Every adult working with under-18s in an Irish grassroots sports club must hold current Garda Vetting before their first session. This is not best practice; it is a legal obligation under the National Vetting Bureau (Children and Vulnerable Persons) Acts 2012 to 2016. The Acts make it a criminal offence to engage someone in “relevant work” with children without first obtaining their vetting disclosure. The patterns in this guide come from clubs that moved to CTM, a purpose-built club management app for grassroots sports, where the compliance side of running a club is treated as load-bearing rather than as a paperwork chore. The committee members who get this right protect their players, their volunteers, and the club itself.
What the National Vetting Bureau Acts actually require
The National Vetting Bureau (Children and Vulnerable Persons) Acts 2012 to 2016 make it a criminal offence to engage someone in “relevant work” with children without first obtaining their vetting disclosure. The Acts apply to every “relevant organisation,” and a grassroots sports club running activities for under-18s falls squarely inside that definition. The penalties for non-compliance are not theoretical: the Acts provide for fines of up to €10,000 and imprisonment of up to five years for the most serious breaches.
“Relevant work” is broader than most committee members assume. It is not limited to head coaches. It covers anyone whose role brings them into regular, unsupervised contact with children: assistant coaches, team managers, age-group coordinators, kit officers who travel with the team, and committee members who attend training or matches. If a volunteer’s role involves access to children that is more than incidental, they need to be vetted. The conservative interpretation, which most National Governing Bodies recommend, is that every adult with a recurring presence at training or match-day should hold current vetting, even if their formal title does not include the word “coach.”
The Acts also impose a duty on the club, as the relevant organisation, to keep records of each individual’s vetting disclosure. The disclosure date, the expiry, and the fact that the vetting was obtained before the person started their role: all of these must be retrievable on request. A club with thirty volunteers and no central record is not “broadly compliant”; it is non-compliant in a way that becomes visible the moment a county-board inspection happens.
How the vetting process works in 2026
Vetting goes through your sport’s National Governing Body, then to the National Vetting Bureau. For football clubs in the Republic, that is the FAI; for GAA clubs, it is your county board acting on behalf of the GAA; for rugby clubs, the IRFU; for cricket clubs, Cricket Ireland. The NGB acts as the authorised signatory and submits the application on the club’s behalf. Each NGB has its own portal and its own forms, but the underlying process is identical.
The standard form for adults resident in Ireland is NVB Form 1. Adults aged 16 or 17 use a parental-consent variant. Anyone over 18 who has lived outside Ireland for more than six consecutive months in the last ten years also needs to provide a police certificate from each country they lived in, supplied with NVB Form 3. These cases take longer; build the timeline into your pre-season planning.
Turnaround times in 2026 sit at six to eight weeks for most NGBs once a complete application is submitted. The period can stretch to ten or twelve weeks during the July-August peak when every club is registering for the new season. The lesson every secretary eventually learns the hard way is to start the vetting process for new coaches in April or May for an August-September season start, not in late July when there is no margin left.
Most Irish NGBs set vetting validity at five years from the disclosure date. Treat that date as the start of a calendar countdown. A coach vetted in May 2026 must be re-vetted before May 2031, and the renewal application should be submitted six months ahead of expiry to absorb any delays. A club that lets coaches’ vetting lapse, even by a single session, has put itself outside the law.
Garda Vetting is one of three: First Aid, Safeguarding, and Vetting
Garda Vetting alone does not satisfy your safeguarding obligations. The Acts deal with the criminal-record check; the duty to actually keep children safe is broader and is governed by Sport Ireland’s safeguarding framework and by individual NGB policies. There are three certifications every coach needs, and they expire on different cycles, which is exactly why a tracking system matters more than goodwill.
The first is PHECC-recognised First Aid. Most NGBs require at least one adult holding current First Aid certification to be present at every training session and match. The standard course is two days; certificates typically last two years. Without a First Aider on site, technically the session should not run.
