The safe answer is the default one.
Most club systems are built so that things keep working unless somebody stops them. When the subject is children, that is the wrong way round. GovSport is built so the unsafe outcome is the one that needs a human decision.
What "we're not sure" resolves to.
A compliance system spends most of its life in partial information: a check that hasn't come back, a date that didn't import cleanly, a lookup that timed out. What it does in those moments is the whole product.
| Situation | GovSport's answer |
|---|---|
| Check has expired | Not compliant, from the expiry date, without anyone acting |
| No expiry recorded on a fixed-term clearance | Not compliant — a missing date is never read as "no expiry" |
| Verification lookup failed or timed out | Not compliant; re-verification required |
| Clearance suspended, cancelled or refused | Must not work with children — its own state, not merged into "expired" |
| Application in progress, scheme allows working meanwhile | Shown as a note for the club to decide on. Never granted automatically. |
| Date of birth unknown for a trip participant | Treated as a minor, with the supervision and consent rules that follow |
| Consent for wellbeing monitoring can't be verified | The assessment is refused. An unverifiable consent is not a consent. |
Each state's rules, held separately.
Working-with-children schemes differ by state and territory in validity period, what a renewal involves, and whether someone may work while re-applying. Averaging them produces a system that is wrong everywhere.
- Validity terms and renewal windows are configured per jurisdiction, so reminders start early where a renewal means a full fresh check.
- The "may work while re-applying" concession some schemes allow is surfaced as a note for the club to decide on, and never applied automatically.
- Every change of a clearance's state is recorded as an event, so a person's compliance history is reconstructable rather than overwritten.
Least privilege, and a trail.
Access is gated, not assumed
Being signed in to the club doesn't grant access to child records. Access is granted per module and per role, and refused by default when entitlement is unclear.
Access is logged
Views and changes of sensitive records are written to an append-only audit log — who, when, and what changed.
Never in logs or errors
A child's personal information does not appear in system logs, error messages or notification content. Alerts carry record identifiers, not names.
Second factor where it counts
Multi-factor authentication can be required on the surfaces that reach children's data and the audit log.
Collected once, for a stated purpose
Personal information is collected with a notice at the point of collection saying what it is for and how long it is kept.
Deleted on request, properly
An erasure request scrubs the person across every table that holds them — dates of birth, clearance numbers, wellbeing records — not just the row with their name on it.
Trips, where it matters most.
An away trip is where safeguarding obligations concentrate: other people's children, unfamiliar venues, and a supervision plan that has to hold.
- A supervisor whose check expires part way through the trip is not accepted as a cleared supervisor for it.
- Minors are not cleared to travel until travel is confirmed and a guardian consent is recorded against them.
- Where a participant's date of birth is unknown, they are counted as a minor for supervision and consent purposes.
- The party list, ratios and outstanding consents are visible before departure, not reconstructed afterwards.
What this does not do.
GovSport does not replace your member protection obligations, your association's rules, or a mandatory report. It does not make a judgement about a person, and it does not decide who is safe.
What it does is make sure a lapse can't sit unnoticed, that access to children's records is deliberate and recorded, and that the paperwork exists when someone asks for it.
Sign-in access itself is not yet revoked automatically by an expired check. The person is marked non-compliant and clearance-gated activities refuse them, but withdrawing their access is still a decision the club makes. That is on the build list, and it is listed as unfinished rather than implied as done.