Safer recruitment isn't admin. It's how you prove your service is safe.

CQC inspectors don't just look at how you care for people. They look at how you hired the people doing the caring.

Under Regulation 19 (Fit and Proper Persons), every hire must be demonstrably safe, suitable, and properly vetted. If something goes wrong, safer recruitment is one of the first places inspectors go.

If you work with children, the bar is even higher. Expectations extend beyond the Care Quality Commission to include Ofsted and statutory safeguarding guidance.

The good news: if your hiring process is structured, consistent, and documented, you're already most of the way there.

More importantly: if you don't have a clear audit trail, you don't have compliance.

Step 1: Start with a safeguarding-first job advert

Safer recruitment starts before a single application arrives.

Your advert should clearly state:

The nature of the role and client group (adults or children)
That the role involves working with vulnerable individuals
That an enhanced DBS check is required (with barred list where applicable)
That employment is conditional on references and right to work

For children's roles, be explicit: "This role requires an Enhanced DBS with Children's Barred List check."

This does two things. It deters unsuitable applicants early. And it signals to inspectors that safeguarding starts at the top of your funnel.

Step 2: Verify right to work and identity properly

Right to work is a legal requirement. Identity verification underpins everything that follows.

You must check original documents, or use a certified Identity Service Provider (IDSP) for a digital check. An IDVT-approved digital identity check is fully compliant when delivered via an approved provider under Home Office guidance.

Whichever route you use, you must record the date of the check, retain evidence securely, and be able to show how the check was completed.

Failing to complete this before day one is a direct breach of Regulation 19.

Step 3: Capture and verify full employment history

This is one of the most common failure points.

You must obtain a complete employment history and explanations for all gaps. This should not just sit on a CV — it must be captured formally on an application form, probed during screening, and cross-checked against references.

For children's roles, expectations are stricter. No unexplained gaps. Any inconsistencies investigated and documented.

Inspectors will look for evidence that you didn't just collect history — but actively verified and challenged it.

Step 4: Replace unstructured interviews with structured screening

If every candidate is asked different questions, you cannot prove fairness, consistency, or that safeguarding risk was assessed.

Structured screening means the same questions, the same order, the same scoring. Every time.

You should cover:

Motivation for working in care
Safeguarding understanding
Attitudes toward vulnerable people
Employment gaps and history verification
Previous disciplinaries or concerns

For children's roles, include questions like: "What would you do if a child disclosed abuse?" and "How do you maintain professional boundaries?"

Document responses and scoring. This is part of your audit trail.

Step 5: Run the correct DBS check — and document the outcome

For regulated activity, an enhanced DBS check is mandatory.

Adults → Enhanced DBS (with barred list where required)
Children → Enhanced DBS with Children's Barred List

You cannot allow someone to work unsupervised without clearance (with limited exceptions).

You must record the certificate number, date of issue, and outcome. If information is disclosed, carry out a documented risk assessment and record the decision and rationale.

Inspectors are not looking for perfection. They are looking for evidence of judgement.

Step 6: References must confirm the full picture

References are not just validation. They are part of safeguarding.

You must obtain a minimum of two references, including the most recent employer. Critically, references should confirm the full employment history where possible, highlight any gaps, discrepancies, or concerns, and comment explicitly on suitability to work with vulnerable people.

A compliant process means references are requested directly from the referee, authenticity is verified, and any vague or concerning responses are followed up.

If references do not align with the candidate's stated history, you must investigate and document the outcome.

Step 7: Run a values-based interview

This is where risk becomes visible.

Ask:

"Tell me about a time you challenged poor care."
"What does dignity mean in practice?"
"What would you do if you were unsure something was a safeguarding issue?"

You are assessing judgement, values, and willingness to act. Score responses and keep records.

This is not just good hiring. It is evidence for inspection.

Step 8: Maintain a complete, auditable hiring record

This is the difference between passing and failing an inspection.

Every hire must have a clear, complete audit trail. Your personnel file should include:

Application form (full employment history)
Interview notes and scoring
Right to work and ID verification (including IDVT if used)
DBS details (number, date, outcome)
Risk assessments (if applicable)
References
Contract
Induction record

For children's services, a Single Central Record (SCR) may also be required.

If any element is missing, inconsistent, or undocumented — you are exposed.

Step 9: Compliance doesn't stop at hiring

Inspectors will also look at induction (especially safeguarding training), supervision and probation, ongoing training, and how concerns are handled.

Hiring is the entry point into your safeguarding system.

What inspectors actually look for

From both Care Quality Commission and Ofsted:

Can you prove every hire was safe?
Did you verify full employment history?
Are references robust and aligned?
Is every step documented?
Is there a complete audit trail?

If you can't evidence it, it didn't happen.

The shift most providers miss

Most providers treat compliance as a checklist. The best treat it as a system — with a built-in audit trail.

That means no gaps in employment history, no undocumented decisions, no reliance on memory or email chains. Everything structured, recorded, and retrievable.

How Lily keeps you inspection-ready

Lily turns safer recruitment into a fully auditable system.

Structured screening with scoring and logs
Right to work and IDVT-compliant digital ID checks
eDBS workflows and tracking
Reference collection aligned to employment history
End-to-end audit trail for every hire

Every step is recorded, timestamped, and retrievable. So when inspection day comes, you're not preparing evidence. You already have it.

See how Lily works or book a demo to walk through your current process.

Frequently asked questions

What does Regulation 19 require from care providers?

Regulation 19 (Fit and Proper Persons Employed) requires care providers to ensure every person employed is of good character, has the qualifications and skills for their role, and has been properly vetted — including right to work checks, DBS checks, and verified references. Every step must be documented.

Do I need different checks for children's services roles?

Yes. For roles involving children, you need an Enhanced DBS with Children's Barred List check, and you must comply with Ofsted safeguarding requirements in addition to CQC. Employment history gaps must be fully explained and documented.

What is a Single Central Record (SCR) and who needs one?

An SCR is a register of all staff recruitment and vetting checks. It is a statutory requirement for schools and children's homes registered with Ofsted. Care providers regulated only by CQC are not required to maintain an SCR, but many choose to do so as best practice.

Can I use digital identity checks for right to work?

Yes — provided you use a certified Identity Service Provider (IDSP) approved under the Home Office's IDVT scheme. Digital checks via an approved provider carry the same legal standing as document checks carried out in person.

What happens if my DBS check reveals information about a candidate?

You must carry out a documented risk assessment and record your decision and rationale. You are not automatically required to withdraw the offer — the decision depends on the nature of the information and the role. What matters to CQC is that a proper assessment was made and recorded.

How long should I keep hiring records for care staff?

Personnel files should be kept for the duration of employment plus a minimum of six years. For roles involving work with vulnerable adults or children, best practice is to retain records indefinitely in case of future safeguarding investigations.

CQC-compliant hiring in care