How long does a DBS check last?

A DBS certificate does not carry an official expiry date. The DBS employer guidance says the information on it is accurate at the time the certificate was issued and that a receiving organisation should consider its issue date when deciding whether it wants a newer check. Some sectors or licensing arrangements may require periodic checks, and employers can set risk-based review policies. None of those dates turns every DBS certificate into a document that legally expires after one, three or five years.

That distinction has practical consequences. A certificate issued yesterday can become unsuitable today if the person's duties change and a different workforce or barred-list element is required. A certificate issued three years ago may still be useful evidence for the same duties when supported by a suitable Update Service status check and a documented employer decision. An older certificate alone cannot show whether information changed after its issue. The employer's task is to decide whether the original check matches the current role and whether new information is needed.

This guide owns the ongoing validity and recheck-policy question. The portability guide owns whether a new organisation accepts a previous employer's certificate. The Update Service guide owns the mechanics of a consented status check. The record-keeping guide owns what evidence to retain. Keeping those decisions separate prevents a spreadsheet date from doing the work of a safeguarding assessment.

A certificate is a dated snapshot, not a permit

The certificate reports the outcome of the lawful checks requested at a particular time. It is not a licence to work in every setting or a DBS endorsement of the applicant's suitability. The level, workforce, position applied for and any barred-list element are part of its context. A clear certificate means no relevant information was disclosed under the checks run then. It does not guarantee that there has never been a concern or that no information has arisen since.

An employer should first confirm that the original certificate is genuine and belongs to the worker. Then ask whether the role still justifies the same check and whether a relevant list was included. If the job has changed from general administration to adult personal care, the earlier Basic certificate may not answer the current legal question even if it was issued last week. Conversely, a Basic certificate for a general warehouse role does not need to be “upgraded” merely because a calendar anniversary arrives. The check-level guide owns the legal eligibility decision.

The DBS guide for private individuals hiring workers also says certificates have no official expiry. It advises checking identity, issue date, workforce and Update Service subscription. A family hiring a tutor or carer should not read “no expiry” as “accept any certificate forever”. The current work, person and type of check still need to match.

Four dates that must not be conflated

The certificate issue date records when DBS issued that document. Its information is a snapshot at that point. A reprint does not create a new check or reset the original issue date. The employer should use the date to assess currency, but it is not an expiry date.

The Update Service subscription date concerns the applicant's personal subscription to the service for eligible Standard or Enhanced certificates. Joining and maintaining the subscription is a separate process. The service can allow a lawful organisation to check whether information on the original certificate has changed. The subscription is not an employer-owned certificate and does not change the original level or workforce.

The employer's next-review date is a policy control. It reminds the organisation to reconsider the role, safeguarding risk, consent and current evidence. It may trigger an Update Service check, a new application, or a documented decision that no new check is needed. The reminder itself should not be called a DBS expiry. An organisation can review sooner after a duty change, concern or new legal requirement.

A sector or licensing interval may impose or recommend a particular renewal or checking cadence. The Department for Transport taxi standards, for example, recommend six-monthly status checks for subscribed drivers and a six-monthly check for drivers who are not subscribed. The licensing authority must explain its local process. Licensing authorities must have regard to those standards and publish their own policies. This is a licensing and safeguarding policy question, not a six-month official expiry printed on every DBS certificate.

Label these dates accurately in systems and policy documents. “Next DBS review due” is clearer than “DBS expiry” when the field is a local reminder. If the same database also holds truly expiring licences or registrations, use separate document types and explanations. A worker should not be told their DBS has “expired” when the organisation really means its own planned review is overdue.

What can trigger a fresh check or review

The first trigger is a change in duties. A person begins child regulated activity, starts providing personal care to adults, moves between adult and child workforces, gains direct supervision of regulated-activity staff, or takes on a new licensed role. Reassess the legal category and whether the existing certificate includes the correct level and barred-list element. An old certificate with a current Update Service status cannot add information that the original application did not include.

The second trigger is a safeguarding or suitability concern. A new allegation, conviction, complaint, professional-regulator action or information from a reference may require immediate action under the organisation's policy. Waiting for the next scheduled DBS renewal can be unsafe. Equally, ordering another DBS check is not the only or first response to every concern. The employer may need to protect people, investigate, consult a regulator or make a barring referral where the legal conditions are met. A certificate is one source of information, not a substitute for incident handling.

