International admissions depend on the people who can act in the sponsor system

The admissions promise depends on an authorised action

A school can have a clear international strategy, knowledgeable staff and complete pupil records while still depending on one person to carry out a critical action in an external system. If that person leaves, cannot authenticate or lacks the required access, the weakness becomes visible at the point the school needs to act. The digital issue reaches beyond an IT login into the reliability of the admissions and sponsorship process.

October's Home Office guidance brings that dependency into focus. Changes to sponsorship duties sit alongside updated instructions on system access and authentication. For an independent school, the practical job is to connect the person authorised to act with the system and records needed to do so. An access change belongs in the admissions and governance conversation as well as the IT work plan.1

Keep three dates attached to the change

Document 2 is version 10/2026 and says it is for use from 8 October. Separately, SMS manual 1 was updated on 5 October and the multi-factor authentication manual on 2 October. These are related sources with different purposes, not a single change that began on one convenient publication date.123

The distinction matters when a school sets its own implementation plan. A technical guide explains how a user completes a process; the sponsorship guidance identifies the relevant responsibilities and permissions. Leaders need both. A date recorded in a board paper should identify the document and the change it concerns.

Level 2 access has a defined transition

Current Home Office guidance says no new Level 2 users can be appointed from 9 September 2026. From 8 March 2027, existing Level 2 users will no longer be able to access SMS. Where continued access is needed and the user is eligible, the school must add them as a Level 1 user and deactivate the Level 2 account. The levels have different permissions, including which records and functions users can access.24

That transition needs an authority decision before it becomes an account-administration task. Establish what each person is authorised and eligible to do, which responsibilities they perform and who provides cover. A Level 1 appointment is not simply a new label for every existing account. Check individual eligibility against the Home Office requirements and maintain individual access; sharing another user's credentials is not a continuity arrangement.

The Home Office requires key personnel contact information and user details to remain current. It also distinguishes the authorising officer or key contact role from the separate user access needed to enter SMS. A senior job title alone is not a test that someone can complete an action in the system.4

Authentication needs accurate information and an alternative plan

SMS guide 13 explains the introduction of multi-factor authentication and the importance of correct user information. Its October update includes a route for correcting a date of birth where necessary for authentication. The guide warns that incorrect details may prevent successful completion and cause delay. A school can examine preparedness without disclosing any individual’s identifying information.3

Check whether an authorised user can perform the school's necessary functions and reach the proper support route if authentication fails. Do this before a reporting deadline or a colleague's departure makes the question urgent. Published instructions provide the route to follow; the school's own authorised check is needed to establish its readiness. This feature has not accessed SMS or tested an account.

NCSC’s corporate-service guidance recommends multi-factor authentication for access to sensitive information and consideration of authentication strength when selecting services. That supplies the wider security context. It does not replace the Home Office’s specific process or authorise a school to alter the controls of an external government service.5

An institutional change also changes the evidence question

Document 2’s October change log identifies amended merger and takeover provisions. The guidance says a sponsor licence is not transferable and that the consequences depend on the transaction or organisational change. A new brand or group announcement therefore cannot establish the appropriate sponsorship arrangements for a particular school.1

The amended provision also says a receiving sponsor may need to assign a new CAS for reporting and administrative purposes, with UKVI informing it if this is required. That creates a precise question for institutional-change reporting without implying that every transferring pupil needs a new immigration application.1

This gives our Alpha and Leweston continuity reporting another specific question to investigate. It does not establish a sponsorship problem at either institution. A responsible follow-up would first identify the relevant legal entity, licence, actual change and applicable route, then obtain authoritative clarification where needed. Pupil welfare and education should remain central to that enquiry.

Put sponsorship authority beside the IT migration plan. Moving accounts, documents and a platform preserves only part of the capability if nobody has established who can carry out the required reporting afterwards. The school needs both usable information and authorised action. This is a dependency to examine during change, not an allegation about a school or operator.

Records should remain usable within the proper scope

The current government Appendix D publication makes an important scope point: Student sponsor record-keeping duties are now contained in the Student sponsor guidance. An old worker-sponsor checklist should not silently become the authority for pupil records. Schools need to identify the instructions that apply to their own sponsorship route.6

From there, the governance question is how relevant records, access and responsibility remain connected during staff or system changes. The ICO’s principles require a defined purpose, appropriate limits, security and demonstrable responsibility for personal information. Keeping more material indefinitely is not a substitute for understanding the actual records and applicable retention requirements.7

The useful evidence for governors is an account of the process: who owns it, who can act, which documents govern it, how absence or departure is handled and how completion can be demonstrated. Sensitive pupil and user information need not appear in an ordinary public explanation of that control.

Preserve the ability to act through the transition

The March 2027 transition gives schools a defined point around which to organise this work. Confirm the relevant roles and eligibility, examine the account changes and establish how an authorised person will continue the necessary functions during absence or institutional change. Keep the responsible people working from the same record, with any unresolved question sent to someone able to obtain authoritative advice.

The useful outcome is an admissions and sponsorship service that remains operable when a colleague or institution changes. Current documents establish the transition, not whether a particular school has the right account structure, owes a transaction-specific response or has missed a deadline. Those conclusions need the facts of the case. A school can prepare thoroughly while keeping each of those judgements distinct.