As traditional recruitment practices continue to evolve, partly driven by the development of technology, organisations need to ensure that they follow pre-employment checking procedures that are both legal and ethical.
This guide, written in association with HR-inform, highlights the key checks that most organisations will carry out during their recruitment process, including right-to-work checks, criminal record checks, medical checks, reference checks and online and social media checks. The guidance also includes case studies that outline the considerations that need to be made when conducting pre-employment checks.
Overview
Recruiting talented individuals who are a good fit for a role is becoming an increasingly important consideration for organisations, regardless of their size or sector. To improve retention, and reduce turnover, organisations should avoid employing unsuitable individuals at the outset. This can help reduce the time, effort and costs that organisations invest in recruiting replacement candidates or repair the damage caused by unsuitable individuals, whether internally (by lowering morale) or externally (through detrimentally impacting the reputation of the business).
To recruit the most suitable employee, organisations should carry out appropriate and proportionate pre-employment checks to determine the suitability of a candidate. As traditional recruitment practices continue to evolve, partly driven by the development of technology, organisations need to ensure they follow pre-employment checking procedures that are both legal and ethical.
This guide highlights the key checks that most organisations carry out during their recruitment process and explains the risks and practical considerations that need to be considered when offering employment. The CIPD also provide a legal resource looking at the legislation, and case law examples, surrounding recruitment.
The following pre-employment checks are explored in detail:
- right-to-work checks – the global movement of jobseekers has created an obligation on organisations to ensure they are not employing those who do not have permission to work in the UK, or in the role they are employed to undertake
- criminal record checks – to comply with legal obligations, and to ensure the safeguarding of vulnerable members of society, organisations may be required to request records to determine whether ex-offenders are suitable for particular employment
- medical checks – with an increasing focus on the inclusivity and diversity of recruitment processes, organisations need to tread carefully when asking questions relating to health and medical information
- reference checks – organisations are not usually under any legal obligation to obtain an employment reference, and there is no automatic right to receive a reference from a previous or current employer (except in certain sectors). However, it is common to request at least one reference and, as employers are under a duty of care to provide references that are accurate and not misleading, it is essential that they handle both the provision and receiving of references carefully
- online and social media checks – the increasing availability of professional, and personal, information online creates an additional source of information that is easily accessible by organisations when determining the overall suitability of an individual, but care must be taken to handle and use this information in the right way.
Pre-employment checks must be carried out in accordance with the six data protection principles, as set out within the Data Protection Act 2018. Data protection legislation requires organisations to adhere to the following best practice principles:
• All personal data must be processed fairly, lawfully and transparently.
• Personal data must be obtained only for specific, explicit and lawful purposes and must not be processed in any manner incompatible with the purposes for which it was collected.
• Personal data must be adequate, relevant and not excessive in relation to the original purpose for which it was processed.
• Personal data must be accurate, kept up to date and every reasonable step taken to ensure that any inaccurate data is erased or rectified without delay.
• Personal data must not be kept for any longer than is necessary and only for the purpose for which it was collected.
• Personal data must be processed in a manner that ensures appropriate security, using technical or organisation measures. These measures should include protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.
Additionally, the data controller (the organisation carrying out the pre-employment checks) must be able to demonstrate accountability, that is, they can prove they take responsibility for their actions with regards to personal data.
See our content on data protection for more information relating to the handling of personal data under the Data Protection Act 2018.
The purpose of pre-employment checks
Carrying out pre-employment checks, or ‘vetting’ a candidate, is an important part of the recruitment process, whereby organisations consider whether a candidate is eligible for a job role.
With the selection of candidates focusing on their suitability for the job role, many organisations carry out pre-employment checks to safeguard their business from any negative impact caused by the recruitment of an individual. Vetting is a key part of due diligence carried out by HR to ensure a candidate will not bring a company into disrepute, or cause difficulties with any colleagues, customers or suppliers. There are also legal requirements placed on organisations to carry out certain pre-employment checks, for example checking whether candidates have a criminal record that prevents them from being employed in particular roles.
Standard pre-employment due diligence will usually require organisations to undertake the following checks:
• Right to work in the UK.
• Criminal record certificates, where appropriate (as discussed in the ‘Criminal record check’ section).
• Medical and health-related questionnaires.
• Validity of professional qualifications.
• Obtaining references from current or previous employers.
As candidates continue to embrace technology to create an online profile, more organisations are using online and social media checks during their vetting process, including reviewing professional sites such as LinkedIn. There are risks associated with carrying out such checks and organisations need to ensure they are not falling foul of laws which are equally applicable to information received offline and that which is accessible on the internet. This is explored in more detail in the ‘Online and social media checks’ section.
The risks organisations will wish to guard themselves against by vetting will vary across different sectors, and between organisations.
For example:
• in the retail sector, employee theft can occur and organisations will want to limit the risk of selecting a dishonest applicant.
• NHS Employers publishes NHS Employment Check Standards, which specify the checks that must be carried out before employing staff in NHS positions across England. A failure to meet these standards could result in risks to the health and safety of service users and have an impact on the organisation’s regulatory compliance.
• the Code of Practice on the Security screening of individuals employed in a security environment (BS7858) applies standards for security screening of staff, including the requirement to carry out financial checks.
The specific checks an organisation requires may include reviewing an individuals’ background in areas other than employment, including, for example, identity, driving licence, address and credit checks. The type of role, sector and organisation will help to determine which specific checks are beneficial; for example, a credit check is likely to be necessary to determine suitability for a management role within a charity but may be deemed unnecessary for a teaching role in the education sector. It’s important to ensure any checks are proportionate to the role being recruited for.
The decision whether to recruit a particular candidate should be focused on finding the most suitable person for the job, considering all the available evidence, including that found during vetting. Negative factors that may reflect on the candidate’s suitability could include:
• theft
• assault
• fraud
• failure to observe safety requirements
• bankruptcy proceedings.
Details of specific disciplinary offences may also provide reasons for the organisation to consider the candidate is unsuitable. For example, an organisation within the construction sector may consider a candidate to be unsuitable if there are previous incidents of:
• fighting
• having a mobile phone on site when expressly prohibited by health and safety rules
• failing a drugs or alcohol test
• misuse of access cards.
Depending on the role in question, the factors that establish suitability may be more subjective or subtle. For example, when looking to hire a senior employee, organisations will often wish to employ a candidate who shares the organisation’s values and can demonstrate they are capable of strategic thinking and strong leadership. However, while cultural fit is a valid consideration it’s vital that organisations remain mindful of anti-discrimination law.
As an example, throughout this guide we will use a case study based on a fictional organisation, IHR Construction Ltd. This company is a regional building firm offering a wide range of construction works, including maintenance, developments and adaptations. The company also offers construction contractors to provide specialist services to clients.
Because of an increase in building demand within the region, the organisation’s HR team is looking to carry out a recruitment campaign to expand their employee numbers in different areas of the organisation.
Based on experience, the HR team wishes to carry out full due diligence, including pre-employment checks, to avoid picking unsuitable candidates. This has previously led to costly customer complaints and several employees leaving shortly after their employment commenced.
The behaviour of candidates when submitting a CV or job application is regularly reviewed by recruitment and labour bodies, with a survey by YouGov revealing that 10% of respondents had lied on their CV.
Inaccurate information can be provided to organisations in many areas on candidate documentation through, for example, overinflating experience, increasing the number of qualifications achieved or providing false details for references (as in the case of Francis-McGann v West Atlantic UK Limited ET case no 1303361/2017, where the employee used a fictional Star Wars character as a referee).
