Code of practice

Organisations that wish to use CRB checks must comply with the CRB’s code of practice, developed after a public consultation exercise with input from a range of organisations.

The code of practice is published under section 122 of the Police Act 1997

It is intended to ensure - and to provide assurance to those applying for standard and enhanced CRB checks - that the information released will be used fairly. 

The code also seeks to ensure that sensitive personal information is handled and stored appropriately and is kept for only as long as necessary.

Anybody who receives standard or enhanced CRB check information must abide by the code of practice, this includes:

• registered bodies
• registered bodies offering an umbrella service
• recruiters and others receiving the information

The recruitment of ex-offenders 

The code of practice states that information on a CRB certificate should only be used in the context of a policy on the recruitment of ex-offenders. This is designed to protect applicants from unfair discrimination on the basis of non-relevant past convictions. The CRB has developed a specimen policy on the recruitment of ex-offenders to help guide organisations.

Storing information

The correct storage of information from a CRB certificate is important. The code of practice requires that the information revealed is considered only for the purpose for which it was obtained (It should be destroyed after a suitable period has passed - usually not more than six months.)

Organisations must therefore use information revealed on CRB certificate fairly, and ensure that you adhere to handling and storage of CRB certificate information. They must also satisfy the CRB that they are complying with the code of practice. This means means cooperating with requests from the CRB to undertake assurance checks, as well as reporting any suspected malpractice in relation to the code or misuse of CRB certificates.

The CRB can refuse to issue the results of a CRB check if it suspects that the code of practice is not being adhered to.

Guidance for Registered Bodies or organisations who would like to use the CRB checking service can be found on the Business Link website.