School kitchen staffing: a compliance checklist for 2026

Paid kitchen staff in schools are always in regulated activity

This is the single most important compliance fact for anyone supplying or hiring temporary cooks in schools, and it has been misunderstood for years.

The DBS guidance leaflet “Regulated activity with children in England and Wales” (updated 23 January 2026) states it plainly. If a role within a specified establishment is paid, the individual is always in regulated activity with children and therefore eligible for an Enhanced DBS check with a check of the Children’s Barred List. This applies regardless of the level of supervision they are under.

Schools are specified establishments. The frequency threshold (more than three days in any 30-day period) is met by almost every temporary placement longer than a single week. The supervision exemption applies only to volunteers.

For a paid cook working regular shifts in a school kitchen, the required check is Enhanced DBS with Children’s Barred List. There is no scenario where a Basic check is sufficient.

Getting this wrong is a criminal offence. Section 7 of the Safeguarding Vulnerable Groups Act 2006 makes it an offence for a barred individual to engage in regulated activity, carrying up to five years’ imprisonment. Section 9 makes it an offence for an employer to knowingly permit it.

Our DBS checks for kitchen staff guide covers the full breakdown across schools, care homes, hospitals, and hospitality.

The DBS Update Service saves weeks on temporary placements

The DBS Update Service costs £16 per year (free for volunteers) and allows an individual to keep their Enhanced DBS certificate current. When a school or agency needs to verify a chef’s status, they can check online with the individual’s consent instead of waiting for a new certificate to arrive.

Registration must happen within 30 days of the certificate issue date. At Chefs Bay, we require all education-sector workers to be registered on the Update Service before going on our active bench. This is why we can confirm DBS status within minutes of a placement request, not weeks.

For schools receiving agency staff, the Update Service check does not replace the obligation under KCSIE to obtain written confirmation from the agency that the correct checks have been completed. It is an additional verification tool.

Safer recruitment: what schools must do when an agency supplies the cook

KCSIE 2025 (Part 3, paragraphs 290-299) splits the responsibility between agency and school.

The agency conducts the pre-employment checks: identity verification, right-to-work confirmation, Enhanced DBS with barred list check (where the role is regulated activity), references, and overseas checks where relevant.

The school must obtain written confirmation from the agency that all of these checks are complete before the worker starts. KCSIE is specific about this. The school cannot assume “agency = compliant.”

On the day the cook arrives at the school gate, someone at the school must verify their identity against a physical document (passport or biometric driving licence). The school should also issue appropriate identification (a colour-coded lanyard, for example) that tells other staff what level of checks the individual has undergone.

Both the written confirmation and the identity verification must be recorded on the school’s Single Central Record.

The Single Central Record and agency kitchen staff

The SCR is one of the first documents an Ofsted inspector requests. From November 2025, safeguarding is judged on a binary “met” or “not met” basis under the renewed Education Inspection Framework. A missing entry for an agency cook can produce the same safeguarding failure as a missing entry for a teacher.

For agency staff, the SCR must record whether written confirmation of checks was received from the agency, the date it was received, and whether an Enhanced DBS certificate was provided.

Ofsted inspection reports from Suffah Primary School and Lamledge School illustrate two common failure modes: missing written agency assurances and SCR entries where dates for checks were absent even though the checks had been done. The second case was corrected during inspection. The first was flagged as a safeguarding concern.

The lesson for school business managers: if a temp kitchen worker started on Monday and the agency’s confirmation email arrived on Wednesday, the SCR has a gap. Close it before the inspector does.

HACCP is a legal requirement, not a best-practice badge

Every school kitchen is a food business under UK law. Article 5 of Regulation (EC) No 852/2004 (now assimilated law in Great Britain) requires all food business operators to put in place, implement, and maintain procedures based on the seven HACCP principles: identify hazards, identify critical control points, establish critical limits, monitor, establish corrective actions, verify, and document.

The FSA’s Safer Food, Better Business pack provides a practical HACCP system suitable for school kitchens. Local authority food safety officers inspect against this during routine visits.

Temporary cooks arriving at a school kitchen must be briefed on the site’s HACCP documentation on their first day. That means fridge and freezer temperature logs, cooking and hot-holding records, cleaning schedules, and allergen controls.

Food safety training: what the law actually says vs what schools expect

A common misconception is that Level 2 Food Hygiene is a named legal requirement. It is not.

The legal duty comes from Regulation 852/2004, Annex II, Chapter XII: food handlers must be “supervised and instructed and/or trained in food hygiene matters commensurate with their work activity.” Those responsible for HACCP procedures must have “adequate training in the application of the HACCP principles.” The FSA confirms that UK food handlers are not legally required to hold a food hygiene certificate (FSA, Food hygiene for your business).

In practice, schools and contract caterers expect Level 2 Food Hygiene for all hands-on cooks and Level 3 for anyone supervising or managing the HACCP system. Environmental Health Officers use these benchmarks during inspections, and failure to demonstrate adequate training can result in enforcement action. The gap between legal minimum and operational expectation is narrow enough that treating Level 2 as the floor is the right approach for any agency placing staff into education settings.

