GDPR and DBS checks

If an organisation has, as standard for all employees, a condition of their employment that they have to have a basic DBS check (ie the one that employees obtain themselves through DBS for £25), can they continue to ask for this post-GDPR coming into force? I know there are restrictions around the standard and enhanced checks, but wasn't sure if employers can still insist that employees produce evidence of their own basic check.