Healthcare Credential Verification: GMC, NMC and Accreditation Checks

Every NHS trust, private hospital and social care provider in the United Kingdom must verify the credentials of healthcare practitioners before they treat patients. The NHS Employment Check Standards mandate six pre-employment checks, including professional registration, qualifications, right to work and Disclosure and Barring Service (DBS) screening. Failure to complete these checks can result in CQC enforcement action, personal liability for the responsible officer and, in severe cases, criminal prosecution under the Medical Act 1983.

This article is provided for informational purposes and does not constitute legal or regulatory advice. Consult a solicitor or healthcare compliance specialist for situation-specific guidance.

The regulatory framework for healthcare credential checks

Healthcare professional regulation in the UK operates through statutory bodies established by Parliament. Each regulator maintains a public register, sets standards for education and practice, and has the power to investigate fitness-to-practise concerns and remove practitioners from their register.

The General Medical Council (GMC) regulates doctors. The Nursing and Midwifery Council (NMC) covers nurses and midwives. The General Pharmaceutical Council (GPhC) registers pharmacists and pharmacy technicians. The Health and Care Professions Council (HCPC) covers 15 allied health professions, including physiotherapists, paramedics and clinical psychologists.

The Care Quality Commission (CQC) does not register individual practitioners but inspects and rates healthcare providers. CQC Regulation 19 (Fit and proper persons employed) requires providers to have robust systems for verifying that staff are qualified, competent and of good character. Inspectors routinely check personnel files during inspections.

All regulated healthcare providers must also comply with the Safeguarding Vulnerable Groups Act 2006 and the DBS barring regime, which prohibits certain individuals from working in regulated activity with vulnerable adults or children.

Which checks are required for each professional type

The scope of verification varies by profession, role and setting. The table below summarises the mandatory checks for the main healthcare roles in the UK.

Healthcare assistants are not subject to statutory registration, which places the entire burden of competence verification on the employer. The Care Certificate standards provide a baseline, but employers must conduct their own reference checks and skills assessments.

Step-by-step verification process

The NHS Employment Check Standards define six mandatory checks. Each must be completed and documented before the practitioner begins work with patients. Conditional offers of employment can be issued, but unsupervised clinical duties must not commence until all checks are cleared.

Check 1: Identity verification

The employer verifies the candidate's identity using original documents. Acceptable documents include a current UK or Irish passport, a UK biometric residence permit or a combination of a birth certificate with a government-issued photo ID. The identity verification methods and technologies used must be sufficient to confirm the person presenting documents is the rightful holder.

Check 2: Right to work

Under the Immigration, Asylum and Nationality Act 2006, the employer must confirm the candidate's right to work in the UK before employment starts. For overseas-qualified practitioners, this intersects with visa conditions and may involve Certificate of Sponsorship (CoS) checks via the Home Office employer checking service.

Check 3: Professional registration and qualification

The employer confirms the practitioner's registration status directly with the relevant regulator. For GMC-registered doctors, the GMC online register provides real-time data on registration status, licence to practise, specialist registration and any conditions or undertakings.

For nurses and midwives, the NMC online register confirms registration status, effective dates and any restrictions. Original qualification certificates should also be inspected. Where a practitioner trained outside the UK, evidence of recognised qualification (typically via IELTS/OET language test results and regulator-approved assessment) must be obtained.

Check 4: Employment history and references

A minimum of three years of employment history must be verified, with written references covering the most recent employer. Gaps in employment must be explored and documented. For clinical roles, at least one reference must come from a clinical lead or medical director who can attest to clinical competence.

Check 5: DBS enhanced disclosure

An enhanced DBS check with a check of the relevant barred list (adults, children or both) is mandatory for all roles involving regulated activity. The DBS Update Service allows employers to check the status of an existing certificate online, reducing processing time from weeks to minutes for practitioners who subscribe to the service.

Check 6: Occupational health clearance

The employer must confirm that the practitioner is physically and mentally fit to perform the duties of the role. This typically involves a health questionnaire or assessment by an occupational health provider, with particular attention to communicable diseases and substance misuse.

