Courier background checks in the UK: what you can legally check

An operator hiring couriers gets to check less than most assume, and more of it for free than most realise. A courier is not on the list of roles eligible for a Standard or Enhanced DBS check, so the criminal record check you can run is the Basic one, at £21.50. Right to work and driving licence checks cost nothing and take minutes on gov.uk. What trips operators up is not the checks themselves but what each one proves, how long the proof lasts, and how long you are allowed to keep it.

This guide covers courier background checks in the UK as they actually work: the DBS level you can request, the fee and timing gov.uk publishes, right to work share codes, DVLA licence check codes, what a self-employed driver's own certificate does and does not tell you, and the retention rules under UK GDPR.

Which DBS level a courier role can be checked at

The Disclosure and Barring Service runs three levels of check, and the level is set by the role, not by how careful you want to be.

Fees and eligibility are from gov.uk's DBS guidance for employers, which is explicit that roles not listed in the legislation are limited to a Basic check.

A parcel courier, a food delivery rider or a multi-drop van driver is not on the Exceptions Order. That means you cannot run a Standard check on them, and you are not entitled to ask about spent convictions at interview either. DBS will not process an ineligible application, and a Responsible Organisation that puts one through on your behalf is the one taking the risk.

The exception is a different job, not a stricter courier

If the role includes transporting children or vulnerable adults as a service, or regular unsupervised work inside care settings, the role has changed and so has the eligibility. That needs its own assessment against the regulated activity definitions. A driver dropping parcels at a care home reception is not doing regulated activity, however sensitive the address looks.

What a Basic DBS check costs and how long it takes

The figures come from gov.uk's Basic check page and the Basic checks guidance:

• £21.50, whoever applies and whoever pays.
• Around three days on average to process, with a paper certificate posted to the applicant. It can take longer, and the route matters: a driver applying directly at gov.uk is usually quicker than an employer applying through a Responsible Organisation, which adds its own admin fee and its own queue.
• The certificate goes to the applicant, not to you. You see it because they show it to you.

There are two ways to get one done. The driver applies themselves online and shows you the certificate. Or you apply on their behalf through a Responsible Organisation registered with DBS, which gov.uk's employer guide to Basic checks allows as long as you have the driver's consent. The second route is worth it once you are hiring in batches, because the RO handles identity verification and chases the applicant for you.

Two things a Basic certificate cannot do. It cannot be kept current: the DBS Update Service, which lets an employer re-check a certificate online for £16 a year, covers Standard and Enhanced checks only. And it does not show cautions that have already dropped off; gov.uk notes that some types of caution disappear after three months.

What a self-employed driver's own certificate proves

Most self-employed couriers arrive with a Basic certificate they paid for themselves, often because another platform asked for it. Take it, and be clear about what you are holding.

It proves the unspent criminal record of the named person on the date of issue. That is all. Specifically it does not prove:

• Identity. The certificate carries a name and date of birth. Check them against photo ID and against the person in front of you.
• Currency. With no Update Service for Basic checks, a certificate from ten months ago is ten months out of date. Set a written policy on the maximum age you accept (three months is a common choice) and apply it to everyone.
• Right to work. A DBS check says nothing about immigration status.
• A valid licence. Nothing on it relates to driving.

A certificate is a snapshot. Treat the date on it as the date the information stopped being true.

Right to work: share codes and the £45,000 penalty

Every employer has to check the right to work of every employee before they start, and the check has to be done in the prescribed way to earn what the Home Office calls a statutory excuse: the defence that protects you from a civil penalty if the person turns out to be working illegally.

For anyone who is not a British or Irish citizen, the check is online. The driver generates a share code from their eVisa or immigration status and gives you the code and their date of birth; you enter both at gov.uk/view-right-to-work and see what work they are allowed to do and until when. Per the Home Office employer's guide, the code is valid for 90 calendar days, employment codes begin with W, and codes starting R or S belong to other services and will be rejected. British and Irish passport holders are checked manually against the original document or through a certified digital identity provider.

Three rules from the same guide that catch growing fleets:

• Do the check before day one, not in the first week. A check done after the start date earns no statutory excuse for the period before it.
• Keep the record for the whole of the employment and two years after it ends, then destroy it securely.
• Diarise follow-up checks for anyone whose permission is time-limited. The re-check has to happen on or before the expiry date.

The penalty for getting it wrong tripled on 13 February 2024: up to £45,000 per illegal worker for a first breach and up to £60,000 for a repeat, according to the code of practice on preventing illegal working. At those numbers, one missed check on a 40-driver fleet costs more than a year of checking everyone.

The regime is written around employees, so the statutory duty does not bite on a genuinely self-employed courier. Check every driver anyway. The check is free, and a courier working for you without the right to work is your operational and reputational problem whatever the contract says.

Driving licence: the DVLA check code

You do not need to photocopy a photocard. The driver goes to gov.uk/view-driving-licence, creates a check code and gives it to you. The code is valid for 21 days and shows you three things you actually need: the vehicle categories they hold, any penalty points, and any disqualification.

Check the categories against the vehicle. A standard category B licence covers vans up to 3,500kg maximum authorised mass, which is nearly every delivery van, but not the 3.5 tonne to 7.5 tonne class some operators run. Check the points against your insurer's limit, which is usually written into the policy. And check the photocard expiry date: photocards expire every ten years and a surprising number of drivers are carrying an expired one without knowing.

Then repeat the check. Points arrive between hires, and most fleet insurers expect a licence check at least annually, with higher-risk drivers checked more often. Record the date and the result each time.

Insurance and vehicle documents for self-employed drivers

A self-employed courier using their own vehicle needs hire and reward insurance, not the social, domestic and pleasure cover a standard policy provides. Ask for the certificate and the schedule and check the use class on it, because a certificate that says "social, domestic and pleasure" is worthless on a delivery run. The delivery driver insurance cost guide puts annual hire and reward cover for a car at £800 to £1,500, which is the order of magnitude you should expect to see on the schedule.

For the vehicle itself, MOT status and tax can be checked free on gov.uk from the registration number alone. Note the MOT expiry date alongside the insurance expiry date, because they are the two documents that lapse quietly and take a driver off the road overnight.

Keeping the paperwork: GDPR retention basics

Background check data is personal data, and criminal record data is in the special category UK GDPR treats most strictly. Three habits keep you on the right side of it.

Do not keep the DBS certificate. DBS's own handling policy is that certificate information is not kept any longer than the recruitment decision needs, and the DBS code of practice caps that at six months. After that you may keep a record of the date of issue, the applicant's name, the level of check, the position it was for, the certificate reference number and the decision you took. That record is all an audit needs.

Keep right to work evidence exactly as long as the Home Office says, which is the duration of employment plus two years, and no longer.

Tell candidates what you collect, why, and for how long before you collect it, and set a retention period for unsuccessful applicants that you actually apply. A folder of licence screenshots from drivers who never started is a data breach waiting for a lost laptop.

This is the point where a spreadsheet stops being enough, because the expiry dates, the re-check cadence and the retention deadlines all move independently. Tracking them per driver, with the reminders and the destruction dates built in, is the job Service Club ® built its Compliance product around, and the compliance guide for growing fleets covers the 30, 14 and 3 day renewal cadence that keeps a fleet from finding out about an expired document at the roadside.

Frequently asked questions

Four checks, two of them free

A Basic DBS check, a right to work check, a DVLA licence check and a look at the insurance schedule cover what a courier operator can legally verify, and two of the four cost nothing. The expensive part is remembering to do them again. If you want the re-checks, the expiry dates and the retention deadlines tracked per driver rather than per spreadsheet tab, Service Club Compliance does that.