The check that stops your bank nurse starting on Saturday
A bank nurse accepted a Saturday shift on Wednesday morning. She had worked the same specialty at a neighbouring trust in June, and both her NMC registration and her DBS Update Service subscription are current. By Friday she has photographed her passport twice and had a utility bill rejected. She is still waiting to hear whether she can come in.
Healthcare staffing compliance produces that Friday afternoon more often than anyone running a staff bank would like. The checks completed for her June placement do not travel to this one. Identity starts again from the beginning.
NHS England told trusts on 2 June 2025 to cut agency spend by at least 30 per cent, and said that “working through a staff bank is staff’s first choice when they want to take on an extra shift”. A bank that cannot get a willing nurse onto that Saturday shift hands it back to an agency.
Run the six NHS Employment Check Standards in parallel, and accept that identity restarts at every engagement however recently it was done. In England no national route carries a completed identity check from an agency or staff bank to the hiring trust. Framework membership does not discharge the employing organisation’s own duty to check.
NHS Employers sets the NHS Employment Check Standards for England. It is explicit that “the standards apply to all appointments in the NHS”, and puts locum doctors, people working on a trust bank, workers supplied by an agency and other third-party contractors inside that scope (15 April 2019). All six standards were re-published on 23 July 2026. A separate guide to how NHS employers verify identity for a new starter covers what each one requires. The overlay for temporary staffing is who must satisfy themselves that the work was done.
The Employment Check FAQs, updated 31 July 2026, say that using an agency on a national framework agreement “may provide a level of assurance of a compliant workforce. However this cannot offer any guarantees in terms of patient safety and standards of care.” That page still names the Crown Commercial Service, which became the Government Commercial Agency on 1 April 2026.
The Identity Checks Standard requires the hiring organisation to “gain the necessary assurances from the staffing provider that the appropriate clearances, including identity checks have been conducted in compliance with the NHS Employment Check standards”. The Employment Check FAQs add a duty to verify information from temporary workers and to audit the staffing provider’s compliance. For an agency, evidence a trust can inspect without a phone call is worth more than a warranty.
The checks differ in what they leave behind for the next organisation.
|
Check |
Carries between engagements |
What the receiving organisation still does |
Source |
|---|---|---|---|
|
Criminal record check |
Conditionally, through the DBS Update Service, where the level and workforce match the new role |
See the original paper certificate in person, confirm identity, take consent, run a status check |
gov.uk, DBS Update Service employer guide, 23 January 2026 |
|
Professional registration |
No. Registration is live on the regulator’s register and can be re-confirmed at any time |
Verify registration, any restrictions, pending fitness to practise cases and alert notices |
NHS Employers, professional registration standard, July 2026 |
|
Employment history and references |
Stable once obtained |
Apply the standard to this appointment |
NHS Employers, employment check standards, 23 July 2026 |
|
Right to work |
Only for the organisation that made the check. A statutory excuse is not transferable |
Check the workers it employs itself |
Home Office, employer’s guide, 26 June 2025 |
|
Identity |
No. There is no national portability route in England |
Verify identity to the standard and sight original documents as soon as practical. Run an in-person likeness check before work starts |
NHS Employers, identity checks standard, 23 July 2026 |
The NHS Digital Staff Passport “was retired on 5 December 2025 and is no longer in use” (NHS England Digital, 8 December 2025). No replacement had been announced as at 7 August 2026.
The Electronic Staff Record can move employment records between organisations through its Inter-Authority Transfer module, but NHS England’s guidance on enabling staff movement says this “is not designed for temporary movements of staff”, which is what bank and agency work is.
Even where two NHS organisations agree a warranty so that “employment checks and training modules do not need to be repeated by the receiving organisation”, identity is carved out. The receiving organisation checks “the identity of the person who arrives”, and that check must include “at least one form of reliable photo identity” (NHS England, 4 December 2025). Identity is re-established at each hop by design, and again at the door on the day.
A £16 a year Update Service subscription is the closest thing to portability in the process, and it is often read as meaning the receiving organisation can look the worker up. The gov.uk employer guide sets out what has to be true first. Its current version is dated 23 January 2026. Two of its questions matter here: “Have you seen the applicant’s original paper certificate in person? Copies or viewing the certificate over video link is not permitted.” and “Have you checked the applicant’s ID to confirm their identity?”
The identity step is a precondition of using the portable check. The paper certificate has to be in the room. Portability also applies only where the new role does not change the type of access the worker has to adults or children, or the clearance required (NHS Employers, 20 February 2025). Where an eligible temporary worker is not subscribed, NHS Employers requires DBS checks annually as a minimum in England.