Organisations will be keen to receive true and accurate information so that they can carry out a proper assessment of a candidate’s suitability. Whilst some candidates may think a ‘white lie’ is acceptable, there is the potential that this could have a greater impact on their future employment than they think. For example, embellishing training courses that the candidate has undertaken may not seem a serious falsity, but it could lead to the organisation deciding not to repeat a crucial training session because they believe this has been completed previously. The impact of this minor embellishment on the organisation, and others, may be significant and it also reflects negatively on the character of the candidate.
To help prevent receiving false information, organisations can require candidates to sign a formal declaration in their application as a deterrent. An example declaration could read:
‘I confirm that the above information is complete and correct and that any untrue or misleading information will give my employer the right to terminate any employment offered. I understand that any offer of employment is subject to the Company being satisfied with the results of a series of relevant checks, including references, eligibility to work in the UK, criminal convictions, probationary period and a medical report (in line with the operation of the Equality Act 2010).’
Organisations can access the CIFAS Staff Fraud Database to report incidents of staff fraud. Once reported, prospective employers can access the database to check candidates have no reported cases of carrying out fraud in previous organisations.
Right-to-work checks
The key legislation covering illegal working and right-to-work checks is the Immigration, Asylum and Nationality Act 2006 (the 2006 Act). This act applies to any employment that started on or after 29 February 2008.
This act was amended by the Immigration Act 2016 (the 2016 Act).
Employers should also note the Draft code of practice on preventing illegal working: Right to Work Scheme for employers, which is effective from 22 January 2024.
Organisations have a legal duty to prevent illegal working by carrying out right-to-work checks to ensure prospective employees can legally work in the UK.
The Code of Practice for Employers (updated in February 2024) considers:
• how to establish a statutory excuse for right-to-work checks
• updated sanctions against illegal working.
The updated guidance is set against a backdrop of attempts to reduce net migration in the UK.
Detail from previous guidance documents is also retained, including the acceptable documents which are evidence of a right to work in the UK, how to treat physical documents as evidence (for individuals with biometric residence permits or cards, or frontier worker permits), explaining the Home Office online service and introducing the Identification Validation Technology (‘IDVT’ for checks on British and Irish nationals.
Different codes of practice apply depending upon when an employee started employment (please see amended codes here). Employers should check:
• When an employee started.
• When any statutory excuse applied (if relevant). Provided an employer can prove they have correctly conducted the right to work checks, they will gain the ‘statutory excuse’ against civil liability. This means that if they are later found to be employing an illegal worker, they are excused from the civil penalty and so do not have to pay the fine.
Civil and criminal penalties can be imposed on organisations for employing illegal workers. Illegal workers are defined by the 2006 Act as those aged over 16 who are subject to immigration control, and:
- Have not been granted leave to enter or remain in the UK, or
- Their leave to enter or remain in the UK is invalid, or no longer applies or prevents them from carrying out the employment.
The penalties only apply where the process for carrying out a suitable right to work check have not been followed. The liability lies in failing to complete the correct right to work check. Prudent employers will ensure they cross-check their process of checking and review with the latest government guidance.
Civil penalties on employers
The civil penalties for employers faced a significant shake up in 2024. The fines for failing to ensure appropriate immigration permissions tripled. The following civil penalties on employers apply for cases brought from 13 February 2024 onward:
- For first breaches i.e. failing to conduct an appropriate right-to-work check £45,000 per illegal worker (£15,000 for cases before 13 February 2024).
- For repeat breaches £60,000 (£20,000 for cases before 13 February 2024).
Following a referral to an immigration officer, a Civil Penalty Notice will be issued; after which an organisation has 28-days to pay the penalty fine, object against it, or lodge an appeal. Objections require the organisation to provide evidence that they have carried out the required document checks or that the penalty imposed is too high because of a failure to take into account mitigating criteria, such as prior reporting of the suspected illegal worker or active cooperation with the Home Office.
In addition to fines, there is the potential for the Home Office to impose other penalties such as the removal of an organisation’s ability to sponsor work visa applications for foreign nationals or order the temporary closure of business premises.
For cases on or after December 2016, immigration officers have the power to serve Illegal Working Closure Notices – banning anyone working on a site unless authorised by an immigration officer. These notices are normally served in circumstances where there are reasonable grounds to believe the organisation is employing an illegal worker and the organisation has previously been:
- Convicted of employing an illegal worker.
- Issued a fine in the previous three years for employing an illegal worker.
- Issued a fine at any time for employing an illegal worker that has not been paid.
The immigration officer can also make a subsequent application for an Illegal Working Compliance Order, which imposes further conditions on the organisation for up to 12 months. This can include providing access to the premises for immigration officers and production of documents that evidence the organisation’s compliance with right-to-work checks.
Criminal penalties on employers
The risk of criminal penalties on employers found in breach of conducting suitable right-to-work checks is serious.
An unlimited fine or a maximum of five years’ imprisonment will be imposed where an organisation employs an individual and they have ‘reasonable cause to believe’ the individual does not have the right to work in the UK.
Civil penalties on workers known to be in breach
Penalties on workers found to be knowingly working illegally should also be noted. The 2016 Act introduced a new illegal working offence. This applies to an individual who is knowingly working whilst being disqualified by their immigration status or has reasonable cause to believe they are. Any candidate who provides false documents, or genuine documents relating to another individual, should be reported to the Home Office.
Employers should complete pre-employment right-to-work checks against all recruits, to ensure their right to work in the UK. There are now three possible ways of doing this:
• Online right-to-work checks using the Home Office online service (this type of online check does not work for British or Irish passport holders as they do not show up in Home Office immigration records). Please see the Statutory Rates and Compensation Limits guidance for information on how to conduct right-to-work checks in Scotland and Northern Ireland.
• Manual right-to-work checks using original documents.
• Right-to-work checks using a certified Identity Service Provider (IDSP).
Organisations are expected to satisfy digital checking requirements, or follow the Home Office’s three-step manual checking process (if this applies) and carry out any follow up checks.
The initial document checks must be carried out before employment begins - see the Home Office’s FAQs. However, checks should not be carried out too far in advance of employment, as the individual’s right-to-work status could change during this period. Follow up checks should be carried out in line with the expiry date contained within ‘List B’ documents, as explained below.
The Home Office publishes regularly updated guidance on right-to-work checks.
Online or video call adjusted right-to-work checks became possible in some situations since January 2019, with a special adjusted system during the pandemic. This enabled job applicants to send scanned documents or a photo of documents for checks rather than sending originals. Further permanent changes to the process have been in force from 6 April 2022:
For Permit and ‘eVisa’ holders
Holders of biometric residence permits can only evidence their right-to-work using the Home Office online checking service. The workers affected are predominantly those with status under the EU Settlement Scheme or with ‘eVisas’ under the points- based system.
Going forward, employers must refuse physical documents and direct prospective new recruits to the online service, requesting a share code and applicant’s date of birth which they can obtain online. An online check can then be carried out using the Home Office online right-to-work checking service and:
• In the presence of the individual, checking any photograph on the online check is the same as the individual presenting themselves for work (no individual’s documents need checking at the Home Office systems do this).
• Retaining and securely storing a clear copy of the response provided by the online right-to-work check.
Employers do not have to retrospectively check biometric card holders right-to-work if they checked the correct physical document on or before 5 April 2022.
The Home Office service is free and gives employers a defence against a civil penalty.
