An Adverse DBS Disclosure Has Come Back. Here Is How to Handle It Without Ending Up at a Tribunal.

Earlier this month, the Employment Appeal Tribunal issued a ruling that should make every HR manager who has ever received an adverse DBS certificate sit up straight. The case involved the withdrawal of a conditional job offer. The EAT found that the employment tribunal below had got the analysis wrong because the employer had not separately identified, documented and assessed each reason for the decision. Bundling everything into a single composite withdrawal was not enough.

That principle applies directly to every adverse DBS disclosure decision your organisation makes. When a certificate comes back with a criminal record on it and you decide not to proceed, you need to show that each offence was considered individually, assessed against the specific role and weighed against every relevant factor before any decision was reached. Most employers cannot show that. That is exactly where the tribunal exposure begins.

What I Saw Happen Again and Again

In 18 years of running a screening company and training HR teams across healthcare, security, financial services and education, I saw the same mistake made repeatedly. A certificate comes back with something on it. The hiring manager panics. Someone sends an email saying the organisation is unable to proceed with the application. No written assessment. No individual consideration of the offence. No thought given to when it happened, how serious it was or whether it has any connection to the role being recruited for.

Most organisations do not have a documented policy for handling adverse DBS disclosures at all. Of those that do, most policies say something like "we assess each case on its merits" without any framework for what that actually means in practice. What I found consistently was a gap between what organisations told their auditors they did and what actually happened when a disclosure arrived on someone's desk.

The gut reaction is understandable. But acting on it without a structured, documented process is precisely where the legal risk lives.

How to Handle an Adverse Disclosure Correctly

Read it carefully before you do anything

The first step when an adverse disclosure arrives is to slow down. A Standard or Enhanced DBS certificate can show convictions and cautions, both spent and unspent, depending on whether they have been filtered under the rules introduced by the Protection of Freedoms Act 2012. Not everything on a certificate carries equal significance. A caution from fifteen years ago and a recent conviction for a serious offence are fundamentally different things and your assessment must treat them that way.

Apply the legal test: is this relevant to the role?

The Rehabilitation of Offenders Act 1974 is the starting point. For roles covered by the Exceptions Order 1975, you can take spent convictions into account. For roles that are not covered, you cannot. Once you have confirmed which regime applies, the central question is straightforward: is what the certificate shows relevant to the specific role you are recruiting for?

Relevance is not a vague concept. A conviction for theft matters greatly in a role involving financial responsibility and very little in a role with none. A conviction involving violence is directly relevant to a lone-working care role and requires a completely different assessment in a logistics or administrative context. The assessment must be role-specific every time.

What your written assessment must cover

Before you make any decision, your documented assessment needs to work through the following. The nature of the offence. How serious it was. When it occurred and how long ago. The sentence imposed. Whether there is a pattern of offending or a single isolated incident. The age of the individual at the time. Any explanation the candidate has provided. The specific responsibilities and risk profile of the role. Whether the individual has worked in similar roles since the conviction without further incident.

This is the framework the DBS Code of Practice requires you to apply. It is also the framework a tribunal will expect to see evidenced if a claim reaches it.

Give the candidate the opportunity to respond

Before you make a final decision, give the candidate the chance to discuss the disclosure with you. The DBS recommends this and it is considered best practice in every regulated sector I worked in. What a certificate shows does not always tell the full story. A candidate who can explain the circumstances, demonstrate what has changed and evidence a clean record in the years since is a very different proposition from one who cannot.

Document that conversation. What you asked, what they said, how it affected your assessment. That record is a material part of a defensible decision.

Write the decision before you communicate it

Your decision must be in writing before you pick up the phone or send an email. The written record should show the offence, the role, the factors you weighed, what the candidate said and the reasoning that led to your conclusion. If you cannot show an auditor or a tribunal how you reached this decision, you do not have a compliant process.

What Getting This Wrong Actually Costs

Discrimination claims brought under the Equality Act 2010 carry no cap on compensation. Any candidate who believes they were treated unfairly can bring a claim. There is no qualifying period of employment required. You can face a tribunal claim from someone who never worked a single day for your organisation, and if you cannot produce a documented assessment to show what you considered and why, your position is very difficult to defend.

Beyond the claim itself, you face the cost of defending it. Legal fees, management time and reputational exposure apply regardless of the outcome.

Breach of the DBS Code of Practice can affect your registered status. For umbrella bodies and registered organisations, losing that status means losing the ability to countersign applications for your clients. That is a direct operational consequence.

If you operate under BS7858, BPSS, CQC or any other standard that requires evidence of safer recruitment, you need documented DBS disclosure decisions in your files. If an auditor asks how you handled an adverse disclosure and there is nothing in writing, that is a finding against you.

Charlotte Can Answer This the Moment It Lands

This is exactly the kind of question that arrives without warning and demands an answer right now. A certificate lands on a desk, a start date is under pressure, the hiring manager is on the phone and you need to know what to do.

