When a security contract changes hands — a client switches provider, or a company wins a tender from a rival — it triggers one of the most complex employment law situations in the UK: a TUPE transfer. For security company owners and managers, getting TUPE wrong isn’t just an HR headache. It can mean employment tribunals, compensation claims, and reputational damage that far outweighs the value of the contract itself.
For ACS compliance, this is important. This guide explains what TUPE means for UK security companies, what your obligations are, and how modern workforce management tools help you handle transfers cleanly and compliantly.
What Is TUPE?
TUPE stands for the Transfer of Undertakings (Protection of Employment) Regulations 2006, as amended in 2014. It protects employees when the business or service they work for transfers to a new employer.
In the security industry, TUPE is triggered in two main scenarios:
- Business transfer: A security company is sold or acquired, and the new owner takes on the existing workforce.
- Service provision change (SPC): A client moves their security contract from one provider to another — and the guards assigned to that site transfer to the incoming provider.
Service provision changes are by far the most common TUPE trigger for security firms, and the rules here are straightforward but frequently misunderstood.
Who Transfers Under TUPE?
Not every guard working loosely within a company transfers automatically. TUPE applies to employees who are assigned to the organised grouping of workers that is principally engaged in carrying out the contract being transferred.
In practice, this means:
- Guards who spend most of their working time on the site covered by the contract are likely to transfer.
- Guards who work across multiple sites and only occasionally cover the transferring contract may not transfer.
- Relief or pool guards who happen to have been deployed there recently may not qualify.
This distinction matters enormously. If you incorrectly identify who is “assigned” to a contract, you either lose staff you needed to retain, or you expose yourself to claims from staff who should have transferred but weren’t included.
Good guard management software makes this clear: you should be able to pull a report showing every guard’s site allocation history, contracted hours per site, and percentage of time spent at a given location. Without that data, you’re guessing.
What TUPE Means for the Incoming Provider
If you’re the new provider winning a contract, TUPE means you inherit the existing guards on their existing terms. Specifically:
- Their terms and conditions of employment (pay rate, holiday entitlement, sick pay arrangements) transfer with them.
- Their continuity of employment is preserved — a guard with 4 years’ service at the outgoing provider arrives at your company with 4 years’ service for redundancy and unfair dismissal purposes.
- Any outstanding disciplinary or grievance matters transfer too.
- Collective agreements (if the outgoing provider had union recognition) may also transfer.
You cannot unilaterally change a transferred employee’s terms to match your standard contracts — even if yours are better — if the reason for the change is the transfer itself. Changes connected to the transfer are automatically void unless there’s an economic, technical or organisational (ETO) reason entailing changes in the workforce.
What TUPE Means for the Outgoing Provider
If you’re the provider losing a contract, your obligations are:
- You must notify the incoming provider of all employee liability information (ELI) at least 28 days before the transfer. This includes payroll details, disciplinaries, ongoing grievances, and claims.
- You must inform and consult with affected employees (or their representatives) before the transfer takes place. There’s no minimum period specified in law, but “long enough to be meaningful” is the standard.
- Failure to provide ELI can result in a £500 minimum award per employee to the incoming provider.
Many security companies lose track of ELI because guard records are scattered across spreadsheets, paper files, and email chains. If you can’t produce a clean record of every guard’s pay, leave entitlement, and HR history within 48 hours of notice, your systems aren’t good enough for this.
Common Mistakes Security Companies Make with TUPE
1. Assuming all guards on a site transfer
Only guards “principally assigned” to that contract transfer. Relief guards who covered the site a few times do not automatically transfer, even if they’ve been there recently.
2. Not consulting early enough
TUPE consultation isn’t a formality you do on the last day. Courts have ruled that starting consultation too late constitutes a failure to comply, even if the outcome wouldn’t have changed. Start as soon as you know the transfer is happening.
3. Imposing harmonisation immediately
Bringing TUPE transferees onto your standard terms straight away is unlawful if the reason is the transfer itself. Small differences in pay rates or holiday entitlement may need to be maintained indefinitely unless an ETO reason applies.
4. Losing ELI documentation
The incoming provider can make a claim against you if you fail to provide accurate ELI within the 28-day window. If your records are scattered, you’re at risk every time a contract changes hands.
5. Forgetting about ongoing SIA licence compliance
Transferred guards still need valid SIA licences. On day one of taking over a contract, you need to know the licence status of every incoming guard. If an incoming guard’s licence has expired and you’re not aware, you’re deploying an unlicensed operative — your responsibility, regardless of the transfer.
How TacDesk Helps You Handle TUPE Cleanly
TUPE compliance in the security industry is fundamentally a data problem. The companies that get it wrong don’t fail because of bad intentions — they fail because they can’t produce clean, accurate records when they need them.
TacDesk gives you the infrastructure to handle contract changes compliantly:
- Site allocation tracking: See at a glance which guards are principally assigned to each site — the data you need to determine TUPE scope accurately.
- SIA Public Register sync: When incoming guards arrive from the outgoing provider, their licence status is verified against the SIA Public Register automatically. No manual checking required.
- Employee liability information export: Pull a complete ELI pack for any guard or group of guards — payroll history, leave records, HR notes — in minutes rather than days.
- Audit trails: Every action in TacDesk is timestamped and logged, so you can demonstrate when consultation happened and what was communicated.
A Quick TUPE Checklist for UK Security Companies
Whether you’re winning or losing a contract, use this as a starting point:
Outgoing provider:
- Identify which guards are principally assigned to the contract
- Prepare employee liability information for each transferring employee
- Serve ELI on the incoming provider at least 28 days before transfer
- Inform and consult with affected employees (and/or representatives)
- Notify affected employees of the identity of the incoming employer
Incoming provider:
- Request ELI from the outgoing provider as early as possible
- Review and acknowledge transferring terms — do not assume they match yours
- Verify SIA licence status for all incoming guards before deployment
- Inform transferring employees of any measures you envisage taking
- Plan a consultation process if changes to the workforce are anticipated
The Bottom Line
TUPE is one of the most consequential legal frameworks UK security companies deal with regularly. A mid-sized firm winning or losing several contracts a year could be handling multiple TUPE transfers simultaneously — each with its own timelines, documentation requirements, and legal exposure.
The companies that handle this well aren’t necessarily more legally sophisticated. They have better systems. When your workforce data is accurate, accessible, and exportable, TUPE becomes a manageable process rather than a recurring crisis.
If you want to see how TacDesk can help you manage contract transitions — including SIA verification, site allocation tracking, and HR record management — book a demo with our team.
This article is for informational purposes only and does not constitute legal advice. For specific TUPE guidance relevant to your circumstances, consult a qualified employment solicitor.