Screening goes wrong in two directions. Under-screen and you carry avoidable risk; over-screen and you slow hiring, spend needlessly, and drift into checks you have no lawful basis to run. This checklist keeps you in the corridor between the two.
Step 1, Map checks to the role, not the fear
- Every role: identity verification, right to work. These are the non-negotiables.
- Professional roles: add employment history, references, Basic DBS, education where qualifications matter.
- Regulated / licensed roles: add professional licence verification and the DBS level the role is actually eligible for.
- Finance-sensitive roles: add credit checks and sanctions screening, with a documented justification.
- Public-facing / safeguarding roles: consider social media screening (public data, defined categories, consented) and Enhanced DBS where eligible.
Step 2, Get the legal groundwork right
- Establish and record a lawful basis for each check under UK GDPR.
- Tell candidates what will be checked, why, and by whom, before anything runs.
- Capture explicit digital consent, stored with the check.
- Apply the same package to every candidate for the same role, consistency is your discrimination defence.
Step 3, Sequence for speed
Run identity first (everything else binds to it), then dispatch all remaining checks in parallel. Never queue checks behind each other; your total time should be your slowest check, not the sum. See real timelines by check type.
Step 4, Decide how you'll handle findings before you find them
- Who adjudicates a flagged result, and against what criteria?
- Individualised assessment for criminal records: relevance, recency, pattern.
- Candidate right of reply, discrepancies are sometimes data errors.
- Document the decision and the reasoning, every time.
Step 5, Close the loop
- Store reports, consent and audit trail in one place with role-based access.
- Set retention periods and actually delete on schedule.
- Diarise re-checks: visa expiries, licence renewals, periodic screening for regulated roles.
The test of a screening programme isn't the checks it runs, it's whether, a year later, you can show exactly what was checked, why, with what consent, and what you did with the answer.
HireCheck packages this whole checklist into the product: role-based packages, consent capture, parallel execution, adjudication workflow and retention controls. Run your first screen in five minutes.
