If you run a business in Mumbai—whether you’re a factory owner in Andheri, a restaurant in Bandra, a tech company in Powai, or a retail chain across the city—and you use contractors for any services, this blog post could save you lakhs of rupees and years of legal headaches. Principal Employer risk explained under New Labour code 2025 in this blog post

Imagine this: You've hired a housekeeping contractor to manage cleaning staff at your Mumbai office. You pay the contractor ₹2 lakhs every month. The contractor is supposed to pay PF, ESI, and salaries to their workers. You assume everything is fine because, well, that's the contractor's job, right?
Six months later, you receive a notice from EPFO. The contractor hasn't deposited PF for any of the workers for the past six months. The outstanding amount: ₹3.5 lakhs including interest and penalties. And here's the shocker—EPFO is demanding payment from YOU, not the contractor. When you try to reach the contractor, their phone is switched off.
This isn't a hypothetical scenario. This is happening to businesses across Mumbai right now under the new Code on Social Security, 2020. And it's just the beginning of a fundamental shift in how liability works for businesses that use contractors.
If you run a business in Mumbai—whether you're a factory owner in Andheri, a restaurant in Bandra, a tech company in Powai, or a retail chain across the city—and you use contractors for any services, this blog post could save you lakhs of rupees and years of legal headaches.
The Code on Social Security replaced nine old laws including the EPF Act, ESI Act, and others, consolidating them into one comprehensive legislation. It came into full effect from November 2025, and buried in its provisions is a clause that's making business owners across India very nervous.
Under the old laws, if a contractor failed to pay statutory dues (PF, ESI, etc.) for their workers, the primary liability was on the contractor. The principal employer (that's you, the business owner) could be held responsible only in specific circumstances and after proving the contractor had defaulted.
Under the new Code, this has been turned on its head. You, as the principal employer, are now jointly and severally liable for all statutory dues of contract workers working in your establishment.
Let's break down what "jointly and severally liable" means in plain English: The government can recover the entire outstanding amount from you, regardless of whether the contractor has money or not. They don't need to first exhaust recovery from the contractor. They can come directly to you, and you have to pay. Then it becomes your problem to recover the amount from the contractor.
This is the critical question. Many business owners think "principal employer" applies only to big factories with hundreds of contract workers. Wrong.
Legal definition under the Code on Social Security:
A principal employer is any person who has ultimate control over the affairs of an establishment and on whose premises contract labour is employed for any work of the establishment.
In simpler terms, you're a principal employer if:
Real-world examples of principal employers in Mumbai:
Tech Companies: You hire a contractor to provide security guards, housekeeping staff, or pantry workers for your office. You're a principal employer for these contract workers.
Restaurants and Hotels: You engage a contractor to supply kitchen helpers, servers, or cleaning staff. You're a principal employer.
Retail Stores: You use a contractor for security, inventory management, or billing counter staff. You're a principal employer.
Manufacturing Units: You hire contractors for packaging, quality checking, loading/unloading, or maintenance work. You're a principal employer.
Hospitals and Clinics: You engage contractors for housekeeping, security, patient care assistance, or billing operations. You're a principal employer.
Educational Institutions: You use contractors for security, cleaning, canteen operations, or transport services. You're a principal employer.
IT Parks and Commercial Complexes: You hire contractors for facilities management, security, maintenance, or reception services. You're a principal employer.
The list is endless. If you're paying a contractor who brings workers to your premises, you're likely a principal employer with all the liabilities that entails.

Let's understand the shift with a clear comparison:
Under the Old Laws (Pre-November 2025)
Contractor's Primary Responsibility: The contractor who employed the workers was primarily responsible for paying all statutory dues—PF, ESI, wages, bonus, gratuity, etc.
Principal Employer's Limited Role: You, as the principal employer, had some responsibilities but they were secondary. You could be held liable only if:
Practical Effect: In most cases, when contractors defaulted, they simply disappeared or claimed bankruptcy. Principal employers could argue they had paid the contractor in good faith and weren't aware of defaults. Courts often sided with principal employers, making actual recovery from them difficult.
Payment Recovery Process: Authorities had to first issue notice to the contractor, attempt recovery from contractor's assets, prove contractor default, then issue notice to principal employer, and only after establishing contractor was untraceable or insolvent, recover from principal employer.
