Yes, provided the employer has a lawful basis under GDPR, the role has a legitimate need for the check, the candidate has given consent, and the check is relevant and proportionate to the role. FCA-regulated firms are legally required to conduct credit checks for certain roles.