What Is the Safeguarding Vulnerable Groups Act 2006? The Safeguarding Vulnerable Groups Act 2006 is a key legislation in the UK that prevents unsuitable people from working with vulnerable adults and children. It creates barred lists for children and adults and makes it a crime for a barred person to engage in a regulated activity.
The Act also makes it an offence to let a barred person do that work knowingly. It requires employers to refer serious concerns to the Disclosure and Barring Service (DBS). It does not require every organisation to run DBS checks because sector rules already do. Many people get this point wrong.
This guide explains what the Act does, who it protects and how regulated activity works. It shows how the law links to DBS checks and sets out the penalties. You will also find the rules for Scotland and Northern Ireland. It explains what changed on 1 September 2026, with worked examples for real roles.
Legal Terms of the Safeguarding Vulnerable Groups Act 2006
So, what is the Safeguarding Vulnerable Groups Act 2006 in legal terms? It is an Act of Parliament that limits who may do certain work with children and adults. The DBS places unsuitable people on barred lists, and the law stops them from doing the most sensitive roles. The aim is to prevent harm before it happens.
Strip away the history, and the Act does one thing. It determines who the law prohibits from performing certain jobs involving children and adults. Everything else in this guide follows from that.
Who Does the Act Protect?
The Act safeguards children under 18 and adults receiving certain types of care. It is in force in England & Wales, with a parallel Order in Northern Ireland, and Scotland has its own scheme. Adults are covered because they receive services, including personal care or healthcare. There is no burden on anyone to establish that an adult is vulnerable.
The title still says “vulnerable groups”, but the test changed in 2012. A frail person using a care service is covered. A person with the same needs, helped by a relative, is not. Family arrangements sit outside the definition.
What Does the Act Actually Do?
The Act does five things. It creates the children’s and adults’ barred lists and sets out how people are barred and can appeal. It defines regulated activity in Schedule 4 and creates offences for barred people and anyone who knowingly allows them to work. It also requires organisations to refer certain concerns to the DBS.
Think of the Act as the rulebook. The DBS, formed in December 2012, applies it. It makes barring decisions, handles referrals and issues certificates.
Why the Safeguarding Vulnerable Groups Act 2006 Was Introduced?
Behind the Act lies one question: how can a country prevent unsuitable people from reaching the most sensitive roles before harm is done? Parliament’s answer was to bar people in advance rather than act after an incident. That purpose explains why the Act controls who may work, not how services are run. The sections below cover the events behind it, the planned and scaled-back scheme, and whether the law is still in effect today.
How Did the Soham Murders and the Bichard Inquiry Shape the Act?
In 2002, school caretaker Ian Huntley murdered Holly Wells and Jessica Chapman. The Bichard Inquiry was critical of how agencies held and shared risk data and recommended that workers with vulnerable groups be registered. The Act removed three distinct lists and replaced them with two lists, one for children and one for adults. It was given Royal Assent on 8 November 2006.
The Vetting and Barring Scheme
The barring was intended to come into effect in October 2009 and to cover all those involved in a regulated or controlled activity. In June 2010, the coalition government halted the wider plans. The Protection of Freedoms Act 2012 then ended the use of controlled activity and monitoring.
Barring survived, but national registration did not. England and Wales have no such scheme today. The Act did not create the DBS. It established the Independent Safeguarding Authority, succeeded by the DBS in December 2012.
Is the Act Still in Force Today?
Yes, the Act remains in force, as amended. The UK government’s legislation, section 9, was up to date as of 2 September 2026. The most recent major amendment concerns regulated activity with children in 2026. An earlier guide may be wrong about that part of the law, so see the UK government’s legislation for the current text.
What Are Barred Lists and How Do Barring Decisions Work?
Barred lists turn the Act’s prohibition into something that employers and regulators can act on. A person can end up on a list because of a listed offence or because of a DBS judgement about risk. For an employer, the practical question is whether the person is barred from the type of work on offer. The sections below cover who is listed, how a person is barred and how a bar can be challenged.
The Children’s and Adults’ Barred Lists
A person may be on the children’s list, the adults’ list or both lists. The children’s list is used to prevent a person from carrying out regulated activity with children; the adults’ list is used to prevent a person from carrying out regulated activity with adults. A bar does not stop all work, because it covers only the regulated activity with that group. Employers must still judge suitability for other roles.
The Act also treats people on certain Scottish or Northern Irish lists as barred in England and Wales. This applies where the Secretary of State has specified the other list by order. A bar is hard to avoid by moving across a border.
How Does Someone Get Barred, and Can They Appeal?