This process could take years, and many cases got stuck in appeals.
Under the New Code on Social Security (Post-November 2025)
Joint and Several Liability: Both the contractor and principal employer are equally and simultaneously responsible for all statutory dues. There's no concept of "primary" and "secondary" liability anymore.
Direct Recovery from Principal Employer: Authorities can directly demand payment from you without first trying to recover from the contractor. You can't argue "the contractor should pay first."
Deemed Employer Provisions: In certain situations, you're deemed to be the direct employer of contract workers, meaning there's no contractor shield at all. This happens when:
Practical Effect: When a contractor defaults (which happens more often than you'd think), you get the notice and you have to pay. Immediately. No lengthy legal process to first chase the contractor. You pay first, then try to recover from the contractor later (good luck with that).
Payment Recovery Process: Notice issued to principal employer and contractor simultaneously, payment demanded within 30 days, and non-payment leads to immediate recovery proceedings including attachment of bank accounts and property.
The entire process can be completed in 60-90 days instead of years.
The government's logic is straightforward: Contract workers were suffering because contractors would default and disappear, leaving workers without PF, ESI, or even wages. Since the principal employer benefited from the workers' labour, they should ensure statutory compliance regardless of who technically employed the workers.
From the workers' perspective, this makes sense. From your perspective as a business owner, this feels like being held responsible for someone else's fraud. But this is the new reality, and you need to protect yourself.
Real Scenarios: How This Plays Out in Mumbai
Let's look at real-world situations that businesses in Mumbai are facing right now:
Case 1: The Vanishing Housekeeping Contractor
A commercial building in BKC engaged a housekeeping contractor who provided 15 cleaning staff. Monthly payment: ₹2.5 lakhs. After eight months, the contractor stopped responding. Investigation revealed he hadn't paid PF for seven months (₹2.1 lakhs) or ESI for six months (₹45,000). He'd also underpaid wages by ₹30,000 monthly for three months.
Total liability: ₹3.65 lakhs plus interest and penalties, coming to ₹4.8 lakhs.
EPFO and ESIC issued notices directly to the building management company as principal employer. Despite protesting that they'd paid the contractor in full, they had to pay the entire amount within 45 days to avoid bank account attachment. Their attempts to sue the contractor are still pending, with little chance of recovery.
Case 2: The Security Agency that wasn't Compliant
A retail chain in Mumbai engaged a security agency to provide guards at 12 locations. The agency seemed professional—proper invoicing, GST-compliant, etc. After 18 months, a routine ESIC inspection revealed the agency never registered under ESI at all. They were collecting the money from the retail chain but not depositing anything.
Outstanding ESI: ₹8.5 lakhs. Since the agency wasn't even registered, the retail chain was deemed the direct employer. They had to pay the full amount plus damages. The agency had shut down and owners were untraceable.
Case 3: The Packaging Contractor's Selective Payment
A pharmaceutical company in Vikhroli used a contractor for packaging operations. The contractor employed 40 workers. For 14 months, the contractor paid PF for only 25 workers, claiming the other 15 were "trainees" not eligible for PF. This was false—all 40 were regular workers.
When EPFO discovered this during an audit, they demanded back-payment for the 15 workers (₹6.3 lakhs) from the pharmaceutical company. Even though the contractor was still operational, EPFO demanded payment from the principal employer first as they were "jointly and severally liable."
Case 4: The wage Theft discovery
An IT company in Andheri hired a contractor to provide pantry staff. During an employee complaint investigation, it emerged that the contractor was paying workers ₹8,000/month while billing the company ₹15,000/month per worker. The workers were entitled to minimum wages of ₹11,500/month based on Maharashtra regulations.
The IT company faced claims for wage differential payments (₹3,500/month × 8 workers × 10 months = ₹2.8 lakhs) even though they'd paid the contractor properly. Under the new code, ensuring workers receive correct wages is the principal employer's responsibility, not just paying the contractor.
Under the Code on Social Security and associated rules, principal employers have extensive responsibilities. Here's everything you're now accountable for:
You must verify that any contractor you engage is properly registered under the Contract Labour Act and has valid licenses. If you engage an unregistered contractor, you're automatically deemed to be the direct employer of those workers, with full liability.
