Pre-Employment Screening Checks 2026: What You Must Do & How

Pre employment screening checks are a critical part of a business’s recruitment and onboarding process.

In practice, pre-employment screening checks commonly include verification of identity, confirmation of the right to work, assessment of criminal record status where legally permitted, confirmation of qualifications and employment history, and limited health enquiries where appropriate. The critical distinction is between checks that are mandatory before employment starts and those that are discretionary but prudent in light of the role.

The following guide looks at the various different types of checks that should be conducted and how to carry these out, as well as the legal, practical and financial consequences of failing to do so.

Section A: What are pre-employment screening checks?

Pre-employment screening checks are the enquiries and verification steps employers carry out before employment begins to confirm that a candidate is legally permitted and professionally suitable to undertake the role offered. In the UK, these checks operate at the intersection of immigration law, safeguarding legislation, equality law and data protection obligations. Some checks are legally required. Others are role-specific or risk-based.

For employers, the starting point is compliance rather than preference. Certain checks, most notably the right to work check under the Immigration, Asylum and Nationality Act 2006, are a statutory prerequisite to lawful employment. Others, such as criminal record checks, may be required where the role involves regulated activity with children or vulnerable adults, or where sectoral regulation applies. Medical enquiries are restricted at the pre-offer stage by section 60 of the Equality Act 2010, while the processing of criminal conviction data is governed by the UK GDPR and the Data Protection Act 2018.

Pre-employment screening checks therefore have two functions. First, they establish whether an employer can lawfully engage the individual. Secondly, they assist in assessing whether the individual is suitable for the particular role, having regard to regulatory standards, safeguarding duties and organisational risk. The nature and depth of screening will vary depending on the role, the sector and the level of responsibility involved.

Section B: Which pre-employment screening checks are legally required in the UK?

Not all pre-employment screening checks are mandatory. The legal requirement to carry out a check depends on the nature of the role and the regulatory framework that applies. For employers, the key distinction is between checks that are universally required before employment begins and those that arise only in defined circumstances.

1. Right to work checks

A right to work check is required for every individual the organisation employs or engages to work, regardless of nationality. This obligation arises under the Immigration, Asylum and Nationality Act 2006. Employers are required to establish, before employment commences, that an individual is not disqualified from working in the UK by reason of their immigration status.

The statutory framework provides a civil penalty regime where an employer is found to have employed a person without the right to work. A compliant right to work check, carried out in accordance with current Home Office guidance and supported by appropriate record keeping, can establish a statutory excuse against civil liability. That excuse only arises where the prescribed steps are followed correctly and, where relevant, repeat checks are conducted for time-limited permission.

The requirement to conduct a right to work check applies in all sectors and to all roles. It is not dependent on salary level, job type or seniority.

2. Criminal record and barred list checks

Criminal record checks are not universally required. However, they are mandatory in defined circumstances, particularly where a role involves regulated activity with children or vulnerable adults.

Under the Safeguarding Vulnerable Groups Act 2006, it is a criminal offence to engage, or permit the engagement of, a barred person in regulated activity. In such cases, an enhanced Disclosure and Barring Service check including a barred list check is the usual mechanism for confirming barred status where the role involves regulated activity. Employers should confirm that the role meets the statutory definition of regulated activity before requesting this level of check.

Eligibility for standard and enhanced DBS checks is prescribed by the Rehabilitation of Offenders Act 1974 (Exceptions) Order 1975. Employers should only request these checks where the role falls within the permitted categories. Requesting a higher level of check without lawful basis may itself give rise to legal risk.

3. Regulatory and sector-specific requirements

In certain regulated sectors, additional screening obligations apply. In financial services, for example, regulatory references are required under the Financial Conduct Authority and Prudential Regulation Authority rules, including under the Senior Managers and Certification Regime. Employers recruiting into specified functions are required to obtain references covering prescribed matters and periods. The rules set minimum reference content and a lookback period, commonly six years, and employers should have processes to request and provide updates where required.

Other regulated environments, including healthcare, education and social care, may impose statutory or regulatory vetting standards through sector-specific frameworks. Employers should therefore consider not only general employment law obligations but also the regulatory expectations applicable to their industry.

4. Medical enquiries before employment

Medical checks are subject to legal restriction rather than general requirement. Section 60 of the Equality Act 2010 limits the circumstances in which an employer may ask health-related questions before making a job offer. Pre-offer enquiries are only permissible in defined situations, such as determining whether reasonable adjustments are needed for the recruitment process or whether the applicant can carry out an intrinsic function of the role.

