28Aug 2026

3 Non Negotiable Pre employment Checks for UK HR and Security Hiring

UK identity and address verification documents

Three checks cannot be skipped before anyone starts work: a right-to-work check that gives you a statutory excuse, a DBS check where the role legally requires one, and lawful, consented health screening after a conditional offer. Everything else on a pre-employment checklist, from references to qualification checks, supports these three but does not replace them. This guide gives you the tick-box list, the legal boundaries, and the exact sequence to run it.

TL;DR:

  • Right-to-work checks must be completed before employment begins to preserve the legal statutory excuse against civil penalties, requiring proper use of manual, online, or DVS routes.
  • DBS checks are role-specific, with only certain positions eligible for basic, standard, or enhanced checks, and renewal or updating procedures are crucial for roles involving vulnerable groups.
  • Employers should verify references directly, check qualifications with awarding bodies, and record all checks securely to ensure compliance and support potential legal challenges.
  • Follow-up checks for immigration status and DBS clearances are necessary on a set schedule, especially if the candidate’s right-to-work status has an expiry date or if the job involves sensitive duties.
  • Social media screening must be relevant and proportionate, with documented rationale, to avoid discrimination risks and stay within legal boundaries.

Table of Contents

The complete pre-employment checklist for UK employers

Every hire needs the same skeleton of checks, though the depth varies by role. Run through this list before any offer becomes unconditional.

Identity and address verification

Ask for a valid passport or photo driving licence alongside a recent utility bill, council tax statement, or bank statement showing the candidate’s current address. Take a copy of each document, note the date you checked it, and keep the original briefly to compare the photo against the person in front of you. Do not accept a document that looks altered or where the photo clearly does not match.

Right to work checks

This is the one check that carries a specific legal consequence if you get it wrong. You must complete a manual check using the three steps of obtain, check, and copy, drawing on the List A and List B documents set out in Home Office guidance, or you can use the Home Office online service via a share code, or the certified Identity Document Validation Technology (IDVT) route through a Digital Verification Service (DVS) provider for British and Irish passport holders. Share codes and DVS checks have their own limitations: a share code only covers people with a digital immigration status, and DVS cannot be used for every nationality, so know which route applies before you start.

DBS and criminal record checks

Eligibility depends entirely on the role. Basic checks are available for any position, standard checks apply to roles with specific legal exemptions, and enhanced checks (with or without barred-list checks) are reserved for work involving children or vulnerable adults, or certain licensed activities. Requesting the wrong level is a compliance problem in itself, so confirm eligibility against the guidance or the DBS eligibility tool before submitting anything.

References, employment history and qualifications

Contact at least two previous employers directly rather than relying on a reference letter the candidate hands you. Verify dates of employment, job title, and reason for leaving where possible. Where a qualification is essential to the role, such as a security-related NVQ or a driving qualification, check it directly with the awarding body rather than taking the certificate at face value.

Health and occupational checks

Health questions can only follow a conditional job offer, and only where the check is genuinely relevant to the role. You need written consent, and the candidate has the right to see any medical report and challenge its contents before you rely on it.

Role-specific licences

Hand holding a UK SIA licence card for verification

Security roles typically need an SIA licence check, driving roles need a licence and points check, and some professions require registration with a specific body. For candidates who have spent significant time overseas, remember that DBS checks do not cover foreign convictions, so an overseas police certificate or embassy guidance fills that gap.

A right-to-work check done properly, following the three-step process before employment starts, gives you a statutory excuse against a civil penalty if the candidate turns out not to have permission to work. Skip a step or check the wrong document and that protection disappears, regardless of how well-intentioned the recruitment was.

Fairness matters just as much as procedure. Apply the same checks consistently to everyone in a given role rather than singling out candidates based on nationality, age, or accent, since selective screening on those grounds risks discrimination claims. The CIPD frames this as both a legal and an ethical obligation, and recommends setting out your check requirements in the offer letter so candidates know exactly what to expect.