You must ensure workers provided by contractors are registered with EPFO and ESIC, have valid UAN numbers, and their Aadhaar is linked. If a contractor provides workers who aren't registered, you're liable for registering them yourself.
You must ensure that statutory deductions (PF, ESI, Professional Tax) are actually deposited by the contractor. "I paid the contractor" is no longer a defense. You need proof the contractor deposited these amounts with authorities.
You're required to maintain records of all payments made to contractors, including the breakup of payments for wages, statutory contributions, and contractor's service charges. These records must be available for inspection.
You must verify that workers are receiving at least the minimum wages prescribed for their category of work. Underpayment by the contractor makes you liable for the differential.
Payment of wages must happen on time (within 7 days of month-end for monthly wages). If the contractor delays wage payments, workers can approach you directly, and you're obligated to pay.
You must maintain a register of contractors employed, showing their license numbers, number of workers they've provided, nature of work, and contract terms.
You must maintain a register of contract workers showing their names, addresses, nature of work, wages paid, and statutory contribution details. Even though they're not your direct employees, you're responsible for this record-keeping.
You must allow labour inspectors to access your premises and provide all records related to contract workers. Non-cooperation is a separate offense with penalties.
During audits, if discrepancies are found in contractor's payment records, you're given notice and opportunity to explain, but the burden of proof is on you to show the contractor was compliant.
You must display details of contractors engaged, nature of work assigned to contract labour, and applicable labour laws at conspicuous places in your establishment.
You must inform contract workers about their rights under ESIC, EPF, and other social security schemes. Worker ignorance is not a defense for non-compliance.
If a contractor fails to pay wages or statutory dues for 30 days despite receiving payment from you, you're legally required to directly pay workers and deposit statutory contributions. You must then recover these amounts from payments due to the contractor.
This means you can't just ignore a defaulting contractor—you have an affirmative duty to step in and ensure workers are paid.
Navigating principal employer liability under the new Code on Social Security is complex, high-stakes, and unforgiving. Making mistakes costs lakhs in penalties. But trying to manage everything yourself takes time away from actually running your business.
That's where Kaizen Consultancy Services comes in. For 18+ years, we've been Mumbai's trusted labour law advisor, and we've helped hundreds of businesses navigate contractor compliance without facing liabilities.
Our Principal Employer Protection Services:
✅ Contractor Due Diligence: We verify every contractor's credentials, registrations, and track record before you engage them, identifying red flags you might miss.
✅ Contract Drafting and Review: We draft contractor agreements with comprehensive compliance clauses and indemnities that protect your interests.
✅ Monthly Compliance Monitoring: We collect and verify all statutory payment proofs every month from your contractors, alerting you immediately to any delays or issues.
✅ Independent Record Maintenance: We maintain complete records of all contract workers, payments, and compliance documentation on your behalf—your protection in case of audits.
✅ Quarterly Compliance Audits: We conduct detailed audits of your contractor arrangements every quarter, identifying and fixing issues before authorities discover them.
✅ Notice Response and Representation: If you receive any notices, we prepare comprehensive responses and represent you before authorities, leveraging our 18 years of experience.
✅ Recovery Assistance: If you have to pay due to contractor default, we help you pursue recovery through legal channels, maximizing your chances of getting money back.
✅ Alternative Model Advisory: We help you evaluate whether direct employment, staffing companies, or other models might be better for your business than traditional contracting.
The Code on Social Security's principal employer liability provisions are not going away. If anything, enforcement is getting stricter as authorities realize how effective this mechanism is for protecting workers.
Every month you continue using contractors without proper verification and monitoring systems is a month you're exposed to potentially huge liabilities. Every contractor you engage without bank guarantees and ironclad agreements is a risk that could materialise into a ₹5-10 lakh notice.
The question isn't whether you should take action—it's whether you act now proactively or wait until a notice forces you to react.
We'll review all your contractor arrangements, identify liability gaps, assess your level of risk exposure, and provide a clear action plan with no obligations. Because protecting your business from contractor defaults isn't optional anymore—it's essential survival. Act now before you become the next business owner receiving a notice demanding payment for someone else's fraud. Let's get your contractor compliance protection systems in place today.