In November 2025, an Ofsted inspection of a secondary school in the West Midlands resulted in an immediate "Inadequate" rating. The teaching was fine. The results were good. The safeguarding failure was administrative: the school's single central record was incomplete. Three supply teachers who had worked at the school over the previous term had no DBS check recorded. Two teaching assistants had no right to work documentation on file. A visiting sports coach who attended weekly for a year had never been checked at all.
The headteacher protested that the checks had been done — just not recorded properly. The agency said it had sent over the documents. The sports coach said he had given his passport to the school office months ago. None of this mattered. The record was the evidence. Without the record, the checks did not exist.
Ofsted does not accept explanations. It accepts evidence.
The single central record: what it is and why it matters
Every school in England must maintain a single central record (SCR) of pre-employment checks conducted on all staff, volunteers, and other individuals who work in the school. This requirement is established in Keeping Children Safe in Education (KCSIE), the statutory guidance that governs safeguarding in schools.
The SCR must include, at a minimum:
- Identity verification — confirmation that the person's identity has been checked
- Right to work check — verification that the person has the legal right to work in the UK
- Enhanced DBS check with barred list — for all staff in regulated activity with children
- Qualifications — where a qualification is a legal requirement for the role (e.g., Qualified Teacher Status)
- Prohibition orders — check that teaching staff are not subject to a prohibition order issued by the Secretary of State
- Section 128 direction — for management positions in academies and free schools, a check for disqualification from management
- Overseas criminal record check — for staff who have lived outside the UK, additional checks from countries of residence
- Medical fitness — confirmation of fitness to teach where required
The SCR must record the date each check was completed and who carried it out. It must be kept up to date and available for inspection at all times.
What Ofsted checks and how
Ofsted inspects the single central record during every school inspection. The SCR review is not a cursory glance — inspectors select specific individuals from the record and cross-check the entries against the underlying documentation.
The inspection framework is explicit about what triggers concern:
Missing entries. If an individual who works at the school — in any capacity — does not appear on the SCR, this is a safeguarding failure. It does not matter whether the person has been checked elsewhere (by an agency, a previous school, or another organisation). The school must hold its own record.
Incomplete entries. If the SCR shows that some checks were done but others were not — DBS completed but no right to work check, for example — this is incomplete and will be flagged.
Outdated entries. Some checks have expiry dates. Right to work permissions expire when visas expire. DBS checks, while technically valid indefinitely, are expected to be renewed periodically — particularly for staff in regulated activity. An SCR that shows checks from five years ago with no updates signals a system that is not being actively managed.
Checks not done before the start date. KCSIE requires that checks are completed before the person begins work. If the SCR shows a start date of September and a DBS check date of November, the school employed someone in regulated activity with children for two months without a completed DBS check. This is a serious finding.
The consequences of an adverse Ofsted finding on safeguarding are severe. A school rated "Inadequate" for safeguarding may be subject to special measures, leadership changes, or academy conversion. For independent schools, it can mean suspension of registration. For the individuals responsible — the headteacher and designated safeguarding lead — it can mean professional conduct proceedings.
Right to work checks in education: the specific requirements
The right to work obligation in schools is the same as in any other employment context — governed by the Immigration, Asylum and Nationality Act 2006 and the Home Office employer's guide. But schools face additional complexity because of the variety of people who work within them.
Directly employed staff — teachers, teaching assistants, administrative staff, caretakers, kitchen staff — must have their right to work verified before employment begins and the check must be recorded on the SCR. For staff with time-limited right to work (those on skilled worker visas, graduate visas, or dependent visas), follow-up checks must be conducted before the expiry date and recorded.
Supply teachers and agency staff present the most common compliance gap in education. When a school uses an agency to supply a teacher, the agency holds the primary right to work obligation as the employer. However, KCSIE requires the school to obtain written confirmation from the agency that the necessary checks have been carried out and to record this confirmation on the SCR. The school must also verify the supply teacher's identity when they arrive — confirming that the person presenting themselves is the person the agency checked.
Many schools fail at this point. The agency sends a teacher. The teacher arrives. The office manager records the name on the SCR and notes that the agency said the checks were done. But no written confirmation is obtained, no identity verification takes place at the school, and no copies of the underlying documents are requested. When Ofsted inspects, the SCR entry consists of a name and a date — not evidence.
Volunteers add another layer. KCSIE distinguishes between supervised and unsupervised volunteers. Unsupervised volunteers who are in regulated activity must have an enhanced DBS check with barred list. Supervised volunteers should have an enhanced DBS check as a matter of best practice. All volunteers who will have contact with children should have their identity and right to work verified. Many schools do not check volunteers at all, particularly parent volunteers who help with reading or school trips.
Visiting speakers and contractors are frequently overlooked. A guest speaker who visits for an assembly. A music teacher who comes in weekly. A sports coach. An IT contractor who sets up equipment in classrooms. A photographer for school photos. Each of these individuals has access to children, and KCSIE expects the school to assess whether they need to be checked. If they will have unsupervised access to children, they need an enhanced DBS check. At a minimum, their identity should be verified and recorded.