Health checks need explicit written consent and can only follow a conditional offer. Every document you collect, whether it is a passport copy or a medical report, falls under data protection law: keep it only as long as necessary, restrict who can access it, and have a destruction process once retention periods expire.

How to run and record pre-employment checks step by step

Following a fixed sequence keeps you compliant and stops checks slipping through the cracks during a busy recruitment round.

  1. Screen before the offer. Shortlist based on application and interview only, deferring any check that legally requires a conditional offer first.
  2. Make the conditional offer and gather consent. State clearly which checks will follow and get written consent for health screening at this stage.
  3. Run statutory checks before the start date. Complete the right-to-work check using the Home Office share code, DVS, or manual List A/List B route, and submit any required DBS application through the candidate or a Responsible Organisation, verifying identity documents as part of that process.
  4. Log everything and store securely. Record the date each check was made, who carried it out, and where the copy is stored.

Pro Tip: Build a simple internal log with columns for candidate name, check type, date completed, checker’s initials, and next review date. It takes ten minutes to set up and saves hours when a DBS certificate or right-to-work status needs renewing.

Where a candidate holds a Certificate of Application or has an outstanding immigration decision, contact the Home Office Employer Checking Service for a Positive Verification Notice rather than guessing at their status.

Red flags and what to do when a check raises concerns

Most checks come back clean, but when something doesn’t add up, react in a measured, documented way rather than withdrawing an offer on instinct.

  • Mismatched details between a passport, application form, and reference, such as different employment dates or job titles.
  • Unexplained gaps in employment history that the candidate cannot account for satisfactorily.
  • An undisclosed conviction that surfaces on a DBS certificate, or a barred-list match on an enhanced check.
  • A reference that declines to confirm basic facts you would expect them to know.

Give the candidate a chance to explain before you act. Pause the offer rather than withdraw it outright while you verify further, and use the Employer Checking Service or specialist legal advice for anything touching immigration status or barred-list findings.

Record-keeping, retention and secure destruction

Retention rules aren’t optional extras. They’re part of the compliance file that protects you if a check is ever challenged.

  • Keep right-to-work copies for the duration of employment plus two years after the person leaves, recording the date the check was made and who made it.
  • Store DBS certificates and consent forms according to DBS guidance and your own data policy, never longer than necessary.
  • Restrict access to a named few in HR, not the whole management team.
  • Set a destruction schedule and stick to it rather than letting old files accumulate indefinitely.

Why security-sector hiring needs a sharper checklist

Security roles carry extra weight because an SIA licence check sits alongside standard right-to-work and DBS checks, not instead of them. Employers hiring door supervisors, CCTV operators, or close protection staff need to verify licence validity directly with the SIA, not just take a candidate’s word for it. Security Jobs Board’s guides on security screening and types of security checks go further into the sector-specific detail this checklist only summarises.

Follow-up checks: renewals and time-limited right to work

A pre-employment checklist doesn’t end on day one. Many right-to-work statuses carry an expiry date, and treating that first check as a one-off is one of the most common compliance gaps HR teams fall into.

Where a candidate’s immigration status is time-limited, the check does not stop being your responsibility once they start work. You need to diarise the expiry date and repeat the right-to-work check before it lapses, using the same manual, share code, or DVS route as the original check. Miss that follow-up and you lose the statutory excuse retrospectively for the period after expiry, even if the original check was done correctly.

DBS certificates don’t expire in a legal sense, but they are a snapshot from the day they were issued. Best practice for roles involving vulnerable groups or ongoing trust, security work included, is to re-run enhanced checks on a set cycle, commonly every three years, rather than relying on a certificate from years earlier. Some employers use the DBS Update Service to keep a certificate current between full rechecks, which is worth building into your onboarding paperwork from the start.