Following a conditional offer, employers may seek relevant medical information where it is proportionate and necessary. Any request for a medical report from a GP or other practitioner must comply with the Access to Medical Reports Act 1988.

5. Data protection and record keeping obligations

Although data protection law does not mandate specific screening checks, it governs how such checks are conducted. The UK GDPR and the Data Protection Act 2018 require employers to identify a lawful basis for processing personal data and to apply additional safeguards where processing criminal conviction data under Article 10.

In practical terms, this means that pre-employment screening checks should be limited to what is necessary for the role, supported by a clear privacy notice and retained only for as long as appropriate.

The next section considers screening checks that are not legally required in every case but are commonly used by employers to manage recruitment risk.

Section C: Optional but commonly used pre-employment screening checks

Beyond those checks that are legally required in defined circumstances, employers often carry out additional pre-employment screening checks to assess suitability and manage operational risk. These checks are not mandatory as a matter of statute in most roles, but they can be justified where proportionate to the responsibilities of the position.

The legal question is not whether an employer can conduct such checks in principle, but whether doing so is necessary, relevant to the role and compliant with data protection and equality legislation.

1. Employment history and reference checks

There is no general legal requirement to obtain references before employment begins. However, verifying employment history and seeking references remain common practice, particularly where the role involves responsibility, access to sensitive information or fiduciary duties.

References typically confirm dates of employment, job title and, in some cases, conduct or performance. Where references form part of the decision-making process, employers should ensure that offers are clearly expressed as conditional upon satisfactory references. Decisions should be based on information that is materially relevant to the role and applied consistently across candidates to reduce discrimination risk.

Employers should also be mindful that personal data contained within references is subject to the UK GDPR. Candidates should be informed that references will be sought and how that information will be used.

2. Qualification and professional registration verification

For roles requiring specific academic qualifications, licences or professional registration, employers frequently verify that credentials are genuine and current. In regulated professions, such as law, accountancy, healthcare or engineering, confirmation of registration with the relevant professional body may be necessary to ensure that the individual is entitled to practise.

Even where not mandated by regulation, qualification checks can be justified where the qualification is central to the role. Employers should ensure that any verification process is proportionate and limited to qualifications relevant to the job description.

3. Credit checks and financial background screening

Credit checks are sometimes used in roles involving financial management, access to funds or significant fiduciary responsibility. There is no general statutory requirement to conduct credit checks, but in certain regulated financial services roles, financial soundness may be a relevant regulatory consideration.

Outside those contexts, credit checks should be approached cautiously. Employers should be able to demonstrate that the check is proportionate to the nature of the role. Blanket use of credit screening for all positions may be difficult to justify and may create indirect discrimination risk, particularly where the impact falls disproportionately on certain groups.

As with other screening activity, employers require a lawful basis under the UK GDPR and should ensure transparency about the nature and purpose of the check.

4. Social media and online presence checks

Some employers review publicly available online information as part of the recruitment process. While there is no specific statutory prohibition on reviewing publicly accessible content, employers should exercise caution. The fact that information is publicly available does not remove the obligation to process personal data fairly and lawfully.

Social media checks carry heightened discrimination risk. Information about protected characteristics under the Equality Act 2010 may become visible during such searches, and reliance on that information in recruitment decisions could give rise to claims. Any online screening should therefore be relevant to the role, applied consistently and documented within recruitment policies.

Optional screening checks can assist in assessing suitability, but they should never substitute for compliance with mandatory checks. The next section examines how pre-employment screening checks should be conducted to ensure legal compliance and to minimise risk.

Section D: How should pre-employment screening checks be conducted lawfully?

Carrying out pre-employment screening checks is not simply a matter of deciding which checks to undertake. The manner in which those checks are conducted determines whether the employer gains legal protection or exposes itself to additional risk. Screening processes should be consistent, proportionate to the role and supported by clear documentation.

1. Timing and conditional offers

Right to work checks are required before employment begins. A statutory excuse under the Immigration, Asylum and Nationality Act 2006 will only arise where the check is completed in the prescribed manner prior to the individual starting work. Employers who allow a new starter to commence employment without completing this step risk civil liability.

Other screening checks are commonly tied to a conditional offer of employment. Making the offer expressly subject to satisfactory completion of specified checks allows the employer to withdraw the offer if material issues arise. The conditions should be set out clearly in writing, including the consequences if the checks are not completed or reveal information relevant to suitability.

Where employment has already commenced, statutory notice provisions under section 86 of the Employment Rights Act 1996 apply once the individual has accrued one month’s continuous employment. Employers should therefore align the timing of checks with the conditional offer framework to avoid unnecessary exposure.