Charlotte is my AI knowledge twin. She is built on 18 years of real operational experience across 352 compliance topics covering every aspect of UK employment screening, vetting, compliance and risk. She is not a generic AI tool pointed at guidance documents. She is the closest thing to having me available to your organisation 24 hours a day, seven days a week. Ask her anything about adverse DBS disclosures, the assessment framework, the documentation you need or the legal test that applies, and you get a clear, expert, practical answer immediately.

To give you a sense of what Charlotte can do on this topic, here is the question I put to her and the answer she came back with.

Question put to Charlotte: An enhanced DBS check has come back on a candidate for a support worker role showing a conviction for common assault from six years ago. The candidate has explained the context. How do I assess whether this is relevant to the role and what do I need to document to make this decision defensible?

Charlotte's answer: Start by assessing the specific nature of the assault and the circumstances the candidate has described. For a support worker role involving direct contact with vulnerable adults, a conviction for violence carries genuine relevance, so your assessment needs to be thorough rather than dismissive. Six years is a meaningful gap, and the candidate's account of what happened and what has changed since is a legitimate part of your assessment. Ask whether they have worked in care or support roles since the conviction without further incident, whether the explanation they have given is credible and whether the risk they represented six years ago is the risk they represent today. Document each of these factors in writing before you make any decision. Your record should show the offence, the role, the factors you weighed, what the candidate said and the reasoning that led to your conclusion. That documentation is what makes your decision defensible if it is ever questioned.

Charlotte provides expert guidance based on 18 years of real operational experience in UK employment screening and vetting. She does not provide legal advice. For legal matters specific to your organisation, always consult a qualified solicitor.

Your Vetting Hub subscription also includes 18 CPD certified vetting and screening courses and 22 digital compliance toolkits, all built from real operational experience and all included from day one. They are there when you need them. Not something to schedule. Just more expertise available whenever you want it.

Everything described above for £79 per person per month. Named user licence. Everything included from day one. Nothing extra to buy.

Courses Included in Your Subscription

The following courses are included in your subscription and cover this topic in depth.

• DBS Checks Done Right: Ask, Assess and Record Confidently
• Defensible Screening Decisions: How to Assess Risk, Record Judgements and Survive an Audit

Toolkits Included in Your Subscription

The following toolkits are ready to download from day one and are included in your subscription.

• DBS Employer Decision Framework
• DBS Disclosure Assessment and Recording Template
• Candidate Adverse Information Decision Framework

Related Posts Worth Reading

If you want to understand the full landscape of DBS checks before getting into how to handle what comes back, I covered the differences between Basic, Standard and Enhanced certificates, who needs which level and when, in the post published on Monday: https://vettinghub.co.uk/post/basic-standard-enhanced-dbs-checks-which-one-do-you-need

One point that comes up regularly when employers receive an adverse disclosure is the assumption that because a screening company ran the check, the responsibility for the decision sits with them. It does not. The hiring decision belongs to you regardless of who processed the application. I wrote about where that line falls here: https://vettinghub.co.uk/post/outsourcing-screening-accountability-employer-responsibility

Frequently Asked Questions

Can I automatically reject a candidate because of a criminal record on their DBS certificate?

No. A blanket rejection policy is not compliant with the DBS Code of Practice and can give rise to indirect discrimination claims under the Equality Act 2010. Every disclosure must be individually assessed against the specific role, the nature of the offence and all relevant factors before any decision is made.

What should I do first when an adverse DBS disclosure comes back?

Slow down and read the certificate carefully. Identify exactly what is disclosed, including the nature of the offence, when it occurred and the sentence imposed. Then begin a structured written assessment before you communicate anything to the candidate or make any hiring decision. Acting under pressure without documentation is where employers create the legal exposure they are trying to avoid.

Do I have to give the candidate a chance to explain before I decide?

It is not a statutory requirement in every case, but the DBS strongly recommends it and it is considered best practice across every regulated sector. Share the relevant disclosure with the candidate, invite them to provide context and document what they say. That conversation is a material part of a defensible decision.

What legislation governs my adverse DBS disclosure decisions?

The Rehabilitation of Offenders Act 1974 governs which convictions you can and cannot consider depending on the role. The DBS Code of Practice requires registered organisations to treat applicants with criminal records fairly and to operate a written policy for doing so. The Equality Act 2010 applies to the decision-making process itself. UK GDPR and the Data Protection Act 2018 govern how you handle and retain the information disclosed.

Try Charlotte Now

The best way to understand what Charlotte can do on this topic and every other area of UK employment screening is to put a question to her yourself. The demo is live, it requires no sign up and you can access it right now at https://demo.vettinghub.co.uk/charlotte-demo

The full Vetting Hub subscription gives you Charlotte across all 352 topics, the 18 CPD certified vetting and screening courses built from real operational experience and the 22 digital compliance toolkits, all from day one, for £79 per person per month. Everything your organisation needs to screen and vet people correctly, in one place, available the moment you subscribe.