{"id":8308,"date":"2025-07-11T21:52:56","date_gmt":"2025-07-11T21:52:56","guid":{"rendered":"https:\/\/crbdirect.org.uk\/?p=8308"},"modified":"2025-07-11T21:53:20","modified_gmt":"2025-07-11T21:53:20","slug":"how-employers-should-handle-sensitive-dbs-check-information","status":"publish","type":"post","link":"https:\/\/crbdirect.org.uk\/how-employers-should-handle-sensitive-dbs-check-information\/","title":{"rendered":"How Employers Should Handle Sensitive DBS Check Information"},"content":{"rendered":"<div class=\"flex max-w-full flex-col grow\">\n<div class=\"min-h-8 text-message relative flex w-full flex-col items-end gap-2 text-start break-words whitespace-normal [.text-message+&amp;]:mt-5\" dir=\"auto\" data-message-author-role=\"assistant\" data-message-id=\"15b55fab-fcde-49fb-aeaf-b0f8def68a2a\" data-message-model-slug=\"gpt-4o\">\n<div class=\"flex w-full flex-col gap-1 empty:hidden first:pt-[3px]\">\n<div class=\"markdown prose dark:prose-invert w-full break-words light\">\n<p data-start=\"347\" data-end=\"698\">In the UK, Disclosure and Barring Service (DBS) checks are a crucial part of the recruitment process for roles involving children, vulnerable adults, or positions of trust. However, once a DBS certificate is received, it contains highly sensitive personal information. It is essential that employers know how to handle this data securely and lawfully.<\/p>\n<h2 data-start=\"700\" data-end=\"735\">Why DBS Information Is Sensitive<\/h2>\n<p data-start=\"737\" data-end=\"1030\">DBS certificates may contain details about a candidate\u2019s criminal record, including convictions, cautions, warnings, or reprimands. Enhanced checks might also include police intelligence. Mishandling this information can lead to breaches of privacy, discrimination claims, and legal penalties.<\/p>\n<p data-start=\"1032\" data-end=\"1202\">The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 treat this information as <strong data-start=\"1143\" data-end=\"1168\">special category data<\/strong> \u2014 meaning it requires extra care.<\/p>\n<h2 data-start=\"1204\" data-end=\"1235\">Best Practices for Employers<\/h2>\n<h3 data-start=\"1237\" data-end=\"1260\">1. <strong data-start=\"1244\" data-end=\"1260\">Limit Access<\/strong><\/h3>\n<p data-start=\"1262\" data-end=\"1510\">Only those directly involved in the recruitment process should have access to DBS check information. Avoid sharing it with unrelated departments or staff members. Assign a responsible person or team who understands data protection responsibilities.<\/p>\n<h3 data-start=\"1512\" data-end=\"1537\">2. <strong data-start=\"1519\" data-end=\"1537\">Secure Storage<\/strong><\/h3>\n<p data-start=\"1539\" data-end=\"1768\">Store DBS information securely \u2014 whether physical or digital. Paper documents should be kept in locked cabinets, while digital copies must be encrypted and password-protected. Access logs can also help monitor who views the data.<\/p>\n<h3 data-start=\"1770\" data-end=\"1809\">3. <strong data-start=\"1777\" data-end=\"1809\">Retain Only What\u2019s Necessary<\/strong><\/h3>\n<p data-start=\"1811\" data-end=\"2110\">According to DBS guidance, <a href=\"https:\/\/crbdirect.org.uk\/dbs-checks-for-employers\/\">employers<\/a> should not keep copies of DBS certificates for more than <strong data-start=\"1905\" data-end=\"1919\">six months<\/strong>. After this period, the certificate should be securely destroyed. However, a record of the check date, reference number, and decision made can be retained for audit or safeguarding purposes.<\/p>\n<h3 data-start=\"2112\" data-end=\"2165\">4. <strong data-start=\"2119\" data-end=\"2165\">Do Not Use the Data for Unrelated Purposes<\/strong><\/h3>\n<p data-start=\"2167\" data-end=\"2422\">Information disclosed in a DBS check must only be used to assess a candidate's suitability for the specific role applied for. Using it for other purposes \u2014 such as general performance evaluation or non-related roles \u2014 is a breach of data protection rules.<\/p>\n<h3 data-start=\"2424\" data-end=\"2455\">5. <strong data-start=\"2431\" data-end=\"2455\">Inform the Applicant<\/strong><\/h3>\n<p data-start=\"2457\" data-end=\"2667\">Candidates should be made aware of how their data will be handled before the check is carried out. Employers must explain how long the data will be kept, who will have access, and the reasons for processing it.<\/p>\n<h3 data-start=\"2669\" data-end=\"2705\">6. <strong data-start=\"2676\" data-end=\"2705\">Provide a Fair Assessment<\/strong><\/h3>\n<p data-start=\"2707\" data-end=\"2943\">If a DBS certificate contains disclosures, employers should give the applicant a chance to explain the circumstances. A risk assessment should be conducted to determine whether the offence affects the individual's ability to do the job.