2. Consistency and non-discrimination

Screening checks should be applied consistently across candidates for the same role. Selective application of checks, particularly right to work or criminal record checks, may give rise to claims under the Equality Act 2010.

Employers should avoid making assumptions about immigration status, criminal history or health based on nationality, ethnicity, age or other protected characteristics. Recruitment policies should define which checks apply to which roles and ensure that decision-makers follow those policies.

In the context of health enquiries, section 60 of the Equality Act 2010 restricts pre-offer medical questions to defined circumstances. Employers should ensure that any health-related enquiry before a conditional offer falls within the statutory exceptions and is objectively justifiable.

3. Record keeping and statutory compliance

Where right to work checks are conducted, employers should retain evidence in the form required by Home Office guidance. Failure to retain compliant records may result in loss of the statutory excuse even where the individual had lawful permission to work.

In relation to DBS checks, employers should confirm that the level of check requested is legally permitted for the role. Requesting a standard or enhanced check outside the scope of the Rehabilitation of Offenders Act 1974 (Exceptions) Order 1975 may itself be unlawful.

Medical reports requested from a GP or other practitioner are governed by the Access to Medical Reports Act 1988. Employers should obtain written consent and inform the individual of their rights under that Act before seeking such information.

4. Data protection and proportionality

All pre-employment screening checks involve the processing of personal data. Employers should identify a lawful basis under Article 6 of the UK GDPR and, where criminal conviction data is processed, ensure compliance with Article 10 and the relevant provisions of the Data Protection Act 2018.

Processing should be limited to information that is necessary for the role. Employers should provide candidates with a privacy notice explaining the purpose of screening, the legal basis relied upon and the retention period. Retention of screening data should be time-limited and supported by internal policy.

A compliant screening process therefore requires more than carrying out individual checks. It requires a documented framework that aligns statutory obligations, equality principles and data protection safeguards. The next section examines the potential consequences of failing to implement that framework effectively.

Section E: What are the penalties for failing to carry out pre-employment screening checks?

Failure to implement appropriate pre-employment screening checks can expose employers to civil liability, criminal sanctions and regulatory enforcement. The level of risk depends on the nature of the omission and the role involved, but the financial and reputational consequences can be significant.

1. Civil penalties and criminal liability for illegal working

Under the Immigration, Asylum and Nationality Act 2006, an employer who employs a person who does not have the right to work in the UK may be issued with a civil penalty of up to £60,000 per illegal worker. The amount imposed will depend on factors set out in Home Office guidance, including whether the employer has previously breached the regime and whether mitigating steps were taken.

Where an employer knowingly employs a person who does not have permission to work, criminal liability may arise. Conviction can result in up to five years’ imprisonment and an unlimited fine. In addition, a business may face sponsor licence revocation, reputational damage and publication on the Home Office non-compliant employers list.

A statutory excuse against civil liability only arises where the right to work check has been carried out correctly, before employment begins, and in accordance with current guidance.

2. Safeguarding offences

Under the Safeguarding Vulnerable Groups Act 2006, it is a criminal offence to engage, or permit the engagement of, a barred person in regulated activity with children or vulnerable adults. Failure to obtain the appropriate level of DBS check in roles that meet the statutory definition of regulated activity can therefore expose an employer to criminal prosecution.

Beyond criminal liability, organisations operating in regulated sectors such as education, healthcare and social care may face inspection findings, regulatory action or loss of registration where safeguarding failures are identified.

3. Discrimination and equality claims

Improper use of screening checks can give rise to claims under the Equality Act 2010. For example, selectively conducting right to work checks on candidates perceived to be foreign nationals may constitute direct race discrimination. Asking unlawful pre-offer health questions in breach of section 60 may also form part of a discrimination claim.

Compensation in discrimination claims is uncapped and may include injury to feelings awards. Employers may also face reputational harm and increased scrutiny of recruitment practices.

4. Data protection enforcement

Pre-employment screening involves the processing of personal data, and in some cases criminal conviction data. Non-compliance with the UK GDPR and the Data Protection Act 2018 may result in investigation by the Information Commissioner’s Office.

The ICO has the power to impose significant financial penalties, including fines of up to £17.5 million or 4 percent of annual worldwide turnover, whichever is higher, for serious infringements. While enforcement action in recruitment contexts is fact-specific, failure to apply proportionality and transparency principles can increase exposure.

Taken together, these risks underline that pre-employment screening checks are not merely administrative steps. They are compliance mechanisms that sit within a broader legal framework. The final section considers when an employer may withdraw a job offer following screening and how to approach that decision lawfully.

