Self-Certification Form Online: UK Sick Leave Rules For Employers

If you employ staff, you’ll eventually deal with sickness absence - from short, one-off bugs to recurring conditions that need a bit more management.

That’s where using a self certification form online can be a simple but powerful tool. It helps you record absences consistently, handle Statutory Sick Pay (SSP) decisions fairly, and keep a clear audit trail (without turning every sick day into a bureaucratic nightmare).

But getting the process right matters. If your online self-certification setup is unclear, inconsistently applied, or overly intrusive, it can create legal risk - especially around employment law, discrimination, and data protection.

Below, we’ll break down how self-certification works in the UK, what an online form should include, and how to use it in a way that supports good HR practice and keeps you compliant.

What Is A Self Certification Form (And Why Put It Online)?

A self-certification form is a document (paper or digital) where an employee records key details about their sickness absence - typically for short absences.

In the UK, it’s common for employers to ask employees to self-certify for the first 7 calendar days of sickness absence (including non-working days). After that, an employer will usually request a medical “fit note” (often called a sick note) from a GP or other eligible healthcare professional.

Using a self certification form online means you collect the same information, but through a digital workflow such as:

• a secure HR system or portal
• a fillable PDF with e-signature
• a controlled online form (with access restrictions)
• an internal HR inbox process with a standard template

Why Online Self-Certification Helps Small Businesses

For small teams, “we’ll just deal with it informally” can work - until it doesn’t.

An online self-certification process can help you:

• standardise absence reporting (so managers don’t all do different things)
• support SSP administration with consistent records
• reduce disputes about dates, notification, and what was said
• spot patterns (for example, frequent Mondays or post-holiday absences)
• demonstrate fairness if you later need to manage performance/capability

It also makes it easier to align your absence process with your wider documentation - like your Employment Contract and any absence policy in your handbook.

When Can You Rely On Self-Certification For Sick Leave In The UK?

As a general rule, self-certification is used for short-term sickness - and it’s especially relevant to the first week of absence.

The “7 Day” Point (And What It Really Means)

The key practical point is this: the first 7 days are calendar days, not working days.

So if someone is off sick from Friday to the following Thursday, that’s 7 calendar days. In many cases, you can ask them to complete a self-certification form for that period.

If the sickness continues for more than 7 calendar days, it’s reasonable to ask for a fit note covering the period after day 7.

Does Self-Certification Automatically Mean SSP Is Payable?

Not automatically.

Self-certification is evidence of absence and the employee’s declaration of incapacity for work - but SSP has eligibility rules (for example, earnings thresholds and qualifying days). You still need to assess SSP eligibility based on your payroll setup and the employee’s circumstances.

That said, collecting self-certification properly makes SSP decisions easier to justify if questions arise later.

Short Absences Can Still Become HR Issues

Even where self-certification is legitimate, repeated short absences can become a capability or attendance concern (or a potential wellbeing issue that needs support).

For example, “three days off sick” might be completely normal - but if it happens frequently or affects operations, you’ll want to handle it consistently and fairly. This is where having a clear process helps, including guidance like sick leave rights and how to manage them in practice.

How To Set Up A Self Certification Form Online (Without Creating Legal Risk)

A good online self-certification process is simple for employees to use, consistent for managers to administer, and defensible if your business later needs to rely on the records.

Here’s a practical setup you can adapt for your workplace.

Step 1: Decide What Your Online Form Needs To Capture

Your online self-certification form should usually collect:

• employee name and role/department
• dates of sickness absence (start date and end date / expected return)
• reason for absence (keep this high-level where possible)
• whether medical advice was sought (yes/no, optional detail)
• confirmation they were unfit for work for that period
• date the form is completed
• employee declaration that the information is true to the best of their knowledge

Be careful about how you ask for the “reason”. In many workplaces, it’s enough to capture something general like “cold/flu”, “stomach bug”, “migraine”, or “medical appointment/follow-up”. If you push for detailed medical data, you can create privacy and discrimination risks (more on that below).

Step 2: Align Your Notification Rules With Your Policies

Most small businesses have some expectation around when and how staff should notify sickness (for example, calling a manager before shift start, or emailing HR).

Make sure your online form supports (not replaces) that “call-in” step. A common workflow is:

1. Employee notifies their manager as early as possible.
2. Employee completes the online self-certification form when they return to work (or on day 7 if still absent).
3. Manager/HR reviews, logs it, and follows up if needed.

Your policies should be in writing. For many businesses, that lives in a Staff handbook, so expectations are clear and consistently applied.

Step 3: Use Return-To-Work Check-Ins (And Keep Them Consistent)

A return-to-work chat doesn’t have to be formal or intimidating. Done well, it helps you:

• confirm the employee is well enough to return
• check if work contributed to the illness (for example, stress or workplace conditions)
• offer support (for example, temporary adjustments)
• identify any pattern of absence early

Keep the tone supportive, but do keep notes - particularly if you’re concerned about repeated absences, potential misconduct, or capability.

