What a compliant clinician file actually contains

A qualification certificate arrives as a photograph taken on a phone, at an angle on a kitchen table. The certificate is genuine. The name printed on it is not the name on the application form, because the nurse married after she qualified.

Before that image can sit in a clinician file, someone has to work out which of the six NHS Employment Check Standards it belongs to and what second record sits beside it. That second record is name-change evidence, required wherever certificate details do not match the application.

Counted from the standards, one substantive clinical hire produces at least twelve records.

The six employment check standards that English NHS employers work from, all revised on 23 July 2026

NHS Employers publishes six employment check standards for NHS organisations in England: identity checks, criminal record checks, work health assessments, professional registration and qualification checks, right to work checks, and employment history and reference checks.

Scope is the part that catches providers out. The standards apply to all NHS appointments, including zero-hours contracts, locum doctors, trust bank workers, agency and third-party contractor staff, and volunteers.

Regulation 19 puts the same clinician file behind the bank nurse and the consultant

CQC works from Regulation 19 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, which requires persons employed for a regulated activity to be of good character and suitably qualified. Regulation 19(3) requires the information specified in Schedule 3 to be available for each of them.

Schedule 3 lists eight categories: identity with a recent photograph; a criminal record certificate; an enhanced certificate with suitability information for prescribed purposes; conduct in previous work with health or social care, children or vulnerable adults; why work with children or vulnerable adults ended; qualification evidence; a full employment history with written explanations of gaps; and health information relevant to capability.

That Schedule has not been amended since 27 November 2014. Regulation 19 was amended on 15 January 2024 to insert paragraph (3A), which exempts volunteers from the full employment history requirement unless regulations 4, 6 or 7 apply.

CQC guidance, last updated 16 May 2025, reads "person employed" widely enough to cover volunteers, contractors, and agency and bank staff, and the information must be confirmed before they start. CQC can take regulatory action on a Regulation 19 breach, though it cannot prosecute one.

Identity and right to work: the records that come before any credential

The identity checks standard permits two photographic documents from List 1 with one address document from List 2, or one photographic document with two address documents. Where no photographic identity exists, the route runs to five documents, including two from List 3 and a counter-signed photograph. Each original is photocopied or scanned, and every copy signed, dated and certified by the person who took it.

Right to work adds one record. The right to work checks standard allows the check to run online with the individual's share code, or through a digital verification service provider on the Office for Digital Identities and Attributes register. Where it runs on documents instead, the evidence comes from original Home Office List A or List B documents, copied and dated. Whichever route is used, the output is kept as hardcopy or in unalterable scanned form for the duration of employment plus two years, with a dated declaration of when the check was made.

List A gives a continuous statutory excuse, the employer's defence against a civil penalty. List B Group 1 needs a repeat when permission expires, and List B Group 2 after six months. Civil penalties for illegal working reach up to £60,000 per illegal worker.

Registration, qualifications and references, with one interval the registration standard leaves open

Registration is checked before the individual starts, against one of eight regulators named in the professional registration and qualification checks standard, from the General Medical Council to the General Osteopathic Council. The check covers identity with the regulator, any restriction affecting the duties of the role, and any pending fitness to practise investigation. Employers must also check the healthcare professional alert notice system. Qualifications run on original documentation. The employer checks security features, matches the details to the application, obtains evidence of any name change, and retains a copy on file.

The photograph from the kitchen table is not original documentation. The certificate still has to be produced, and the name-change evidence cannot be sought until someone has read the name on it.

What the standard does not set is a re-check interval for existing staff. There is no stated cadence for confirming that a nurse registered at appointment is still registered on any given day, so that interval is the employer's to define and defend.

Under the employment history and reference checks standard, what counts is the period the references cover. For appointees from outside the NHS, the employer must seek the references necessary to validate three consecutive years of employment or training immediately before the application, and the standard fixes no number. The application form must require an explanation of any gap.

DBS certificates never expire, and the repeat intervals turn on Update Service subscription

The criminal record checks standard sets four levels of check, up to enhanced with barred list information for regulated activity under the Safeguarding Vulnerable Groups Act 2006. DBS certificates carry no specific term of validity. They record only what was known at the time of issue, and portability depends on an Update Service subscription the individual maintains.

Alongside the DBS certificate, the electronic staff record carries six fields, from the issue date and level of check to the unique reference number and the appointment decision. The certificate itself is kept for six months after the recruitment phase, a retention rule rather than a limit on validity.

Temporary workers who are not subscribed to the Update Service require an annual DBS check as a minimum, with written confirmation from the staffing provider. Doctors in training who are not subscribed must have a DBS check at least once every three years.

Work health records sit outside the personnel file

Everyone doing any type of work or volunteering in the NHS falls under the work health assessments standard, including directly paid employees, agency and contractor staff, students and trainees. Immunisation status is assessed against the Department of Health and Social Care Green Book, and staff performing exposure prone procedures must be tested for HIV, hepatitis B and hepatitis C.