Section F: When can an employer withdraw a job offer following pre-employment screening checks?

Withdrawing a job offer following pre-employment screening checks is often lawful, but the decision must be grounded in contractual clarity, statutory compliance and equality considerations. The starting point is whether the offer was expressly made conditional and whether the condition relates to information that is materially relevant to the role.

1. Conditional offers and contractual position

Most employers issue offers of employment subject to satisfactory completion of specified checks. These may include confirmation of the right to work, satisfactory references, verification of qualifications or, where applicable, DBS clearance. Where an offer is clearly expressed as conditional and the condition is not met, the employer is generally entitled to withdraw the offer before employment begins.

The position becomes more complex where employment has already commenced. Once an individual has accrued one month’s continuous employment, section 86 of the Employment Rights Act 1996 entitles them to a minimum of one week’s notice, unless dismissal is for gross misconduct. Employers should therefore ensure that any decision to allow a new starter to begin work before completion of screening checks is aligned with the contractual and statutory framework.

2. Right to work and safeguarding failures

If a right to work check reveals that an individual does not have lawful permission to work in the UK, the employer cannot lawfully continue employment. In such circumstances, withdrawal of the offer or termination of employment is not discretionary but necessary to avoid breach of the Immigration, Asylum and Nationality Act 2006.

Similarly, where a DBS check confirms that an individual is barred from engaging in regulated activity, the employer cannot lawfully appoint them to a role that meets the statutory definition. Continuing with the appointment would expose the organisation to criminal liability under the Safeguarding Vulnerable Groups Act 2006.

3. Medical information and reasonable adjustments

Where screening reveals information relating to health or disability, employers should proceed with caution. The Equality Act 2010 requires employers to consider reasonable adjustments where a candidate has a disability. Withdrawing an offer solely because a disability is identified, without assessing whether adjustments would enable the individual to perform the role, may give rise to discrimination claims.

Any decision should therefore focus on whether the individual can carry out the intrinsic functions of the role, with adjustments where appropriate, rather than on the existence of a medical condition itself.

4. Proportionality and relevance

For optional checks such as references, credit history or online screening, the key question is whether the information revealed is materially relevant to the responsibilities of the role. Decisions should be evidence-based and consistent with the employer’s documented recruitment policy.

An employer who withdraws an offer based on irrelevant or disproportionate considerations increases the risk of discrimination claims or allegations of unfair processing of personal data. Clear documentation of the rationale for the decision can assist in demonstrating that the withdrawal was lawful and objectively justified.

Pre-employment screening checks are therefore closely linked to offer management and contractual clarity. Employers should ensure that conditions are defined in advance, applied consistently and supported by a legally compliant decision-making framework.

Section G: Employer compliance checklist before employment begins

Before a new employee starts work, employers should be able to demonstrate that their pre-employment screening checks have been completed in accordance with statutory and regulatory requirements. This is not a separate legal obligation in itself, but a practical way of ensuring that the organisation can evidence compliance if challenged by a regulator, tribunal or enforcement body.

1. Confirm mandatory checks have been completed

Employers should ensure that a compliant right to work check has been carried out before the individual commences employment, with records retained in line with Home Office guidance. Where the role involves regulated activity with children or vulnerable adults, the appropriate level of DBS check should have been obtained and assessed. In regulated sectors, any required regulatory references or registration confirmations should also be in place.

If permission to work is time-limited, a follow-up date should be diarised to ensure that repeat checks are conducted before expiry.

2. Ensure conditional offer terms are clear

Offers of employment should state clearly which pre-employment screening checks apply and that employment is conditional upon satisfactory completion of those checks. The written terms should set out the employer’s right to withdraw the offer or terminate employment if material issues arise.

Where a candidate has already started work pending completion of checks, the employer should confirm that contractual documentation reflects that position and that statutory notice requirements are understood.

3. Review equality and data protection compliance

Employers should confirm that screening checks have been applied consistently to candidates for the same role and that no unlawful pre-offer health enquiries have been made contrary to section 60 of the Equality Act 2010. Decisions taken following screening should be objectively justified and recorded.

From a data protection perspective, the employer should ensure that a lawful basis for processing personal data has been identified, that candidates have been provided with an appropriate privacy notice and that any criminal conviction data has been processed in accordance with Article 10 of the UK GDPR and the Data Protection Act 2018. Retention periods for screening data should be defined and applied in practice.

4. Maintain documented recruitment policies

A documented recruitment and vetting policy can assist in demonstrating that pre-employment screening checks are applied proportionately and consistently. The policy should define which checks apply to which categories of role and should align with immigration, safeguarding, equality and data protection obligations.