Step 4: Don’t Turn Self-Certification Into A “Mini Medical Exam”

It’s tempting to ask for detailed symptoms, diagnosis, medications, or underlying conditions - especially when you’re short-staffed and absences hit hard.

But the more medical detail you collect, the more you move into sensitive personal data territory (special category data under UK GDPR), and the more carefully you must justify, store, and restrict access to it.

As a general guide, employees don’t usually need to provide detailed medical information for short, routine absences beyond what your policies reasonably require. If you need deeper information (for example, long-term absence management, workplace adjustments, or occupational health referrals), it’s better to take advice and handle it through a structured process. The issue of medical information at work can be surprisingly sensitive.

Data Protection And Record-Keeping: What UK Employers Need To Think About

An online self-certification process means you’re collecting and storing personal data digitally - sometimes including health-related information.

So, you’ll want to think about UK GDPR and the Data Protection Act 2018 in a practical, proportionate way.

Keep Access Limited (And Avoid The Office Gossip Loop)

Sickness reasons can easily become workplace gossip if you’re not careful.

As a general rule:

• limit access to HR and relevant decision-makers
• avoid sharing reasons for absence with wider teams unless genuinely necessary
• store completed forms securely (not in an open shared drive)

If you’re building out your compliance, having the right documents and processes around handling personal data matters. Many businesses formalise this with a Data protection pack so staff understand what’s collected, why, and how it’s protected.

Have A Clear Retention Period

You shouldn’t keep absence and health records forever “just in case”.

Instead, set (and document) a retention period based on what you need the records for - for example, payroll/SSP record-keeping, absence management, and the time limits for bringing most employment tribunal claims. What’s appropriate can depend on your business and the type of information collected - so it’s worth getting tailored advice.

Be Careful With “Monitoring” As A Response To Sickness Suspicion

If you suspect abuse of sick leave, your first step is usually a fair HR process - not surveillance.

While workplaces can have monitoring in some situations, it’s a complex area with privacy obligations. If you’re thinking about monitoring employees (for example, checking work devices or systems during sickness), get advice before acting. The rules around monitoring at work can create risk if you overstep, especially where health issues are involved.

Common Mistakes With Online Self-Certification (And How To Avoid Them)

Most problems aren’t caused by the online form itself - they come from inconsistent or heavy-handed use.

Here are some common traps we see in practice.

1. Applying The Rules Differently For Different People

If one employee gets questioned aggressively for every sick day while another is waved through, you risk:

• grievances
• discrimination allegations (especially where disability may be involved)
• loss of trust and morale issues

Consistency is key. Your form, policy, and manager training should all support the same standard approach.

2. Treating Self-Certification As Proof Of Misconduct

A self-certification form is a declaration - and in most cases, you should treat it in good faith.

If you have evidence that suggests dishonesty (for example, the employee was working elsewhere while “off sick”), you may need to investigate. But that’s different from assuming that self-certification equals lying.

Where the absence lasts longer and a fit note is provided, employers sometimes wonder whether they can refuse to accept it. It’s not always straightforward, and mishandling it can backfire. If you’re in that situation, the guide on doctor’s sick notes is a useful starting point.

3. Using An Online Form That Collects Too Much Sensitive Data

If your online self-certification asks for diagnosis, detailed symptoms, or long-term health conditions, you’re likely collecting “special category data”. That increases your compliance burden (and the consequences if data is mishandled).

Often, a better approach is:

• keep self-certification high-level for short absences
• escalate to a separate process if the absence is long-term, frequent, or linked to a disability
• only collect what you genuinely need

4. Not Connecting Absence Records To Your Wider HR Process

Self-certification should not exist in isolation.

To stay compliant (and avoid messy disputes), align it with:

• your absence policy and notification procedure
• SSP payroll processes
• return-to-work meetings
• capability/performance processes where relevant

If you’re unsure what a “good” approach looks like in practice, it can help to benchmark against structured advice on managing sick leave in the UK.

Key Takeaways

• A self certification form online can help you manage short-term sickness absences consistently, support SSP administration, and keep reliable records.
• Self-certification is commonly used for the first 7 calendar days of sickness; after that, it’s reasonable to request a fit note.
• Your online form should collect only what you need - too much medical detail can trigger extra UK GDPR obligations and increase privacy risk.
• Make sure your self-certification process aligns with your Employment Contract, absence policy, return-to-work process, and any capability procedures.
• Consistency matters: applying different standards to different employees can lead to grievances and potential discrimination risk.
• If you’re unsure how to handle recurring absences, suspected misuse, or long-term sickness, it’s worth getting tailored legal advice before taking action.

If you’d like help putting a compliant absence process in place - including drafting policies, reviewing your contracts, or pressure-testing your approach - you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.