Have i shot myself in the foot?

I've recently been made redundant from my current position (at a business school) and have found the exact same position within a E-commerce company. The company did not mention any forms of CRB checks previous to me accepting the role but have just informed me now I'll need to fill out the form and return it with my contract on my start day.

It seems this is required for PCI reasons. I have a simple caution for misuse of a computer dated April 2015 that would not show up on a Basic check but would show up on a Standard and Enchanced check. I informed the company that I have this against my name and what the situation with this is. But now reading about PCI compliance I am concerned I have done the wrong thing as I *think* this only requires a Basic check which does not show spent cautions.

Have I just shot myself in the foot and told them something that I didn't need to? I suppose if nothing more, I could argue my honesty regarding it.