Taken together, these steps help ensure that pre-employment screening checks operate as a coherent compliance framework rather than as isolated administrative tasks. Being able to evidence this framework assists when responding to Home Office audits, regulatory inspections and employment tribunal scrutiny.

Summary

Pre-employment screening checks help UK employers confirm that a candidate can lawfully and suitably undertake a role before employment begins. Some checks, such as the right to work check under the Immigration, Asylum and Nationality Act 2006, are mandatory for all employees. Others, including DBS checks and regulatory references, apply only in defined sectors or roles. Employers must also comply with the Equality Act 2010 when making health enquiries and with the UK GDPR when processing personal and criminal conviction data. A consistent, proportionate and documented screening framework reduces exposure to civil penalties, criminal liability, discrimination claims and regulatory enforcement.

Need Assistance?

Pre-employment screening is an effective way of ascertaining the suitability of job applicants, in particular, that they possess the required qualifications and skills, as well as safeguarding against future personnel problems and ensuring that you do not fall foul of the law. However, these checks exist within a complex legal landscape that includes immigration control, safeguarding duties, equality protections and data protection law. Employers who rely on informal or inconsistent processes risk regulatory enforcement and litigation.

As employer solutions lawyers, we can assist if you have any queries relating to background checks and processes and systems for ensuring candidate suitability as part of your recruitment risk management. Speak to our experts today for advice.

Pre-employment screening checks FAQs

Are pre-employment screening checks mandatory in the UK?

Some pre-employment screening checks are mandatory, while others depend on the role. A right to work check is required for every employee under the Immigration, Asylum and Nationality Act 2006 and must be completed before employment begins. DBS checks are required where a role involves regulated activity with children or vulnerable adults. In regulated sectors such as financial services, additional vetting requirements may apply. Other checks, such as references or credit checks, are generally discretionary but should be proportionate to the role.

What happens if an employer does not carry out a right to work check?

If an employer fails to carry out a compliant right to work check and is later found to have employed a person without lawful permission to work, they may face a civil penalty of up to £60,000 per illegal worker. Where employment is undertaken knowingly without permission, criminal liability may arise, with a maximum sentence of up to five years’ imprisonment and an unlimited fine. A statutory excuse against civil liability only arises where the prescribed checks are completed correctly and records retained.

Can an employer ask about health conditions before making a job offer?

Section 60 of the Equality Act 2010 restricts employers from asking health-related questions before making a job offer, except in limited circumstances. Permitted enquiries include establishing whether reasonable adjustments are required for the recruitment process or whether the candidate can carry out an intrinsic function of the role. Broader medical enquiries are generally appropriate only after a conditional offer has been made.

Are DBS checks required for all roles?

No. DBS checks are only permitted or required where the role falls within categories defined by the Rehabilitation of Offenders Act 1974 (Exceptions) Order 1975 or involves regulated activity under the Safeguarding Vulnerable Groups Act 2006. Employers should confirm eligibility before requesting a standard or enhanced check, as requesting an inappropriate level of disclosure may be unlawful.

Can an employer withdraw a job offer after pre-employment screening?

An employer may withdraw a job offer where it was made conditional upon satisfactory completion of specified checks and those conditions are not met. However, decisions should be based on information that is materially relevant to the role and should not discriminate on grounds protected by the Equality Act 2010. Where health or disability is involved, reasonable adjustments should be considered before withdrawing the offer.

Is consent required for pre-employment screening checks?

Consent is required in certain contexts, such as obtaining a medical report under the Access to Medical Reports Act 1988 or applying for a DBS check on an individual’s behalf. In data protection terms, employers do not usually rely on consent as the lawful basis for routine screening checks. Instead, they typically rely on legitimate interests or compliance with a legal obligation, provided transparency and proportionality requirements under the UK GDPR are met.

How long should employers retain pre-employment screening records?

There is no single statutory retention period for all screening records. Right to work documentation should be retained for the duration of employment and for at least two years after employment ends in accordance with Home Office guidance. Other screening data should be retained only for as long as necessary in line with the employer’s data retention policy and the UK GDPR principles of storage limitation and data minimisation.

Can employers carry out social media checks on candidates?

Employers may review publicly available information, but any social media screening should be relevant to the role, applied consistently and compliant with the UK GDPR. Employers should avoid reliance on information relating to protected characteristics under the Equality Act 2010, as this may give rise to discrimination risk. A documented recruitment policy can help demonstrate that any online screening is proportionate and lawful.

Glossary of key terms