Since 6 April 2022, employers have had the option to make use of new Identity Document Validation Technology.
Checks on British or Irish nationals are therefore either free manual checks, or digital checks with a private provider which carry a fee.
The system now in place entails employers using private companies known as certified Identity Service Providers (IDSPs). Employees or prospective employees can submit images of their personal documents using Identity Document Validation Technology instead of a scan or copy.
This process is conducted remotely, but employers may continue to use the manual checking process if they prefer. Employers remain responsible for ensuring the IDSP is carrying out the check correctly. An employer will only have a statutory excuse if they reasonably believe that the IDSP has carried out their checks in accordance with the Home Office guidance.
Employers should revise their right-to-work checking procedures to accommodate the digital process, as follows:
• IDSPs digital identity verification comes at different levels or levels of confidence. The Home Office recommends that employers only accept checks via an IDSP that satisfy a minimum of a Medium Level of Confidence.
• The employer must check that the photograph and biographic details on the IDVT check are consistent with the new employee.
• Employers should retain a copy of the IDVT identity check during employment and for two years afterwards.
Those who do not wish to adopt digital checks for British and Irish citizens should put measures in place to enable face to face document checks. An overall secure digital system that deals not only with right-to-work and DBS checks may become the only future option.
For other citizens, such as British and Irish citizens, the three-step manual alternative system set out below can still be used. Although it’s not mandatory for employers and landlords to use a certified IDSP for the purposes of right-to-work checks, the Home Office recommends employers use a certified IDSP.
Since 6 April 2022, employers can no longer accept physical cards for the purposes of right-to-work checks for certain citizens, such as those who have Biometric Residence Cards, Biometric Residence Permits and Frontier Worker Permits. They must instead use the Home Office online service above.
Three-step checking process
Step one
Obtain original right-to-work documents from the prospective employee.
Step two
Check the document is genuine, relates to the prospective employee and does not prohibit the particular employment.
For each document, you should check:
• photographs are consistent
• dates of birth are the same
• names are consistent or evidence of a name change is provided
• qualification or professional certificates are current and consistent with other documents
• they are genuine and have not been tampered with
• they relate to the person providing them.
Step three
Copy the document in a format that cannot be altered and keep a secure, dated copy.
The whole of the document needs copying as evidence that right-to-work checks have been carried out, unless the document is a passport or travel document. Where a passport or travel document is provided, a copy should be taken of:
• the front page
• any page containing personal details of the holder, including the photograph and date of birth, and
• any pages containing right-to-work endorsements from the UK Government.
The copy should be in a format that cannot be altered or amended at a later date, for example a scan or photocopy. It’s also recommended that the date on which the copy is made is written on the copy. All copies need storing securely on the employee’s file, in line with data protection obligations, for the length of their employment and for a further two years after their employment ends.
The Home Office have provided a list of acceptable documents for right-to-work checks conducted on or after 13 February 2024. Please see Annex A of the guidance for this list.
Once the checking process is complete and the organisation is satisfied that the documents are authentic, genuine and relate to the individual, the statutory excuse against civil liability will arise. This excuse remains applicable even if, at a later date, it is proved that the documents were false, except if it is ‘reasonably apparent’ that the documents do not relate to the particular individual. In situations involving Transfer of Undertakings (Protection of Employment) Regulations (TUPE) 2006), although the new business partially obtains the previous organisation’s statutory excuse against future civil liability, they are advised to carry out right-to-work checks on their transferred employees within 60 days of the transfer, to gain the statutory excuse. Organisations are advised to make offers of employment conditional on provision of satisfactory evidence of the right to work in the UK, and in the particular employment. The fact the offer is conditional on this should be made clear to the prospective employee.
The UK’s departure from the EU, and the subsequent changes to the immigration system, impacts recruitment from overseas. Since 1 July 2021, all new EU, EEA and Swiss employees have had to show they hold valid pre-settled status, settled status or a valid visa to prove their right to work. It’s not necessary to carry out retrospective right to work checks on pre-existing employees unless an employee’s right to work was time-limited (i.e. has a visa end date) and follow up checks were required.
For EU citizens from April 2022 List A and B, group 1 documents are amended to remove biometric immigration documents and frontier worker permits.
Key points for EU, EEA and Swiss nationals moving to the UK on or after 1 January 2021
Any such national arriving in the UK from 1 January 2021 needs a work visa. Any of these nationals not already in the UK by 31 December 2020 will now need to be sponsored.
These citizens must satisfy the points-based system that now applies to both EEA and non-EEA nationals coming to the UK. Employers can sponsor EEA or nonEEA nationals to fill skilled roles.
The Home Office reissued guidance on sponsorship in March 2024. The update confirms changes to the Skilled Worker, Global Business Mobility and Scale-Up routes for "any application for entry clearance or permission supported by a Certificate of Sponsorship assigned on or after 4 April 2024".
The Home Office guidance dated 6 April 2022 explains the visa scheme to support Ukrainian nationals.
Any organisation hiring EEA or non-EEA nationals who does not already hold a visa in another category (such as the EU Settlement Scheme or as the dependant of a migrant worker) will need a sponsor licence.
Before applying for a sponsor licence, employers need to ensure they comply with your sponsor licence duties and may be inspected (for example a restaurant) before the Home Office grants a licence. Sponsored skilled workers must have a job offer from an approved sponsor and must have attained the requisite seventy points based on language, skill and salary level. See below for a summary of sponsor licence fees.
The introduction of the skilled worker visa in December 2020 set the minimum salary and skill level required for employer sponsorship.
Employers don’t need to advertise a role in the UK before offering it to an overseas worker but must retain evidence to explain how the migrant worker was recruited, for example via a previous employee or speculative application.
Employers must offer at least the normal level of pay set at £26,200, rising to £38,700 from 4 April 2024 (roles on the revised Immigration Salary List and Health and Social Care Visa route will be exempt from this increase), based on a 37.5 hour working week, or £20,960 if the worker is classed as a new entrant. New entrants must be under 26 or have graduated from a UK university within two years of applying for the skilled worker visa. A new entrant’s salary should increase to at least the normal level after four years.
Organisations risk falling foul of race discrimination laws if they treat individuals differently based on their race, or perceived race, when carrying out right to work checks.
Individuals must be treated fairly and consistently during recruitment, with the same document requirements and checking process applied to all. Employers must avoid making assumptions about an individual’s right to work without evidence. See the UK government issued Codes of Practice referred to at the start of this section for more advice on avoiding discrimination.
Criminal record checks
Key legislation includes:
-
The Rehabilitation of Offenders Act 1974 is the main piece of legislation regulating the disclosure of criminal records (ROA 1974).
-
The Rehabilitation of Offenders Act 1974 (Exceptions) Order 1975 (the Exceptions Order) lists roles under which employers can require disclosure of spent convictions.
-
The Exceptions Order was amended by the Rehabilitation of Offenders Act 1974 (Exceptions) Order 1975 (Amendment) (England and Wales) Order 2013 from 29 May 2013 (the Exceptions Order 2013).
- Police, Crime, Sentencing and Courts Act 2022.
Organisations can apply for a criminal record check though the Disclosure and Barring Service in England and Wales, Disclosure Scotland, or AccessNI for those in Northern Ireland.
Many organisations consider that having information about a candidate’s criminal record will help them make a more informed recruitment decision, whether or not they are required by law to carry out such a check, while some sectors and job roles, such as roles working with vulnerable adults within the care sector, will require organisations to carry out a criminal record check before employment can commence.
