A Step-by-Step Process for HR Teams

Many HR teams run background checks, but few have a written process for it. Without one, checks become inconsistent: one manager screens, another does not, and nobody is sure what to do when a report flags something. This guide gives you a simple, repeatable employee background verification process you can adopt today.

Step 1: Write a short screening policy

Your policy does not need to be long. One page is enough. It should cover:

• Which roles are screened and which checks apply to each

• When in the hiring process checks are run

• Who can request checks and who can view reports

• How long reports are kept

• How adverse findings are handled

A policy keeps your HR background verification process consistent and defensible.

Step 2: Map checks to role risk

Group your roles into risk levels. For example:

• Standard roles: identity and education verification

• Trust roles (cash, stock, customer data): add criminal prosecution, fraud/scam records and adverse news

• Senior and finance roles: add civil litigation, regulatory watchlists and Industrial Court records

• Driving roles: add traffic offences

Step 3: Inform the candidate and get consent

Tell candidates that background verification is part of your hiring process, explain what you will check, and collect their written consent. This is both good practice and part of your obligations under the Personal Data Protection Act 2010.

Step 4: Submit the request

With a platform like CheckDulu, you submit the candidate's full name and IC number, and consent is collected up front. There is no paperwork to courier and no need to chase multiple agencies.

Step 5: Review the report

When the report arrives, read it against the role. Ask:

• Does the identity match?

• Are the qualifications confirmed?

• Are there any records, and are they relevant to this job?

• How serious and how recent are they?

Step 6: Give the candidate a chance to respond

Records can be outdated, incomplete or belong to someone with a similar name. Before you make a negative decision, share the concern with the candidate and listen to their side. This is fair, and it protects you from acting on a mistake.

Step 7: Decide and document

Record your decision and the reason for it. If you reject a candidate, keep the reasoning tied to the role's requirements. Store the report securely and delete it according to your retention policy.

Step 8: Review your process yearly

Roles change and risks change. Once a year, check whether your screening levels still fit your business, and whether some current staff in sensitive roles should be rescreened or monitored. Learn more about post-hire monitoring.

Making verification easier for small HR teams

If you are a one-person HR team, the steps above might look like a lot. The good news is that most of the work is setting up the policy once. After that, each employee background search takes a few minutes to request.

Check dulu before you hire

CheckDulu helps Malaysian SMEs run fast, consent-based background checks across 10+ public sources, including identity, education, criminal prosecution, civil litigation, Industrial Court records, regulatory watchlists, adverse news and fraud/scam records. Checks start from RM78, your first report is free, and results arrive within 24 hours. Run your first background check with CheckDulu.