IT contractors are increasingly involved in delivering technology services to UK government departments and public sector organisations. Their work may involve access to government systems, databases, networks and confidential information. This makes appropriate vetting an important part of managing organisational risk.
However, access to sensitive government data does not automatically make an IT contractor eligible for a particular level of DBS check. DBS eligibility depends on the duties and circumstances of the role, not simply the sensitivity of the information being accessed.
Do IT Contractors Automatically Need a DBS Check?
No. An IT contractor does not automatically qualify for a Standard or Enhanced DBS check simply because they work for a government department or handle sensitive information.
The organisation recruiting or engaging the contractor is responsible for assessing whether the role is eligible and which level of check is appropriate. Factors can include the activities undertaken, who the contractor interacts with, where they work and how frequently particular duties are performed.
If the legal eligibility criteria for a Standard or Enhanced check are not met, a Basic DBS check may still be available.
When Might a DBS Check Be Relevant?
Some government-related positions may have specific eligibility under DBS rules. For example, current guidance identifies certain roles connected with public contracts and other specific functions that may be eligible for Standard or Enhanced checks.
However, organisations should assess the actual role rather than applying a blanket DBS requirement to every contractor.
An IT professional working on infrastructure, software development or technical support may have very different DBS eligibility from someone whose duties also involve regulated activity with children or adults.
DBS Checks and Security Clearance
DBS checks and government security vetting are not the same thing.
A DBS check focuses on criminal record information and, where applicable, barred-list information. Government departments and contractors may also have separate security requirements for access to particular systems, facilities or information.
Therefore, an IT contractor may need to satisfy organisational or government security requirements in addition to any DBS check for which their role is eligible.
Employers should identify the different requirements before a contractor begins work.
Accurate Identity Verification Matters
Where a Standard or Enhanced DBS check is required, accurate identity verification is an important part of the process. DBS guidance states that identity information is used to search relevant police records and, where applicable, barred lists. Applicants should provide accurate details, including previous names and a full five-year address history.
Errors or incomplete information can cause delays and may affect the accuracy of the screening process.
Managing Contractors Effectively
Organisations should establish a clear process for determining DBS eligibility before engaging contractors. This can include reviewing the job description, assessing the contractor’s duties, identifying the appropriate DBS level and documenting the decision.
Contractor screening should also form part of a wider security process. Depending on the assignment, organisations may need to consider access controls, confidentiality agreements, references, technical security requirements and relevant government vetting procedures.
For support with DBS applications and screening, organisations can use ClearCheck as part of their wider contractor onboarding process.
FAQ
Do all IT contractors working for the government need a DBS check?
No. DBS eligibility depends on the specific duties and legal criteria applicable to the role.
Does access to sensitive government data automatically require an Enhanced DBS check?
No. Access to sensitive information alone does not automatically make a role eligible for an Enhanced DBS check.
Are DBS checks the same as government security clearance?
No. DBS checks and security clearance are separate processes with different purposes.
Who decides whether an IT contractor is eligible for a DBS check?
The organisation engaging the contractor is responsible for determining whether the role is eligible and which level of DBS check is appropriate.
Can an IT contractor have a Basic DBS check?
Yes. Basic DBS checks do not have the same specific eligibility criteria as Standard and Enhanced checks.
Conclusion
DBS Checks for IT Contractors should be assessed according to the actual responsibilities and legal eligibility of the role. Handling sensitive government data can create important security considerations, but it does not automatically determine which DBS check can be requested.
By separating DBS screening from other security requirements, verifying contractor identities accurately and assessing each role individually, organisations can build a more structured and compliant approach to contractor onboarding.