Natasha’s Law: when school food must carry a label

The Food Information (Amendment) (England) Regulations 2019 came into force on 1 October 2021. The rule applies across the UK, with equivalent instruments in Scotland, Wales, and Northern Ireland.

Any food that is prepacked for direct sale (PPDS) must carry a label showing the food name, a full ingredients list, and all 14 declarable allergens emphasised. In a school kitchen, PPDS covers items packed before a pupil selects them: pre-wrapped sandwiches, boxed salads, sealed fruit pots, grab-and-go containers.

Meals plated to order are not PPDS and do not require labels, though allergen information must still be available. Packed lunches made without individual orders (for a school trip, for example) are PPDS and need full labelling. Packed lunches made to a specific pupil’s order are not.

A temporary cook arriving for a week of cover needs to know on day one whether the school runs a grab-and-go service. If it does, they need to know the labelling process.

Benedict’s Law arrives in September 2026

On 5 March 2026, the DfE announced a consultation on new statutory guidance titled “Supporting children and young people with medical conditions and allergy,” intended to replace the existing 2015 guidance. The final version is expected in force from September 2026.

The background is specific. Benedict Blythe, aged five, died on 1 December 2021 at Barnack Primary School from fatal anaphylaxis caused by cow’s milk protein. The inquest (July 2025) found that his allergy plan was not shared with teaching staff and adrenaline administration was delayed. His parents created the Benedict Blythe Foundation and campaigned for what is now being called Benedict’s Law.

When the new guidance takes effect, schools in England will be required to:

• Provide compulsory annual allergy awareness training for all staff, including agency and temporary workers
• Stock spare adrenaline auto-injectors for emergencies
• Maintain a written allergy policy with individual healthcare plans for every pupil whose allergies need active management
• Implement specific induction arrangements for new and temporary staff covering allergen awareness

That fourth point matters most for agencies. From September 2026, every temporary cook placed in a school will need documented allergen induction before they touch a saucepan. Schools that do not have a structured process for this will be non-compliant from day one of the autumn term.

Until September 2026, the obligation comes from section 100 of the Children and Families Act 2014 (schools must support pupils with medical conditions) and the Food Information Regulations 2014 (allergen information must be available). These are less prescriptive but still legally binding.

Ofsted does not inspect kitchens, but it will fail schools on safeguarding gaps

This distinction matters. Ofsted does not act as a food safety inspector. Day-to-day food hygiene compliance sits with local authority food safety officers under the Food Safety and Hygiene (England) Regulations 2013.

What Ofsted does care about is safeguarding. The renewed EIF (in force from November 2025) assesses safeguarding on a standalone “met” or “not met” basis. If the SCR is incomplete for kitchen staff, if DBS checks are missing, if written agency confirmations are absent, the safeguarding judgement fails. When safeguarding is “not met,” it caps the entire inspection outcome.

Inspectors visit the dining hall during inspections and observe the food environment. They note hygiene practices and how the dining experience affects pupil wellbeing. But they are not checking HACCP logs or allergen labels. That is the local authority’s job.

The practical risk for schools is this: a missing DBS record for a temporary cook can collapse an inspection grade. A missing fridge log cannot, at least not through Ofsted.

School Food Standards: mandatory rules, weak enforcement

The Requirements for School Food Regulations 2014 set food-based standards for all maintained schools, academies, and free schools in England. These are legally mandatory and cover the entire school day (not just lunch).

The rules are specific. Starchy foods cooked in fat or oil are limited to two days per week. Fresh fruit and vegetables must be available daily. Deep-fried or batter-coated foods are capped at two portions per week across the whole school day. Confectionery is banned. Salt cannot be made available for pupils to add after cooking.

Temporary cooks need to know these rules before planning a menu. Serving chips three days running is a compliance breach, even if the children would eat them.

Enforcement is the weak link. There is no dedicated penalty mechanism for non-compliance. The DfE/FSA School Food Standards Compliance Pilot (2022-2025) tested whether food safety officers could check nutritional standards during routine hygiene inspections. The pilot found they could, but flagged inconsistencies in how standards were applied and unclear reporting lines. No firm commitment to national rollout has been made.

Right to work: the agency carries primary responsibility

The Immigration, Asylum and Nationality Act 2006 creates civil penalties of up to £45,000 per illegal worker on a first breach and £60,000 on repeat (Home Office Employer’s Guide, June 2025 update). Criminal prosecution carries up to five years’ imprisonment where the employer knew or had reasonable cause to believe the worker was disqualified.

The agency, as the contractual employer, bears primary responsibility for conducting the right-to-work check and establishing the statutory excuse. This check cannot be delegated (except via the Digital Verification Service for British/Irish passport holders).

