Baseline Personnel Security Standard (BPSS) explained

If your organisation works with UK government departments, or follows government best practice, BPSS compliance isn’t optional. But that doesn’t mean it has to be slow, manual, or painful.

We recently partnered with Konfir to create a comprehensive BPSS guide exploring how organisations can meet the Baseline Personnel Security Standard more efficiently using modern, data-led approaches. Below, we’ve pulled out the key takeaways to help you understand what BPSS really involves, why it matters, and how it’s evolving.

What is BPSS and why does it matter?

The Baseline Personnel Security Standard (BPSS) is the UK government’s mandatory pre-employment screening framework for anyone working in, or with, government departments. It’s designed to protect government assets and reduce security risks by ensuring individuals are who they say they are, entitled to work in the UK, and have an appropriate background.

While BPSS is mandatory for government roles, it’s also widely used across the private sector as a best-practice standard, especially in regulated or security-sensitive industries.

Put simply: BPSS helps organisations hire with confidence, protect their reputation, and build a secure workforce from day one.

The four core BPSS checks

To be BPSS compliant, employers must verify four key areas:

1. Identity verification – confirming name, date of birth, address, and National Insurance number.
2. Right to work – ensuring the individual is legally entitled to work in the UK.
3. Employment history – verifying at least the last three years of employment (or academic history).
4. Criminal record – checking for any unspent criminal convictions.

Candidates must also provide explanations for any significant gaps in employment or time spent abroad during the vetting period.

Who needs BPSS screening?

At a minimum, all staff in government roles must undergo BPSS checks before their employment is confirmed. This includes civil servants, contractors, temporary staff, suppliers, and members of the armed forces.

Responsibility for applying BPSS typically sits with HR teams, but the guidance strongly encourages close collaboration between HR, security, and other stakeholders to ensure consistency and accuracy.

Why traditional screening causes problems

Relying on manual checks, paper documents, or slow employer references can create serious challenges:
BS7858 screening typically requires:

• Delays to onboarding and hiring decisions
• Higher administrative costs
• Increased risk of fraud or incomplete information
• A poor candidate experience

More importantly, weak BPSS checks can undermine any future National Security Vetting (NSV), leaving organisations exposed to reputational or security risks.

BPSS is evolving: what’s changed?

The 2024 BPSS update (Version 7.0) brought welcome clarity. It confirms that while organisations must verify at least three years of employment history, the method used is flexible.

Crucially, the guidance now explicitly supports the use of digital data sources, such as HMRC, payroll, and banking data, as valid ways to complete employment history checks. This opens the door to faster, more reliable, and more secure verification.

How instant data transforms BPSS compliance

This is where modern solutions come in. Onboarding software, such as Tifo Comply, can carry out all the necessary verification checks, using trusted third parties, to provide an instant result in regards to the four key verification areas required for a BPSS check.

• Identity verification & Right to work – Trust ID uses identification document verification technology to verify a UK or Irish passports through biometric face matching and liveness checks. And where the candidate is able to supply a share code, Right to Work is verified by performing an online right to work check.
• Employment history – Konfir accesses employment data directly from authoritative sources (with the candidate’s consent) to provide instant verification of current and historical employment. It clearly identifies and explains gaps in employment, reducing reliance on slow or unreliable employer references, while minimising fraud by using trusted data rather than easily falsified documents.
• Criminal record – PayStream Disclosures provides information on any unspent criminal convictions. It can also carry out criminal record checks for specific positions, professions, employment, offices, works and licences included in the Rehabilitation of Offenders Act 1974 (Exceptions), Order 1975 as well as those prescribed in the Police Act 1997.

The result? A standardised, faster, and safer BPSS process that benefits employers, candidates, and verifiers alike.

Why Tifo and Konfir worked together on this guide

At Tifo, we believe compliance should feel clear and manageable, not overwhelming. Konfir shares that belief, bringing deep expertise in secure, real-time employment data.

Together, we created this guide to help organisations understand:

• What BPSS really requires
• How the standard is changing
• How digital, data-led screening can remove friction from compliance

Want the full picture?

Download the full BPSS guide, created in collaboration with Konfir, to explore the requirements in detail, understand the 2024 updates, and see exactly how instant employment data can simplify BPSS compliance.

Compliance doesn’t have to slow you down. With the right approach, it can move as fast as your business.