DBS Check Renewal Rules for Employers (2026)

DBS renewal

SECTION GUIDE

When an organisation recruits staff into roles involving trust, responsibility or safeguarding, a Disclosure and Barring Service (DBS) check is often part of the pre-employment screening process. However, once a DBS certificate has been obtained, employers frequently ask whether it needs to be renewed, whether it expires and what their ongoing legal obligations are.

DBS check renewal is an area where myth, internal policy and statutory safeguarding duties often overlap. Many employers operate a three-year renewal cycle, yet there is no general statutory rule requiring checks to be repeated at fixed intervals. At the same time, safeguarding law requires ongoing suitability for certain roles, particularly where regulated activity is involved.

The legal position is therefore more nuanced than many assume.

DBS certificates do not expire. They are a snapshot of an individual’s criminal record status at the date of issue. However, the absence of an expiry date does not remove an employer’s duty to manage safeguarding risk. The decision whether to renew a DBS check must be risk-based, proportionate and defensible.

What this article is about:
This guide explains the legal framework governing DBS check renewal for UK employers. It clarifies whether DBS checks expire, when renewal may be appropriate, how the DBS Update Service operates and how safeguarding law, employment law and data protection law interact when designing a DBS recheck policy. It also examines the renewal process itself and the compliance risks associated with getting it wrong. Where DBS screening sits alongside other workforce compliance duties, employers should also ensure joined-up governance across their wider employment law obligations and related checks, including immigration compliance under UK immigration rules where relevant. For organisations operating in regulated or sponsored environments, it is also important to understand the Home Office’s compliance expectations and approach to enforcement, including UKVI oversight.

 

 

Section A: Do DBS Checks Expire or Have a Validity Period?

 

One of the most common questions employers ask is whether a DBS check “expires”. The short answer is no. There is no statutory expiry date for a DBS certificate in England and Wales. However, understanding what that means in practice requires closer examination of the legal framework and the safeguarding context in which DBS checks operate.

 

1. Is there an official expiry date for a DBS check?

 

There is no legal provision within the Police Act 1997, which governs criminal record disclosures, that imposes a validity period on a DBS certificate. Once issued, a DBS certificate remains a record of the information held at the time of that check.

A DBS certificate is therefore a snapshot. It confirms what was recorded on the Police National Computer and, in the case of enhanced checks, any relevant local police information and barred list status, as at the date of issue. It does not update automatically. If an individual is convicted of an offence after the certificate is issued, that new information will not appear on the existing certificate.

The absence of an expiry date does not mean that the information remains current. It simply means that the law does not impose a fixed period after which the certificate becomes invalid. For a more detailed explanation of common misconceptions around validity, see our guide on how long a DBS check lasts.

For employment purposes, it is the employer — not the DBS — that determines whether the information remains sufficiently up to date for safeguarding and governance purposes.

 

2. Why employers treat DBS checks as time-limited

 

Although DBS certificates do not expire in law, many organisations treat them as effectively time-limited. This is driven by risk management rather than statutory mandate.

In regulated sectors such as education and health and social care, employers must ensure that staff remain suitable to work with children or vulnerable adults. For example, schools must comply with statutory safer recruitment guidance and ongoing safeguarding oversight. Care providers regulated by the Care Quality Commission must demonstrate that staff are fit and proper to perform their roles.

Neither framework imposes a universal three-year renewal rule. However, both expect employers to maintain systems that ensure ongoing suitability.

As a result, many organisations adopt internal policies requiring DBS renewal every one to three years. These cycles are governance tools. They are not statutory obligations. An employer should be able to justify any renewal frequency by reference to risk assessment and the nature of the role.

The higher the safeguarding risk and the greater the autonomy of the employee in regulated activity, the stronger the justification for periodic rechecking.

 

3. Does a DBS check expire after three years?

 

The belief that a DBS check expires after three years is widespread but legally incorrect. There is no rule in UK legislation stating that a DBS certificate is valid for three years only.

The three-year period is typically an internal policy benchmark used by many organisations. It has become common practice in certain sectors, which may explain why it is often mistaken for a legal requirement.

