TL;DR - Quick Summary
- DBS Check: Enhanced DBS required for all tutors working with under-18s (£40-60)
- GDPR: Must have privacy notice, secure data storage, respond to data requests within 30 days
- Safeguarding Training: Level 1 safeguarding awareness training recommended (free courses available)
- Insurance: Professional indemnity insurance strongly recommended (£50-150/year)
Safeguarding children and complying with UK regulations isn't just a legal requirement - it's fundamental to building trust with families and running a professional tutoring practice. This guide covers everything online tutors need to know about keeping students safe and meeting legal obligations.
DBS Checks for Online Tutors
A Disclosure and Barring Service (DBS) check reveals any criminal history that might make someone unsuitable to work with children. For tutors working with under-18s, an Enhanced DBS check is the industry standard.
| Check Type | Required? | Cost | Validity |
|---|---|---|---|
| Enhanced DBS Check | Yes - for all tutors working with under-18s | £40-60 | No expiry, but recommend renewal every 3 years |
| DBS Update Service | Recommended - allows instant status checks | £13/year | Annual subscription |
| Barred List Check | Included with Enhanced DBS | Included | Part of Enhanced check |
How to Get a DBS Check as a Self-Employed Tutor
- 1Apply through a registered umbrella body (e.g., uCheck, Capita, Personnel Checks) - cost £40-60
- 2Provide ID documents (passport, driving licence, utility bills)
- 3Wait 2-8 weeks for processing (varies by police force area)
- 4Sign up to DBS Update Service (£13/year) for instant portable checks
GDPR Compliance for Tutors
The General Data Protection Regulation (GDPR) applies to all tutors who collect and process personal data. Here are your key obligations:
Privacy Notice
Inform students/parents how you collect, use, and store their data
Create and share a privacy policy before starting lessons
Lawful Basis
Have a legitimate reason for processing personal data
Contract fulfilment or legitimate interests for tutoring services
Data Minimisation
Only collect data necessary for tutoring
Limit to name, contact details, learning needs, and progress notes
Secure Storage
Protect personal data from unauthorised access
Use encrypted storage, strong passwords, secure platforms
Data Subject Rights
Allow access to, correction of, and deletion of data
Respond to data requests within 30 days
Data Retention
Don't keep data longer than necessary
Delete records 2-3 years after tutoring relationship ends
ICO Guidance: The Information Commissioner's Office provides detailed guidance for small businesses and self-employed individuals on GDPR compliance.
Safeguarding Policies & Procedures
Every tutor should have clear safeguarding policies in place. While the tutoring industry isn't regulated like schools, professional standards demand robust child protection measures.
Your Safeguarding Policy Should Include:
Safeguarding Training Resources
- • NSPCC Learning - Free and paid safeguarding courses
- • Educare - Accredited online safeguarding training
- • Local Safeguarding Children Boards - Free local training sessions
- • Keeping Children Safe in Education - Government guidance
Online Safety Best Practices
Online tutoring presents unique safeguarding considerations. Follow these best practices to protect both students and yourself:
Use reputable platforms only
Built-in security features and safeguards
Avoid one-to-one without parental awareness
Parents should know when sessions occur
Keep camera angles appropriate
Student should only show face/workspace
Don't record without consent
Requires explicit permission from parents
Use platform messaging only
Avoid private messaging apps with students
Have clear session boundaries
Fixed start/end times, professional conduct
Report concerns promptly
Follow your safeguarding policy procedures
Insurance for Online Tutors
While not legally mandatory for self-employed tutors, insurance provides essential protection. Many tutoring platforms require proof of insurance.
Professional Indemnity Insurance
Claims of negligence, errors in teaching advice
£50-150/year
Typical cost
Public Liability Insurance
Third-party injury or property damage
£40-100/year
Typical cost
Cyber Liability Insurance
Data breaches, cyber attacks
£100-300/year
Typical cost
Reporting Safeguarding Concerns
Knowing when and how to report concerns is crucial. If a student discloses abuse or you notice warning signs, you have a duty to act.
If a Child Discloses Abuse:
- 1.Stay calm and listen without interrupting
- 2.Don't promise to keep secrets - explain you may need to tell someone who can help
- 3.Reassure the child they've done the right thing by telling you
- 4.Write down what was said as soon as possible (use their words)
- 5.Report to appropriate authorities promptly (see below)
Reporting Channels:
| Concern Type | Action | Notes |
|---|---|---|
| Immediate danger | Call 999 | If child is in immediate risk |
| Child abuse/neglect | Local Authority MASH team | Multi-Agency Safeguarding Hub |
| Online exploitation | CEOP (ceop.police.uk) | Child Exploitation and Online Protection |
| Harmful content online | Report to platform + IWF | Internet Watch Foundation |
| General concern | NSPCC Helpline: 0808 800 5000 | 24/7 advice line |
Frequently Asked Questions
Do online tutors need a DBS check UK?
Yes, all tutors working with children under 18 in the UK should have an Enhanced DBS check. While not legally mandatory for self-employed tutors, it is industry standard and expected by parents and tutoring platforms. Many platforms require DBS verification before tutors can be listed.
What safeguarding training do online tutors need UK?
Online tutors should complete Level 1 Safeguarding training (also called safeguarding awareness) at minimum. This covers recognising abuse, reporting concerns, and online safety. Free courses are available from the NSPCC, Educare, and local safeguarding boards. Refresher training every 2-3 years is recommended.
Does GDPR apply to private tutors UK?
Yes, GDPR applies to all tutors who collect and process personal data, including names, contact details, and learning records. Tutors must have a privacy notice, store data securely, only collect necessary information, and respond to data subject requests within 30 days.
Do online tutors need insurance UK?
While not legally required, professional indemnity insurance is strongly recommended for all tutors (around £50-150/year). It protects against claims of negligence or poor advice. Public liability insurance is important for in-person tutoring, and cyber liability insurance is advisable for online tutors handling personal data.
What should I do if a student discloses abuse during tutoring?
Stay calm, listen without interrupting, don't promise confidentiality, and reassure the child. Write down what was said as soon as possible. Report to your local authority's MASH (Multi-Agency Safeguarding Hub) team or call the NSPCC helpline on 0808 800 5000. If the child is in immediate danger, call 999.
Conclusion
Safeguarding and regulatory compliance are non-negotiable aspects of professional tutoring. By getting your DBS check, completing safeguarding training, implementing GDPR-compliant data practices, and having appropriate insurance, you protect both your students and your tutoring business.
Many tutors choose to work through online tutoring platforms such as Tutes4U, which provide built-in safeguarding frameworks, DBS verification, and secure platform features that make compliance easier.
Part of our complete guide
← Back to Online Tutoring UK GuideAbout This Guide
This safeguarding guide has been compiled with reference to UK government guidance, ICO recommendations, and industry best practices. It is intended for informational purposes only and does not constitute legal advice.