If a business fails to perform a DBS check for a role in regulated activity, the employer could face criminal prosecution, not just a civil suit.