Three routes lead to a bar. Serious offences result in automatic barring, with no right of representation or appeal. Other listed offences bring automatic barring unless the person’s representations persuade the DBS otherwise. In all other cases, the DBS decides, after a referral, whether the person has caused harm or poses a risk of harm.
A barred person has three months to seek permission to appeal to the Upper Tribunal. It looks only at mistakes of law or fact and does not replace the DBS’s view of the risk. A person can also request a review after a minimum period has passed. That period depends on the person’s age at the time of barring.
What Is Regulated Activity Under the Act?
Regulated activity is work that a barred person must not do. It is separately defined in Schedule 4 for children and adults. The tests depend on the behaviour, frequency, and recipients of the behaviour. The thresholds also apply to when an organisation can request a barred list check, and the setting is not as important.
Which Activities With Children Are Regulated?
Some activities only count when they are seen frequently, such as teaching, training, instructing, caring for and supervising children. Often enough is at least four days per week, or 30 days or more, with at least one day between 2 am and 6 am. Healthcare and personal care are counted at any frequency. Managing or supervising people who do regulated activity also counts as regulated activity.
Two further strands apply. Advice or guidance regarding a child’s welfare is assessed at the same frequency as teaching and supervision. Some work, such as work in schools, qualifies when it is regular and provides opportunities for contact with children. This is dependent on the frequency with which the individual performs the activity.
Which Activities With Adults Are Regulated??
The law sets out six types of activity involving adults, which are provided in the next paragraph. Any of these activities, including a single occurrence, is considered to be a regulated activity. No frequency test applies, and the setting does not decide the answer. Hospital, care home, or home-based personal care is treated in the same way.
The six categories are healthcare and personal care, such as washing, dressing, eating, drinking and toileting. Social work and help with cash, bills or shopping come next. The fifth is to assist in managing a person’s personal affairs. The sixth relates to the transportation of adults with health care, personal care or social services.
Which Arrangements Fall Outside Regulated Activity?
Family and personal, non-commercial arrangements fall outside the definition for both children and adults. Section 58 covers this, so babysitting for a neighbour as a favour is not a regulated activity. One-off helpers who fail the activity or frequency tests also fall outside it for barred list checks. Controlled activity, an older category, no longer exists.
One caution applies to the offences: sections 7(5) and 9(5) still modify Schedule 4 for them. The 2006 explanatory notes say a barred person commits an offence by supervising children even once. Part of section 7(5) was repealed in 2012, and Schedule 4 has changed since. Take advice before relying on the one-off point.
Is DBS Regulated Activity the Same as CQC Regulated Activity?
No, there are two distinct meanings of the phrase in law. CQC-regulated activities are services that a provider must register to provide under the Health and Social Care Act 2008. The work which a barred person is not able to undertake under the Safeguarding Vulnerable Groups Act is defined as a DBS-regulated activity. A provider can carry on one activity without the other.
CQC’s own guidance indicates that in each setting, the term has a different meaning. The two meet through the fit and proper persons rule. Providers must obtain the Schedule 3 information, including a DBS certificate, as required by law.
What Changed on 1 September 2026? The End of the Supervision Exemption
For many schools and clubs, this is the biggest practical shift in children’s definitions in years. It affects helper and assistant roles that organisations had long treated as outside regulated activity. Older guides, policies and role descriptions may still reflect the pre-change position and need a second look. The sections below explain the old rule, who is now affected and what stays the same.
What Was the Supervision Exemption?
Before 1 September 2026, a person who taught, trained, instructed, cared for, or supervised children was outside a regulated activity if a supervisor oversaw them. Organisations could ask for an enhanced check for these roles. They could not ask for a children’s barred list check. Schools and clubs often relied on the rule for helpers and assistant coaches.
Section 139 of the Crime and Policing Act 2026 removed the supervision wording from Schedule 4. The change took effect on 1 September 2026.
Who Is Affected Now?
Anyone who does this work often enough, or does it overnight, is now engaged in regulated activity, supervised or not. The threshold is more than three days in 30, or once overnight between 2 am and 6 am. The change covers paid staff and volunteers in schools, clubs and charities.
Each occasion counts towards the total. Someone who helps on four days a month across four schools is in a regulated activity. The DBS says the change applies in England, Wales and Northern Ireland. See the DBS announcement and the DFE guidance.
What Has Not Changed?
Regulated activity with adults has not changed, and not every role with children is now regulated. The change creates no new legal duty to run DBS checks. Nor does it force you to remove anyone while a check is processed. Those choices stay with the organisation, which should use risk assessment and sector rules. The DBS explains these points in its myth-busting article.
How Does the Safeguarding Vulnerable Groups Act 2006 Link to DBS Checks?
