Employee screening checklist for UK employers

A sound employee screening process checks the evidence that matters for the actual role, at the right stage, with the applicant's information handled fairly. It does not run the same intrusive background checks on every candidate. Use this checklist to build a role-specific decision record: what must be checked by law, what a regulator or contract requires, what the organisation has chosen to verify, who checks it and what happens if the result raises a question.

The Home Office right-to-work employer guide was updated on 1 October 2026. It explains prescribed checks, timing, acceptable routes and follow-up duties. Use the current version for each hiring decision; a generic checklist cannot reproduce every immigration status case. The DBS eligibility collection likewise requires role-specific legal entitlement before a Standard or Enhanced check is requested in England and Wales. Neither source supports a blanket “Enhanced DBS for everyone” rule.

Copyable role and screening plan

Prepare this plan before reviewing a particular candidate. It helps prevent standards from shifting mid-process or a manager requesting a higher DBS level because a person looks “risky”. If the duties change materially, revise the role plan and reassess eligibility.

Copyable candidate checklist

Do not use the table as permission to collect everything. Mark “not applicable” with the reason when a check is unnecessary or not legally available. Keep detailed sensitive results out of a broad hiring spreadsheet. A checklist can show that an authorised reviewer reached a decision without exposing criminal-record or health information to every recruiter.

1. Set the right-to-work gate

The employer must use a prescribed right-to-work check before employment begins if it wants the statutory excuse against a civil penalty. The exact method depends on the person's status and available evidence. The current Home Office guide covers online checks, manual documents, identity verification technology for eligible cases, the Employer Checking Service and follow-up checks. The official checklist helps record the required steps.

Do not ask a candidate to provide a document they cannot use under the current rules, or accept a photocopy simply because it is convenient. Check that the person shown by the evidence is the applicant and that the permission covers the work. Where an official route gives a time-limited result, record any follow-up requirement accurately. A reminder does not itself perform a legal check. Revisit the 1 October 2026 guide for arrangements beyond a straightforward employee hire; it may distinguish other working arrangements.

2. Decide whether a criminal-record check is lawful and useful

In England and Wales, a Basic DBS check can be sought without a role-specific higher-level entitlement, but a Standard or Enhanced check requires a qualifying role or activities. A barred-list check needs its own legal basis. The DBS eligibility guidance says the recruiting organisation is responsible for choosing the lawful level; eligibility alone does not automatically make a check mandatory. Scotland uses Disclosure Scotland and Northern Ireland uses AccessNI, so do not apply an England-and-Wales DBS form across the whole UK.

Record the precise duties, workforce, frequency and relevant legal category before requesting a higher-level check. A setting such as a school, care home or hospital does not by itself make every job eligible for the same check. If sector guidance or a commissioner imposes screening, cite that source and still verify the legal ceiling on the level requested. Make a suitability decision from all relevant evidence, not from an automatic “clear/fail” label.

DBS certificates have no official expiry date. If an organisation chooses a recheck policy or must follow a sector interval, record it as a review/recheck rule, not a certificate expiry. The separate Complys DBS rechecks owner should carry the detailed renewal discussion. If using the Update Service, follow the DBS employer guide: verify the original certificate and identity, consent, current legal entitlement and matching scope. Do not claim Complys performs a DBS check or status query.

3. Verify qualifications and references proportionately

Identify the credentials essential to the job, then verify them with the issuing body or current public register where a suitable route exists. Record what was checked, when and whether restrictions apply. A licence for a regulated activity, professional registration or vehicle category may need a different check from a training certificate. Do not infer that a certificate image proves current status if the underlying authorisation can be suspended.

Ask referees questions related to the work and apply the same standard to comparable applicants. If a reference reveals a gap or adverse information, give the candidate a fair chance to explain before making a decision. Avoid collecting irrelevant health, family or criminal-history detail because it appears in an email. Where a sector has mandatory reference procedures, use that sector's current guidance. This general template does not replace safeguarding recruitment requirements for schools, care, healthcare or regulated transport.

4. Handle candidate data as part of the process

The ICO's recruitment and selection guidance explains how data protection applies from application through selection and deletion. The ICO currently labels that guidance as under review following the Data (Use and Access) Act, so verify its current status when publishing. Tell applicants what information is collected and why, give access only to decision makers, verify accuracy and set a retention rule for successful and unsuccessful applicants. Extra care is needed for criminal-offence and health information. Do not put scanned DBS certificates, passports and medical details in a shared team folder merely because the checklist has a row for them.

Separate evidence of a check from the underlying document. For example, a restricted right-to-work evidence location may be necessary under Home Office rules, while a broad hiring tracker can show the date, method, checker and follow-up due without displaying the document to every manager. The exact retention obligations vary by record type. If a candidate withdraws or is rejected, follow the documented retention policy and applicable legal needs rather than keeping all material forever.

5. Make an explicit final decision

Before a start date is confirmed, ask: Which mandatory checks are complete? What is outstanding? Is any conditional start permitted under the applicable sector rules, and who authorises it? If a discrepancy exists, what was investigated and what did the applicant say? Has the role changed since the original screening plan? The final reviewer signs the decision and records any monitoring or follow-up obligation.

An example illustrates why a flat checklist can fail. A facilities company hires an administrator who may occasionally visit an NHS site but will not provide patient care or undertake another eligible activity. The company performs the required right-to-work check, verifies relevant experience and references, and checks any site-access condition in the actual contract. It does not order an Enhanced adult-workforce DBS check merely because the client is a hospital. Later, if the role changes to include qualifying regulated activity, it reassesses the lawful check level and suitability before the new duties begin.

Where Complys fits

The appropriate Complys relationship is to a verified worker or staff-compliance page, if current product evidence supports storing limited check metadata and review reminders. Ask for a demonstration of the live workflow. Do not claim Complys conducts Home Office checks, DBS applications, Update Service queries, professional-register validation or a legal suitability decision. Link to the dedicated DBS recheck owner only for that separate decision, and to a verified right-to-work owner for route detail. Confirm the actual canonical host before adding internal links.

Source and writer-side QA record

Intent/cannibalisation: Usable cross-check screening checklist for a GB employer, distinct from detailed right-to-work and DBS owners. Public search on 6 October 2026 found no exact Complys owner at the proposed path; repository/canonical check remains open. Product truth: no check execution or legal decision capability claimed. Writer-side disposition: READY.