Employers should avoid presenting a three-year cycle as a statutory rule. Instead, if adopting such a policy, it should be clearly framed as an organisational risk management decision.

If challenged in an employment dispute or regulatory inspection, the employer must demonstrate that its renewal framework is proportionate and linked to safeguarding obligations rather than arbitrary.

 

4. What is the legal principle employers must focus on?

 

The central legal principle is not expiry but ongoing suitability.

Under the Safeguarding Vulnerable Groups Act 2006, it is a criminal offence to knowingly allow a barred individual to engage in regulated activity. Employers therefore have a continuing duty to ensure that individuals working in regulated roles are not barred.

This does not automatically require periodic rechecks. However, it does require employers to operate systems capable of identifying safeguarding risks when they arise.

In practice, this may include:

  • Appropriate recruitment checks at the outset
  • Clear internal reporting obligations for staff
  • Risk-triggered DBS rechecks where concerns arise
  • Use of the DBS Update Service where appropriate

 

The legal focus should therefore be on whether the employer can evidence reasonable and proportionate safeguarding systems, rather than whether a certificate has reached a particular age. Employers should also ensure that DBS identity verification processes are properly followed in line with official requirements, as outlined in our guide to DBS check documents.

Section Summary
DBS checks do not expire and have no statutory validity period. A certificate reflects information held at a specific point in time and does not update automatically. While many organisations adopt a three-year renewal policy, this is not required by law. Employers must instead focus on ongoing suitability and operate proportionate safeguarding systems that can withstand regulatory and employment law scrutiny.

 

Section B: When Should Employers Renew a DBS Check?

 

If DBS certificates do not expire, the practical question becomes when, if ever, an employer should renew one. There is no single legal answer. Instead, the decision must be grounded in safeguarding law, regulatory expectations and employment law principles of proportionality and fairness.

Renewal is not calendar-driven by statute. It is risk-driven by role and context.

 

1. Is there a legal timeframe for DBS renewal?

 

There is no general statutory rule requiring DBS checks to be renewed after a specific period. The Police Act 1997, which governs criminal record disclosures, does not impose renewal intervals. Nor does the Safeguarding Vulnerable Groups Act 2006 mandate periodic rechecking.

Official DBS guidance states that there is no general requirement to repeat criminal record checks for individuals who remain in the same role with the same employer and whose duties have not materially changed.

This means that, in law, an employer may continue to rely on an existing certificate, provided there is no reason to question suitability.

However, the absence of a legal requirement does not remove regulatory expectations in certain sectors. Employers must distinguish between statutory obligation and regulatory good practice.

 

2. Sector-specific safeguarding expectations

 

Although there is no universal renewal rule, certain regulated sectors require employers to demonstrate ongoing suitability of staff.

In education, statutory guidance on safer recruitment requires schools to ensure that appropriate checks are carried out before staff commence work. While the guidance does not impose mandatory three-year renewals, schools must be able to demonstrate effective safeguarding systems and ongoing oversight of staff suitability.

In health and social care, providers regulated by the Care Quality Commission must ensure that staff are fit and proper persons to carry out their roles. Again, there is no prescribed renewal interval, but providers must be able to evidence robust recruitment and monitoring processes.

Where roles constitute “regulated activity” under the Safeguarding Vulnerable Groups Act 2006, enhanced DBS checks with barred list information are mandatory at recruitment stage. The legal risk in these roles is higher because employing a barred individual in regulated activity is a criminal offence.

For employers operating in these sectors, renewal policies are typically justified by reference to safeguarding risk rather than statutory prescription. In addition, where staff are sponsored migrant workers in regulated care settings, employers must ensure that criminal record screening aligns with sponsor duties and wider compliance expectations, including those outlined in our guidance on care worker visa sponsorship and the Health and Care Worker visa route.

 

3. Role changes and increased safeguarding responsibility

 

One of the clearest circumstances in which a new DBS check may be required is where an employee’s role changes.

If an individual moves into a position involving:

  • Direct engagement in regulated activity
  • Increased unsupervised contact with children or vulnerable adults
  • Access to sensitive safeguarding environments

 

a higher level of DBS check may be required.

