Personal data request - is this normal / legal?

[LondonManc]

It's an OTT request based on the operational risk policy of the client (usually a bank or or financial institution). If you want to get on site, you'll need to comply with their operational risk policy.

Explain that you're concerned about their passport policy but can present it in person on the day that you start. Proof of address isn't a biggie and neither is a copy of your most recent P60.
A low quality scan of your driving licence and birth certificate would suffice instead of a passport.

[contractUKonline]

He was taking the piss, in case you didn't notice.

I didn't wasn't the craziest response.

[Mordac]

Thanks for the replies





This definitely treats a copy of the passport with a lot more weight and echoes how I feel about this - I'm assuming this is old, I wonder if there's a 2019 version.

I doubt it, that's the latest I've seen, and our govt aren't known for their efficiency in getting things done...

I sort of am, but not so aggressively as I do actually want the contract. Thanks for letting me know this isn't normal in your experience, i've never had this before.

He was taking the piss, in case you didn't notice.

[contractUKonline]

Thanks for the replies

You are correct that your company is the one with the legal obligation to validate that you are entitled to work in the UK. Assuming you are outside IR35 (i.e. not an employee of the client or agency).

However, the client could end up in hot water if they are found to have a load of illegals working on their site so they insist on extra checks as part of their due dilligence.

If you're concerned about email then send the passport by registered post.

Hmmm....I get this. However they also want an NI number, certified address.... I think it's overkill and risky for me to send over this volume of information. A passport I can make peace with but like you said they have no legal remit.

https://www.nationalarchives.gov.uk/...h-passport.pdf
Read section 3.2 on P4, and make your own conclusions.

This definitely treats a copy of the passport with a lot more weight and echoes how I feel about this - I'm assuming this is old, I wonder if there's a 2019 version.

Definitely not normal. Push back and highlight your points as to why you won’t comply with their demands. Tell them in no uncertain terms that they are being very unreasonable and if they don’t drop their demands you will withdraw your application. Give them a deadline as well. Watch how they change tracks within minutes. Done it many times over the years

I sort of am, but not so aggressively as I do actually want the contract. Thanks for letting me know this isn't normal in your experience, i've never had this before.

I've had the passport request a number of times. If you're particularly bothered about the security side (especially as they're asking for quite a bit all at once there), host a relatively low quality scanned copy on your own HTTPS website or on a secured AWS S3 bucket or whatever you think mitigates the unencrypted email risk sufficiently. And give them the link, and have it expire/ delete the file automatically after 7 days or whatever.

Then cross your fingers and hope they don't just email it on to the client...

This is true, but even that type of link isn't secure.. once downloaded they can do anything with it. It's not like I believe they have negative intensions, I just think they're trying to cover all bases but it's too much IMHO

[Mordac]

Hey all,

I’ve just landed a new contract - as part of the recruitment company’s vetting process they are asking for copies of my passport, address and NI number. This is on top of all the company documentation.

I have two issues:
1) is this legally required? I am technically employed by my company, this is who the contract is between the recruiter and the limited company - is there any need for my personal documents? Also I don’t understand at all why they need my NI number...

2) they’ve just requested it over email - they don’t have an encryption process etc and when I’ve asked grandular questions about my data (where is it held, how long etc) they can’t answer.

What would everyone do? Just send it? Query it more? Push back because it’s not needed?

https://www.nationalarchives.gov.uk/...h-passport.pdf

Read section 3.2 on P4, and make your own conclusions.

[fullyautomatix]

Hey all,

I’ve just landed a new contract - as part of the recruitment company’s vetting process they are asking for copies of my passport, address and NI number. This is on top of all the company documentation.

I have two issues:
1) is this legally required? I am technically employed by my company, this is who the contract is between the recruiter and the limited company - is there any need for my personal documents? Also I don’t understand at all why they need my NI number...

2) they’ve just requested it over email - they don’t have an encryption process etc and when I’ve asked grandular questions about my data (where is it held, how long etc) they can’t answer.

What would everyone do? Just send it? Query it more? Push back because it’s not needed?

Definitely not normal. Push back and highlight your points as to why you won’t comply with their demands. Tell them in no uncertain terms that they are being very unreasonable and if they don’t drop their demands you will withdraw your application. Give them a deadline as well. Watch how they change tracks within minutes. Done it many times over the years.

[man]

I've had the passport request a number of times. If you're particularly bothered about the security side (especially as they're asking for quite a bit all at once there), host a relatively low quality scanned copy on your own HTTPS website or on a secured AWS S3 bucket or whatever you think mitigates the unencrypted email risk sufficiently. And give them the link, and have it expire/ delete the file automatically after 7 days or whatever.

Then cross your fingers and hope they don't just email it on to the client...

[Yorkie62]

Did you send you Gladatorial School Certificate of Merit as well.

NO juts some pictures of particularly interesting church and cathedral spires he has visited recently.

[northernladuk]

Did you send you Gladatorial School Certificate of Merit as well.

[Lance]

You are correct that your company is the one with the legal obligation to validate that you are entitled to work in the UK. Assuming you are outside IR35 (i.e. not an employee of the client or agency).

However, the client could end up in hot water if they are found to have a load of illegals working on their site so they insist on extra checks as part of their due dilligence.

If you're concerned about email then send the passport by registered post.

[Zigenare]

Hey all,

I’ve just landed a new contract - as part of the recruitment company’s vetting process they are asking for copies of my passport, address and NI number. This is on top of all the company documentation.

I have two issues:
1) is this legally required? I am technically employed by my company, this is who the contract is between the recruiter and the limited company - is there any need for my personal documents? Also I don’t understand at all why they need my NI number...

2) they’ve just requested it over email - they don’t have an encryption process etc and when I’ve asked grandular questions about my data (where is it held, how long etc) they can’t answer.

What would everyone do? Just send it? Query it more? Push back because it’s not needed?

Name the agency, we'll let you know if we've had any bad experiences with the same organisation.

[Old Greg]

Hey all,

I’ve just landed a new contract - as part of the recruitment company’s vetting process they are asking for copies of my passport, address and NI number. This is on top of all the company documentation.

I have two issues:
1) is this legally required? I am technically employed by my company, this is who the contract is between the recruiter and the limited company - is there any need for my personal documents? Also I don’t understand at all why they need my NI number...

2) they’ve just requested it over email - they don’t have an encryption process etc and when I’ve asked grandular questions about my data (where is it held, how long etc) they can’t answer.

What would everyone do? Just send it? Query it more? Push back because it’s not needed?

Normal enough. They want to check you are entitled to work in the UK so they don't get in hot water.

[contractUKonline]

Hey all,

I’ve just landed a new contract - as part of the recruitment company’s vetting process they are asking for copies of my passport, address and NI number. This is on top of all the company documentation.

I have two issues:
1) is this legally required? I am technically employed by my company, this is who the contract is between the recruiter and the limited company - is there any need for my personal documents? Also I don’t understand at all why they need my NI number...

2) they’ve just requested it over email - they don’t have an encryption process etc and when I’ve asked grandular questions about my data (where is it held, how long etc) they can’t answer.

What would everyone do? Just send it? Query it more? Push back because it’s not needed?