DBS checks: enhanced, standard, and barred list
The Disclosure and Barring Service provides three levels of check, and understanding which level applies to which role in a school is critical:
Basic DBS check. Shows unspent convictions only. Not typically sufficient for school staff.
Standard DBS check. Shows spent and unspent convictions, cautions, reprimands, and final warnings. Rarely used in education — most school roles require enhanced checks.
Enhanced DBS check. Shows everything in the standard check plus any relevant information held by local police forces. This is the minimum for any adult working in a school.
Enhanced DBS check with barred list. Shows everything in the enhanced check plus a check against the children's barred list (and/or adults' barred list where applicable). This is required for anyone in regulated activity with children — which includes teaching, training, supervising, or providing personal care.
The distinction between "enhanced" and "enhanced with barred list" matters. A school that conducts only enhanced checks without the barred list check for staff in regulated activity has not met the KCSIE requirement. The barred list check is the one that reveals whether an individual has been specifically prohibited from working with children.
KCSIE also requires schools to check the Teaching Regulation Agency (TRA) teacher services system for prohibition orders and sanctions. This is separate from the DBS check and must be done independently.
Common gaps that Ofsted finds
Based on published inspection reports and enforcement patterns, the most common compliance gaps in schools are predictable and preventable.
Supply teacher records delegated entirely to agencies. The school assumes the agency has done everything and records only the teacher's name. KCSIE requires the school to obtain and record written confirmation of the specific checks conducted. "The agency said it was fine" is not a compliant entry.
Volunteer records missing or inconsistent. Parent volunteers who help regularly — with reading groups, sports days, school trips — are not checked or recorded. The school treats them as informal helpers. Ofsted treats them as adults with access to children.
Visiting professionals not checked. The peripatetic music teacher who has been coming every Thursday for three years. The sports coach from the local club. The educational psychologist. If they have unsupervised access to children and are not on the SCR with appropriate checks recorded, this is a gap.
Right to work checks not repeated for time-limited permissions. A teaching assistant was checked when they joined two years ago on a spouse visa. The visa expired six months ago. Nobody checked. The TA is still working. The school now faces both an immigration compliance failure and an Ofsted safeguarding finding, because a person with no right to work has been in regulated activity with children.
Gaps between start dates and check dates. Operational pressure — particularly at the start of the academic year — leads schools to allow staff to start before all checks are complete. KCSIE permits a supervised start in limited circumstances, but the SCR must show the risk assessment, supervision arrangements, and completion dates. Most schools that allow an early start do not document these arrangements.
Overseas checks missing. Staff who have lived abroad must have additional criminal record checks from those countries. These checks can take weeks or months to obtain. Schools that hire internationally qualified teachers often fail to complete this step before the start date.
Higher education: different rules, similar risks
Universities and further education colleges operate under different regulatory frameworks, but face parallel compliance challenges.
In England, the Office for Students (OfS) regulates universities. While universities are not subject to KCSIE in the same way as schools, they still have right to work obligations for all staff and enhanced DBS requirements for staff working with under-18s or vulnerable adults.
The particular risk in higher education is the volume and diversity of the workforce. Universities employ academic staff, research staff, visiting lecturers, laboratory technicians, student union staff, residential advisors, and thousands of casual workers for open days, events, and student support. The compliance infrastructure must cover all of these categories.
Research staff present a specific challenge. Academics frequently move between institutions and countries. A researcher arriving from an overseas university on a skilled worker visa needs a right to work check before they begin. If they are doing any work with students under 18 — even occasional supervision — they need a DBS check too. The intersection of immigration compliance and safeguarding is a compliance minefield that many universities navigate poorly.
Building a compliant system
The schools and universities that get this right share common characteristics: centralisation, automation, and accountability.
Centralise the SCR. The single central record should be exactly that — a single, centrally managed record accessible to authorised personnel. It should not be a spreadsheet on the headteacher's laptop, a filing cabinet in the HR office, and an email chain with the agency. One system, one source of truth.
Automate reminders. Visa expiry dates, DBS renewal dates, and annual safeguarding training deadlines should generate automatic alerts — not rely on someone remembering to check a spreadsheet.
Define clear accountability. Someone must own the SCR. Not "HR handles it" — a named individual with explicit responsibility for its accuracy and completeness. This person should have the authority to prevent someone from starting work until their checks are complete, regardless of operational pressure from department heads.
Standardise agency requirements. Provide every agency you use with a written specification of what checks you require and what documentation you need them to provide. Do not assume they know what KCSIE requires. Many agencies operate across sectors and do not default to education-sector standards unless asked.
Verify at arrival. When a supply teacher, visiting coach, or contractor arrives at your school, verify their identity. Confirm they are the person the agency or organisation sent. Record this verification. A two-minute identity check at the school gate prevents a two-year compliance gap in your SCR.
Certifyd's Right to Work Portal gives schools and universities a single, centralised compliance system — document collection, DBS tracking, visa expiry alerts, and audit-ready records that satisfy both Ofsted and the Home Office. When inspectors ask to see your single central record, you show them a dashboard, not a spreadsheet.