For example, an administrative employee in a care home may initially require only a standard check. If that employee later moves into a care-giving role involving regulated activity, an enhanced DBS check with barred list information would ordinarily be necessary.

Similarly, if an employee previously subject to a basic check moves into a position requiring a standard or enhanced check, a new application must be made because the level of disclosure differs.

In these circumstances, renewal is not merely good practice — it may be necessary to ensure compliance with safeguarding law.

 

4. Trigger events that may justify renewal

 

Beyond role changes, employers may consider renewing a DBS check where specific risk indicators arise. These include:

  • A lengthy period of absence from work
  • Allegations or concerns relating to conduct
  • Safeguarding incidents
  • Significant changes in supervision arrangements
  • Regulatory inspection findings

 

A renewal decision in these cases should be documented and based on a structured risk assessment.

Employers must also be mindful of employment law. Imposing a DBS renewal requirement arbitrarily or inconsistently may expose the organisation to claims of unfair treatment or discrimination. Any renewal policy should therefore be applied consistently and transparently. Employers reviewing the impact of criminal convictions on ongoing employment should also consider broader legal guidance on termination of employment for criminal conviction to ensure decisions remain proportionate and defensible.

 

5. What about employees moving between employers?

 

When an individual changes employer, there is no legal obligation for the new employer to accept a previous DBS certificate.

In practice, most employers require a fresh check unless the individual is subscribed to the DBS Update Service and the employer can carry out a valid status check. Even then, the new employer must confirm that:

  • The level of the existing check is appropriate for the role
  • The workforce and barred list checks correspond to the regulated activity involved

 

It is ultimately the responsibility of the new employer to determine suitability. Where the employer is also a licensed sponsor, criminal record compliance should be considered alongside immigration sponsor duties, including requirements discussed in our guide to sponsor licence criminal record obligations.

Section Summary
There is no statutory timeframe for renewing a DBS check. Renewal is required only where justified by risk, regulatory expectation or role change. Employers must distinguish between legal obligation and internal policy. A defensible DBS renewal framework should be proportionate, consistent and clearly linked to safeguarding responsibilities.

 

Section C: DBS Update Service – What Employers Need to Know

 

The DBS Update Service is often presented as an alternative to periodic DBS renewal. While it can reduce administrative burden, it does not remove an employer’s safeguarding obligations. Understanding what the Update Service does — and just as importantly, what it does not do — is critical to maintaining compliance.

 

1. What is the DBS Update Service?

 

The DBS Update Service is an online subscription service that allows individuals to keep their standard or enhanced DBS certificate up to date. It enables employers, with the individual’s consent, to check whether the certificate remains current.

The service is available only for standard and enhanced DBS certificates. It does not apply to basic DBS checks. An individual must subscribe within the prescribed period after their certificate is issued and pay an annual subscription fee.

Once subscribed, the certificate can be checked online by employers who have:

  • The certificate number
  • The individual’s date of birth
  • The individual’s consent

 

The employer can then carry out a status check through the DBS online portal.

 

2. What does a status check show?

 

A status check does not reveal criminal record details. It simply confirms whether the certificate is:

  • Current, meaning no new information has been identified since the certificate was issued; or
  • No longer current, meaning that new information is now available and a new DBS application must be made to obtain updated disclosure.

 

The Update Service does not provide automatic notifications to employers. There is no alert system that informs employers if an employee’s record changes. The employer must actively conduct a status check.

If the result indicates that the certificate is no longer current, the employer cannot rely on the existing certificate and must request a new DBS application to review the updated information.

 

3. When is a new DBS application still required?

 

Even where an employee is subscribed to the Update Service, a new application may still be necessary in several circumstances.

First, if the role changes and requires a higher level of check, such as moving from a standard to an enhanced check, the Update Service cannot upgrade the level of disclosure. A fresh application is required.

Second, if the workforce category changes — for example, from adults’ workforce to children’s workforce — a new enhanced check with the appropriate barred list information must be obtained.

Third, if the certificate is not subscribed to the Update Service, there is no mechanism for checking whether new information has been recorded. In that case, renewal requires a full new application.