Build both types of follow-up into the same internal log you use for the original checks. A spreadsheet with an expiry column and an automated reminder six weeks out costs nothing to set up and prevents a compliance failure that only surfaces during an audit or, worse, a Home Office visit.

Compliance checklist with expiry date reminder on desk

Social media checks: what you can and can’t do

Checking a candidate’s public social media presence sits in a legal grey area that trips up a lot of employers who assume it’s simply due diligence.

There’s no law banning employers from looking at a candidate’s public LinkedIn, X, or Instagram profile. The problem is what you do with what you find and how you find it. Data protection law expects any check to be relevant, proportionate, and disclosed, so trawling a personal profile for characteristics unrelated to the role, then using that to reject a candidate, exposes you to a discrimination claim if the information touches on a protected characteristic like religion, disability, or family status.

Keep any social media review narrowly tied to job relevance: professional conduct claims, verifiable safeguarding concerns, or genuinely public statements that conflict with the role’s requirements. Document why you looked and what you found, the same way you would for any other check, rather than treating it as an informal background trawl outside your normal process. If in doubt, a formal reference or DBS check will usually tell you more that’s actually admissible than a social media scroll ever will.

Fitting checks into your recruitment timeline

Pre-employment checks work best when they’re built into the recruitment workflow from the start, not bolted on after you’ve already picked a candidate.

Map out your timeline before you advertise a role: shortlist and interview, conditional offer with clear check requirements stated in the letter (a point CIPD specifically recommends), then the statutory checks, then a start date that leaves enough room for DBS turnaround, which can run to several weeks for enhanced checks. See Employment Opportunities – GoKarts USA® for related recruitment insights. Rushing a start date before a DBS certificate arrives, or before a right-to-work check is complete, is one of the most avoidable compliance failures in UK recruitment.

Build slack into the offer-to-start window rather than treating checks as a formality to squeeze in during the final week. A realistic timeline also protects the candidate experience: nobody wants to resign from their current job only to have a start date slip because a reference hasn’t come back.

What the checklist gets wrong if you follow it blindly

The conventional advice treats a pre-employment checklist as a compliance exercise: tick every box, file every document, move on. That misses the point. The checklist is a floor, not a strategy. GOV.UK tells you what’s legally required; it doesn’t tell you that a rushed reference call catches almost nothing useful, or that a DBS certificate from three years ago tells you very little about a candidate’s current circumstances.

What the CIPD’s own framing gets right, and what most employers underweight, is treating checks as a retention tool, not just a legal shield. A thorough reference call that actually probes performance and conduct, not just dates, catches problems a right-to-work check never will. If you can only prioritise one improvement to your current process, make it that: spend the extra fifteen minutes on references before you spend it re-checking documents you’ve already verified correctly.

For security-sector employers specifically, the SIA licence check deserves the same rigour as right-to-work, not an afterthought bolted on at the end. Get your hiring resources sorted through Security Jobs Board’s career advice hub before your next recruitment round starts, and if you’re hiring across Northern Ireland, check current security vacancies in the region to benchmark your own listing against what candidates there are seeing.

— Rob

Sources

FAQ

What do pre-employment checks consist of?

A standard set covers identity and address verification, a right-to-work check, references and employment history, qualification checks, and DBS checks where the role requires them, with health checks only after a conditional offer.

What are some examples of pre-employment checks?

Common examples include a Home Office right-to-work check via share code or manual document review, a DBS check at basic, standard, or enhanced level, direct reference verification with previous employers, and, for security roles, an SIA licence check.

What are red flags in a background check?

Mismatched dates or details between documents and references, unexplained employment gaps, an undisclosed conviction on a DBS certificate, or a reference unwilling to confirm basic facts all warrant further questions before you proceed.

What is a starter checklist for a new job?

Beyond the pre-employment checks already completed, new hire paperwork typically includes a signed contract, a starter checklist for tax purposes, bank details for payroll, and confirmation of the right-to-work and DBS documents already on file.