Guidance

Safeguarding and protecting people for charities and trustees

What to do to protect people who come into contact with your charity through its work from abuse or mistreatment of any kind.

Manage the risks

Protecting people and safeguarding responsibilities should be a governance priority for all charities. It is a fundamental part of operating as a charity for the public benefit.

As part of fulfilling your trustee duties, you must take reasonable steps to protect from harm people who come into contact with your charity.

This includes:

  • people who benefit from your charity’s work
  • staff
  • volunteers
  • other people who come into contact with your charity through its work

The Charity Commission will hold trustees to account if things go wrong and will check that trustees followed this guidance and the law. Trustees are expected to take responsibility for putting things right.

Trustees should promote a fair, open and positive culture and ensure all involved feel able to report concerns, confident that they will be heard and responded to.

We expect all trustees to make sure their charity:

  • has appropriate policies and procedures in place, which are followed by all trustees, volunteers and beneficiaries
  • checks that people are suitable to act in their roles
  • knows how to spot and handle concerns in a full and open manner
  • has a clear system of referring or reporting to relevant organisations as soon as concerns are suspected or identified
  • sets out risks and how they will be managed in a risk register which is regularly reviewed
  • follows statutory guidance, good practice guidance and legislation relevant to their charity: this guidance links to the main sources of information
  • is quick to respond to concerns and carry out appropriate investigations
  • does not ignore harm or downplay failures
  • has a balanced trustee board and does not let one trustee dominate its work – trustees should work together
  • makes sure protecting people from harm is central to its culture
  • has enough resources, including trained staff/volunteers/trustees for safeguarding and protecting people
  • conducts periodic reviews of safeguarding policies, procedures and practice

Read NCVO’s safeguarding resource for advice on how to get started with safeguarding.

Read the Charity Governance Code

Read Bond’s ‘Good governance for safeguarding’ for support on developing good practice on governance.

If you work with children or adults at risk there are more safeguarding legal requirements. You must check whether these requirements apply to your charity. If they do, you must work within them.

Risks to be aware of

Risks you must be alert to include:

  • sexual harassment, abuse and exploitation
  • criminal exploitation
  • cyber abuse
  • modern day slavery
  • negligent treatment
  • self-neglect
  • physical or emotional abuse
  • bullying or harassment
  • health and safety
  • commercial exploitation
  • extremism and radicalisation
  • forced marriage
  • human trafficking
  • female genital mutilation
  • discrimination on any of the grounds in the Equality Act 2010
  • people may target your charity
  • a charity’s culture may allow poor behaviour and poor accountability
  • people may abuse a position of trust they hold within a charity
  • data breaches, including those under General Data Protection Regulations (GDPR)

Policies, procedures and practices you need to have

Your charity’s policies and procedures for protecting people and where appropriate, safeguarding should be:

  • put into practice
  • responsive to change
  • reviewed as necessary, always following a serious incident and at least once a year
  • available to the public

Make all trustees, staff, volunteers, partners and beneficiaries aware of your policies. They all need to know how to apply them.

In your policies make clear how you will:

  • protect people from harm
  • make sure people can raise safeguarding concerns
  • handle allegations or incidents
  • respond, including reporting to the relevant authorities

The amount of detail in your policies depends on what your charity does, where it works and the level of risk.

Read the example code of conduct produced by the Small Charities Coalition

Use guidance to help with policies and procedures, including the links to specific sources of support on this page. Take expert or professional advice if you need it.

Code of conduct

If you have staff or volunteers you must have a clear code of conduct which sets out:

  • your charity’s culture and values
  • how people in your charity should behave

Read the Charity Governance Code Read the example code of conduct produced by the Small Charities Coalition

Read NCVO’s Charity Ethical Principles for help with policies on recognising and resolving ethical issues when considering your code of conduct.

Other policies you need to have

You also need to make sure your charity has:

  • suitable health and safety arrangements in place
  • first aid, fire safety and digital safety policies that everyone understands
  • welfare, discipline and whistleblowing policies for staff if you have them

Checking your charity’s policies, procedures and practice

Trustees must be assured that all policies, procedures and practice are checked and challenged to ensure they’re fit for purpose. You must make sure your charity:

  • works within all relevant statutory guidance
  • keeps accurate records
  • stays aware of current affairs, trends and themes and how these can influence your policies and practices
  • complies with its policies and procedures, as well as with good practice and legislation
  • updates policies and procedures to reflect changes to statutory requirements, good practice and current issues

Every trustee should have clear oversight of how safeguarding and protecting people from harm are managed within their charity. This means you need to monitor your performance, not just using statistics, but with supporting information, such as qualitative reports. This will help you to understand common themes, identify risks and gaps so you can ensure they are addressed.