There are three things which come into play here: the Act, the DBS, and the Sector rules that apply to you. The Act defines regulated activity, establishes the barred lists and specifies the offences. The DBS runs checks and makes barring decisions. Sector rules, such as KCSIE and CQC regulations, decide when an organisation must obtain a check.
When Can You Request an Enhanced Check With a Barred List Check?
Barred list information is only available for regulated activity roles. In the case of a non-regulated activity, an enhanced check may be requested with no barred list data. There is information on the barred list in sections 113BA and 113BB of the Police Act 1997. The DBS states that requesting a check when ineligible is illegal.
Does the Act Itself Require a DBS Check?
Generally, no. The Act provides for the barring system and offences, and the requirements for checks are usually set out in sector rules. All schools follow KCSIE and DFE guidance; CQC-registered providers follow Regulation 19 and Schedule 3; and early years settings follow their statutory guidance. Your policy needs to refer to the relevant sector rule, not the Act.
DFE guidance clarifies that, for schools and colleges in England, volunteers involved in regulated activities must have an enhanced DBS check that includes details of the children’s barred list. It also states that schools should ensure that no individual is barred from engaging in a regulated activity. The requirements for the whole school are outlined in Keeping Children Safe in Education 2026. It is statutory advice under section 175 of the Education Act 2002.
What Must Employers and Organisations Do?
Two legal duties matter most to employers and organisations under the Act. Do not allow a barred person to engage in regulated activity, and refer serious concerns to the DBS. Everything else comes from sector rules, regulators and good practice. Keep those legal duties separate from good practice when you write your safeguarding policy for staff.
Safeguarding Training for Managers
Enrol Now
When Must You Refer Someone to the DBS?
Regulated activity providers and personnel suppliers must refer someone to the DBS when two conditions apply. Firstly, they dismissed the person from regulated activity, or would have done so if the person had not departed. Second, the individual who is hurt, or has the potential to cause harm, to a child or adult. The duty is provided for in sections 35 and 36.
You can also refer to safeguarding reasons when the duty does not strictly apply. Local authorities and some regulators have their own duties or powers to refer. The DBS publishes guidance on the legal duty to refer.
What Should Your Compliance Checklist Include?
A good checklist outlines each role and checks each role against the regulated activity definition. It checks what each certificate covers and applies your sector’s rules. It also establishes a policy for startups and maintains a clear referral path. Check it whenever there is a change in role, particularly for a role that was supervised before 1 September 2026.
Maintain documentation of each decision made. Document the treatment of a role as a regulated activity or not, and the last review date. For starters, while awaiting a check, note the supervision and risk controls you applied. Invite volunteers to sign up for the DBS Update Service, as it indicates whether a certificate is current.
What Are the Penalties Under the Act?
The Act uses criminal law to underpin the barring system, so the consequences extend to organisations as well as individuals. Liability is not limited to the barred person, because those who allow the work or fail to share information can also be prosecuted. Several offences turn on what a person knew, or had reason to believe. The sections below set out each maximum penalty, the available defences, and the risks beyond the court.
Penalty for a Barred Person Who Works in a Regulated Activity
A barred person commits an offence by seeking, offering or doing a regulated activity. On conviction on indictment, the maximum penalty is five years in prison, a fine, or both. A magistrates’ court can impose a lower prison term, a fine, or both. The offence applies to paid staff and volunteers, and section 7 of the Act creates it.
Penalty for Employing a Barred Person
An organisation commits an offence if it permits a barred person to do a regulated activity. It must know, or have reason to believe, that the person is barred. The maximum penalty under section 7 is 5 years’ imprisonment on indictment. Agencies commit an equivalent offence if they supply a barred person under section 9.
Penalty for Failing to Refer
A provider that fails, without reasonable excuse, to give required information to the DBS commits an offence. The penalty is a fine of up to level 5, which once meant £5,000. Since 12 March 2015, level 5 fines in England and Wales are unlimited. A failure to refer can now bring a fine of any amount. This is section 38 of the Act. You will still see “£5,000” quoted online, but that figure is out of date.
What Defences Apply, and What Else Can Happen?
A barred person has a defence if they did not know, and could not reasonably have known, that they were barred. Both offences also carry a narrow necessity defence with three parts. The person must reasonably believe the work prevented harm, and nobody else could do it. They must also show it lasted no longer than necessary.
Beyond criminal liability, weak recruitment or referral can lead to regulatory action, civil claims, and serious reputational harm. Read section 9(4) in full if you may need the defence.
Which UK Nations Does the Act Cover?
The Act is only to be administered in England and Wales. National charities and sports federations should review each scheme, as they operate across borders. Each country is discussed in the sections below, and how it will stand on the 2026 change.
Does the Act Apply in England and Wales?