Finally, if the status check result is “no longer current”, a new DBS application is mandatory before the employer can assess updated disclosure.

 

4. Is the Update Service sufficient for safeguarding compliance?

 

The Update Service can reduce the need for repeated full applications, particularly in sectors with high staff turnover. It is commonly used in education and health and social care environments.

However, reliance on the Update Service does not remove the employer’s responsibility to ensure ongoing suitability. Employers must still:

  • Verify that the level of check is appropriate for the role
  • Confirm that barred list checks correspond to regulated activity
  • Maintain internal safeguarding reporting systems
  • Conduct risk assessments where concerns arise

 

Where DBS checks form part of a broader onboarding and compliance framework, they should sit alongside other statutory screening duties, including right to work checks and appropriate digital identity verification processes, as discussed in our guidance on right to work digital identity checks.

The Update Service is a monitoring tool. It is not a substitute for a safeguarding framework.

Employers should also consider data protection obligations. Criminal offence data is subject to strict processing requirements under the UK General Data Protection Regulation and the Data Protection Act 2018. Access to DBS information must be limited to authorised personnel and retained only as long as necessary.

Section Summary
The DBS Update Service allows employers to check whether a standard or enhanced DBS certificate remains current, but it does not provide automatic alerts or disclose updated details. A new application is required if the certificate is no longer current, the role changes or the workforce category differs. The Update Service supports compliance but does not replace an employer’s safeguarding duties.

 

Section D: Legal Compliance Risks for Employers

 

A DBS renewal policy is not simply an administrative matter. It engages safeguarding law, criminal liability, employment law and data protection obligations. Employers who approach renewal casually risk regulatory criticism, civil claims and, in certain circumstances, criminal offences.

A defensible framework requires clarity on the level of check required, the limits of disclosure and the lawful handling of criminal record data.

 

1. Ensuring the correct level of DBS check

 

Employers must first determine whether a DBS check is legally permissible and, if so, at what level.

There are four levels of DBS check:

  • Basic
  • Standard
  • Enhanced
  • Enhanced with barred list information

 

A basic check discloses unspent convictions and conditional cautions under the Rehabilitation of Offenders Act 1974. It can be requested for any role.

Standard and enhanced checks may only be requested where the role is eligible under the Police Act 1997 (Criminal Records) Regulations. It is a criminal offence to request a higher-level check for a role that is not eligible.

Enhanced checks may include additional information held by local police forces that a chief officer reasonably believes to be relevant and proportionate to the purpose of the check. Where the role constitutes regulated activity, enhanced checks with barred list information are required at recruitment stage.

When renewing a DBS check, employers must ensure that:

  • The role remains eligible for that level of disclosure
  • The workforce category (children or adults) is correct
  • Barred list checks are only requested where legally permitted

 

Over-checking can be as problematic as under-checking. Employers should also ensure alignment between criminal record screening and other statutory vetting requirements, including right to work checks, which form part of a compliant recruitment framework.

 

2. Criminal offence of employing barred individuals

 

Under the Safeguarding Vulnerable Groups Act 2006, it is a criminal offence for an employer to knowingly permit a person who is barred to engage in regulated activity.

It is also an offence for a barred individual to seek or undertake regulated activity.

This creates ongoing legal exposure. While there is no automatic requirement for periodic rechecks, employers must have systems capable of identifying safeguarding risks and responding appropriately.

A renewal policy may be one component of that system, but it must sit alongside clear internal reporting processes and safeguarding oversight.

 

3. Filtering rules and protected convictions

 

Not all convictions appear on standard or enhanced DBS certificates. The filtering regime under the Police Act 1997 and associated regulations provides that certain old and minor convictions are “protected” and will not be disclosed.

Employers should understand that:

  • A standard or enhanced certificate does not reveal every historical conviction
  • Filtering operates automatically according to statutory rules
  • Employers must not ask applicants to disclose protected convictions

 

When renewing DBS checks, employers should avoid assuming that an absence of disclosure equates to a completely clean history. It reflects what is lawfully disclosable.