If you change the way you work, such as working in a new area or in a different way, you should:

  • review your current policies and make sure they’re suitable
  • consider whether any extra policies are needed to cover any new situations or risks
  • record these discussions and decisions as part of your risk management procedures

Trustees can use a number of things to help with their checking and assurance, including:

  • record the risks faced by your charity and how these are managed
  • speak to people in your charity to make sure they understand how to raise concerns and get feedback on past experiences
  • carry out checks on any sites your charity may work in and seeing any necessary paperwork
  • work with statutory agencies and partners
  • training plans for trustees, staff and volunteers on safeguarding and protecting people from harm
  • recording any potential conflicts of interest at any level
  • plan a standing agenda item on safeguarding and protecting people from harm at meetings
  • review a sample of past concerns to identify any lessons to be learnt and make sure they were handled appropriately
  • external reviews or inspections

Get checks on trustees, staff and volunteers

You must make sure that trustees, staff and volunteers are suitable and legally able to act in their positions. This includes people from or working overseas.

You need to get:

Disclosure and Barring Service (DBS) – criminal records checks

You should consider whether to use DBS checks as part of your wide range of checks on trustees, staff and volunteers. They should be used alongside references and interviews to give you a broad and informed view to manage the risk of abuse or harm.

Many posts are eligible for standard or enhanced level DBS checks, such as those working:

  • with children or adults at risk in certain circumstances
  • in accountancy/finance
  • in the legal profession
  • with animals, although in limited circumstances

Trustees should risk assess all roles, taking into account the working environment, to determine if they are eligible for a check and if so, at what level.

Always get a standard, enhanced or enhanced with barred list check from the DBS when a role is eligible for one.

Not all roles working with children or adults at risk are eligible for a standard or enhanced check. You should get a basic check if your risk assessment determines it’s appropriate.

Find out what checks are available from the Disclosure and Barring Service (DBS).

Use the DBS eligibility checker and guidance leaflets to decide what checks to make.

If you ask about criminal records you must have a policy in place that sets out a lawful basis and condition of processing, to comply with the General Data Protection Regulations (GDPR).

A charity that uses information from the DBS must also have a policy on the recruitment of ex-offenders, in order to comply with the DBS Code of Practice. The DBS has guidance on this.

Consider asking DBS applicants to register with the Update Service, or consider carrying out further DBS checks on a regular basis.

NACRO has guidance on dealing with DBS checks and criminal record risk assessments.

People from overseas

It’s a different process to get checks for trustees, staff or volunteers from overseas.

Read guidance on getting checks for people from overseas

Sending workers overseas

Where you cannot get a DBS check for someone going to work overseas, they may be able to get an International Child Protection certificate.

Automatic disqualification

Do not appoint anyone who is disqualified as a trustee or to a senior manager position (at chief executive or finance director level).

Guidance on disqualification and checks to make

Protect volunteers and staff

If your charity has volunteers or staff, you need to protect them from harm.

Have clear policies and procedures on:

  • bullying and harassment
  • whistleblowing

Read ACEVO’s report on workplace bullying in charities. Section 7 of the report explores how a bullying culture can be created and gives 6 recommendations to create safer systems to combat this.

You need to have adequate insurance which covers the individuals and the activities involved.

Charities and insurance

Safeguarding children or adults at risk

If your charity works with children or adults at risk you should:

  • establish good safeguarding policies and procedures that all trustees, staff and volunteers follow, which fit with the policies and procedures of your local authority safeguarding partner or safeguarding children or adults board
  • make sure all staff and volunteers receive regular training on child protection or working with adults at risk
  • appoint a safeguarding lead to work with your local authority safeguarding boards and/or create a plan for responding to concerns overseas
  • manage concerns, complaints, whistleblowing and allegations relating to child protection or adults at risk effectively
  • have clear policies when DBS checks are required, how you assess the level of check needed and how you handle the information

You must follow relevant legislation and guidance.

Identify your local authority safeguarding children or adults board. They:

  • coordinate safeguarding and promote the welfare of children or adults at risk in the area
  • publish policies and procedures for safeguarding which you must follow

You can find your local board online.

Safeguarding children

Safeguarding children duties apply to any charity working with, or coming into contact with, anyone under the age of 18.

Use resources and follow standards from the NSPCC for safeguarding children. Safeguarding children means to:

  • protect children from abuse and maltreatment
  • prevent harm to children’s health or development
  • ensure children grow up with the provision of safe and effective care
  • take action to enable all children and young people to have the best outcomes

Safeguarding adults at risk

Safeguarding adults at risk means protecting their right to live in safety and free from abuse and neglect. Your charity may have trustees, staff, volunteers, beneficiaries or other connections who are classed as adults at risk.