Health assessment information should not form part of the personnel record. It sits on the electronic staff record, with access restricted to occupational health, so the personnel record is never the whole file.

These records also arrive in formats nobody designed for a database: immunisation dates in a margin, a dated serology result photographed on a ward desk. Credentially extracts the data from those records, including handwritten text, so the date becomes a field that compliance monitoring can act on, with the record still under occupational health access control.

Twelve to fifteen records in one clinician file, line by line

No published source gives a document count for a UK clinician file. It can be derived from the standards, for one substantive clinical hire, before any role-specific requirement is added.

• Identity: three certified copies on the standard route, five where no photographic identity exists.
• Right to work: one retained check output with its dated declaration.
• Registration and qualification: three records, the register check, the alert notice check and one qualification certificate copy from the original, plus name-change evidence where the certificate and the application carry different names.
• Employment history: two records, a reference validating three consecutive years and the application form explaining any gap. A second reference makes three.
• Criminal record: two records, the certificate or Update Service status check and the electronic staff record entry with its six fields.
• Work health: one clearance record, with immunisation status inside it.

The standard route through those six lines produces twelve records. Take the no-photographic-identity route, add a second reference, and it is fifteen. Specialty certificates, indemnity cover, appraisal and revalidation evidence, and mandatory training push the clinician file well past that. Credentially's published case study with Merco records 35 to 40 documents per candidate for that provider's own clinicians.

Almost none of it moves with the clinician. The NHS Digital Staff Passport was retired on 5 December 2025, and it had allowed staff moving between trusts to carry their pre-employment check information with them. Beyond an individual's own Update Service subscription, the clinician file is rebuilt in full at every employer, and an agency or bank worker generates a new one at each provider.

What the count changes about how the file is built

A file that size is more than a recruitment process can pull together at the end of a hire. A clinician file has to be built forward from the first document. Someone places each record when it arrives, captures any date on it as a field, routes the work health record away from the personnel file, and sets the follow-up before the person starts. Credentially's pre-employment checks are built the same way, with CV parsing taking employment history off the document before anyone opens a folder. The NHS onboarding workflow applies that build-forward order to the six standards.

Run that certificate through the same sequence and the file behaves differently. The photograph is classified as a qualification certificate when it is uploaded, and the name printed on it is extracted as a field and sits on the record beside the name from the application form. A copy still has to be taken from the original certificate. The mismatch is visible on the day the image arrives, while the clinician is still in the portal on her own phone, so the marriage certificate is requested then. By the time the original reaches someone's desk, the name-change evidence is already on file, and the register check with the Nursing and Midwifery Council runs against a name the file can account for.

The standards fix the contents of a clinician file. Each provider decides for itself when the first document is dealt with.

‍

References

1. NHS Employers, Employment standards and regulation, index of the six standards, all revised 23 July 2026. https://www.nhsemployers.org/recruitment/employment-standards-and-regulation
2. NHS Employers, Employment checks standards updated, 23 July 2026. https://www.nhsemployers.org/news/employment-checks-standards-updated
3. NHS Employers, Background information on the employment checks standards, published 15 April 2019. https://www.nhsemployers.org/articles/background-information-employment-checks-standards
4. NHS Employers, Identity checks standard, last updated July 2026. https://www.nhsemployers.org/publications/identity-checks-standard
5. NHS Employers, Right to work checks standard, published 23 July 2026. https://www.nhsemployers.org/publications/right-work-checks-standard
6. NHS Employers, Professional registration and qualification checks standard, last updated July 2026. https://www.nhsemployers.org/publications/professional-registration-and-qualification-checks-standard
7. NHS Employers, Employment history and reference checks standard, last updated 23 July 2026. https://www.nhsemployers.org/publications/employment-history-and-reference-checks-standard
8. NHS Employers, Criminal record checks standard, last updated July 2026. https://www.nhsemployers.org/publications/criminal-record-checks-standard
9. NHS Employers, Work health assessments standard, last updated July 2026. https://www.nhsemployers.org/publications/work-health-assessments-standard
10. The Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, regulation 19, latest revised version 15 January 2024. https://www.legislation.gov.uk/uksi/2014/2936/regulation/19
11. The Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, Schedule 3, latest revised version 27 November 2014. https://www.legislation.gov.uk/uksi/2014/2936/schedule/3
12. CQC, Regulation 19: Fit and proper persons employed, last updated 16 May 2025. https://www.cqc.org.uk/guidance-regulation/providers/regulations-service-providers-and-managers/health-social-care-act/regulation-19
13. NHS England Digital, Digital Staff Passport, page last updated 8 December 2025. https://digital.nhs.uk/services/digital-staff-passport
14. Credentially, Merco case study. https://www.credentially.io/blogs/case-study-merco