Background Check Authorisation Form Template for England and Wales

Generate a bespoke document

Trusted by 200k+ teams

4.7 Capterra
4.8 Product Hunt
4.6 Trustpilot

What is a Background Check Authorisation Form?

The Background Check Authorisation Form is essential for organizations in England and Wales conducting due diligence on potential or current employees. This document ensures compliance with data protection laws while enabling employers to verify candidates' backgrounds. It typically includes provisions for criminal record checks, employment verification, and educational qualification confirmation. The form is particularly crucial given the strict requirements of UK data protection legislation and the need for explicit consent in processing personal data.

Frequently Asked Questions

Is a background check authorisation form legally binding in England and Wales?

Yes, a properly completed background check authorisation form is legally binding in England and Wales under UK GDPR and the Data Protection Act 2018. Once signed, it provides lawful basis for employers to process personal data and conduct background checks. The document creates a contractual obligation and must comply with data protection principles to remain enforceable.

Can employers conduct background checks without a signed authorisation form in England and Wales?

No, employers cannot lawfully conduct background checks without proper authorisation under UK GDPR and Data Protection Act 2018. Processing personal data for background checks requires explicit consent or another lawful basis clearly documented in an authorisation form. Conducting checks without authorisation may result in ICO fines up to £17.5 million or 4% of annual turnover.

How long does consent last on a background check authorisation form in England and Wales?

Consent duration must be clearly specified in the authorisation form and should be proportionate to the purpose. Under UK GDPR, consent should typically be renewed every 12-24 months unless the form specifies a shorter period. Employers must allow individuals to withdraw consent at any time and delete personal data when it's no longer needed for the stated purpose.

How does a background check authorisation form differ from a DBS application in England and Wales?

A background check authorisation form provides consent for various types of background checks including credit, employment history, and references, while a DBS application specifically requests criminal record checks. The authorisation form is required before submitting DBS applications and covers broader data processing activities under UK GDPR compliance requirements.

How long does it take to create a compliant background check authorisation form?

Creating a basic template takes 1-2 hours using standard clauses, but developing a fully compliant form for specific business needs typically takes 3-5 business days with legal review. The timeline includes drafting data protection clauses, ensuring Rehabilitation of Offenders Act compliance, and incorporating necessary consent mechanisms under UK GDPR requirements.

Which common mistakes invalidate background check authorisation forms in England and Wales?

Common mistakes include failing to specify data retention periods, using blanket consent without clear purposes, not explaining withdrawal rights, and missing lawful basis statements required under UK GDPR. Other errors include not updating forms for current legislation, failing to specify which types of checks are authorised, and not including proper data sharing clauses.

Must background check authorisation forms comply with the Rehabilitation of Offenders Act 1974?

Yes, forms must comply with the Rehabilitation of Offenders Act 1974, which protects spent convictions from disclosure in most circumstances. The form must clearly state whether standard or enhanced DBS checks are required and explain that only relevant unspent convictions or those subject to exemptions can be considered. Failure to comply may result in discrimination claims and ICO enforcement action.

Reviewed by

Swetha Meenal

Legal Engineer, GenieAI

Swetha Meenal profile photo

A lawyer, legal researcher and legal tech founder, Swetha has built AI products deployed inside Tier 1 firms and enterprises. She ensures GenieAI's alignment with the latest regulation and executes testing on the legal robustness of Genie output.

Reviewed by

Imad Mohammed Nazar

Legal Engineer, GenieAI

Imad Mohammed Nazar profile photo

A Skadden-trained M&A lawyer, Imad advised on cross-border transactions and contractual risk before moving into legal AI. He reviews GenieAI's output for compliance and enforceability across our 150+ supported jurisdictions, as well as facilitating external benchmarking.

Jurisdiction

England and Wales

Publisher

GenieAI

Sector

Business

Cost

Free to use

Last updated

About the Background Check Authorisation Form

A Background Check Authorisation Form is a vital legal document that enables employers in England and Wales to conduct comprehensive due diligence on potential and existing employees while maintaining strict compliance with data protection legislation. This form establishes the necessary legal framework for processing sensitive personal information during the recruitment and ongoing employment process.

When do you need this document?

You'll need this form whenever your organisation plans to conduct background verification on candidates or employees. This includes situations where you're hiring for positions involving financial responsibility, working with vulnerable populations, or roles requiring enhanced security clearance. The form is particularly essential for healthcare workers, teachers, financial services employees, and security personnel who require Disclosure and Barring Service (DBS) checks. You'll also need it when conducting periodic re-screening of existing employees or when promoting staff to positions with increased responsibilities.

Key legal considerations

The form must clearly specify the type and scope of background checks you intend to conduct, including criminal record checks, employment verification, and educational qualification confirmation. Under UK GDPR, you must demonstrate a lawful basis for processing personal data and ensure the candidate provides explicit, informed consent. The document should detail how long personal information will be retained, who will have access to the data, and the candidate's rights regarding their personal information. You must also specify whether the check will be a basic, standard, or enhanced DBS check, as each level has different legal requirements and disclosure thresholds under the Rehabilitation of Offenders Act 1974.

Legal requirements in England and Wales

Under the Data Protection Act 2018 and UK GDPR, you must ensure the background check is proportionate to the role and that you have a legitimate interest or legal obligation to conduct such checks. The Rehabilitation of Offenders Act 1974 governs the disclosure of spent convictions, meaning you can only ask about certain historical offences for specific roles. For positions exempt from this Act, such as those involving work with children or vulnerable adults, you can access enhanced DBS checks under the Police Act 1997. The Safeguarding Vulnerable Groups Act 2006 establishes additional requirements for roles involving regulated activity. You must provide clear privacy notices explaining how personal data will be processed, stored, and shared with third-party background check providers. The form must also include information about the candidate's right to access their data, request corrections, and lodge complaints with the Information Commissioner's Office.

Genie's Security Promise

Genie is the safest place to draft. Here's how we prioritise your privacy and security.

Your data is private:

We do not train on your data; Genie's AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it