Any recruitment or renewal policy should align with the Rehabilitation of Offenders Act 1974 and the statutory filtering framework.

 

4. Data protection obligations

 

Criminal offence data is subject to strict regulation under Article 10 of the UK General Data Protection Regulation and Part 1 of the Data Protection Act 2018.

Employers processing DBS information must:

  • Have a lawful basis for processing
  • Meet a Schedule 1 condition under the Data Protection Act 2018
  • Maintain an appropriate policy document
  • Limit access to authorised personnel
  • Avoid retaining certificate copies longer than necessary

 

The DBS Code of Practice provides that certificate information should not be retained for more than six months unless there is a clear and lawful reason.

When implementing renewal policies, employers must ensure that repeated processing of criminal record data remains necessary and proportionate.

Excessive or unjustified rechecking may expose the organisation to data protection challenge.

 

5. Employment law considerations

 

Imposing a DBS renewal requirement engages employment law principles.

If renewal is to be mandatory, it should be:

  • Clearly referenced in the contract of employment or safeguarding policy
  • Applied consistently
  • Justified by the nature of the role

 

If an employee refuses to consent to a renewal check, the employer must consider:

  • Whether the check is genuinely necessary for the role
  • Whether continued employment without the check poses unacceptable risk
  • Whether dismissal would be fair and reasonable in the circumstances

 

In regulated activity roles, refusal may justify dismissal where safeguarding compliance cannot otherwise be maintained. In lower-risk roles, a blanket approach may be disproportionate and legally risky. Employers facing disciplinary or dismissal decisions linked to criminal disclosures should consider broader legal principles, including those discussed in our guidance on termination of employment for criminal conviction.

Employers must also ensure that renewal policies do not operate in a discriminatory manner, particularly where checks disproportionately impact certain groups.

 

6. Overseas criminal record checks

 

Where employees have lived or worked overseas, particularly in safeguarding roles, employers may need to obtain overseas criminal record information in addition to UK DBS checks.

Education sector guidance in particular expects schools to consider overseas checks for individuals who have spent time abroad.

Renewal policies should take account of international mobility and ensure that safeguarding oversight remains effective where staff move between jurisdictions. Employers sponsoring migrant workers in regulated settings should also consider how overseas screening interacts with immigration compliance and sponsor duties.

Section Summary
DBS renewal engages criminal liability, data protection law and employment law. Employers must ensure that the correct level of check is requested, that barred list obligations are met and that criminal offence data is processed lawfully. Renewal policies should be proportionate, contractually supported and aligned with safeguarding risk rather than applied mechanically.

 

Section E: DBS Check Renewal Process – Step-by-Step

 

Where an employer decides that a DBS check should be renewed, the process is not a continuation of the previous certificate. In legal and administrative terms, renewal means submitting a fresh application. There is no simplified “renewal” mechanism unless the individual is subscribed to the DBS Update Service and the existing certificate remains current.

Understanding the mechanics of the process helps employers avoid procedural errors and delays.

 

1. Is there a fast-track renewal process?

 

There is no shortened or automatic renewal route through the DBS. A renewed check is treated as a new application.

Even where an employee has previously undergone identity verification and background screening, the DBS requires a fresh submission, new identity confirmation and a new certificate issued directly to the individual.

If the employee is subscribed to the DBS Update Service and the employer conducts a valid status check confirming that the certificate remains current, no new application is required at that stage. However, if the status shows “no longer current”, a full new application must be made.

 

2. Who can apply and how?

 

The application route depends on the level of check required.

Basic DBS checks can be applied for by the individual directly through the DBS website or through a registered responsible organisation. Employers may also facilitate basic checks with the employee’s consent.

Standard and enhanced DBS checks cannot be requested directly by individuals for employment purposes. They must be submitted:

  • By an employer that is registered with the DBS; or
  • Through an umbrella body that is registered to process applications on behalf of organisations.

 

Before submitting a renewal application, the employer must confirm that the role remains eligible for the level of check being requested under the relevant legislation.

 

3. Identity verification requirements

 

Each application, including renewal applications, requires identity verification in accordance with DBS guidance.