Yes, the Act applies directly in both nations. Both are covered by the DBS, including barring, referrals and certificates. The change also applies to Wales; clubs and schools there must abide by this new definition. Welsh settings should refer to Welsh guidance, as education and care rules differ.
DFE’s school guidance is identified as “Applies to England” and therefore does not automatically apply to a Welsh setting. Estyn’s approach to inspecting safeguarding should be based on the Welsh Government’s statutory guidance, Keeping learners safe, which underpins Welsh schools’ approaches. Care providers should look to Care Inspectorate Wales.
Ensure that you are reading the latest version of that guidance. Also, before drafting a policy requiring a check, verify that the 2026 change is reflected.
Northern Ireland Order 2007
The Safeguarding Vulnerable Groups (Northern Ireland) Order 2007 provides for similar provisions to those in the Act. The Crime and Policing Act 2026 amends the Order to eliminate the supervision exemption for children. The change took effect on 1 September 2026 through a Northern Ireland commencement order. AccessNI handles criminal record checks there instead of the DBS. The Department of Justice explains its position on regulated activity and enhanced checks on its website.
The Scottish PVG Scheme
Scotland uses the Protection of Vulnerable Groups (Scotland) Act 2007, as amended by the Disclosure (Scotland) Act 2020. Scottish Ministers hold the barred lists, and Disclosure and Credit Check runs the scheme. Since 1 April 2025, the law says “regulated roles” instead of the older term “regulated work”. PVG membership is now mandatory for people in those roles.
A grace period for applications ended on 1 July 2025, and people joining from 1 April 2026 will enrol for five years. Disclosure and Protection Scotland publishes the current rules. The DBS adds that employers must be based in England or Wales to apply for standard or enhanced checks. This applies wherever the work takes place.
How Does the Act Fit With Other Safeguarding Laws?
The Safeguarding Vulnerable Groups Act is used to regulate who can work in regulated activity. The Care Act 2014 sets out local authorities’ response to the risk to adults with care needs. Child protection is addressed by the Children Act 1989 and 2004. There are many purposes to each of these laws; confusing them can lead to an incorrect understanding of legal obligations.
Under Section 42 of the Care Act, a local authority must make enquiries if an adult with care needs may be subject to abuse or neglect. Each authority must have a Safeguarding Adults Board as specified in Section 43. The six adult safeguarding principles are set out in the Care Act guidance. The 2006 Act contains no principles of its own.
FAQ
1. Can I Apply for a DBS Check Myself?
A role must be eligible under the law before a check can be requested. You can apply for a basic check yourself, but employers must request standard and enhanced checks. Asking for a check for an ineligible role breaks the law, says the DBS.
2. Who Counts as a Regulated Activity Provider?
A regulated activity provider is an organisation that manages or controls regulated activity. Schools, care providers, clubs and charities can all qualify. Providers and personnel suppliers, such as agencies, have a legal duty to refer. If you engage paid or unpaid people for regulated activity, assume you are a provider unless advice says otherwise.
3. Can a Barred Person Work in a Role That Isn’t a Regulated Activity?
Not under the Act, which bars people only from regulated activity. That does not make it wise. Employers must still judge suitability, and care providers must employ fit and proper people under CQC Regulation 19. Moving someone out of a regulated activity because of harm or risk of harm may also trigger a duty to refer.
4. Can Someone Start Work Before Their DBS Certificate Arrives?
The Act does not answer this, so the organisation decides based on a written risk assessment and sector rules. In adult care, the Adult First service can give a provisional adults’ barred list result, but only in exceptional circumstances. For children’s roles, there is no quick equivalent outside education. The next answer explains the limited schools route.
5. Can Barred Lists Be Checked as a Standalone Service?
Generally not, because barred list information is not available as a standalone service. Organisations outside education cannot get a standalone children’s barred list check from the DBS. Schools and colleges can use a DFE route in limited circumstances. Otherwise, barred list information comes only through an enhanced DBS check for a role that is a regulated activity.
6. Is a 16- or 17-Year-Old Treated as a Child Under the Regulated Activity Rules?
Yes, a child is anyone under the age of 18, and that includes you as the person you’re looking after. Activity for 16- and 17-year-olds may be considered regulated. A 16 or 17-year-old who is working can get a DBS check if the job requires it. Workers under 16 will not be checked, as the minimum age for checking is 16.
Conclusion
So, what is the Safeguarding Vulnerable Groups Act 2006 in practice? It is the legal backbone that keeps barred people out of the most sensitive roles.
It is much more than a legal framework or a compliance checkbox. It is the absolute foundation of how we protect the most vulnerable people in our communities every single day. For any organisation, keeping up with these standards isn’t just about avoiding a penalty, it is about stepping up to a deeply important ethical duty