In an attempt to balance the need for disclosure and the rehabilitation of individuals with criminal records, the ROA 1974 sets out the general rule that individuals who have been convicted of a criminal offence are considered to be rehabilitated if they do not re-offend within a specific period. As a result, their original conviction will be deemed to be ‘spent’ and will not be disclosed, unless an exception applies.
The criminal conviction remains ‘unspent’ during the specific rehabilitation period and should be disclosed where information on criminal records is requested. The length of the rehabilitation period depends on the type of sentence imposed.
Offenders who have received a sentence of more than four years of imprisonment after being convicted of any severe violent, sexual, or terrorist offences are treated differently. These convictions remain unspent and will therefore always be subject to disclosure.
If there is a further offence, any new conviction will carry a further disclosure period and then both old and new convictions may need to be declared.
Employers will be exposed to unfair dismissal claims if they dismiss individuals who fail to disclose any information regarding a spent conviction, unless the role is an excepted role (see below). Employees are therefore protected against detrimental treatment or dismissal for failure to disclose a spent conviction provided they have the two years’ qualifying service required.
The Exceptions Order displaces the general rule and states that, in certain roles, organisations can require individuals to disclose convictions that have become spent.
These roles fall within five main categories:
• Professional roles, for example solicitors and accountants.
• Officers or employees in roles requiring the upholding of the law, for example judges and prison officers.
• Specified regulated occupations, for example financial services and taxi drivers.
• Roles requiring working with children, caring for vulnerable adults or providing health services.
• Roles in which the individual could pose a risk to national security.
Before commencing employment in a role specified in the Exceptions Order, candidates can be asked to disclose any spent convictions, as well as any which are unspent. This is classed as an excepted question and the individual must be informed that they are under an obligation to answer this question. A failure to answer the question, without a valid reason, or to provide truthful information can be treated by the organisation as a reason to withhold an offer of employment or to dismiss.
For these professions, organisations will also be required to carry out a pre-employment criminal record check, as explained below. Whilst a spent conviction will be disclosed by this check, asking the candidate the excepted question within their application or at interview means this information is received much earlier in the recruitment process, and before the offer stage is reached. The organisation will then be in a position to carry out an earlier review of the candidate’s suitability and they are also able to assess whether accurate information was provided when the certificate is later received.
Following the Court of Appeal’s decision that blanket disclosures of all convictions and cautions in criminal record certificates unlawfully interfered with an individual’s right to privacy under Article 8 of the European Convention of Human Rights (in R (T and others) v Chief Constable of Greater Manchester (2013), the Home Office made changes to the criminal record check system in May 2013.
With effect from 29 May 2013, the Exceptions Order 2013 classes certain spent convictions and cautions as ‘protected’. These protected convictions and cautions will no longer be included in a criminal record check, and organisations cannot take them into account when offering employment or dismissing an individual.
Protected convictions are those where this is the only conviction the individual has, it does not relate to a ‘listed offence’, such as a violent or sexual offence, and the conviction resulted in a non-custodial offence, where:
• the individual was aged under 18 at the time of the offence and a period of five and a half years or more has passed, or
• the individual was aged 18 or over at the time of the conviction and a period of 11 years or more has passed.
A protected caution includes any caution that is not related to a ‘listed offence’, where:
• the individual was aged under 18 at the time of the offence and a period of two years has passed, or
• the individual was aged 18 or over at the time of the conviction and a period of six years or more has passed.
Organisations can ask all candidates to voluntarily disclose their criminal record information by including a question on this issue within application forms or as part of an interview. Purely relying on voluntary disclosure, however, is unlikely to result in the organisation being provided with all the necessary information because candidates may fail to disclose all relevant details or provide false details. Voluntary disclosure will also not be sufficient where the organisation is required to request a standard or enhanced certificate.
Section 184 of the Data Protection Act 2018 prohibits organisations from requiring individuals to disclose their criminal record through a subject access request as a condition of their employment offer, that is, from making an enforced subject access request. An organisation will commit a criminal offence if they require job applicants to make this access request and can be subject to a fine. Rather than adopting this process during recruitment, organisations can make use of the criminal record disclosure schemes available to them.
To receive a certificate detailing an individual’s criminal record, depending on the location of the organisation, they may carry out checks through:
- The DBS.
- Disclosure Scotland.
- AccessNI.
There are three types of disclosure certificates that can be applied for, and the type of information to be disclosed is regulated by the Police Act 1997 and the Police Act 1997 (Criminal Records) Regulations 2002. Those organisations that have previously relied on voluntary disclosure can ask an applicant to apply for a basic certificate to receive accurate details of any unspent convictions or cautions, with greater disclosure available for particular roles through standard and enhanced criminal record checks. Fees are charged per check, unless the application is submitted by a volunteer, who will only have to pay an administration charge.
Under the Data Protection Act 2018, organisations can process criminal record data for the legitimate purpose of performing employment law obligations or rights. Before this processing takes place, an organisation is required to have a policy in place that explains how their processing of criminal record data will be carried out in line with data protection legislation, specifically outlining the internal policies on retention and erasure of data. A privacy notice for job applicants can also be provided to individuals during the recruitment process to communicate the organisation’s compliance systems when carrying out these checks and explain how data will be used.
Three levels of criminal record certificates
Basic certificate
This certificate will contain details of unspent criminal convictions and cautions, or a statement that the individual has no such convictions or cautions on their record.
These certificates are available to all applicants, regardless of which role they are applying for. To receive a basic certificate online applications can be processed as long as the individual is aged over 16 at the time of the application. Employers can also engage a Responsible Organisation who is registered with the DBS to apply online for a basic criminal check on behalf of the employer. A list of Responsible Organisations is provided on the Government’s website and is updated regularly.
Standard certificate
This will contain details of all spent and unspent criminal convictions, cautions, police reprimands and warnings which are not subject to filtering. This check is available for employment in certain specific professions, occupations and licences listed in the Exceptions Order.
Enhanced certificate
An Enhanced DBS check is suitable for people working with children or adults in certain circumstances such as those in receipt of healthcare or personal care and taxi licence applications.
This contains all the details included in a standard certificate plus any information held by the police which is reasonably believed to be relevant, considering the purpose for which the certificate is obtained. This check is available for those carrying out activities or work in regulated activity with children or vulnerable adults, and for licences and judicial appointments listed in the Police Act 1997.
For certain job roles listed in the Police Act, including those carrying out a regulated activity, an enhanced certificate with list check can be applied for. For this certificate, the DBS will carry out a check of the statutory barring lists and disclose information on whether the individual is barred from working with children and/or vulnerable adults..
In a similar process, Disclosure Scotland offers the Protecting Vulnerable Groups (PVG) scheme, which can be joined by those undertaking ‘regulated work’ with children or protected adults. There are three types of PVG disclosure records available that will all reveal whether the individual is named on a barred list or is under consideration for listing, that is, information has been received that means they may not be suitable for that type of work and an assessment is being undertaken to decide whether to list them.
Filtering
Filtering is the process that identifies which criminal records will be disclosed on a Standard or Enhanced DBS check. Certain old or minor offences are known as ‘protected’ offences and are not disclosed on DBS certificates. However, all convictions resulting in a custodial sentence, whether or not suspended, will always be disclosed. From 28 October 2023 all unspent conditional cautions and convictions will be automatically disclosed.
Youth cautions (with the exception of Youth conditional cautions), warnings and reprimands are not disclosed automatically on a Standard or Enhanced DBS certificate.