The employee must provide original documents confirming:

  • Identity
  • Date of birth
  • Current address

 

The documents must fall within the approved DBS identity checking framework. Even where an individual has been employed for many years, the employer must repeat identity verification as part of the renewal application. Employers should ensure that their document verification processes align with official requirements, as outlined in our guide to DBS check documents, and integrate them with wider onboarding checks such as right to work checks where appropriate.

Failure to comply with identity verification requirements can invalidate the application and may expose the organisation to regulatory criticism.

 

4. Fees and processing times

 

DBS fees are set by the government and may change periodically. At the time of writing:

  • Basic check: £21.50
  • Standard check: £21.50
  • Enhanced check: £49.50
  • DBS Update Service subscription: £16 per year

 

Umbrella bodies may charge additional administration fees.

Processing times vary depending on the level of check and whether local police information must be considered. While some checks are completed within days, others may take several weeks. Employers should avoid making operational decisions based on assumed timelines.

 

5. Can an employee work while renewal is pending?

 

Whether an employee can continue working while a renewed DBS check is pending depends on the nature of the role and the safeguarding risk involved.

In lower-risk roles, it may be reasonable for an employee to continue working while awaiting the outcome of a renewal.

In regulated activity roles involving children or vulnerable adults, employers must exercise greater caution. Where there is no safeguarding concern and a previous enhanced check is on file, continued supervised working may be permissible. However, employers must document their risk assessment and ensure that supervision arrangements are robust.

If the renewal has been triggered by safeguarding concerns, continued working may not be appropriate.

Decisions in this area must balance operational continuity with statutory safeguarding duties.

Section Summary
DBS renewal involves submitting a new application unless the existing certificate is maintained through the Update Service and remains current. Identity verification must be repeated and eligibility for the level of check must be confirmed. Employers should manage processing timelines carefully and conduct documented risk assessments if employees continue working while renewal checks are pending.

 

Section F: How Often Should DBS Checks Be Renewed?

 

“How often should DBS checks be renewed?” is one of the most frequently searched employer queries. The legal answer is straightforward: there is no statutory renewal interval. The practical answer is more complex and depends on risk, regulation and governance.

Employers should avoid adopting arbitrary timeframes. Renewal frequency must be capable of justification.

 

1. Is there a legally mandated renewal period?

 

No legislation imposes a fixed renewal cycle.

Neither the Police Act 1997 nor the Safeguarding Vulnerable Groups Act 2006 requires periodic rechecking at defined intervals. Official DBS guidance confirms that there is no general requirement to repeat checks where an employee remains in the same role and circumstances have not changed.

The absence of a legal rule means that employers retain discretion. However, discretion must be exercised reasonably and consistently.

 

2. Why do many organisations use a three-year cycle?

 

Many employers, particularly in education and social care, operate a three-year renewal policy. This has become common practice, but it is not legally mandated.

The three-year cycle is typically adopted because it is viewed as:

  • A reasonable balance between safeguarding oversight and administrative burden
  • A defensible timeframe in regulatory inspection
  • A consistent governance benchmark

 

If an employer adopts such a policy, it should be clearly documented and applied consistently across comparable roles.

It should not be presented to staff or regulators as a statutory requirement.

 

3. Should renewal frequency vary by role?

 

Yes. A uniform renewal policy across all staff may not reflect safeguarding risk appropriately.

For example:

  • Staff engaged in regulated activity with unsupervised access to children or vulnerable adults present higher safeguarding exposure.
  • Administrative staff with no direct contact may present lower risk.
  • Senior safeguarding leads with decision-making authority may warrant closer oversight.

 

A tiered framework based on role category can be more defensible than a blanket approach.

Employers should record the rationale for different renewal intervals and ensure that decisions are linked to safeguarding risk rather than hierarchy or convenience.

 

4. When is a risk-triggered renewal more appropriate than periodic renewal?

 

In some organisations, particularly those with strong safeguarding cultures and internal reporting systems, risk-triggered renewal may be more proportionate than calendar-based renewal.

