre-employment screening file to test whether the company took “all reasonable steps” under the Section 5(2)(b) statutory defence. Running a rigorous bs 7858 2019 security screening compliance audit against the BSI standard (BS 7858:2019 Screening of individuals employed in a secure environment, structured across Clauses 4 to 11; see our complete walkthrough in BS 7858 screening explained) is essential. During compliance and ACS inquiries, auditors examine breakdowns across the core BS 7858:2019 clauses:

• Clause 4 (Top Management Commitment): Failure to appoint a designated senior individual accountable for screening governance, policy oversight, and data protection.
• Clause 5 & Clause 6 (Risk Management & Screening Personnel): Failing to document a formal risk management framework for conditional starts or exceptions (Clause 5), or failing to screen, train, and supervise the staff who conduct vetting (Clause 6).
• Clause 7 (Screening Process — Identity, Right-to-Work, 5-Year History, Financial Checks & Conditional Screening): Clause 7 covers the core screening checks. Common failures include accepting unverified copies instead of original identity and right-to-work documents; leaving gaps over 31 days unverified across the minimum five-year continuous history (see our guide on SIA prosecutions for fake references and BS 7858 checks); failing to check public records for bankruptcy, IVAs, and County Court Judgments (CCJs); or allowing staff hired on conditional screening to work past permitted time limits without a documented risk review.
• Clause 8 & Clause 9 (Sub-contractors & Ancillary Staff): Failing to confirm that sub-contractors (Clause 8) and ancillary staff with access to secure environments (Clause 9) are screened to BS 7858:2019 standards.
• Clause 10 & Clause 11 (Acquisitions/Transfers & Records): Failing to audit personnel files transferred via acquisitions or TUPE (Clause 10) or failing to retain complete, secure screening records and audit trails (Clause 11).

How Do You Rectify Incomplete Vetting Files Before an Unannounced SIA Inspection?

• Audit Conditional Screening Caps Weekly: Run a weekly exception report on all staff working under preliminary screening (Clause 7) and stand down any guard whose file reaches the conditional time limit without full five-year history verification and a documented Clause 5 risk assessment.
• Close 31-Day Career Gaps With Official HMRC Proof: Replace self-certified gap notes with official HMRC Personal Tax Account employment histories or DWP records covering the full five-year Clause 7 window.
• Enforce Student & Sponsored Visa Roster Locks: Link Home Office right-to-work share-code checks directly to your scheduling software so visa holders cannot be booked beyond their legal hour limits.

How Can SIA Enforcement Warnings and Payroll Non-Compliance Lead to ACS Withdrawal?

For firms on the SIA Register of Approved Contractors, enforcement action and scheme accreditation are closely connected. While our SIA ACS assessment preparation guide covers how to pass your annual NSI, SSAIB, or British Assessment Bureau audit, sia approved contractor scheme audit preparation uk from an enforcement standpoint means preventing the control failures that can lead to ACS suspension or withdrawal under PSIA 2001 Sections 14 to 17:

• Payroll Management & Tax Compliance (ACS Indicator 4.2.1): Indicator 4.2.1 requires clear and effective management of the payroll. Disguised self-employment, off-payroll Personal Service Company (PSC) deployment, or PAYE compliance breaches uncovered during an audit or government agency inquiry can lead to ACS withdrawal (see SIA ACS payroll compliance & Indicator 4.2.1).
• Service Delivery & Site Inspection Failures (ACS Criterion 2): Criterion 2 (including sub-criterion 2.4 on monitoring and managing service delivery to customers and consumers) requires robust operational delivery. If SIA officers inspect a client site and find guards working without signed BS 7499:2020 Assignment Instructions, failing to display licences under Section 9, or working on expired licences, the SIA notifies your assessing body and can issue a formal business improvement notice or withdraw approval.

How Can Primes Master Subcontractor Security Licence Verification Compliance UK and Eliminate Section 5 Risks?