Employers should ensure that job application forms for positions requiring a Standard or Enhanced DBS check reflect the current filtering rules.
To receive a standard or enhanced criminal record check certificate, an individual aged over 16 must apply to the DBS or Disclosure Scotland. This application has to be countersigned or electronically submitted by an individual within a registered body, confirming that the position is eligible for the requested criminal record check.
Registered bodies are organisations that carry out more than 99 DBS checks annually and are eligible to ask exempted questions, for example, the role is one where the individual can be asked to reveal their whole criminal record history, including spent convictions. Those organisations can register with the DBS to countersign applications, paying the registration fee of £300. Once registered, the organisation is required to comply with the Code of Practice published by the DBS.
Alternatively, for organisations who carry out fewer DBS checks or have not registered with the DBS, they can use an umbrella body. The umbrella body is a registered body that countersigns applications on behalf of non-registered organisations. A list of organisations that are umbrella bodies is maintained on the Home Office website.
Since 2013, once the DBS or Disclosure Scotland have processed the application, a criminal record certificate will be issued to the individual applicant. The applicant can then review the certificate and has an opportunity to challenge any information disclosed by the certificate. Once the individual is satisfied with the disclosure, they should then provide this to the recruiting organisation.
Case law example
In R (on the application of AR) v Chief Constable of Greater Manchester Police and another, an applicant for an enhanced criminal record check objected to the inclusion of a previous acquittal for rape. The chief officer of police reasonably believed the acquittal to be relevant, especially considering that the purpose for which the certificate was sought was to enter teaching roles. The applicant applied for judicial review, arguing there was a breach of his Article 8 right to privacy under the European Convention of Human Rights. The Supreme Court judged his right to privacy was not breached because the disclosure was proportionate, based on the potential employment, and there had been a balancing act carried out between the need for the disclosure and the effect on the individual’s future employment prospects.
Within their judgment, the Supreme Court raised concerns regarding the lack of guidance in this area, especially for potential employers. As a result of this lack of clarity, this is an area that may be subject to future legal challenges, further guidance or updates.
In most cases where a criminal record check is required, an offer of employment will be made conditional on the receipt of a satisfactory DBS check. If the individual does not provide the organisation with the certificate, they will be entitled to withdraw the conditional offer. Where the certificate is provided, the recipient organisation will be required to consider whether the information contained in the certificate is satisfactory, that is, whether the individual remains suitable for the particular role.
There will be a number of factors to take into account, including:
• the particular role applied for
• the relevance of the conviction to the role
• the seriousness of the offence
• the period of time that has elapsed since the offence
• any change in circumstances
• any explanation or context provided by the individual.
The organisation’s policy on recruiting ex-offenders will usually outline how recruiting managers or HR are expected to undertake this consideration. The organisation may also find it useful to arrange a discussion with the individual to provide an opportunity to present an explanation or to have an input into the certificate review.
In their continued search for a replacement accountant, IHR Construction have carried out a further interview with Brian Harris. Brian meets the essential criteria of the role and appears to be a good fit for the company, therefore HR make him a conditional offer of employment subject to receiving a satisfactory DBS certificate.
After completing his DBS application, Brian sends his standard certificate to the HR department. The certificate reveals that Brian received a police caution for assault occasioning actual bodily harm five years ago. HR must decide whether this certificate is satisfactory, in line with the company’s internal policy on recruiting ex-offenders. HR consider that the caution is not particularly relevant to the accountant role as it does not relate to dishonesty or fraud, it occurred several years ago and Brian has not re-offended since.
HR are concerned with the seriousness of the caution, however, because they understand violence must have occurred. They wish to know whether there is an explanation, so Brian is invited to a meeting to discuss the certificate. At the meeting, Brian reveals that he was cautioned following an altercation at a social event during his accountancy studies. However, he has not been in any trouble since because he is focusing on his career and has stayed away from a troublesome group of friends.
After considering all of the circumstances, HR decide that Brian remains suitable for the role and deem the certificate satisfactory. The condition of employment has been met and arrangements are put in place for Brian’s induction.
Although an organisation’s policy on recruiting ex-offenders will usually set out practical aspects, such as carrying out criminal record checks and reviewing certificates, organisations may wish to go further than this and review whether their business practices support the employment of those with criminal convictions.
Good practice in this area includes:
• avoiding automatic exclusions of those with criminal records from recruitment
• providing training on software and skills, including soft skills, that may have lapsed over time
• only sharing details of the criminal record with those who need to know and in line with data protection obligation; making sure the individual knows the extent of confidentiality in this matter
• providing a positive ‘buddy’ system to integrate the individual back into working life
• reviewing the working environment to assess the risks, and determining whether any additional support is necessary.
DBS certificates only contain correct information as at the date of issue. For example, if a conviction is imposed one week after the DBS certificate is issued, this will not be disclosed to the organisation. As a result, organisations are advised to avoid the risk of relying on an out-of-date certificate by requesting candidates to provide a new one at the recruitment stage.
In sectors where up-to-date DBS certificates will be requested by each recruiting organisation, an applicant can avoid having to apply for a new certificate each time they move roles by subscribing to the DBS Update Service and paying the yearly fee.
Once subscribed, the online service allows the recruiting organisation to carry out a free online check on the prospective employee, with their consent, to determine whether there is any updated information to consider since their previous DBS certificate was issued.
The Update Service avoids the risk that organisations are relying on information contained in a previous DBS check by allowing criminal record and barring information in relation to that individual to be frequently updated. The DBS has produced a code of practice for registered bodies and recipients of information disclosed by the Update Service on how information should be handled once disclosed.
Individuals who are members of the PVG scheme available through Disclosure Scotland will also receive a scheme certificate that contains accurate information up to the date this is issued. While membership of the scheme continues, Disclosure Scotland will continually check the member’s suitability to carry out regulated work.
Should the service be provided with information that leads to a consideration for listing, they will inform the organisation currently employing the individual. Any subsequent decision to bar the individual will also be informed to the organisation, and any others listed on their record.
Medical checks
Since the Equality Act 2010 was introduced (the EqA), section 60(1) imposes a general rule that organisations cannot ask candidates health questions before they are offered employment. This applies to all recruitment processes, whether internal or external, at pre-offer stage or before a candidate is included in a pool of unsuccessful candidates to be offered jobs in the future.
The general prohibition covers any type of health questions whether asked in person, for example at interview, in writing on a recruitment form or made to a third party such as an ex-employer. The prohibition is aimed at preventing organisations from making sifting decisions based on the physical and mental health or disability of candidates, rather than focusing on their suitability for the job role itself.
When making a job offer, this can be made conditional on the individual having a satisfactory medical check. At this stage, health questions and/or a health assessment can take place. These will usually focus on determining whether the individual has a health condition which means the organisation needs to discuss any suitable reasonable adjustments, as any disclosure of a condition that is classed as a disability under the EqA will trigger the legal duty to make reasonable adjustments to reduce or remove disadvantages faced by the disabled worker. Employers should use questionnaires related to health with all new recruits rather than singling out people because ill health or disability is suspected, to avoid potential claims of less favourable treatment or discrimination.
The General Data Protection Regulation categorises health and medical data as ‘special category data’. Before processing this data, organisations will need to identify a lawful basis for processing a special category condition; generally for recruitment purposes this will be the condition that the individual (the data subject) has provided their explicit consent to the processing
There is an exception to the general rule under the EqA where health-related questions can be asked before an offer of employment is made.