Risk triggers may include:

  • Allegations or safeguarding concerns
  • Disciplinary findings
  • Changes in supervision levels
  • Whistleblowing reports
  • Regulatory inspection feedback

 

In these circumstances, renewal is driven by specific safeguarding indicators rather than elapsed time.

This approach may be more aligned with the principle of proportionality under employment and data protection law.

 

5. How should employers decide on a renewal framework?

 

A defensible DBS renewal framework should involve:

  • A documented safeguarding risk assessment
  • Clear identification of regulated activity roles
  • Confirmation of eligibility for check levels
  • Consideration of regulatory expectations
  • Alignment with contractual terms
  • Data protection impact assessment where appropriate

 

The framework should be reviewed periodically to ensure that it remains proportionate and legally compliant.

If challenged in litigation or regulatory inspection, the employer should be able to explain why its chosen renewal interval — whether one year, three years or risk-triggered — is reasonable in the context of its operations.

Section Summary
There is no legally mandated renewal interval for DBS checks. While many organisations adopt a three-year cycle, this is a governance decision rather than a statutory rule. Employers should determine renewal frequency through documented risk assessment, ensuring that policies are proportionate, consistent and aligned with safeguarding obligations.

 

FAQs

 

Do DBS checks expire after three years?

 

No. A DBS certificate does not have a statutory expiry date. It remains a record of the information held at the time it was issued. The commonly referenced three-year period is an internal policy benchmark used by some organisations, not a legal rule.

 

Is there a legal requirement to renew DBS checks?

 

There is no general legal requirement to renew DBS checks at fixed intervals. However, employers must ensure ongoing suitability for roles, particularly where regulated activity is involved. Renewal may be justified by risk assessment, regulatory expectation or changes in role.

 

How often should DBS checks be renewed?

 

There is no mandated timeframe. Many employers adopt a one- to three-year cycle for higher-risk roles. Others operate risk-triggered renewal systems. The appropriate frequency should be proportionate to safeguarding exposure and documented within organisational policy.

 

Can an employee continue working while a DBS renewal is pending?

 

This depends on the role and safeguarding risk. In lower-risk roles, continued working may be reasonable. In regulated activity roles, employers must conduct and document a risk assessment, ensure appropriate supervision and confirm that there are no safeguarding concerns before permitting continued work.

 

What happens if a renewed DBS check reveals new information?

 

The employer must assess the relevance of the information to the role. A disclosure does not automatically justify dismissal. Employers should conduct a fair and documented risk assessment, consider proportionality and comply with employment law obligations before taking action. Further guidance on handling convictions in employment is available in our article on termination of employment for criminal conviction.

 

Can an employee refuse to consent to a DBS renewal?

 

An employee may refuse consent. The employer must then assess whether the check is genuinely necessary for the role. In regulated activity roles, refusal may make continued employment untenable. In lower-risk roles, dismissal may be disproportionate. Each case requires careful consideration within the framework of employment law.

 

Does the DBS Update Service replace the need for renewal?

 

No. The Update Service allows employers to check whether a standard or enhanced certificate remains current, but it does not disclose updated details and does not provide automatic notifications. A new application is required if the certificate is no longer current or if the role changes.

 

Are employers required to carry out overseas criminal record checks?

 

Where employees have lived or worked overseas, particularly in safeguarding roles, employers may need to obtain overseas criminal record information in addition to a UK DBS check. This is especially relevant in education and regulated care settings and should be considered alongside wider recruitment compliance checks.

 

Conclusion

 

DBS checks do not expire and there is no statutory rule requiring renewal at fixed intervals. However, safeguarding obligations are ongoing. Employers must ensure that individuals working in regulated or sensitive roles remain suitable to do so.

Renewal decisions should be driven by risk assessment, regulatory context and role changes rather than by arbitrary timeframes. A documented and proportionate renewal policy provides stronger legal protection than reliance on assumptions about three-year expiry.

Employers must also ensure that DBS information is processed lawfully under data protection legislation, that only eligible roles are subject to higher-level checks and that employment law principles are respected when renewal requirements are imposed. DBS screening should sit within a broader compliance framework that includes immigration and workforce checks such as right to work checks and sponsor duties where applicable.

