Security Industry Updates Autumn 2025
12/03/2026
Our Autumn edition includes key updates across the industry, including important changes to DBS identity documentation guidelines. Plus, an overview of the Rehabilitation of Offenders Act 1974. Our Autumn edition includes key updates across the industry, including important changes to DBS identity documentation guidelines. Plus, an overview of the Rehabilitation of Offenders Act 1974.
BSI ISO 9001
We are pleased to announce that we have passed our annual external BSI accreditation audit for ISO 9001 quality management with flying colours.
There were no non-conformances or advisories, which continues to demonstrate our strict quality control procedures, including robust data protection measures.
Identity Guidelines & Data Retention Updates – The Disclosure & Barring Service
Identity Guideline Changes
On 1st November 2025, the Disclosure & Barring Service (DBS) introduced updated identity documentation guidelines.
These now include the following acceptable documents:
- A UK passport can be expired up to a maximum of 6 months
- A Biometric resident permit (BRP) showing Indefinite Leave to Remain, Indefinite Leave to Enter or No Time Limit can be used up to 18 months past the expiry date of the BRP
- E-Visa – Accessed via the ‘View and Prove’ service – the share code requested by the applicant should be an ‘immigration status’ share code
- HMRC self-assessment letters or tax demand letter – Issued in the last 12 months
- European Health Insurance Card (EHIC) or Global Health Insurance Card (GHIC) – Valid and UK-issued
Get in touch with our team for updated copies of all acceptable documents and grouping information.
Data Retention Policy Changes
In compliance with the updated Disclosure & Barring Service criminal record disclosure policies, effective as of 1st November 2025, we must retain for a period of up to 2 years following disclosure submission, details of how an applicant’s identity has been confirmed. This will include document type, candidate name, reference number, expiry date and other key information.
The Disclosure & Barring Service require us to retain only this information for their audit criteria and our systems have been altered for this purpose. All other disclosure information will be deleted in line with our current policy of 6 months.
Our data retention policy is updated as follows
Unless otherwise agreed in writing, following service completion, we may retain your personal data, physical and/or electronic data for a period of up to 6 months, except for documentation used for the purposes of a criminal record disclosure identity check which will be retained for a period of up to 2 years in compliance with criminal record disclosure policies, after which it will be securely destroyed using industry best practice methods.
For more information, see the Disclosure & Barring Service Guidance – GOV.UK