Safeguarding duties for adults at risk apply to any charity working with anyone aged 18 or over who:

  • has needs for care and support (whether or not the local authority is meeting any of those needs) and
  • is experiencing, or is at risk of, abuse or neglect
  • as a result of those care and support needs is unable to protect themselves from either the risk of, or the experience of abuse or neglect

An adult at risk of abuse may:

  • have an illness affecting their mental or physical health
  • have a learning disability
  • suffer from drug or alcohol problems
  • be frail

Working overseas

You must:

  • be aware of different risks for staff, volunteers and beneficiaries who are overseas
  • have suitable reporting and monitoring processes in place for any work overseas
  • monitor where you work for any changes or new safety systems which are needed

Challenges of working overseas include:

  • different cultures, practices or legal systems
  • an unstable environment, like a conflict zone
  • working with many partners

You should apply the same practices as in England and Wales and make sure you comply with any extra requirements of the other country.

Follow The Core Humanitarian Standard on Quality and Accountability for overseas humanitarian work and the Inter-Agency Standing Committee Minimum Operating Standards for Protection from Sexual Exploitation and Abuse if relevant.

You must know when:

  • to report issues to law enforcement in the country you are working in
  • you also need to report to police in the UK

You can find resources online to help with working overseas. These include:

Only use templates that are appropriate for your charity.

Handle and report incidents and concerns

If you have an incident or allegation of abuse you should:

  • handle and record it in a secure and responsible way
  • follow your protecting people and safeguarding policies and procedures
  • act quickly, ensuring you stop or minimise any further harm or damage
  • report it to all relevant agencies and regulators in full
  • plan what to say to those involved with your charity and the media if appropriate
  • be open and transparent so that you build the charity’s reputation for acting with integrity
  • review what happened to understand how to stop it from happening again

You should report to the police if the incident or concern involves criminal behaviour.

Guidance on reporting to the police (PDF, 169KB, 2 pages)

There are other regulators that you may need to report or refer to depending on what your charity does.

In some cases you should send a serious incident report to the Charity Commission.

If you work or volunteer for a charity you can also report it to us using our whistleblowing procedure.

If you work with children or adults at risk

Refer all safeguarding concerns with children or adults at risk to your local safeguarding children or adult team.

You must refer to DBS if you:

Working with or making grants to other organisations

Carry out proper due diligence when you work with, or make grants to, any other bodies, including:

  • delivery partners
  • trading subsidiaries of the charity, including charity shops
  • organisations you fund
  • connected charities

You must make sure that any grant recipient or partner body is suitable. They must have appropriate safeguarding procedures in place. Make sure there are clear lines of responsibility and reporting between all bodies involved.

How to carry out due diligence checks

Department for International Development’s enhanced due diligence: safeguarding for external partners

You should have a written agreement or contract that sets out:

  • your relationship
  • the role of each organisation.
  • monitoring and reporting arrangements

Grant funding an organisation that isn’t a charity

Terrorism and the Prevent duty

All charities must prevent abuse for extremist purposes.

Some charities, like educational charities, are ‘specified authorities’. They must follow guidance on the Prevent duty.

Where appropriate you should also follow:

This must be part of your charity’s risk assessments, policies and procedures.

Download infographic

This document is a one-page summary of safeguarding actions for trustees.

10 safeguarding actions for charity trustees (infographic) (PDF, 122KB, 1 page)

Text version of infographic

10 actions trustee boards need to take to ensure good safeguarding governance

Safeguarding should be a key governance priority for all charities

Ensure your charity has an adequate safeguarding policy, code of conduct and any other safeguarding procedures. Regularly review and update the policy and procedures to ensure they are fit for purpose

Identify possible risks, including risks to your beneficiaries or to anyone else connected to your charity and any emerging risks on the horizon

Consider how to improve the safeguarding culture within your charity

Ensure that everyone involved with the charity knows how to recognise, respond to, report and record a safeguarding concern

Ensure people know how to raise a safeguarding concern

Regularly evaluate any safeguarding training provided, ensuring it is current and relevant

Review which posts within the charity can and must have a DBS check from the Disclosure and Barring Service

Have a risk assessment process in place for posts which do not qualify for a DBS check, but which still have contact with children or adults at risk

Periodically review your safeguarding policy and procedures, learning from any serious incident or ‘near miss’

If you work overseas, find out what different checks and due diligence you need to carry out in different geographical areas of operation.

In this guidance:

  • ‘must’ means something is a legal or regulatory requirement or duty that trustees must comply with
  • ‘should’ means something is good practice that the Commission expects trustees to follow and apply to their charity
Published 6 December 2017
Last updated 22 October 2019 + show all updates
  1. Updated guidance including, when to consider DBS checks, how to put in to practice policies and procedures along with new sector resource signposting.
  2. We have added information on protecting staff and volunteers in a charity, working with children and adults at risk and working overseas.
  3. We have added information on 'Disqualification of trustees' and a link to more detail and waiver forms following changes to disqualification rules on 1 August 2018.
  4. First published.