The second is Sport Ireland Safeguarding training. The programme is three tiers. Safeguarding 1 (Child Welfare and Protection Basic Awareness) is the entry-level requirement and applies to every adult in a coaching or volunteer role. Safeguarding 2 is for the Designated Liaison Person (DLP) the club must appoint. Safeguarding 3 is for the Children’s Officer. Tier 1 must be completed within the first six months of taking up a role; tiers 2 and 3 are role-specific. The certifications do not expire in the same way Vetting does, but most NGBs require refresher training every three to five years.
The third is Garda Vetting itself, covered above. The thing to internalise is that all three need to be tracked separately, with separate expiry dates, separate renewal processes, and separate consequences if they lapse. A spreadsheet is the minimum viable tool; most clubs outgrow the spreadsheet by their second season. For a deeper look at the coach’s side of the responsibility, see what coaches need to know about session-level admin.
Records you need to keep
The club must retain a record of each adult’s vetting disclosure date, expiry, and certifications, with appropriate GDPR controls. The records do not need to include the vetting outcome itself (the disclosure document stays with the individual), but they do need to confirm that the club obtained and reviewed the disclosure before the person started.
The minimum record set per adult: full name, role, date of vetting application, date of vetting disclosure, vetting expiry date, Safeguarding 1 completion date, First Aid expiry date, and (where applicable) Safeguarding 2 or 3 completion. Most clubs go wrong in three ways. They keep paper-only records that disappear at committee turnover. They track expiry by memory rather than by automated reminder, so renewals slip. They lose the lot when a treasurer or secretary steps down without a hand-over.
GDPR provides the lawful basis for processing this data: legal obligation under the Vetting Acts. That means consent is not required (and a consent-based approach would actually undermine the legal basis), but the standard data-protection principles still apply: minimum necessary data, appropriate security, retention only for as long as the lawful basis applies, and the right of the individual to know what the club holds. Retain vetting records for the duration of the person’s role plus the limitation period for any safeguarding claim, which is conservatively seven years post-departure.
The most reliable way to keep this under control is to send compliance reminders to coaches automatically, six months before each expiry date. The club secretary then handles only the exceptions: the coaches who have not booked their renewal course, the new joiners whose vetting application is still in progress.
Tools that take the admin pain out of compliance tracking
Compliance tracking does not have to be a spreadsheet someone updates twice a year. The clubs that do this well treat compliance as a structured part of their season-planning workflow, with the same tooling that handles training schedules and parent communications. The tool tracks each adult’s certifications, surfaces upcoming expiries automatically, sends the reminder to the coach and the secretary at the same time, and produces a single export when the county board asks for evidence.
CTM bundles scheduling, attendance, payments, and messaging in one app built specifically for volunteer-run clubs, with compliance tracking sitting alongside the rest of the club’s admin rather than living in a separate spreadsheet. When a new coach is added to a team, the system prompts for vetting status before they can be assigned to sessions. When a certification approaches expiry, both the coach and the safeguarding officer get notified. The county-board export is one click. For the broader picture of how compliance fits into running a club, the broader guide to running a grassroots club walks through the surrounding committee structure and seasonal cadence.
Closing
Garda Vetting, Sport Ireland Safeguarding, and PHECC First Aid are the three legs of grassroots safeguarding compliance in Ireland in 2026. Each has its own form, its own cycle, and its own consequence if it lapses. Each is non-negotiable, both legally and morally: the law is unambiguous, and the children who train with your club deserve adults around them who have been checked, trained, and equipped to keep them safe.
The clubs that get this right do not treat compliance as a chore the secretary fits in around everything else. They build it into the season-planning workflow, give it a tool that surfaces problems before they become breaches, and make the renewal date visible to the coach as well as to the committee. The volunteer hours saved are real; the legal exposure removed is more real. And the right communication tools that reduce volunteer burnout are part of the same picture, because a secretary who is on top of compliance is a secretary who is not also drowning in WhatsApp messages.
Get the three certifications tracked, get the records out of paper and into something searchable, and the rest of the club’s safeguarding posture takes care of itself.