Stott and May

Umbrella Due Diligence: Agency Duties After April 2026

Umbrella due diligence is now an agency’s clearest defence against inheriting PAYE liability under the April 2026 joint and several liability rules.

29 September 2026

IR35 Enforcement 2026: HMRC Turns to AI Detection

IR35 enforcement in 2026 is sharper as HMRC deploys AI-enabled risk detection across PAYE, self-assessment and company accounts to flag weak determinations.

28 September 2026

Guaranteed Hours Reforms: The Case for an Agency Pause

FCSA and six sector bodies want guaranteed hours reforms paused for agency workers. Here is what the guaranteed hours pause means for recruiters and umbrellas.

24 September 2026

Employment Tribunal Deadlines: A Guide for Agencies

New employment tribunal deadlines give workers up to six months to claim from October 2026 — here is how agencies should protect evidence and witnesses.

23 September 2026

FCSA opens investigation

FCSA is currently investigating allegations of action being taken by HMRC against one of our members. In line with our governance procedures and commitment to

18 September 2026

Payslip Fraud: How FCSA Members Can Evidence Compliance

HMRC’s payslip fraud guidance shifts the burden onto the whole chain. Here is how FCSA Members can evidence compliance under joint and several liability.

18 September 2026

Cookie	Duration	Description
cookielawinfo-checkbox-advertisement	1 year	Set by the GDPR Cookie Consent plugin, this cookie is used to record the user consent for the cookies in the "Advertisement" category .
cookielawinfo-checkbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
CookieLawInfoConsent	1 year	Records the default button state of the corresponding category & the status of CCPA. It works only in coordination with the primary cookie.
elementor	never	This cookie is used by our website to allow the us to implement or change the website's content in real-time.
hubspotutk	5 months 27 days	HubSpot sets this cookie to keep a record of the visitors to the website. This cookie is passed to HubSpot on form submission and used when deduplicating contacts.
JSESSIONID	session	The JSESSIONID cookie is used by New Relic to store a session identifier so that New Relic can monitor session counts for an application.
PHPSESSID	session	This cookie is native to PHP applications. The cookie is used to store and identify a users' unique session ID for the purpose of managing user session on the website. The cookie is a session cookies and is deleted when all the browser windows are closed.
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
_GRECAPTCHA	5 months 27 days	This cookie is set by the Google recaptcha service to identify bots to protect the website against malicious spam attacks.
__hssc	30 minutes	HubSpot sets this cookie to keep a record of sessions and to determine if HubSpot should increment the session number and timestamps in the __hstc cookie.
__hssrc	session	This cookie is set by Hubspot whenever it changes the session cookie. The __hssrc cookie set to 1 indicates that the user has restarted the browser, and if the cookie does not exist, it is assumed to be a new session.
__hstc	5 months 27 days	This is the main cookie set by Hubspot, for recording visitors. It contains the domain, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session).

Cookie	Duration	Description
__cf_bm	30 minutes	This cookie, set by Cloudflare, is used to support Cloudflare Bot Management.
__hssc	30 minutes	HubSpot sets this cookie to keep a record of sessions and to determine if HubSpot should increment the session number and timestamps in the __hstc cookie.

Cookie	Duration	Description
hubspotutk	5 months 27 days	HubSpot sets this cookie to keep a record of the visitors to the website. This cookie is passed to HubSpot on form submission and used when deduplicating contacts.
_gcl_au	3 months	Provided by Google Tag Manager to experiment advertisement efficiency of websites using their services.
_hjAbsoluteSessionInProgress	30 minutes	Hotjar sets this cookie to detect the first pageview session of a user. This is a True/False flag set by the cookie.
_hjFirstSeen	30 minutes	Hotjar sets this cookie to identify a new user’s first session. It stores a true/false value, indicating whether it was the first time Hotjar saw this user.
_hjIncludedInPageviewSample	2 minutes	Hotjar sets this cookie to know whether a user is included in the data sampling defined by the site's pageview limit.
_hjIncludedInSessionSample	2 minutes	Hotjar sets this cookie to know whether a user is included in the data sampling defined by the site's daily session limit.
__hstc	5 months 27 days	This is the main cookie set by Hubspot, for recording visitors. It contains the domain, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session).

Cookie	Duration	Description
baqend-speedkit-user-id	5 months 27 days	No description available.
heyzine_session	3 months	No description
_hjSessionUser_2855694	1 year	No description
_hjSession_2855694	30 minutes	No description

is a

About

Website

Phone Number

Email Address

Umbrella Due Diligence: Agency Duties After April 2026

IR35 Enforcement 2026: HMRC Turns to AI Detection

Guaranteed Hours Reforms: The Case for an Agency Pause

Employment Tribunal Deadlines: A Guide for Agencies

FCSA opens investigation

Payslip Fraud: How FCSA Members Can Evidence Compliance

Stott and May

is a

About

Website

Phone Number

Email Address

Umbrella Due Diligence: Agency Duties After April 2026

IR35 Enforcement 2026: HMRC Turns to AI Detection

Guaranteed Hours Reforms: The Case for an Agency Pause

Employment Tribunal Deadlines: A Guide for Agencies

FCSA opens investigation

Payslip Fraud: How FCSA Members Can Evidence Compliance

Yet another cookie consent form