Schools are not the employer of agency workers and are not directly liable for civil penalties under the Act. But KCSIE requires schools to record right-to-work verification on the SCR, and the written confirmation from the agency should cover this.

Three methods exist for conducting checks: manual inspection of original documents in person, the Home Office online checking service for non-British/Irish citizens with share codes, and the Digital Verification Service for British/Irish citizens with valid passports. Biometric Residence Permits expired on 31 December 2024 and are no longer acceptable for manual checks.

Records must be retained for the duration of employment and two years after.

Insurance: who covers what when an agency cook gets burned

Employers’ liability insurance is a statutory requirement under the Employers’ Liability (Compulsory Insurance) Act 1969, with a minimum of £5 million cover. The agency, as the employer, must hold this. In practice, most insurers set a standard of £10 million.

Local authority maintained schools are exempt from the statutory EL requirement (they fall under the local authority’s cover). Academies and free schools are not exempt and must hold their own EL insurance or join the DfE’s Risk Protection Arrangement (approximately £19 per pupil per year).

Public liability insurance is not legally required but is universally expected. Standard cover for school operations is £5-10 million. Product liability (covering injury from food served) is typically included within PL policies.

When agency kitchen staff work in a school, both the agency and the school should hold cover. The agency’s EL policy covers the worker as its employee. The school’s policy or RPA covers the school’s liability for directing the work. Industry practice is for schools to contractually require agencies to provide EL certificates before any worker starts.

The checklist

Before a temporary cook starts their first shift in a school kitchen, eight things must be confirmed.

1. Enhanced DBS with Children’s Barred List check complete (agency conducts, school gets written confirmation)
2. Identity verified on arrival with original document
3. Right to work confirmed and documented
4. Entry recorded on the school’s Single Central Record with dates
5. Level 2 Food Hygiene certificate (minimum) and allergen awareness training verified
6. Site-specific HACCP briefing completed on day one
7. Allergen communication process explained (which pupils have allergies, where the information is displayed, who to escalate to)
8. School Food Standards briefed (what can and cannot be served, frequency limits)

From September 2026, add a ninth: documented allergen induction under the new DfE statutory guidance.

At Chefs Bay, items 1-3 are completed before any cook joins our education bench. We hold Enhanced DBS with barred list checks for all school-facing staff, require DBS Update Service registration, and provide written confirmation to schools in the format KCSIE requires. That written confirmation is part of our wider DBS-checked kitchen staff commitment. Items 5-8 are the school’s responsibility on site, but we brief every cook on what to expect before dispatch. If you run a school in London and need kitchen staff, or anywhere else across our coverage, get in touch and we will confirm DBS status and send written confirmation before the cook arrives.

ChefsBay data from our education placements in 2025-26 shows that 100% of our school kitchen workers hold Enhanced DBS with barred list checks and are registered on the DBS Update Service, compared to industry feedback suggesting roughly 1 in 4 agency placements arrive at a school without the correct DBS level confirmed in writing.

Frequently asked questions

Do school kitchen porters need an Enhanced DBS check? Yes. Kitchen porters working in a school for more than three days in any 30-day period are in regulated activity. The DBS guidance (updated January 2026) confirms that all paid roles in specified establishments require Enhanced DBS with barred list checks, regardless of supervision.

Can a school let an agency cook start before the DBS comes back? KCSIE 2025 allows a worker to begin if a separate barred-list check has cleared, appropriate supervision is in place, and a documented risk assessment exists. Most agencies will not place school cooks without a completed Enhanced DBS certificate already on file.

Who is responsible for the DBS check when an agency supplies the cook? The agency conducts the check. The school obtains written confirmation that the check has been completed at the correct level, verifies the cook’s identity on arrival, and records everything on the Single Central Record.

Is Level 2 Food Hygiene a legal requirement for school cooks? Not by name. The law requires training “commensurate with work activity.” In practice, schools and environmental health officers expect Level 2 as the minimum for hands-on food handlers and Level 3 for supervisors.

What changes in September 2026? The DfE’s new statutory guidance on allergy management will require annual allergen training for all staff (including agency workers), spare adrenaline auto-injectors in school, written allergy policies, and specific induction for temporary staff. The KCSIE 2026 consultation (responses due 22 April 2026) may also bring changes to SCR and safer recruitment requirements.

Does Ofsted inspect school kitchens? Ofsted inspects safeguarding, which includes DBS records and SCR completeness for kitchen staff. Day-to-day food safety compliance is inspected by local authority food safety officers, not Ofsted.

What are the 14 declarable allergens? Celery, cereals containing gluten, crustaceans, eggs, fish, lupin, milk, molluscs, mustard, peanuts, sesame, soybeans, sulphur dioxide/sulphites, and tree nuts.

What is PPDS and does it apply to school meals? Prepacked for direct sale. It applies to food packed on the premises before a pupil selects it (wrapped sandwiches, boxed salads). Meals plated to order are not PPDS. If a school runs a grab-and-go service, Natasha’s Law labelling requirements apply.