Hays

HR & People United Kingdom Website Reviewed Sept. 22, 2026

UK-headquartered specialist recruitment group listed on the London Stock Exchange, placing permanent, temporary and contract professional staff.

Report an issue with this profile

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
Cyber Essentials Not declared Declared as held by Hays Specialist Recruitment Limited on the UK Government Digital Marketplace (G-Cloud). Self-declaration, not a certificate: no body, number or dates. — — Current

Compliance Frameworks

Cyber Essentials
Partial
Declared held on a G-Cloud service listing; Cyber Essentials Plus declared NOT held.
ISO/IEC 27001:2022
Partial
Explicitly declared NOT held on the same G-Cloud listing — a rare negative confirmation.
GDPR 2016/679
Partial
Group Data Protection Officer role referenced; no DPO email, no ICO number and no DPA template published.

A useful negative finding

Hays’s own governance page on cyber security, AI and data protection **names no certifications at all**. It describes penetration testing, monitoring, business continuity and training, and references the EU AI Act only as something it reviews against.

The certification data here comes from a **supplier self-declaration on the UK Government Digital Marketplace**, not a certificate: Cyber Essentials **held**; Cyber Essentials Plus, ISO/IEC 27001, ISO 28000, CSA STAR and PCI all **not held**. Staff vetting is declared conformant to BS 7858:2019 with BPSS clearance.

The listing date is unverified — ask Hays for a certificate if this matters.

Assess Hays in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register