Unvetted subcontracting and last-minute shift cover create major Section 5 enforcement exposure in the UK security and facilities sector. Under SIA Approved Contractor Scheme rules, an approved contractor may only subcontract licensable security work to another SIA approved contractor (unless specific prior dispensation is granted by the SIA). Prime contractors also cannot use a commercial indemnity clause to shift criminal responsibility to a supplier: liability under Section 5(1) of the PSIA 2001 cannot be delegated by contract. If a sub-tier agency sends a guard with an expired, revoked, suspended, or counterfeit licence to your client’s site, both the prime contractor and the agency face prosecution unless a Section 5(2) defence is established, and directors can be prosecuted personally under Section 23.

To build strong subcontractor security licence verification compliance uk, primes must enforce BS 7858:2019 Clause 8 (sub-contractors) and Clause 9 (ancillary staff), alongside BS 10119:2026 (the British Standard code of practice for providing labour to the security and events sectors, developed from NSI’s NCP 119). Supplier contracts must ban unapproved sub-tier hiring (“daisy-chaining”) without written board consent. Before any subcontractor guard starts a shift, the prime’s control room must verify the guard’s SIA licence on the live Register of Licence Holders, confirm PAYE employee status, and inspect a signed BS 7858:2019 screening confirmation prior to site induction.

What Are the Rules on Licence Condition Violations, Licence Dispensation Notices (LDNs), and False Information Offences?

Even when guards hold valid licences, breaking SIA licence conditions triggers enforcement during routine site visits. Under Section 9(4) of the PSIA 2001, contravening any licence condition is a criminal offence. Front-line operatives must wear their SIA licence where it can be seen while on duty, unless they can demonstrate that the nature of the conduct on that occasion requires that they not be immediately identifiable as someone engaging in such conduct (such as covert store detectives or discreet close protection duties). Even when this covert exemption applies, the holder must still carry the licence on their person and produce it on request; recording covert duties in the site Assignment Instructions is good operational practice to evidence the exemption. Licence holders must also notify the SIA of any change of name or address, or if they receive any conviction, caution, warning, or are charged with a relevant offence.

Strict legal rules also cover Licence Dispensation Notices (LDNs) under Section 4(4) of the PSIA 2001 (which also provides the Section 5(3) exemption). Being an SIA Approved Contractor is not sufficient on its own: permission to use licence dispensation is separate from ACS approval and must be specifically requested from the SIA. Under the rules in force since February 2025, a personal LDN is generated by the SIA’s online system and is valid for a maximum of 5 weeks. The operative must be your direct employee, have an active licence application at the ‘checks in progress’ stage, have held an active SIA licence when they applied, and must not have had a previous application refused or a licence revoked or suspended. LDN usage is subject to a usual limit of 15% of your deployed licensable workforce (which can be raised only in exceptional circumstances). Staff working on an LDN must carry the personal LDN and company photo ID on duty and should display an ACS lapel pin (with limited exceptions such as covert duties).

Finally, contractors must prevent false statement offences under Section 22(1) of the PSIA 2001. Under Section 22(1), it is a crime to knowingly or recklessly make a false statement to the SIA for any purpose connected with the Act. The SIA also prosecutes fraud, forgery, counterfeiting, and offences under the Identity Documents Act 2010. Backdating BS 7858:2019 vetting references, falsifying logs, or using forged ID papers will lead to criminal prosecution.

Practitioner Verification Checklist: What Is the 15-Point SIA Section 19 Inspection Readiness Protocol?

Operations Directors, Compliance Managers, and FM Procurement Leads should run this 15-point self-audit checklist across four control pillars to stay ready for an unannounced SIA Section 19 inspection:

• 1. Automated Daily Register Batch Checks (Pillar 1): Run daily automated API or batch checks of all front-line and non-front-line SIA licence numbers against the SIA Register of Licence Holders to evidence all reasonable steps under Section 5(2)(b).
• 2. 90/60/30-Day Expiry Escalation Alerts (Pillar 1): Set roster software to flag licence renewals at 90, 60, and 30 days before expiry, including checks on EFAW and top-up training.
• 3. Automatic Roster Lockout Controls (Pillar 1): Use hard software blocks so controllers cannot book shifts for any guard with an expired, suspended, revoked, or wrong-sector licence.
• 4. Board and Management Non-Front-Line Audit (Pillar 1): Check that every company director, partner, manager, and supervisor who oversees security staff holds an active SIA licence under Section 3(2).
• 5. Five-Year Continuous History & 31-Day Gap Audit (Pillar 2): Check all active staff files against BS 7858:2019 Clause 7 to confirm five years of continuous history and independent proof for any gap over 31 days.
• 6. Biometric Right-to-Work & Visa Condition Logs (Pillar 2): Confirm all foreign worker vetting packs hold dated Home Office right-to-work checks (Clause 7), expiry alerts, and work-hour caps.
• 7. Conditional Screening & Risk Register (Pillar 2): Keep a live log of staff hired under preliminary screening (Clause 7) so none exceed BS 7858:2019 conditional time limits without a documented Clause 5 risk assessment.
• 8. Financial Probity & Criminality Declarations (Pillar 2): Complete and file Clause 7 CCJ/bankruptcy searches and criminality declarations before deploying operatives, and retain files securely under Clause 11.
• 9. BS 7499:2020 Signed Assignment Instructions (Pillar 3): Confirm every site holds current, client-signed Assignment Instructions listing licensable tasks, escalation steps, and handover rules.
• 10. Overt Display & Covert Exemption Checks (Pillar 3): Run unannounced site checks to confirm guards wear visible licences under PSIA 2001 Section 9, or—where work requires that they not be immediately identifiable—carry their licence on their person to produce on request.
• 11. Section 4(4) LDN Register & 5-Week Cap Tracking (Pillar 3): Confirm separate SIA dispensation permission is active and audit the LDN log to ensure every online-generated personal LDN stays within the 5-week maximum validity and usual 15% workforce limit, covers a direct employee at ‘checks in progress’ who held an active licence when applying (with no prior refusal, revocation, or suspension), and that ACS lapel pins are worn.
• 12. Public Space Surveillance CCTV Data Controller Logs (Pillar 3): Confirm control rooms and sites running public space CCTV use staff with valid SIA PSS licences and keep proper data logs.
• 13. Approved Subcontractor & BS 7858:2019 Clause 8 Packs (Pillar 4): Ensure licensable work is subcontracted only to other SIA Approved Contractors, and require BS 10119:2026 alignment, anti-subcontracting terms, and BS 7858:2019 Clause 8 screening confirmations before onboarding.
• 14. Gatehouse Pre-Shift Subcontractor Badge Verification (Pillar 4): Require site supervisors or control rooms to check the physical SIA badge and live online register for every subcontractor guard before induction.
• 15. Quarterly HMRC PAYE, IR35 & Modern Slavery Supply Chain Audits (Pillar 4): Audit payroll compliance (ACS Indicator 4.2.1), IR35 off-payroll labour checks, and Modern Slavery Act 2015 statements each quarter.

Incident Response: How Should You Handle an Unannounced SIA Site Inspection or Section 19 Notice?

When SIA investigators make an unannounced visit, demand records under Section 19, start a criminal inquiry, or issue a business improvement notice, your actions in the first 48 hours are critical. First, exercise your verification rights under the SIA’s enforcement guidance: anyone present on site can ask the inspecting officer to state the purpose of the visit, show the SIA’s written authorisation, and produce identification. The inspecting officer must make a written record of the visit and give a copy of that record on request. Alert your Compliance Lead immediately, and if any doubt arises over a guard’s licence validity or right to work on site, stand the guard down from licensable work at once and deploy a verified replacement.

Third, place an immediate legal preservation hold on your roster software, site occurrence logs, payroll ledgers, and BS 7858:2019 staff files. Never alter or backdate records: knowingly or recklessly making a false statement to the SIA is a criminal offence under Section 22(1) of the PSIA 2001. Fourth, run a rapid internal root-cause audit across the site and supply chain against BS 7858:2019 Clauses 4 to 11 and your SIA licence register. Because prosecution is not the SIA’s first choice when businesses cooperate openly and fix genuine control gaps promptly, transparent disclosure and documented corrective actions help prevent a warning or improvement notice from escalating.

ESC Support Ltd helps UK security firms and facilities managers run mock Section 19 inspections, remediate BS 7858:2019 vetting files, and build resilient compliance systems. While the SIA enforces the law and assessing bodies conduct formal ACS audits, our team prepares your business and checks your records before inspectors arrive. Start today with a free initial consultation and tailored SIA ACS compliance support.

