Why develop a policy?
There are a number of reasons why a policy is an essential part of managing criminal records:
- The GDPR requires any employer who wishes to ask about criminal records to identify a lawful basis under Article 6 and a condition of processing under Article 10 of the GDPR, and this should be documented. As a data controller, employers are accountable for making sure processing is legally compliant. Depending on the legal condition identified for the processing, (including the condition for employment purposes) you must have an Appropriate Policy Document in place to comply with the law. You can find a table of conditions and whether they require an APD here.
- Having a clear, accessible policy is a principle of fair chance recruitment. It’s important to remember that many people with criminal records will avoid applying for roles where it is unclear how they will be treated. Where an employer’s approach is set out in a clear, accessible policy can help applicants to see that they will be treated fairly and consistently. So applicants can make informed decisions, and employers can find the best candidates.
- A policy will ensure that practice is consistent, compliant and inclusive. A clear policy will help avoid error or confusion for recruiters, managers, existing staff and applicants. A policy may also be helpful if there are any challenges or queries relating to criminal records in the future. For example, if there are concerns about a particular employee that relate to a criminal record, respondents can refer back to the policy to confirm that a considered process was followed in recruitment.
The need to process criminal records data will vary between employers, and will depend on the nature of your business, your values and culture. For that reason we think a policy should come from inside, rather than outside, the business. Although we provide suggestions for how you might go about each area, this guidance doesn’t include a template policy. Instead, we provide guidance on legal obligations, principles of fair recruitment and a checklist of things to take into account.
A policy on processing criminal records should:
- Clearly set out your approach, so applicants and staff know what to expect
- Explain why it is necessary to collect criminal records
- Explain what needs to be disclosed and when
- Instil confidence in applicants that they’ll be treated fairly
See an example here: Unlock’s Applicants with a criminal record policy
A good policy is…
“[Organisation] actively promotes equality of opportunity for all and welcomes applications from a wide range of candidates. [Organisation] recognises the contribution that people with criminal records can make as employees and volunteers and welcome applications from those with a criminal record. We select all candidates for interview based on their skills, qualifications and experience”
Find out more about using inclusive language
“Suitable applicants will not be rejected because of offences that are not relevant to the role applied for. We judge each case on its own merits and do not discriminate against any applicant on the basis of criminal record information disclosed to us.”
“We only ask applicants to provide details of convictions and cautions that we are legally entitled to know about”
“For roles covered by the Rehabilitation of Offenders Act, we ask applicants to disclose unspent convictions only. Spent convictions do not need to be disclosed.”
“For roles that are exempt from the Rehabilitation of Offenders Act, we ask applicants to disclose any convictions and cautions that would not currently by filtered by the DBS.
The GDPR means you must explain the purpose and lawful basis for asking – in essence, why you’re asking (learn more about data protection and criminal records here). For example, if you ask those you offer a position to, you could say:
“The successful candidate/s will be asked about relevant criminal records as part of pre-recruitment checks. If a relevant criminal record is disclosed we will ensure and open and fair discussion takes place before making a final offer. Failure to disclose information that is then later revealed on the relevant criminal record check could lead to withdrawal of an offer of employment. After receiving a criminal record certificate, we will discuss any matters revealed that have not been previously addressed, before reconsidering the conditional offer of employment. “
“For those positions where a criminal record check is identified as necessary, all application forms, job adverts and recruitment briefs will make clear what level of check will be submitted on the individual being offered the position”
“For any information disclosed, cases will be looked on an individual basis, taking into account details such as;
- Whether it’s information we are legally allowed to consider
- Whether the offence is relevant to the position applied for
- The age at the time of the offence(s)
- The length of time since
- The circumstances surrounding the offence(s), and what has changed since
Any information disclosed will be treated in the strictest confidence. We will consider any information disclosed before confirming an offer of employment. If necessary, we may arrange a face-to-face discussion with the applicant to obtain further details. Failure to disclose relevant information when requested could result in disciplinary proceedings or dismissal.”
“We take a positive approach to applicants with criminal records”
“We ensure that all those involved in the recruitment process have received appropriate guidance and training in the legislation and practice of recruiting people with criminal records.”
“We ensure that all those who are involved in making suitability decisions based on an applicants’ criminal record have been trained to do so.”
For example, you could say:
For positions covered by the Rehabilitation of Offenders Act 1974, we will ask applicants to disclose any unspent convictions. For guidance in answering this question, visit the Unlock site which has useful information on this legislation.
For positions exempt from the Rehabilitation of Offenders Act 1974, we will ask applicants to disclose any convictions, cautions, reprimands or final warnings that would not be currently filtered by the Disclosure and Barring Service. For guidance in answering this question, visit the Unlock site which has useful information on filtering.
Can it be part of our equality and diversity policy?
Equality and diversity is all about treating people fairly. So it’s right to think of your approach towards applicants with a criminal record as part of your broader equal opportunities policy.
Some organisations include their approach to criminal records in their equality and diversity policy, but it can also exist as a standalone policy. Either way, a general statement in your equality and diversity policy can be useful. For example, you could say:
“We are committed to the fair treatment of our staff, potential staff and users of our services, regardless of race, gender, religion, sexual orientation, responsibilities for dependants, age, physical/mental disability or offending background.”
Although having a criminal record is not a protected characteristic under the Equality Act 2010, discriminating against this group can result in indirect discrimination – for example, some ethnic groups are more likely to be criminalised. Increasingly, employers are realising that diversity and inclusion is about more than ticking a box – it’s about making sure that your business benefits from the best talent, regardless of their background.
Shouldn’t it be part of our safeguarding policy?
Organisations that work with children or vulnerable adults will have safeguarding policies and processes to ensure vulnerable people are protected from harm. This will normally include a focus on recruitment, induction and supervision, including what checks you carry out on new people who work or volunteer. For some roles in these organisations, asking about criminal records will be a legal obligation.
We recommend that organisations see their policy on applicants with a criminal records as one strand of their safeguarding approach. Unless a person is barred from working in regulated activity, there is no legal reason why you can’t employ them. Most criminal records will not make someone unsuitable for work with children or vulnerable adults. People in recovery, or those who have moved away from gangs, will often have a criminal record, but does that make them automatically unsuitable for work with others experiencing what they once were? Those who have turned their life around after a difficult past can often bring valuable skills and experience which should not be overlooked.
A blanket ban on people with a criminal record is not an effective approach to safer recruitment. Focusing too heavily on formal vetting procedures can create a false sense of security. Safeguarding depends on training, oversight and responding to concerns.
Should we make our policy public?
The GDPR means individuals have rights over their data, including the right to be informed. Applicants should be made aware of what data you plan to collect, what you will use it for and how – and for how long – it will be stored. If you ask about criminal records, you should make sure that applicants are able to access this information from the outset.
Making your policy public shows the world that you are a transparent and fair-minded company. You may choose to keep more detailed guidance for internal use only. You might want to consider how to communicate your policy to existing staff. For example, you could include a section in your staff handbook that explains that you employ people with criminal records, the benefits this can bring to the organisation, and what staff should do if they have any questions or concerns.
Help with updating your policy
This guidance should help you to work on your policy. We welcome organisations coming forward who are actively working on their policy to update it to reflect this guidance. We are happy to confidentially review draft policies that are in the process of being updated. Get in touch by emailing recruit@unlock.org.uk.