<\/p>\n<h2 data-start=\"2945\" data-end=\"2982\"><a href=\"https:\/\/crbdirect.org.uk\/the-legalities-of-employer-checks\/\">Legal<\/a> and Ethical Responsibilities<\/h2>\n<p data-start=\"2984\" data-end=\"3215\">Employers must register with the Information Commissioner's Office (ICO) and comply with the <strong data-start=\"3077\" data-end=\"3097\">Code of Practice<\/strong> issued by the DBS. Failing to handle sensitive DBS information correctly may result in fines and reputational damage.<\/p>\n<h2 data-start=\"3217\" data-end=\"3230\">Conclusion<\/h2>\n<p data-start=\"3232\" data-end=\"3575\">Handling DBS check information comes with significant responsibilities. Employers in the UK must store, use, and dispose of this data in accordance with UK GDPR and DBS guidelines. By following best practices and remaining transparent with candidates, organisations can ensure compliance while protecting the privacy and rights of individuals.<\/p>\n<p data-start=\"3577\" data-end=\"3677\" data-is-last-node=\"\" data-is-only-node=\"\">For more guidance on DBS checks and compliance, visit <a class=\"\" href=\"https:\/\/crbdirect.org.uk\/\" target=\"_new\" rel=\"noopener\" data-start=\"3631\" data-end=\"3676\">CRBDirect.org.uk<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>In the UK, Disclosure and Barring Service (DBS) checks are a crucial part of the recruitment process for roles involving children, vulnerable adults, or positions of trust. However, once a DBS certificate is received, it contains highly sensitive personal information. It is essential that employers know how to handle this data securely and lawfully. Why DBS Information Is Sensitive DBS&nbsp;<a href=\"https:\/\/crbdirect.org.uk\/how-employers-should-handle-sensitive-dbs-check-information\/\" class=\"read-more\">Continue Reading<\/a><\/p>\n","protected":false},"author":8,"featured_media":8310,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[34],"tags":[63,64],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v19.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How Employers Should Handle Sensitive DBS Check Information<\/title>\n<meta name=\"description\" content=\"Learn how employers should handle sensitive DBS check information. UK rules for secure storage, data protection, &amp; compliance best practices.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/crbdirect.org.uk\/how-employers-should-handle-sensitive-dbs-check-information\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How Employers Should Handle Sensitive DBS Check Information\" \/>\n<meta property=\"og:description\" content=\"Learn how employers should handle sensitive DBS check information. UK rules for secure storage, data protection, &amp; compliance best practices.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/crbdirect.org.uk\/how-employers-should-handle-sensitive-dbs-check-information\/\" \/>\n<meta property=\"og:site_name\" content=\"CRB Direct\" \/>\n<meta property=\"article:published_time\" content=\"2025-07-11T21:52:56+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-07-11T21:53:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/crbdirect.org.uk\/wp-content\/uploads\/2025\/07\/how-employers-should-handle-sensitive-dbs-check-information.png\" \/>\n\t<meta property=\"og:image:width\" content=\"500\" \/>\n\t<meta property=\"og:image:height\" content=\"333\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Kazi\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kazi\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/crbdirect.org.uk\/how-employers-should-handle-sensitive-dbs-check-information\/\",\"url\":\"https:\/\/crbdirect.org.uk\/how-employers-should-handle-sensitive-dbs-check-information\/\",\"name\":\"How Employers Should Handle Sensitive DBS Check Information\",\"isPartOf\":{\"@id\":\"https:\/\/crbdirect.org.uk\/#website\"},\"datePublished\":\"2025-07-11T21:52:56+00:00\",\"dateModified\":\"2025-07-11T21:53:20+00:00\",\"author\":{\"@id\":\"https:\/\/crbdirect.org.uk\/#\/schema\/person\/527698d8fcc16e87eb8d0041b1f8effc\"},\"description\":\"Learn how employers should handle sensitive DBS check information. UK rules for secure storage, data protection, & compliance best practices.\",\"breadcrumb\":{\"@id\":\"https:\/\/crbdirect.org.uk\/how-employers-should-handle-sensitive-dbs-check-information\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/crbdirect.org.uk\/how-employers-should-handle-sensitive-dbs-check-information\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/crbdirect.org.uk\/how-employers-should-handle-sensitive-dbs-check-information\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/crbdirect.org.