Overseas-qualified practitioners: additional requirements

The UK recruits significant numbers of healthcare professionals from abroad. According to GMC workforce data, 41 % of doctors joining the UK register in 2024 obtained their primary medical qualification outside the UK.

For doctors, the pathway involves passing the Professional and Linguistic Assessments Board (PLAB) test or demonstrating equivalence through an acceptable postgraduate qualification, plus registration with the GMC. Specialist registration requires either a Certificate of Completion of Training (CCT) via UK training or a Certificate of Eligibility for Specialist Registration (CESR) based on overseas experience.

For nurses, the NMC requires a computer-based test (CBT), an Objective Structured Clinical Examination (OSCE) and evidence of English language competence via IELTS Academic (minimum 7.0 in each component) or OET (minimum B in each component).

Employers must verify that each stage has been completed and retain evidence. Relying solely on the candidate's self-declaration is not acceptable under CQC Regulation 19.

Consequences of inadequate credential verification

CQC inspection reports consistently cite failures in staff recruitment and vetting as a factor in "Requires Improvement" and "Inadequate" ratings. In its 2024 State of Health Care report, the CQC noted that 18 % of providers inspected under the "Well-led" key question had deficiencies in recruitment record-keeping.

Clinical incidents involving unverified practitioners can trigger investigation by both the regulator and the police. The employing organisation faces negligence claims, regulatory sanctions and reputational damage. Individual directors can be held personally liable under CQC Regulation 5 (Fit and proper persons: directors).

Insurance implications are severe. Medical defence organisations and indemnity providers require that practitioners hold valid registration. Treatment delivered by an unregistered practitioner may not be covered, leaving the employer exposed to the full cost of claims.

Automating healthcare credential verification

Manual credential checking across multiple registers, DBS portals and qualification databases is time-intensive and error-prone. A typical NHS trust recruiting 200 practitioners per year spends an estimated 1,500 hours annually on pre-employment checks.

A document verification platform can automate the extraction and validation of qualification certificates, registration numbers and DBS certificates. Integration with the GMC, NMC and HCPC online registers enables real-time status confirmation. Automated expiry tracking ensures that revalidation dates and DBS renewals are flagged before they lapse.

Combined with HR document verification workflows and identity verification technology, healthcare organisations can reduce onboarding time from weeks to days while maintaining full audit trails for CQC inspections.

Request a demo for healthcare document verification

Frequently asked questions

Can I rely solely on the GMC or NMC online register to verify a practitioner?

The online registers confirm current registration status, licence to practise and any conditions or sanctions. They do not verify the authenticity of the original qualification certificate. NHS Employment Check Standards require employers to also inspect original qualification documents and obtain references. The register check is necessary but not sufficient on its own.

How often should credential checks be repeated for existing staff?

GMC revalidation occurs every five years and NMC revalidation every three years. The DBS Update Service allows continuous monitoring if the practitioner subscribes. Best practice is to conduct an annual verification sweep that confirms registration status, DBS currency and indemnity cover. CQC expects ongoing monitoring, not just pre-employment checks.

What happens if a practitioner's registration lapses after they have started work?

A practitioner whose registration lapses must stop practising immediately. It is a criminal offence under section 49 of the Medical Act 1983 for a doctor to practise while not registered. The employer must have systems to detect lapsed registration — typically through automated alerts linked to the regulator's database or a document management platform that tracks expiry dates.

Are agency and locum staff subject to the same checks?

The employing or engaging organisation retains ultimate responsibility for ensuring all six NHS Employment Check Standards are met, regardless of whether the practitioner is directly employed, supplied by an agency or working as a locum. Agencies should provide compliance packs, but the provider must independently verify that checks have been completed to the required standard.

Does CheckFile.ai support healthcare credential verification?

CheckFile.ai automates the verification of qualification certificates, registration documents, DBS certificates and identity documents for healthcare practitioners. The platform extracts key data, detects document anomalies and generates compliance reports suitable for CQC inspection. See pricing for healthcare organisations.