Am I right in thinking that to comply with safeguarding requirements an individual's ID documents should be checked in person? Is it acceptable for an agency, who had never met the individual, to "check" their ID from scans sent over the internet?