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How Employers Should Handle Sensitive DBS Check Information\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/crbdirect.org.uk\/#website\",\"url\":\"https:\/\/crbdirect.org.uk\/\",\"name\":\"CRB Direct\",\"description\":\"\",\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/crbdirect.org.uk\/#\/schema\/person\/527698d8fcc16e87eb8d0041b1f8effc\",\"name\":\"Kazi\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/crbdirect.org.uk\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/6d7460bd48ea0065e5c9bad997ef21ab?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/6d7460bd48ea0065e5c9bad997ef21ab?s=96&d=mm&r=g\",\"caption\":\"Kazi\"},\"url\":\"https:\/\/crbdirect.org.uk\/author\/kazi\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How Employers Should Handle Sensitive DBS Check Information","description":"Learn how employers should handle sensitive DBS check information. UK rules for secure storage, data protection, & compliance best practices.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/crbdirect.org.uk\/how-employers-should-handle-sensitive-dbs-check-information\/","og_locale":"en_US","og_type":"article","og_title":"How Employers Should Handle Sensitive DBS Check Information","og_description":"Learn how employers should handle sensitive DBS check information. UK rules for secure storage, data protection, & compliance best practices.","og_url":"https:\/\/crbdirect.org.uk\/how-employers-should-handle-sensitive-dbs-check-information\/","og_site_name":"CRB Direct","article_published_time":"2025-07-11T21:52:56+00:00","article_modified_time":"2025-07-11T21:53:20+00:00","og_image":[{"width":500,"height":333,"url":"https:\/\/crbdirect.org.uk\/wp-content\/uploads\/2025\/07\/how-employers-should-handle-sensitive-dbs-check-information.png","type":"image\/png"}],"author":"Kazi","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kazi","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/crbdirect.org.uk\/how-employers-should-handle-sensitive-dbs-check-information\/","url":"https:\/\/crbdirect.org.uk\/how-employers-should-handle-sensitive-dbs-check-information\/","name":"How Employers Should Handle Sensitive DBS Check Information","isPartOf":{"@id":"https:\/\/crbdirect.org.uk\/#website"},"datePublished":"2025-07-11T21:52:56+00:00","dateModified":"2025-07-11T21:53:20+00:00","author":{"@id":"https:\/\/crbdirect.org.uk\/#\/schema\/person\/527698d8fcc16e87eb8d0041b1f8effc"},"description":"Learn how employers should handle sensitive DBS check information. UK rules for secure storage, data protection, & compliance best practices.","breadcrumb":{"@id":"https:\/\/crbdirect.org.uk\/how-employers-should-handle-sensitive-dbs-check-information\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/crbdirect.org.uk\/how-employers-should-handle-sensitive-dbs-check-information\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/crbdirect.org.uk\/how-employers-should-handle-sensitive-dbs-check-information\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/crbdirect.org.uk\/"},{"@type":"ListItem","position":2,"name":"How Employers Should Handle Sensitive DBS Check Information"}]},{"@type":"WebSite","@id":"https:\/\/crbdirect.org.uk\/#website","url":"https:\/\/crbdirect.org.uk\/","name":"CRB Direct","description":"","inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/crbdirect.org.uk\/#\/schema\/person\/527698d8fcc16e87eb8d0041b1f8effc","name":"Kazi","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/crbdirect.org.uk\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/6d7460bd48ea0065e5c9bad997ef21ab?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6d7460bd48ea0065e5c9bad997ef21ab?s=96&d=mm&r=g","caption":"Kazi"},"url":"https:\/\/crbdirect.org.uk\/author\/kazi\/"}]}},"_links":{"self":[{"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/posts\/8308"}],"collection":[{"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/comments?post=8308"}],"version-history":[{"count":1,"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/posts\/8308\/revisions"}],"predecessor-version":[{"id":8309,"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/posts\/8308\/revisions\/8309"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/media\/8310"}],"wp:attachment":[{"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/media?parent=8308"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/categories?post=8308"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/tags?post=8308"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}