CRB Code of Practice for registered persons and other recipients of disclosure information
Obligations of the Code
Introduction and purpose
This Code of Practice is published under section 122 of the Police Act 1997 (‘the Act’) in connection with the use of information provided to registered persons (‘Disclosure information’) under Part V of that Act.
Disclosure information is information
- contained in criminal record certificates under section 113 of the Act (which are referred to in this Code as ‘Standard Disclosures’), or
- contained in enhanced criminal record certificates under section 115 of the Act (referred to in this Code as ‘Enhanced Disclosures’), or
- provided by the police under section 115(8) of the Act.
Except where indicated otherwise, the Code of Practice applies to all recipients of Disclosure information - that is to say
- registered persons,
- those countersigning Disclosure applications on behalf of registered persons, and
- others receiving such information.
Where reference is made to ‘employers’, this should be read as including any person at whose request a registered person has countersigned an application, including
- voluntary organisations and others engaging, or using the services of, volunteers, and
- regulatory and licensing bodies.
Further information in relation to the Code, and other matters relating to registered persons and others having an involvement with Disclosure information, is contained in an Explanatory Guide.
The Code of Practice is intended to ensure that the information released will be used fairly.
The Code also seeks to ensure that sensitive personal information is handled and stored appropriately and is kept for only as long as necessary. Guidance to employers on other matters will be issued separately.
Fair use of disclosure information
Recipients of disclosure information shall:
- observe guidance issued or supported by the Criminal Records Bureau (‘the Bureau’) on the use of disclosure information - and, in particular, recipients of disclosure information shall not unfairly discriminate against the subject of Disclosure information on the basis of conviction or other details revealed.
In the interest of the proper use of disclosure information and for the reassurance of persons who are the subject of disclosure information, registered persons shall
- have a written policy on the recruitment of ex-offenders, so that a copy can be given to all applicants for positions where a disclosure will be requested.
- ensure that a body or individual at whose request applications for disclosures are countersigned has such a written policy and, if necessary, provide a model for that body or individual to use.
In order that persons who are, or who may be, the subject of disclosure information are made aware of the use of such information, and be reassured employers shall
- ensure that application forms for positions where disclosures will be requested contain a statement that a disclosure will be requested in the event of a successful application, so that applicants are aware of the situation;
- include in application forms or accompanying material a statement to the effect that a criminal record will not necessarily be a bar to obtaining a position, in order to reassure applicants that disclosure information will not be used unfairly;
- discuss any matters revealed in disclosure information with the person seeking the position before withdrawing an offer of employment.
- make every subject of a disclosure aware of the existence of this Code of Practice, and make a copy available on request; and
- in order to assist staff to make appropriate use of disclosure information in reaching decisions, make available guidance in relation to the employment and fair treatment of ex-offenders and to the Rehabilitation of Offenders Act 1974.
Handling of disclosure information
Recipients of disclosure information
- must ensure that disclosure information is not passed to persons not authorised to receive it under section 124 of the Act. Under section 124, unauthorised disclosure is an offence;
- must ensure that disclosures and the information they contain are available only to those who need to have access in the course of their duties;
- must securely store disclosures and the information that they contain;
- should retain neither disclosures nor a record of disclosure information contained within them for longer than is required for the particular purpose. In general, this should be no later than six months after the date on which recruitment or other relevant decisions have been taken, or after the date on which any dispute about the accuracy of the disclosure information has been resolved. This period should be exceeded only in very exceptional circumstances which justify retention for a longer period.
Registered persons shall
- have a written security policy covering the correct handling and safe-keeping of disclosure information; and
- ensure that a body or individual at whose request applications for disclosures are countersigned has such a written policy, and, if necessary, provide a model for that body or individual to adopt.
Registered persons shall:
- cooperate with requests from the Bureau to undertake assurance checks as to the proper use and safekeeping of disclosure information.
- report to the Bureau any suspected malpractice in relation to this Code of Practice or any suspected offences in relation to the misuse of disclosures.
(a) An umbrella body is one which has registered with the Bureau on the basis that it will countersign applications on behalf of others who are not registered.
(b) Umbrella bodies must satisfy themselves that those on whose behalf they intend to countersign applications are likely to ask exempted questions under the Exceptions Order to the Rehabilitation of Offenders Act 1974.
(c) Umbrella bodies must take reasonable steps to ensure that those to whom they pass disclosure information observe the Code of Practice.
Failure to comply with the Code of Practice
The Bureau is empowered to refuse to issue a disclosure if it believes that
- a registered person, or
- someone on whose behalf a registered person has acted
has failed to comply with the Code of Practice.