From 1 September 2026, the ‘supervision exemption’ that let UK employers skip enhanced DBS checks on certain supervised roles disappears under the Crime and Policing Act 2026. If you run a nursery, a care home, or a youth programme and you’ve been relying on ‘someone senior is always in the room’ as your vetting strategy, that loophole is gone. Full stop.
It’s a big shift for HR teams who’ve spent years treating supervision as a substitute for paperwork. But it’s not a new idea. Regulated gambling markets figured this out years ago, because money and access to vulnerable people create exactly the same risk profile as unsupervised care work. Casino floor staff, cage cashiers, and anyone touching a player’s KYC documents get vetted the same way, over and over, not just at hiring.
The logic driving both is identical: continuous risk, continuous screening. When operators in tightly regulated US markets want to prove they take this seriously, this site ranks the Illinois-licensed operators that pass those checks, and it’s worth understanding why the vetting bar there looks a lot like what UK employers now have to meet.
What Actually Changed on 1 September
Here’s the mechanic most explainers skip. Previously, if a role was “supervised” by someone who held an enhanced DBS certificate, the person doing the supervised work didn’t need their own. That exemption covered a huge number of volunteer and part-time roles in schools, sports clubs, and care settings.
The Crime and Policing Act 2026 removes that carve-out entirely. Every person in regulated activity now needs their own check, supervised or not. According to GOV.UK’s employer guidance, organisations that fail to update their vetting policy risk both compliance breaches and, more practically, gaps that a bad actor can walk straight through.
Three words explain why this matters: continuous, not one-time.
Most UK employers still think of a DBS check as a hiring-day box to tick. Run it once, file it, move on. That’s exactly the mindset regulators are now dismantling, and it’s exactly the mindset licensed casino operators abandoned a long time ago, because a clean check on day one tells you nothing about day 400.
How Licensed Casinos Actually Vet Staff
Casino cage staff handle more cash in a single shift than most retail workers see in a month. Dealers see player IDs, home addresses, and sometimes bank details. Compliance officers approve or flag suspicious transactions worth thousands. None of that is a one-and-done background check situation.
Licensed operators in regulated US states run layered vetting that looks close to the new UK enhanced-DBS standard:
- Criminal history checks at hire, re-run on a fixed cycle (often annually)
- Financial background screening for cage and finance roles specifically
- Ongoing transaction monitoring tied to individual staff accounts, not just customer accounts
- Mandatory disclosure clauses that require staff to self-report new charges, not wait for the next scheduled check
That last point is the one UK employers consistently miss. A DBS certificate issued in March tells you nothing about what happened in July. Gaming compliance teams built self-disclosure obligations into employment contracts specifically because they learned, the hard way, that annual checks alone leave a window open.
And the stakes for skipping this are real, not theoretical. Earlier this year a Las Vegas resort discovered an employee had allegedly stolen $776,000 from the property over an extended period, a case that moved through internal audit rather than a hiring-stage background check. That’s the exact failure mode continuous screening exists to catch. One check at the door doesn’t help you two years into someone’s employment.
The Compliance Cost Nobody Budgets For
Budgeting for this properly is where most organisations trip. A single enhanced DBS check runs a modest fee. Multiply that across a workforce, add re-checks every 12 to 36 months depending on role sensitivity, and the number stops looking trivial.
The background screening market has grown specifically because regulated sectors, gaming included, have shifted from periodic to continuous monitoring models. That’s not a UK trend or a US trend. It’s what happens whenever a regulator decides supervision and good intentions aren’t a substitute for a paper trail.
For volunteer organisations especially, this is going to hurt in September. A youth football club that’s been running on three DBS-checked coaches supervising twelve unchecked assistants now needs fifteen certificates, not three. Multiply that across every affected sector and you get a compliance bill nobody had in this year’s budget.
What Casino Cage Fraud Teaches HR Teams
Cage fraud in gaming venues follows recognisable patterns: skimming during shift changes, fake voids, collusion between a dealer and an outside accomplice. A compliance-specialist breakdown of casino cage fraud lays out exactly how these schemes get caught, and almost none of it comes from the initial background check. It comes from ongoing controls layered on top of it.
That’s the piece UK employers in regulated activity need to internalise before September. A DBS certificate is a snapshot. It’s not a control system. Pair it with role-based access limits, mandatory incident reporting, and a re-screening schedule, and you’ve got something closer to what gaming compliance teams have run for over a decade.
Small care providers don’t have compliance departments the size of a casino group’s. Nobody’s pretending they do. But the underlying principle scales down fine: know who’s unsupervised, know when their last check expires, and don’t let “we trust them” quietly replace the paperwork.
Vendor and Software Vetting Runs on the Same Logic
It’s not just people. Software vendors handling sensitive data get the same treatment in regulated industries. Anyone who has gone through a software vendor shortlisting process knows the due diligence looks eerily similar: track record checks, compliance certifications, references that actually get called. Gaming platforms audit RNG certification and data-handling practices before integrating a vendor’s software for exactly the reason HR teams now need to audit every person in a regulated role. Trust without verification is just hope wearing a badge.
FAQ
Does the supervision exemption removal apply to volunteers as well as paid staff?
Yes. The Crime and Policing Act 2026 change applies across paid and volunteer regulated activity. If the role meets the regulated activity definition, supervision no longer removes the requirement for the individual’s own enhanced DBS check from 1 September 2026.
How often should a business re-run DBS checks after hiring?
There’s no single legal mandate for renewal frequency outside specific sectors, but most compliance-led organisations, gaming included, re-screen every one to three years for higher-risk roles. Annual checks are common for cash-handling or safeguarding-adjacent positions.
Why do casinos vet staff more heavily than most retail employers?
Because the access is different. Cage staff and compliance officers routinely handle cash sums and identity documents that create real fraud and money-laundering exposure, which is why licensed operators pair hiring checks with ongoing monitoring rather than a single background screen.
Is an enhanced DBS check the same as continuous monitoring?
No. An enhanced DBS check is a point-in-time snapshot of someone’s record. Continuous monitoring, the model gaming compliance teams use, adds scheduled re-checks and mandatory self-disclosure between renewal dates to close the gap a single check leaves open.
Getting vetting policy right by September isn’t optional anymore, and treating it as a formality is the exact mistake that costs organisations money and reputation later. Gambling involves risk, and that goes for the people running the operation as much as the people playing. Please play responsibly and only wager what you can afford to lose. If you feel gambling is becoming a problem, visit BeGambleAware.org or call 1-800-GAMBLER.