The third trigger is a gap in knowledge. The organisation may have an older certificate and no lawful ongoing status check, incomplete evidence of the original, or uncertainty about who verified it. The decision to request a new check depends on the current role and sector rules. A receiving employer should not rely on a supplier's “checked” label without knowing level, workforce, relevant list, date and identity. The portability owner covers this receiving-party assessment.

The fourth trigger is a legal, regulatory or policy change. A sector may update recruitment guidance, a licensing authority may alter its checking policy, or a worker may move into a position where a barred-list check becomes legally available. Reassess the role against the current law and guidance. A new policy should have an effective date, a transition plan and a proportionate explanation. It should not retroactively describe an older certificate as legally expired when no such rule exists.

Does an employer have to recheck every three years?

There is no universal DBS rule requiring a new certificate every three years. An organisation may choose a three-year review or recheck cycle after considering risk, and a sector might require a different cadence. The DBS employer guidance says certain employment sectors may require periodic new checks and that employers should consider the certificate's issue date. It does not impose one interval on every employer and every level.

The CQC guidance for GP providers says a DBS check has no official expiry and that employers should decide whether and when a new one is needed, supported by a risk assessment. This is guidance for primary healthcare providers and should not be presented as a complete rule for every CQC-regulated setting. Care providers should also check Regulation 19, Schedule 3 and their current sector-specific guidance. A blanket “CQC demands renewal every three years” claim would be unsupported by this source.

Schools and colleges need current Keeping Children Safe in Education guidance and their own safer-recruitment procedures. Do not import an old pandemic exception or a draft consultation paragraph as the current general rule. A continuing employee, a new recruit, a worker returning after a break and a person whose duties move into regulated activity present different questions. The schools DBS guide owns the detailed decision. This page's general rule remains that a DBS certificate has no official expiry date; it does not replace sector controls.

For taxi and private hire drivers, the DfT standards' six-month recommendation applies to licensing authority practice. For a school teacher or a care worker, a six-month taxi policy says nothing about the correct review cycle. For a general office worker with a Basic check, an Enhanced-sector policy may be irrelevant and legally unavailable. Set the cadence for the actual role and source, not by copying the strictest number found online.

Update Service status is useful within its limits

The DBS Update Service employer guide, updated August 2026, says organisations may perform status checks with the person's consent where they are entitled to the same level, workforce and barred-list information as the original certificate. It says there is no prescribed frequency for status checks. Organisations should choose a risk-based schedule considering role, potential risk, regulatory requirements and safeguarding policy.

The employer must see the original certificate and verify the worker's identity. The service reports whether new information has been identified that would affect the certificate, but it does not show a full updated certificate or replace a role-specific suitability decision. If the status shows a change, follow DBS instructions and consider a new application. Do not infer the nature of the change from the status message alone.

Only Standard and Enhanced certificates can be linked to the Update Service. Basic checks cannot. A worker's subscription belongs to them. An employer cannot keep running checks after consent is withdrawn, the person leaves, or the new role no longer supports the same check. The guide warns that accessing status data without legal entitlement is unlawful. A scheduled reminder must therefore ask whether consent and eligibility still exist before it triggers any actual check.

The service can reduce unnecessary repeated applications where the original certificate remains suitable. It cannot make a previous child-workforce certificate cover adult regulated activity or add an Adults' Barred List check that was not originally requested. A person who works across several assignments may need more than one certificate on their subscription. The Update Service guide explains result categories and the exact checking steps.

Deciding whether an older certificate is acceptable

Ask five questions. Is it the original certificate and does it match the person's identity? Was the level lawful for the old role and is it the level required for the current role? Does the workforce match the new duties? Was any barred-list element required and actually requested? What has changed since issue, and can an eligible Update Service check answer that with consent? Add any sector or licensing requirement before accepting or requesting a new certificate.

The age of the document matters as one risk factor, but not as a standalone legal verdict. A certificate from two years ago without an Update Service subscription may leave a two-year information gap. A certificate from two years ago with a current lawful status check may provide stronger current evidence, provided the original role and elements match. A certificate from last month can still be unsuitable if it was for the wrong workforce. Document why the organisation accepted or rejected the evidence rather than applying “under three years equals valid” as a universal rule.

