A digital identity DBS check lets a candidate prove who they are for a criminal-record check from their phone, before the application even reaches the Disclosure and Barring Service. For an employer hiring into a regulated or safeguarding role, that decision affects two things at once: how fast the person can start, and whether the identity step holds up if anyone reviews it later.
The candidate feels it most. The old way meant digging out a passport, a driving licence and a recent utility bill, then getting them seen in person by someone at work. The digital route turns that into a short check on a phone, often before their first day is booked. For the hiring team, the same check produces a structured record of how identity was confirmed, which is the part that matters when a regulator or auditor asks.
This guide covers the four DBS levels, where digital identity fits, the one rule that makes DBS stricter than other checks, and how to choose a provider you can rely on.
What is a digital identity DBS check?
A digital identity DBS check is the identity-verification step of a DBS application carried out using digital identity technology rather than physical documents seen in person. The candidate confirms their identity remotely, and the result feeds the criminal-record check submitted to the Disclosure and Barring Service. Digital identity is accepted for every DBS level.
The DBS check itself does not change. The criminal-record disclosure, the levels, and the bodies that submit applications all work as before. What changes is how the candidate’s identity is proven at the start. Done digitally, that step moves off the desk of whoever used to inspect documents and onto the candidate’s own device.
Can you use digital identity for all DBS levels?
Yes. Digital identity is accepted for all four DBS levels: Basic, Standard, Enhanced, and Enhanced with Barred Lists. The DBS confirmed this in its digital identity factsheet, updated on 11 November 2025. The level you need is set by the role and what the law allows you to request, not by how identity is verified.
The four levels differ in depth, and the level drives how strong the identity check has to be.
|
DBS level
|
What it covers
|
Typical roles
|
|
Basic
|
Unspent convictions and conditional cautions
|
General employment, many customer-facing roles
|
|
Standard
|
Spent and unspent convictions, cautions, reprimands and warnings
|
Certain financial, legal and security roles
|
|
Enhanced
|
Standard content plus any relevant police information
|
Roles involving children or vulnerable adults
|
|
Enhanced with Barred Lists
|
Enhanced content plus a check of the children’s and/or adults’ barred lists
|
Regulated activity with children or vulnerable adults
|
Do you have to use a certified provider for a digital DBS check?
Yes. This is the rule that sets DBS apart. If an organisation uses digital identity for a DBS check, it must use a certified Identity Service Provider, known as an IDSP. The certified-provider step is mandatory for DBS, unlike right to work and right to rent, where the digital route is voluntary.
That single difference should shape the decision. For a right to work or right to rent check, an employer or landlord could in principle run the digital step through an uncertified tool, even though credible providers are all certified. For DBS, there is no such latitude. Use digital identity and the provider has to be certified. If a provider cannot show current certification for the criminal-record-check service, it cannot lawfully run the identity step for your DBS applications.
What confidence level does a digital DBS check need?
The required strength of the identity check depends on the DBS level. Standard, Enhanced, and Enhanced with Barred Lists checks need a HIGH level of confidence in the identity. Basic checks need a MEDIUM level of confidence. A certified IDSP is configured to meet the right level for the level of check being run.
These confidence levels come from the UK digital identity and attributes framework, which sets out how strongly an identity has been proven. The higher the DBS level, the more is at stake in the role, so the framework asks for stronger identity assurance. The table below maps it out.
|
DBS level
|
Confidence required
|
Who the certified IDSP works with
|
|
Basic
|
MEDIUM
|
Responsible Organisations
|
|
Standard
|
HIGH
|
Registered Bodies
|
|
Enhanced
|
HIGH
|
Registered Bodies
|
|
Enhanced with Barred Lists
|
HIGH
|
Registered Bodies
|
A certified IDSP works with Responsible Organisations for Basic checks and with Registered Bodies for Standard and Enhanced checks. Certification is audited by UKAS-recognised bodies against the UK digital identity and attributes framework, so the assurance is independently checked rather than self-declared.
What does the candidate actually do?
The candidate confirms their identity from their own phone, usually before their start date is fixed. They photograph or scan their document, follow a short guided liveness step so the provider can confirm a real person is present, and the provider matches the two. No documents change hands, and no one at the employer has to inspect a passport.
For the person being hired, that is the difference between an errand and a tap. They are not booking time off to bring originals to an office, and they are not handing copies of sensitive documents to a colleague. For the hiring team, the identity result arrives as a structured record showing how it was confirmed, ready to sit alongside the DBS outcome.
How do you choose a certified IDSP for DBS checks?
Confirm certification for the criminal-record-check service first, on the government register. DBS certification is granted per check service, so being certified for right to work does not cover DBS. Then weigh whether the provider can meet HIGH confidence for the levels you run, the quality of the audit record, and candidate completion rates.
The criteria worth applying, in order:
- Certification for DBS specifically. Listed on the government register and certified for the criminal-record-check service, not only right to work or right to rent.
- Confidence-level coverage. Able to meet HIGH confidence for Standard and Enhanced, and MEDIUM for Basic, so a single provider covers all your roles.
- Audit-ready evidence. A clear, dated, retainable record of how identity was confirmed, produced automatically rather than assembled by hand.
- Candidate completion. Fast and remote, with low drop-off, so the identity step does not stall a hire.
- Regulation and accountability. A provider that is itself regulated carries more weight if a check is later questioned.
This is where OneID fits as a certified Digital Verification Service provider, listed on the government register and FCA-regulated (FRN 928911). The candidate completes the identity step remotely in a short, guided flow, and the check produces an audit-ready record you can retain.
Frequently asked questions
Can you use digital identity for a DBS check? Yes. Digital identity is accepted for all four DBS levels: Basic, Standard, Enhanced, and Enhanced with Barred Lists. The DBS confirmed this in its digital identity factsheet, updated on 11 November 2025. The candidate verifies remotely, and the result feeds the criminal-record check.
Is a certified IDSP mandatory for a digital identity DBS check? Yes. If an organisation uses digital identity for a DBS check, it must use a certified Identity Service Provider. This is mandatory for DBS, unlike right to work and right to rent, where the digital route is voluntary. A provider must hold current certification for the criminal-record-check service.
What confidence level does a DBS identity check need? Standard, Enhanced, and Enhanced with Barred Lists checks need a HIGH level of confidence in the identity. Basic checks need a MEDIUM level of confidence. The levels come from the UK digital identity and attributes framework, and a certified IDSP is set to meet the level for the check being run.
What is the difference between a Responsible Organisation and a Registered Body? A certified IDSP works with Responsible Organisations for Basic DBS checks and with Registered Bodies for Standard and Enhanced checks. Both are the bodies that submit DBS applications. The distinction reflects the level of check and the confidence required for the identity step.
Who audits IDSP certification for DBS? Certification is audited by UKAS-recognised bodies against the UK digital identity and attributes framework. That means a provider’s compliance is independently assessed rather than self-declared, which is why checking certification on the government register is the sensible first step before choosing a provider.
References
