Onboarding locum staff: the complete compliance checklist for UK agencies

Why onboarding compliance matters

Placing a locum healthcare worker with outstanding compliance requirements is one of the most serious mistakes a UK staffing agency can make. The consequences range from NHS framework suspension to CQC scrutiny of client sites, and in worst cases, patient harm. Yet under time pressure — when a client needs cover urgently — it is exactly this kind of risk that consultants are tempted to overlook.

A clear, standardised onboarding compliance checklist removes ambiguity. Every new candidate goes through the same process, in the same order, before their first placement. No exceptions.

This checklist covers the requirements most commonly mandated by NHS trusts, independent hospitals, and care providers in England. Scotland, Wales, and Northern Ireland have some variation — particularly around PVG (Scotland) in place of DBS. Always verify requirements against your specific client contracts and NHS framework schedules.

The complete onboarding checklist

Identity verification

• [ ] Photo ID — UK/Irish passport, or biometric residence permit. Verify in person where possible; remote verification via certified video call is acceptable under current UKVI guidelines.
• [ ] Proof of address — dated within 3 months. Utility bill, bank statement, or HMRC correspondence.
• [ ] NI number — National Insurance number, confirmed against official documentation.

Right to work

• [ ] UK or Irish passport holder — record passport details, retain copy, mark date of check.
• [ ] Settled/pre-settled status (EU/EEA) — obtain online share code from candidate; verify via UKVI employer portal. Record date and share code reference.
• [ ] Visa holder — verify via UKVI employer portal; record visa type, expiry date, and diary date for repeat check before expiry.
• [ ] Set expiry reminder — for any time-limited right to work, add a follow-up check date to your system.

DBS check

• [ ] Level confirmed — enhanced with barred list (direct patient care); enhanced (regular unsupervised contact); standard (supervised roles).
• [ ] Certificate obtained — original seen and copied. Record certificate number, date, and disclosure level.
• [ ] Update service — check whether candidate is subscribed. If yes, verify current status online. Record verification date.
• [ ] Expiry alert set — 60, 30, and 7 days before certificate expiry or 3-year mark (whichever comes first).
• [ ] Portability — if accepting a DBS certificate from a previous employer, apply your own portability risk assessment and document the decision.

Professional registration

For registered nurses and midwives (NMC):

• [ ] NMC PIN verified via NMC online register
• [ ] Registration status: Active (not lapsed, not removed)
• [ ] No conditions of practice, cautions, or interim orders active
• [ ] Revalidation date recorded
• [ ] Expiry alert set at 60 and 30 days

For allied health professionals (HCPC):

• [ ] HCPC registration number verified via HCPC online register
• [ ] Registration status: Active
• [ ] No sanctions, conditions, or cautions active
• [ ] Renewal date recorded
• [ ] Expiry alert set at 60 and 30 days

For social workers (Social Work England or SCW):

• [ ] Registration number verified
• [ ] Active status confirmed
• [ ] Renewal date recorded

Mandatory training (CSTF-aligned)

All training certificates must be in-date at point of placement. Collect originals or certified copies. Record provider, date completed, and expiry.

• [ ] Moving and handling (people) — annual. Face-to-face or blended learning.
• [ ] Basic life support / CPR — annual. Face-to-face mandatory for clinical roles.
• [ ] Fire safety awareness — annual.
• [ ] Infection prevention and control (levels 1 & 2) — annual.
• [ ] Safeguarding adults (level 2 minimum for clinical) — 3-yearly for level 2; annual update recommended.
• [ ] Safeguarding children (level 2 minimum) — 3-yearly.
• [ ] Equality, diversity and inclusion — annual.
• [ ] Information governance / data protection — annual (NHS providers mandate this).
• [ ] Conflict resolution / violence prevention — annual (required for many acute settings).
• [ ] Resuscitation (ILS/ALS) — as clinically required; verify with client trust requirements.
• [ ] Role-specific training — e.g., Mental Health Act awareness for mental health roles; medication administration for nurses.

Occupational health

• [ ] Hepatitis B — documented immunity (antibody titre ≥100 mIU/mL) or documented non-responder status with consultant review.
• [ ] Tuberculosis — documented BCG vaccination with scar, or documented Mantoux/IGRA test clearance.
• [ ] Varicella (chickenpox) — documented history of natural infection or two doses MMR + varicella vaccine.
• [ ] Measles, mumps, rubella — documented two doses of MMR vaccine.
• [ ] Influenza — annual flu vaccination strongly recommended; some NHS trusts now mandate it for direct care workers.
• [ ] Fit-to-work declaration — signed declaration that the candidate is fit to work and has disclosed any health conditions that may affect safe practice.

Employment history and references

• [ ] CV reviewed — no unexplained gaps. Any gaps of over 4 weeks must be accounted for in writing by the candidate.
• [ ] Reference 1 — line manager or clinical supervisor, covering most recent 12 months. Verified by phone or employer-headed email. On file.
• [ ] Reference 2 — line manager or clinical supervisor, covering a further period (to give 3 years total coverage). On file.
• [ ] Character references are not acceptable — references must be professional and from a manager, not a colleague or personal contact.
• [ ] Reference verification — confirm the referee's employment at the stated organisation (call the main switchboard, not the number provided by the candidate).

Bank details and payroll

• [ ] Bank account — sort code and account number verified. Name on account matches candidate identity documents.
• [ ] PAYE or umbrella — employment status and payroll arrangement confirmed. IR35 status documented if relevant.
• [ ] P45 or starter declaration — for PAYE workers.

Consent and documentation

• [ ] Privacy notice — candidate has read and acknowledged your UK GDPR privacy notice for candidates.
• [ ] Communication consent — candidate has given explicit consent for the channels you intend to use (WhatsApp, SMS, email). Opt-in recorded with date.
• [ ] Data retention — candidate data will be retained in line with your documented retention policy.
• [ ] Photo consent — if relevant (for candidate profiles shared with clients).

Common onboarding mistakes to avoid

Accepting photocopies without verification. Original documents must be seen and verified — either in person or via a live video call. Photocopies accepted without seeing the original do not satisfy right to work or DBS requirements. Trusting candidates to self-report registration status. Always verify directly against the NMC or HCPC register. A candidate who says their registration is "about to renew" may have lapsed. Missing expiry alerts. Collecting a document and then not tracking its expiry is as bad as not collecting it at all. Every expiring document needs a chase process. Accepting expired mandatory training. If a candidate's BLS certificate expired three months ago, they are non-compliant. Do not place them until the certificate has been renewed. Inadequate reference verification. Calling a number provided by the candidate is not sufficient. Call the employer's main switchboard and ask to be put through to the referee.

How LocumShift AI automates compliance onboarding

Tracking all of the above manually — across dozens or hundreds of active candidates — is not sustainable. LocumShift AI automates the compliance onboarding workflow:

• Digital document collection — candidates upload documents directly via the secure candidate portal or WhatsApp
• Automated verification — NMC and HCPC registrations are verified against live registers; right to work is checked via UKVI integration
• Compliance matrix — every candidate's compliance status is visible at a glance, with colour-coded indicators for each requirement
• Expiry tracking and alerts — automatic reminders to candidates and consultants before any document expires
• Audit trail — every check, every document, every conversation is logged with a timestamp for NHS framework audits

The result: faster onboarding, fewer placement blocks, and a fully auditable compliance record for every candidate.

To see the compliance onboarding workflow in action, book a demo.