If the employer asks for a new certificate, it still must be legally entitled to the level requested. It should explain why the previous evidence is insufficient. A request for Basic may be proportionate for a general role; an Enhanced check cannot be ordered just because the old document is old. If the applicant disputes an incorrect certificate, use the DBS dispute route rather than labelling the certificate “expired” to avoid dealing with the accuracy issue.

The applicant should be told whether the organisation's recheck date is a policy choice or a legal or sector requirement. This helps them provide an appropriate certificate and understand why another check is requested. It also prevents misleading recruitment advertisements that claim a “DBS valid for three years” as though DBS itself issues a three-year authorisation.

Six examples of a sound review decision

A warehouse worker presents a Basic certificate issued four years ago. It has no official expiry. The employer may decide it wants a current Basic result under a proportionate policy, especially if the role involves significant access to stock or money. It should not claim the old certificate is legally invalid or order Enhanced without a statutory basis. Record the reason for any new request.

A care worker has an Enhanced adult-workforce certificate with Adults' Barred List information from a previous employer. The new provider should verify the original, identity, role match and any Update Service status with consent. CQC recruitment duties and its own risk assessment still apply. If there is no subscription or relevant evidence gap, a new check may be appropriate. Do not accept the certificate solely because a supplier spreadsheet says “current”.

A school employee moves into a role with greater child contact. Reassess whether the new duties are regulated activity and whether the original certificate included the relevant child barred-list element. The calendar age of the certificate is not the only question. Follow current DfE guidance for the precise setting and transition, rather than assuming every internal move requires the same new application.

A taxi driver renews a licence. The licensing authority's current policy and the DfT standards determine the relevant six-month status or repeat-check arrangement. The driver may have a certificate with no official expiry while still needing to meet the authority's licensing evidence cycle. Ask the authority what it requires; do not generalise its policy to all drivers or employers.

A worker's Update Service status indicates a change. The original certificate has not acquired a new official expiry date. The employer should follow DBS guidance on the result, consider a new eligible application and make a proportionate safeguarding decision. A manager should not invent the nature of the change or tell colleagues that the worker has a new conviction based on a status message alone.

A worker provides an original certificate issued last week for a different workforce. It is recent but may not fit the new role. If the new duties justify a different workforce or list, a new assessment and possibly a new certificate are needed. The issue date cannot cure a mismatch in legal scope.

Build a review policy that people can actually use

For each role family, record the lawful check basis, the source of any required sector interval, the planned policy review cadence, and the events that bring review forward. Name the person who decides whether to request a new certificate. Explain how an eligible Update Service status check is performed with consent and how to respond to a changed result. Keep a route for applicants to challenge an incorrect record and for safeguarding concerns to be escalated immediately.

Use plain labels. “Certificate issue date” is factual. “Next policy review” is an organisational control. “Update Service status checked on” is a dated action. “Licence renewal due” belongs to the licensing record. Avoid a single field called “DBS expiry” that conflates all four. A report can then distinguish an overdue administrative review from a person who lacks the legally required barred-list evidence for their current role.

The review process should be risk-based and documented. It may conclude that a new check is required, that a suitable original and lawful Update Service status suffice, or that the role has changed and the previous level no longer applies. It should not automatically renew every worker at a fixed anniversary without checking entitlement, and it should not wait for an anniversary after a serious concern. The employer remains responsible for the suitability decision throughout employment.

Keep only necessary check metadata and decisions under a retention policy. A DBS certificate contains sensitive information; routine copying is not the default answer to ongoing assurance. The record-keeping guide covers the privacy side. A policy date should be reviewable and auditable, but the organisation should not claim a reminder alone proves legal compliance.

Complys describes generic worker records, documents and reminders. A buyer should confirm how these capabilities fit its review process. The platform is not presented here as issuing DBS certificates, creating a legal expiry date, running Update Service checks or deciding barred-list eligibility. A useful free tool would let an employer record the certificate level, workforce, issue date, duties, sector policy source and next-review trigger, then display unresolved questions and links to DBS guidance. It should never output “valid until” as though DBS had assigned that date.