Section 60(6) of the EqA allows organisations to ask health- and medical-related questions to:
• establish if the individual requires reasonable adjustments during an assessment process to remove any disadvantages they face. Alternatively, the organisation may choose to ask the candidate themselves whether they require adjustments to avoid asking health questions
• determine if the candidate can carry out a function that is intrinsic to the role
• carry out diversity monitoring of applicants applying for the role
• take positive action in relation to disabled people
• assess whether the individual meets an occupational requirement to have a particular disability
• meet an occupational requirement imposed by the organisation, for example, where a charity for the blind wishes to employ an individual with a visual impairment to lead a new project.
The Government Equalities Office has produced guidance for organisations on when health or disability questions can be asked in these specific circumstances.
A job-seeker cannot make a claim to an employment tribunal on the sole basis that they have been asked a health- or disability-related question in prohibited circumstances. There is no stand-alone claim or remedial award available.
Individuals can, however, bring a claim for unlawful disability discrimination where they were not offered a job and this failure can be linked to the organisation asking a prohibited health question, or the applicant’s answer to such a question.
In these circumstances, the organisation will be placed under the reverse burden of proof to prove that the decision was reached on non-discriminatory grounds. This may be through, for example, evidencing that the health question was asked to ascertain whether reasonable adjustments were necessary, proving that the answer to this question was not disclosed to those making the selection decision, and demonstrating that the reason for the application being unsuccessful was because the candidate did not meet the role requirements, such as having insufficient experience.
Where a tribunal finds the reason for not offering the role was discriminatory, either because the individual was disabled or they were perceived to be disabled, the organisation will face a costly compensation award.
The Equality and Human Rights Commission is also responsible for ensuring organisations comply with section 60 of the EqA. The Commission have enforcement powers to investigate and serve compliance notices against organisations, where they believe it is proportionate to do so. This will usually be where organisations are reported for persistent non-compliance.
Finn Murray is completing an application form for a role as a roofer with IHR Construction Ltd.
The form contains the following two questions:
• How many absences has the applicant had in the past 12 months that were related to ill health?
• Does the applicant have any health conditions that affect their ability to climb up and down ladders?
Finn has a physical health condition that causes him severe back pain and has resulted in a number of health-related absences from work. As a result, Finn doesn’t answer any of these questions and leaves them blank. Finn is later informed that his application was unsuccessful and he believes this is discriminatory.
The organisation is prohibited from asking the first question because it relates to health and has been asked before an offer of employment has been made, but does not fall within one of the excepted circumstances. If HR decided not to progress Finn’s application because of his failure to answer this question, they could face a disability discrimination claim.
The business is entitled to ask the second question because the requirement to climb up and down a ladder is likely to be an intrinsic part of the roofer role. This question, therefore, falls within one of the exceptions and can be asked before an offer of employment is made.
Obtaining employment references
Organisations are, generally, under no legal obligation to obtain an employment reference for a prospective employee. It is, however, common practice for organisations to request at least one reference from the individual’s current or most recent employer, with many asking for at least two referees to be provided on application forms.
If the prospective employee cannot provide two employment references, it is good practice to accept an educational reference or a character reference to avoid placing the individual at a disadvantage. It is good practice for organisations to request, and obtain, references after an offer of employment has been made to the individual rather than before.
Job offers can be made conditional on receipt of a satisfactory reference, allowing organisations to withdraw the employment offer if the references are not deemed satisfactory.
Step one: request details of referees from the prospective employee, usually through an application form.
Step two: once a conditional offer of employment is made, send a reference request to the referee.
Step three: on receipt of the reference, consider whether this contains information that reflects on the prospective employee’s suitability for the role.
There’s no automatic right to receive a reference from a previous or current employer, except for roles in organisations covered by the Financial Conduct Authority and the Prudential Regulation Authority.
The House of Lords has stated that employers have ‘at least a moral obligation’ to provide references. Care should be taken to refuse providing references where:
• there is an express or implied contractual right to receive a reference
• a refusal could lead to adverse inferences being drawn about the employee concerned
• a refusal could be seen as discriminatory, for example, as an act of victimisation after a complaint of discrimination has been raised.
When providing an employment reference, the organisation is under a duty of care to provide one that is true, accurate and fair, and must not give a misleading impression, including by omission.
Case law has also established the following:
• References must give all, not part, of the history of the person: it is unfair to give partial facts if those result in the offer being withdrawn, for example where this causes the recipient organisation to assume the information is missing because it is negative, so the offer is withdrawn.
• References must not conceal facts from the organisation offering employment since they could sue for misleading information if this causes some detriment.
• References should give facts, not opinions, such as start and end dates, job title, salary and sickness absence (excluding any absence relating to disability or parental leave).
References may also provide additional factual information covering areas such as the employee’s performance, integrity, relevant personal information and reasons for leaving. Factual evidence must always be available to support any such statements in a reference.
To avoid breaching the duty of care and the risk of providing misleading information, many organisations have adopted a policy whereby they provide a brief reference that merely states the former employee’s job title, start and end dates of employment, and duties of the role.
Where this is the form of reference adopted, organisations should make it clear in the reference that it is their policy to only provide this information. This will ensure the limited reference does not raise any concerns with the prospective employer.
In some cases, the requesting organisation may send a letter outlining the information they wish to receive to assess the suitability of the candidate, or provide a list of questions to be answered. It will be for the organisation providing the reference to determine whether they can provide all the requested information and, if so, to ensure this remains true, accurate, fair and not misleading.
The organisation who receives the reference has to determine whether this is satisfactory. Although this is a subjective determination, organisations are advised to remain focused on whether the reference confirms the prospective employee is suitable for the particular employment role, or if it renders them unsuitable, taking into account all other information collated during the recruitment process.
The recruiting organisation may wish to follow up on the information disclosed by having an informal conversation with the author of the reference, or the previous employer. Asking the previous employer specific questions can disclose additional information. However, caution should be taken in these circumstances as to how any additional information is interpreted. In most cases, the conversation will take place between two strangers and prejudicial information could be provided.
After an informal conversation, good practice suggests:
• Any information provided should not be used as a substitute for the prospective employer making their own judgement about employment.
• The information should be weighed against all evidence received during the recruitment process, making a balanced decision that takes into account all available information.
• Consideration as to the context and circumstances of the information provided, especially where this is historical, should be carried out as circumstances can change. It is usually appropriate to involve the individual themselves in this consideration.
Where the reference is not satisfactory, the organisation can withdraw a job offer that has been made conditional on the receipt of a satisfactory reference. If an unconditional employment offer was made and accepted by the applicant, a withdrawal of the offer will breach the existing contract of employment and the organisation will have to provide the employee with notice of termination of their employment.
Under current data protection legislation, organisations should ask prospective employees for their specific consent to obtain employment references from their prospective employees. It is best practice to use a specific consent form for the prospective employee to sign and date, which also informs them of their right to withdraw their consent at any time.
The Data Protection Act 2018 provides that confidential employment references are exempt from the right for individuals (data subjects) to access personal data processed by organisations through a subject access request. This covers requests for access made to the organisation that provided the reference, and the organisation that received the reference.
Even though there is no requirement to disclose, organisations may still choose to provide the employment reference to the requesting individual and can ask the other party for their consent to do so. A disclosure can take place without consent where third party information is not revealed, for example the identity of the author of the reference is redacted, or where it is reasonable to disclose the reference without their consent. As such, there is no method of ensuring the individual concerned cannot view the information contained in the reference and, should a claim be brought in the employment tribunal where this document is relevant, the reference will be caught under the duty of disclosure during litigation.