A well-designed DBS renewal framework is not about administrative repetition. It is about maintaining defensible safeguarding systems that protect vulnerable individuals and withstand regulatory scrutiny.

 

Glossary

 

TermDefinition
Basic DBS CheckA criminal record check showing unspent convictions and conditional cautions under the Rehabilitation of Offenders Act 1974.
Standard DBS CheckA higher-level check disclosing spent and unspent convictions, cautions, reprimands and warnings that are legally disclosable.
Enhanced DBS CheckA detailed check including standard disclosure information plus any relevant local police information.
Enhanced DBS Check with Barred ListAn enhanced check that also confirms whether the individual appears on the children’s and/or adults’ barred list.
DBS Check RenewalThe process of submitting a new DBS application where an employer determines that updated disclosure is required.
DBS Update ServiceAn online subscription service allowing employers to check whether a standard or enhanced DBS certificate remains current.
Regulated ActivityWork defined in the Safeguarding Vulnerable Groups Act 2006 involving specified activities with children or vulnerable adults that requires enhanced DBS checks with barred list information.
FilteringThe statutory process by which certain old or minor convictions are excluded from standard and enhanced DBS certificates.
Barred ListA list maintained by the Disclosure and Barring Service identifying individuals prohibited from engaging in regulated activity.
Criminal Offence DataPersonal data relating to criminal convictions and offences, subject to strict regulation under the UK GDPR and Data Protection Act 2018.

 

Useful Links

 

ResourceLink
Disclosure and Barring Service (DBS)GOV.UK – Disclosure and Barring Service
DBS Update ServiceGOV.UK – DBS Update Service
Safeguarding Vulnerable Groups Act 2006Legislation.gov.uk – SVGA 2006
Police Act 1997Legislation.gov.uk – Police Act 1997
Rehabilitation of Offenders Act 1974Legislation.gov.uk – ROA 1974
Keeping Children Safe in EducationDepartment for Education – KCSIE
Care Quality Commission – Recruitment GuidanceCQC – Regulation 19 Guidance

 

About DavidsonMorris

As employer solutions lawyers, DavidsonMorris offers a complete and cost-effective capability to meet employers’ needs across UK immigration and employment law, HR and global mobility.

Led by Anne Morris, one of the UK’s preeminent immigration lawyers, and with rankings in The Legal 500 and Chambers & Partners, we’re a multi-disciplinary team helping organisations to meet their people objectives, while reducing legal risk and nurturing workforce relations.

Read more about DavidsonMorris here

About our Expert

Picture of Anne Morris

Anne Morris

Founder and Managing Director Anne Morris is a fully qualified solicitor and trusted adviser to large corporates through to SMEs, providing strategic immigration and global mobility advice to support employers with UK operations to meet their workforce needs through corporate immigration.She is recognised by Legal 500 and Chambers as a legal expert and delivers Board-level advice on business migration and compliance risk management as well as overseeing the firm’s development of new client propositions and delivery of cost and time efficient processing of applications.Anne is an active public speaker, immigration commentator, and immigration policy contributor and regularly hosts training sessions for employers and HR professionals.
Picture of Anne Morris

Anne Morris

Founder and Managing Director Anne Morris is a fully qualified solicitor and trusted adviser to large corporates through to SMEs, providing strategic immigration and global mobility advice to support employers with UK operations to meet their workforce needs through corporate immigration.She is recognised by Legal 500 and Chambers as a legal expert and delivers Board-level advice on business migration and compliance risk management as well as overseeing the firm’s development of new client propositions and delivery of cost and time efficient processing of applications.Anne is an active public speaker, immigration commentator, and immigration policy contributor and regularly hosts training sessions for employers and HR professionals.

Legal Disclaimer

The matters contained in this article are intended to be for general information purposes only. This article does not constitute legal advice, nor is it a complete or authoritative statement of the law, and should not be treated as such. Whilst every effort is made to ensure that the information is correct at the time of writing, no warranty, express or implied, is given as to its accuracy and no liability is accepted for any error or omission. Before acting on any of the information contained herein, expert legal advice should be sought.