Digital identity verification for DBS checks

profile picture Amy Colville 7 min read

The Disclosure and Barring Service (DBS) has updated its guidance on how to check someone’s identity for a criminal record check.

Previously, the process was only possible by seeing physical documents. During the pandemic, employers enjoyed relaxed rules which allowed them to do this via video call. However, the government has now updated their guidance to allow for digital ID verification technology. 

This means candidates can prove their identity online, which is an absolute game changer for employers grappling with a remote-first world. But how does the process work and should you use it? Here’s our guide to digital ID for DBS checks.


What is a DBS check?

A DBS check allows employers to see any criminal convictions a candidate may have on record. In some jobs, this is a legal requirement, particularly when working with vulnerable people, such as in healthcare or childcare. The check itself is processed by the Disclosure and Barring Service (DBS) and was previously called a CRB check.

There are four types of DBS checks:

  1. Basic: shows unspent convictions and conditional cautions
  2. Standard: shows spent and unspent convictions and cautions
  3. Enhanced: shows the same as a standard check plus any information held by local police that’s considered relevant to the role
  4. Enhanced with barred lists: shows the same as an enhanced check plus whether the applicant is on the list of people barred from doing the role


Anyone can request a Basic DBS check on themselves directly through the government website

Employers that want to request a Basic DBS check on an employee must use a ‘responsible organisation’ (RO), which is a company registered with the DBS to submit checks.

To request a Standard or Enhanced DBS check on an employee, employers must use a company known as an ‘umbrella body’. Employers that process over 100 checks a year can also choose to register with DBS.


Verifying identity for DBS

Before a DBS check can be processed, you first need to confirm the identity of the person being checked.

Until this year, this relied on seeing original documents. However, the new guidelines now allow employers to collect and verify documents digitally. For candidates, this is as simple as submitting their documents and a selfie online.

The verification process is mostly automated and uses facial matching to compare a selfie to an ID document. In addition, checks are done to make sure the image is of a real person and that the document is genuine.

In addition, further checks are often completed to reach the correct level of confidence under GPG45 as required by DBS, such as a check against data held by credit reference agencies. 

Employers don’t have to use digital identity verification but if they do, it must be undertaken by a certified identity service provider (IDSP). Make sure you check with your chosen DBS provider if they accept digital identity checks.


GPG45 for DBS

When done digitally, the identity checking process must follow the government’s Good Practice Guide (GPG)45. This involves gathering evidence that supports someone’s identity and is split in five parts:

  1. Get evidence of the claimed identity
  2. Check the evidence is genuine or valid
  3. Check the claimed identity has existed over time
  4. Check if the claimed identity is at high risk of identity fraud
  5. Check that the identity belongs to the person who’s claiming it


Each step in this process is scored and combined to reach a level of confidence. There are four levels of confidence: low, medium, high and very high. 

The levels of confidence required for DBS are: 

  • ‘Medium confidence’ for DBS Basic 
  • ‘High confidence’ for Standard and Enhanced


Identity profiles for DBS

There are many ways to reach a GPG45 level of confidence, depending on how each step of the identity checking process has been carried out. 

Different types of evidence are scored differently. For example, an ePassport scores more than a non-electronic passport or a driving licence. 

Similarly, the way you collect evidence is important. You can gather and verify proof of address from a driving licence or typed in by the individual and checked with a credit reference agency. 

The different ways you gather and check evidence to reach a specific level of confidence are called ‘identity profiles’

There are lots of identity profiles and IDSPs must be audited for each one they offer. Not all IDSPs will offer the same number of identity profiles, which means some providers will offer candidates more flexibility and less friction than others.


Should you use digital identity for DBS?

Digital identity is a game change for remote and hybrid working practices. Not only does it allow you to onboard employees from anywhere in the world, but it also helps you stand out in a competitive marketplace with an unbeatable candidate experience.

In addition, for organisations that need to prove right to work eligibility and carry out a DBS check, some IDSPs like Yoti and Post Office are certified for both. This means you can use the same ID check for both processes, allowing you to streamline your internal practices. 

Of course, digital isn’t for everybody. We believe in choice and inclusivity. Candidates that would like a little assistance can verify their identity at a Post Office. Their data is digitised and returned to the business in the same way as in the online service, only they haven’t had to touch a keyboard.


How Yoti and Post Office are digitising the DBS process

Yoti and Post Office were the first government-certified IDSP for both DBS and Right to Work. Since the change in guidance, we’ve helped some of the UK’s biggest background screening companies make huge efficiencies in their processes.

We’ve continued to add more identity profiles to our Identity Verification Service, to give candidates more flexibility and less friction over the documents they use.

For DBS basic, candidates can complete the process using just their UK driving licence. To meet the required ‘medium’ level of assurance, we run an activity history check without adding any friction to the user experience.

For DBS Standard and Enhanced, candidates can complete the process using an ePassport or a non-chipped passport. This new profile opens up the process to a wider range of ID documents and customers across the globe.

Candidates can also prove their identity for a DBS check using our reusable Digital ID app.

Alternatively, candidates that prefer some human assistance can verify their identity in-person at a Post Office.


Digitise the ID process for DBS 

It’s been a really exciting time for Yoti and Post Office as we see what happens when innovation meets legislation.

And we’ve loved hearing the feedback from valued partners like David Hutchinson, CEO at PeopleCheck:

“I want to applaud your internal teams with how they have been supporting and working with the PeopleCheck tech team. The result is an exceptional candidate journey and a great product. This is a significant game changer for both on-site and remote hiring – with companies now being able to fully outsource UK Right to Work credibly and compliantly, at scale and at speed.”

If you’re looking to digitise the DBS and right to work process, get in touch and we’d be happy to help.

Related stories

An image of three illustrations. The first is an ear, the second is an eye and the third is a finger tapping on something. Basically it’s an illustration summing up accessibility and the key things we look for whenever we release a new page or product. Audio, sight/visuals and touch.

Yoti Identity Verification achieves WCAG 2.2 Level AA for accessibility

Our Identity Verification solution has achieved Web Content Accessibility Guidelines (WCAG) 2.2 Level A and Level AA for accessibility. This is a huge milestone for us as one of our founding principles is to ‘make Yoti available to anyone’.   WCAG 2.2 Level A and Level AA WCAG’s framework is used as a benchmark for accessibility regulations around the world. To achieve WCAG 2.2, we had to meet all A and AA criteria. Level A conformance requirements prohibit elements that make the product inaccessible. If products don’t meet Level A criteria, they’re almost impossible for people with disabilities to use.

6 min read

How Yoti can help the financial services industry

In today’s world, the financial services industry needs to be protected now more than ever. It’s critical to the growth of the UK economy but is constantly under attack from online actors on the hunt for money.  With cyber security risks increasing, we’ve been working hard to build solutions that offer as much security as possible to such an important industry, and protection from these growing threats. The need for financial institutions to have customised systems is greater than ever due to the sophisticated nature of frequent cyberattacks. As these bad actors become more sophisticated with their approaches, we’ve had

4 min read
Woman working at desk looking at laptop

PeopleCheck automate the background screening process to scale checks without limit

“The change in legislation was a once-in-a-generation perfect storm. The automation that’s come off the back of digital identity enables us to deliver swift onboarding and a platform that’s on the leading-edge of user experience and smart technology.”  David Hutchinson People Check CEO PeopleCheck is the UK’s leading background check provider. We helped them: Meet the digital ID checking requirements for right to work and DBS. Automate significant parts of the screening process. Scale from 1 check to 1,800 in the same time.   Solution: Right to Work Industry: Background screening Read the case study

2 min read