Therefore, it is important that organisations are aware of what information should, and shouldn’t, be included in the reference as the exemption within the legislation will not prevent all disclosures.
Online and social media checks
There has been a marked increase in the proportion of organisations making use of social media to research candidates’ backgrounds.
Numerous surveys have scrutinised the inclusion of social media checks in organisations’ recruitment processes, and a review by YouGov suggests that nearly one in five organisations have decided not to employ a candidate because of the content contained on social media profiles, with large organisations more likely to make this decision.
Using a search engine or social media in this way is not necessarily unlawful. However, it’s important to balance the organisation’s interests with those of individual applicants, and organisations should be cautious about the way in which they approach such searches.
Organisations should approach online checks with caution, taking into account the following:
• information contained online may not always be accurate, up to date or provide context
• care needs to be taken to confirm that the information sourced online relates to the particular individual, especially where the individual has a common name or there are numerous online references
• organisations are advised to allow candidates to respond to any information they have found online, in the same way as they provide the opportunity to respond to any other information sourced during the recruitment process
• candidates need to be informed, at an early stage, that online searches may be conducted by the organisation. A privacy notice for job applicants can be used to inform the individual of the purpose of processing this data and the legal basis for this processing
• online searches should not be a ‘fishing expedition’; instead, searches need to be aimed at assessing whether the candidate is suitable for the job or not
• the laws relating to discrimination apply equally to checks carried out online.
To meet the increased administrative tasks caused by the additional members of staff, IHR Construction Ltd is looking for a new office assistant. After interviewing two candidates, HR have decided Sarah Houghton is more suitable for the role. Before making an offer to Sarah, the HR team carry out an online search as part of their pre-employment checks; the candidates were informed this could take place at the interview stage. During this search, HR access a public social media profile that has photographs and comments revealing that Sarah has previously undergone gender reassignment.
As a result of finding this information, HR decide they won’t offer Sarah employment because they believe she may feel uncomfortable in the work environment. This is an act of direct discrimination because the decision has been made based on the candidate’s protected characteristic of gender reassignment, which has been disclosed through the online search.
Use of social media is developing rapidly and it is currently difficult to lay down hard-and-fast rules for organisations. People who upload material to open-access social media platforms may reasonably anticipate that this source may be searched by potential employers.
Carrying out vetting of candidates using their social media will need to be conducted in compliance with data protection legislation. For example, there should be a legal basis for checking social media profiles and any data collected must be proportionate, necessary and relevant to the performance of the particular job role. For example, organisations in the not-for-profit sector may wish to review the social media profile of leadership candidates to ensure the content on these profiles does not create a reputational risk for the organisation should the candidate be employed in a public-facing role. LinkedIn is a social media platform mainly used for professional purposes, while other forms of social media, including for example Facebook and X, may have mixed public and private use.
All individuals have an overarching right to privacy under the European Convention of Human Rights that will cover the content posted on privately used social media sites. However, this right is not unlimited and can be subject to necessary restrictions. Organisations will need to consider whether they have struck the right balance between their legitimate business interest, that is, making an informed recruitment decision, and the candidate’s ‘right to privacy’ if they carry out a search on a private social media profile, rather than those profiles that are solely for professional use.
Organisations who use social media to review a candidate’s suitability for the role need to avoid using this as a fishing or trawling exercise, that is, they need to avoid simply looking for anything on social media which means the candidate is unsuitable. Instead, before this search takes place, organisations can determine what aspects they need to confirm using social media in order to make their selection decision. This will differ depending on the particular organisation and the role they are hiring for.
Some key areas which organisations may use social media for include:
• confirming the individual’s online job resume follows their application form
• matching qualifications to the individual’s education history
• determining whether there is a reputational risk of hiring the candidate for high-profile roles.
Where information is sourced through social media which raises concerns about the candidate’s suitability, it is good practice to discuss this with the candidate. The candidate may provide context that has not been considered by the organisation, for example, an online job resume may not match an application form because a previous employer had a social media policy prohibiting staff from linking their personal accounts to the business.
A full consideration of this information, alongside any context, further details and information sourced elsewhere during the recruitment process, will help organisations make an informed recruitment decision.
Using lists of high-risk candidates
Organisations may have heard of ‘blacklisting’ candidates and believe that this relates to a list of individuals who are deemed to be unsuitable for the organisation. ‘Blacklisting’ does however have a statutory basis - and it is prohibited.
What is a blacklist?
The BEIS defines ‘blacklisting’ as the ‘systematic compilation of information on individual trade unionists [used by] employers and recruiters to discriminate against those individuals because of their trade union membership or because of their involvement in trade union activity’.
Under the Employment Relations Act 1999 (Blacklists) Regulations 2010, it is prohibited to:
• compile, supply, sell or use a blacklist
• refuse employment to an applicant, dismiss an employee or subject an employee to a detriment for a reason related to a blacklist
• refuse to provide employment agency services to an individual for a reason related to a blacklist.
The blacklisting regulations will be breached if the motive for the list is to discriminate based on trade union membership or activities. If an individual is refused employment and they can show that their name was contained on a blacklist, the tribunal will conclude there has been a breach of the regulations unless the organisation can show there was another reason for refusing employment.
IHR Construction Ltd have had bad experiences in the past with staff who were members of a trade union, and they have defended several employment tribunals that were brought by union-represented ex-employees.
At the selection stage of the process to recruit four new groundworkers, there is a pool of five candidates who they have determined are suitable for the role based on their previous experience and skills. Before deciding who will be successful, the HR team wish to find out whether any of the candidates are members of a trade union.
HR have previously been made aware that there is a list available within the construction sector naming construction workers who are members of recognised trade unions. HR approach another local construction organisation and ask for this list to be sent to them. The list, once received, shows that two of the pool of five candidates are members of a trade union. As a result, IHR make offers of employment to the remaining three candidates and inform the two union members that they have been unsuccessful.
The list of construction workers will be classed as a ‘blacklist’ as the intention behind the list is to discriminate against individuals based on their trade union membership. If the candidates who were not offered a job can show their names were on the blacklist, they are likely to make a successful claim at tribunal unless IHR can evidence another reason why they were unsuccessful.
Blacklisting has been a particular problem in the construction industry, prompting the creation of the Construction Workers Compensation Scheme (which closed in June 2016) and the issuance of government guidance.
The Scottish Affairs Select Committee has strongly criticised blacklisting of workers in the construction sector, despite this practice having been made illegal in 2010.
Refusing to employ or blacklisting union members gives rise to legal claims for defamation, conspiracy and breach of data protection laws.
It is unlawful for organisations to:
• refuse employment to, or to blacklist, union members
• refuse employment or sack individuals as a result of appearing on a blacklist
• refuse to provide a service on the basis of an individual appearing on a blacklist Individuals or unions can pursue compensation or solicit action against those who compile, distribute or use blacklists.
If a list of unsuitable applicants has been made for a purpose other than to discriminate against union members, or those who participate in trade union activity, the list will not be classed as a blacklist. This was the case in Maunders v Proteus Well Services Ltd and others ET case no 1810036/2010, where the reason for the inclusion on a security database was because of the claimant’s aggressive behaviour towards security staff, and not his trade union activities. It may be difficult for an organisation to provide the motive behind such a list, however.
There are wider questions for organisations to consider when determining whether it is legitimate for them to put the names of former employees onto a list that can be accessed by other organisations.