Frequently asked questions

What are the maximum criminal penalties for deploying an unlicensed security operative under Section 5 of the Private Security Industry Act 2001?

Employing or supplying an unlicensed guard in licensable conduct is an offence under Section 5(1) of the PSIA 2001. Under Section 5(4), summary conviction in the Magistrates’ Court carries up to 6 months’ imprisonment, a fine up to the statutory maximum, or both; conviction on indictment in the Crown Court carries up to 5 years’ imprisonment, an unlimited fine, or both. Following conviction, the SIA can also pursue Proceeds of Crime Act 2002 (POCA) confiscation orders to recover unlawful contract revenue, subject to proportionality.

Can company directors be held personally liable if a subcontractor supplies unlicensed guards to a client site?

Yes. Under Section 5(1) and the corporate officer liability rules in Section 23 of the PSIA 2001, prime contractors cannot delegate criminal liability to a subcontractor by contract. Unless the company establishes a defence under Section 5(2) (either that it did not know and had no reasonable grounds to suspect the operative was unlicensed, or that it took all reasonable steps to prevent unlicensed conduct), an offence committed with the consent or connivance of a director, manager, or company secretary—or attributable to their neglect—renders that officer personally liable to prosecution.

What documentation can SIA investigators legally demand during an unannounced inspection under Section 19 of the PSIA 2001?

Under Section 19 of the PSIA 2001, a person authorised in writing by the SIA can enter regulated premises (other than private dwellings) at a reasonable hour and demand documents or information relating to licensable conduct, including shift rosters, signed Assignment Instructions, licence check logs, BS 7858:2019 vetting packs, payroll records, and right-to-work checks. Anyone present may ask the officer to state the purpose of the visit, show the SIA’s authorisation, and produce ID, and the officer must record the visit and provide a copy on request. Intentional obstruction or failing without reasonable excuse to comply is a summary offence under Section 19(5).

How does non-compliance with BS 7858:2019 pre-employment screening affect SIA enforcement and ACS status?

During a Section 19 investigation, incomplete BS 7858:2019 files (Clauses 4 to 11)—such as unverified 31-day career gaps, missing right-to-work checks, or exceeding conditional screening limits under Clause 7, unvetted subcontractors under Clause 8, or missing records under Clause 11—undermine your ability to prove you took “all reasonable steps” under PSIA 2001 Section 5(2)(b) and can lead to SIA business improvement notices or removal from the Register of Approved Contractors.

Under what strict conditions can an SIA Approved Contractor legally deploy staff using a Licence Dispensation Notice (LDN)?

Under Section 4(4) of the PSIA 2001 (and the corresponding Section 5(3) exemption), an Approved Contractor must first obtain separate permission from the SIA to use licence dispensation. A personal LDN is generated by the SIA’s online system and is valid for a maximum of 5 weeks. The operative must be a direct employee with a licence application at ‘checks in progress’, must have held an active SIA licence when they applied, and must not have had a previous application refused or a licence revoked or suspended. Usage is subject to a usual limit of 15% of the deployed licensable workforce (unless raised in exceptional circumstances), and operatives on an LDN must carry the notice and company photo ID and display an ACS lapel pin (with limited exceptions). Falsely claiming approved contractor status is an offence under Section 16(2).

How often should UK facilities management and security companies audit the SIA Register of Licence Holders to prevent enforcement action?

Because the SIA can suspend a guard’s licence (as a modification of the licence for whatever period the SIA decides) or revoke it at any time under Section 10 of the PSIA 2001, checking licences only at hiring is not enough. To demonstrate that you took all reasonable steps under PSIA 2001 Section 5(2)(b), firms should run daily automated checks against the SIA Register of Licence Holders and verify every subcontractor cover guard before each shift.

Sources: Security Industry Authority: Learn how we enforce SIA regulation (GOV.UK); Private Security Industry Act 2001 ss. 3, 4, 5, 9, 10, 16, 19, 22 & 23 (legislation.gov.uk); SIA: Guidance on the use of licence dispensation (GOV.UK); SIA: Licence conditions you must follow (GOV.UK); Proceeds of Crime Act 2002 (legislation.gov.uk); BSI Group: BS 7858:2019 & BS 10119:2026 (bsigroup.com). Last checked: October 2026.