The Home Office employer’s guide in force at the time of writing, dated 26 June 2025, is blunt about delegation: “you cannot establish a statutory excuse if the check is performed by a third party, such as a recruitment agency or your professional adviser.” Liability sits with the organisation that employs the worker, whoever ran the check.
The certified digital route covers British citizens with a valid passport and Irish citizens with a valid passport or passport card, and nobody else. NHS Employers is also stricter than the Home Office, making it mandatory in its Right to Work Checks Standard of 23 July 2026 that any Digital Verification Service Provider used for right to work is on the OfDIA register with a notation confirming it can provide those checks.
An agency that supplies a worker and runs the payroll for that placement has a direct interest in knowing the person named on the timesheet is the person who worked the shift.
The NHS Counter Fraud Authority’s Strategic Intelligence Assessment 2025 assessed that “it is highly likely that an impersonator may use another person’s ID to carry out shifts”, and recorded a case in which “a genuine NMC registrant’s identity was being used fraudulently by one or more non-registrants, for the purpose of gaining work in roles that are for registered nurses”. It put annual NHS staff fraud vulnerability at £27.8 million.
That is why the Identity Checks Standard keeps two physical obligations. Employers must not rely on documents inspected over a live video link or on a scanned copy “without seeking original documentation as soon as practical”, and must “conduct an in-person likeness check of the individual before they commence work”. Removing the door check would remove the control that ties a verified file to the person on the ward.
Identity verification is not going to disappear from the process, so the time has to come out of what surrounds it: document collection, chasing, rejection for a bill three months old, and manual review by someone who also has forty shifts to fill.
Four things sit within a staffing team’s control.
OneID is listed on the government’s Digital Verification Services register as service 286, certified on 12 June 2026 and due to expire on 21 June 2029, with supplementary codes that include Disclosure and Barring Service and Right to Work. Certification is granted per check service, so a provider’s entry is worth reading on the register itself. The trust framework moves to version 1.0 on 1 September 2026.
Registration happens on the nurse’s own phone. She confirms her identity through her bank, an international eID, a document scan or a digital identity she already holds, and a bank-verified check returns in under 12 seconds.
The scope is narrow and worth saying plainly. OneID does not query the NMC or GMC registers and does not issue a DBS certificate. The employing organisation owns the compliance file. A person still stands at the door and matches the face to the file. The collection and review sitting in front of that door is where healthcare staffing compliance loses time.
Does using a framework agency mean the trust does not have to check? No. Responsibility for safe employment practice rests with the current employing organisation, which must also audit its staffing provider’s compliance. NHS Employers put it plainly on 31 July 2026: a framework agency “cannot offer any guarantees in terms of patient safety and standards of care”. Gaining assurances from the provider remains the trust’s job.
Does the DBS Update Service mean we can skip the identity check? No. An employer must answer yes to “Have you checked the applicant’s ID to confirm their identity?” before running a status check, and must have seen the original paper certificate in person (gov.uk employer guide, 23 January 2026). Copies are not accepted and neither is a video link.
A nurse worked for us in June. Do we check her identity again in August? Almost always yes. The hiring organisation in August cannot rely on checks another organisation completed in June. NHS England guidance updated 4 December 2025 states that “the identity of the person who arrives is checked by the receiving organisation”, and an in-person likeness check is required before the individual commences work.
Does an English DBS check cover a nurse working shifts in Scotland? No. Anyone doing a regulated role in Scotland must be in the Protecting Vulnerable Groups scheme, even if already checked by DBS or AccessNI for the same role (mygov.scot, 19 June 2026). That covers organisations based elsewhere in the UK whose staff work in Scotland some of the time.
Who is liable if a right to work check on an agency worker is wrong? The organisation that employs the worker. The Home Office employer’s guide of 26 June 2025 rules out a statutory excuse where the check is performed by a third party such as a recruitment agency. Under the Home Office code of practice in force since 13 February 2024, penalty starting points are £45,000 per worker for a first breach and £60,000 for a repeat.
What actually shortens the time to place an agency nurse? The identity check should be finished at registration, well before a shift is offered. Nothing then waits on document collection. Agencies also gain by opening every standard on day one, and by holding provider evidence in a form that survives an audit. Healthcare staffing compliance rarely stalls on the in-person likeness check itself, which is quick when the identity behind it has already been verified digitally.