It would, for example, be highly problematic to include people’s names on such a list simply because they are regarded as ‘troublemakers’. Concerns may also arise in relation to data protection, for example:
• the requirement to tell individuals how information about them is used, and to allow them access to that information
• the right for individuals to request removal or deletion where there is no compelling reason to keep processing the data
• the difficulty of reliably verifying that a candidate’s identity is the same as one on a list
• the difficulty in ensuring that information is accurate and that reasons for inclusion are verified
• personal data should not be processed for longer than is necessary, and events that occurred previously are less likely to be relevant to a candidate’s suitability later on.
There may, however, be cases where the production of a list is legitimate, for example, where the organisation owes a duty of care to vulnerable people. In healthcare sectors, individual organisations might wish to share information about employees where there is evidence of the kind of misbehaviour that would put patient safety at risk because the duty of care to patients is the overwhelming duty.
In such cases, the duty to share information might not be limited to the organisation itself, but might apply to wider organisations such as the NHS, or local authority, or client, whose reputation is liable to be affected by recruitment practices in the sector and is in a position to exercise authority or offer advice to organisations.
A critical element for the organisation to consider is whether there is evidence of actual wrongdoing. Where this evidence is already in the public domain, it may be legitimate for organisations to draw this to the attention of the prospective employer. It will not be fair to the individual concerned, however, to make information based solely on suspicion, or hearsay, or derogatory opinions widely available.
In the health, education, care and other sectors where vulnerable people are at risk, employers have a duty of care to protect them. Evidence of inappropriate behaviour that places these people at risk should be recorded. If the organisation is approached from a prospective employer, it would be a breach of their duty of care to other vulnerable people to not disclose this evidence to the prospective employer.
In summary, producing a list of people who are not judged suitable for further employment in a specific sector will not necessarily be unlawful, but should only be considered where there is a legitimate purpose for producing the list. This is an area of law where future developments and regulation can be anticipated.
Outsourcing and employment agencies
CIPD research suggests that an increasing number of organisations are outsourcing elements of their recruitment activity, for example to recruitment agencies. Recruitment agencies fulfil an essential role in the UK’s flexible labour market and the recruitment sector has worked hard in recent years to maintain its reputation and promote good employment practices. The work of regulatory bodies, such as the Employment Agency Standards Inspectorate, is also helping to improve the practices of agencies.
Not all checks can be outsourced to a recruitment agency. Right-to-work documents have special rules which apply as set out in section 3 above. From April 2022 the rules envisage that employers will outsource digital identity right to work checks for British and Irish citizens who hold a valid passport (including Irish passport cards).
For these checks, an Identity Service Provider company (IDSP) must do the checks using Identification Document Validation Technology, rather than a third party, such as a recruitment agency or professional adviser. The employer not the IDSP remains liable for civil penalties if the employee is later be found to be working without permission and the check has not been completed correctly. Using an IDSP correctly does establish a defence towards liability, whereas a third-party check by a recruitment agency or professional adviser would not.
Particular issues in relation to other pre-employment checks can arise, not only for organisations that use employment agencies, but more generally in managing the supply chain. Some companies offer an employee vetting service independent of labour supply, whereby they are engaged at the offer stage and the candidate supplies personal details to be checked by the third party on behalf of the organisation. HR and recruitment consultants may also act as intermediaries, for example by supplying vetting specialists to sit alongside organisations’ payroll teams.
Baseline checks might include establishing the right to work in the UK, identity and reference checks to validate skills and experiences. Employment agencies may also offer specialist help in conducting the detailed checks required in specific sectors, such as finance or IT. Although organisations may believe they can avoid the need to engage in time-consuming statutory and other checks by using the services of employment agencies, they will not protect themselves against possible reputational damage by distancing themselves from the recruitment process.
Organisations should have contracts in place with employment agencies to guarantee data security and quality.
Organisations that use employment agencies or other intermediaries to help recruit workers should:
• choose a reputable agency that takes steps to protect its own reputation (for example, through membership of professional bodies, such as the Recruitment and Employment Confederation and adherence to good practice guidelines in recruitment of job-seekers)
• agree what specific pre-employment checks are necessary and appropriate, ensuring these are non-discriminatory and relevant to the role
• set out which checks are necessary in the supply agreement
• be clear about respective responsibilities; duplication in checks is preferable to leaving gaps
• be clear about the employment status of staff supplied by the agency and ascertain whether they are employed by the organisation
• ensure checks are carried out in relation to both permanent and temporary staff
• be aware of any secondary suppliers and establish which agency takes responsibility for the vetting process as a whole.
The Ethical Trading Initiative (ETI) is an alliance of companies, trade unions and voluntary organisations that aims to improve the lives of poor and vulnerable workers across the globe who make or grow consumer goods.
The ETI has published a base code that draws on ILO conventions and contains nine principles, of which the eighth requires that ‘regular employment is provided’. Clause 8.2 of the code says that employment regulations ‘shall not be avoided through the use of labour-only contracting [or] subcontracting’.
Because labour-only workers are self-employed, contractors pay no National Insurance contributions, sick pay or holiday pay. The Construction Industry Scheme (CIS) is a set of special rules for handling payments for construction work that contractors make to subcontractors and applies to all construction work carried out in the UK. HMRC also publishes an Employment Status Indicator (ESI) tool that enables an organisation to check the employment status of an individual or group of workers, clarifying whether they are an employee or self-employed for tax, VAT and National Insurance purposes.
Labour-only subcontractors and their workers will generally be self-employed, in which case the issue of pre-employment vetting will not strictly arise.
But organisations will want to:
• be confident that labour-only subcontractors are reputable
• incorporate in commercial contracts a requirement for subcontractors to follow the guidance on good practice in this guide
• ensure that labour-only subcontractors meet their legal obligations, including where appropriate under the Construction Industry Scheme.
Conclusion
The exact pre-employment process to be followed will differ between organisations and will depend on the nature of the vacant role. However, due diligence in carrying out proper and accurate checks will result in the following benefits:
• more informed recruitment decisions
• reducing the potential risk to the organisation of recruiting unsuitable candidates, particularly for those working in sensitive roles
• compliance with legal and regulatory obligations
• preventing discriminatory decision-making
• improved recruitment and retention rates
• lower recruitment costs
• greater morale and reduced disruption across the workforce.
Organisations will also need to consider the practical implications of carrying out preemployment checks and ensure the recruitment process provides the opportunity for further assessment of suitability once these are carried out. Making offers of employment conditional upon the carrying out of satisfactory checks will allow organisations to take appropriate action, should the individual be deemed unsuitable for the role following additional disclosure of relevant information.
Further information on the recruitment process and pre-employment checks can be found in the employment law resources available online on the HR-inform website.
Appendix: Visa sponsorship fees
Employers sponsoring an employee’s visa will need to pay:
The fee for a certificate of sponsorship, which varies according to the type of visa applied for. A fee should be paid when assigning the ceritifcate to a worker, which will depend on the type of sponsorship licence the employer had.
An annual sponsor licence fee.
The annual immigration skills charge.
An immigration health surcharge applies to sponsored workers who are granted permission to stay in the UK over six months.
Our
online Community
A place to learn, debate and connect with other HR and L&D professionals
Explore our collection of resources around legal issues relating to whistleblowing in the workplace
Practical guidance to help you identify and implement good atypical working practices
What this practice is, why you should avoid it, and how to approach it if no other options are available
Practical advice on how to use this approach as part of your wider conflict management strategy
Practical guidance to help you identify and implement good atypical working practices
What this practice is, why you should avoid it, and how to approach it if no other options are available