What is a screening process?
A screening process is the structured verification of the information candidates provide during the recruitment process. This may include identity verification, the verification of qualifications and educational credentials, previous employment and other job-related information using official documents and other reliable sources.
Unlike the recruitment process, which may include reviewing applications, conducting interviews, and carrying out aptitude assessments, the screening process is solely intended to verify the accuracy of the information provided by candidates.
The scope of checks depends on the requirements of the role. In Germany, all checks must comply with the principle of proportionality under the GDPR and be based on a documented legitimate interest.
Why is a screening process important?
Not all information provided during the recruitment process can be reliably assessed through a CV or an interview alone. Inaccurate or incomplete information about qualifications, employment history or other job-related details occurs across almost every industry. In regulated sectors in particular, incorrect or unverified information can expose organisations to legal, financial or operational risks.
A structured screening process offers several key benefits:
- Risk reduction: Verifying a candidate's identity, qualifications and employment history helps prevent poor hiring decisions and reduces risks for organisations, customers and business partners.
- Compliance with legal requirements: In regulated industries, certain pre-employment screening checks may be required by law. A structured screening process helps organisations meet these obligations.
- Risk identification: For roles involving access to vulnerable individuals, sensitive data or corporate assets, pre-employment screening helps identify potential risks at an early stage.
- Informed hiring decisions: A screening process provides verified information to support hiring decisions. The final hiring decision, however, always remains with the employer.
Pre-employment screening is not about distrusting candidates. Its purpose is to verify employment-related information in a transparent and proportionate manner. Clear communication about the purpose, scope and legal basis of the screening process helps build trust among all parties and contributes to a fair recruitment process.
The legal framework of pre-employment screening in Germany
In Germany, all screening processes are subject to the requirements of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Background checks may only be carried out where there is a documented legitimate interest and the scope of the screening is proportionate to the requirements of the role. At the same time, candidates' privacy must always be respected. Before the screening begins, candidates must be informed about the purpose and scope of the checks.
Certain categories of personal data must not be processed as part of the screening process. These include:
- Ethnic background
- Political opinions or religious beliefs
- Trade union membership
- Health information
- Genetic or biometric data
- Sexual orientation or gender identity
The employer remains legally responsible for the screening process. DISA supports organisations with a structured and legally compliant screening process, including documenting the legal basis for each check, advising on the proportionality of individual background checks and ensuring that personal data is processed and stored securely within the European Union at locations in Germany and Ireland. DISA's ISO 27001, ISO 9001 and ISAE 3000 Type 2 certifications provide independent assurance of these standards.
The five stages of the screening process
Regardless of the role, a structured screening process follows a clear and consistent workflow. It typically consists of the following five stages:
Stage 1 – Scope definition
DISA and the employer determine which checks are appropriate and proportionate for the role.
Stage 2 – Candidate invitation and transparency
Candidates receive an invitation through the secure DISA portal and are informed about the purpose, scope and legal basis of the screening. Where required for specific checks, any additional legal requirements are fulfilled.
Stage 3 – Data collection
Candidates securely submit the information and supporting documents required for the screening, such as proof of identity, educational certificates or evidence of previous employment, via the DISA portal.
Stage 4 – Verification
DISA verifies the information using primary sources and official records. For candidates with an international educational or employment background, checks may be required in multiple countries. The applicable legal requirements of the respective country apply in each case.
Stage 5 – Reporting
The results are summarised in a structured report. DISA reports facts only, without interpretation or recommendation.
The final hiring decision always remains with the employer. If findings are identified that may influence the hiring decision, candidates are informed and given the opportunity to respond.
All candidates follow the same screening process and are assessed according to consistent standards. This ensures a fair, transparent and legally compliant process. Applying different screening standards based on nationality, origin or other personal characteristics would be discriminatory and is not permitted.
Which checks are part of the screening process?
The checks included in a screening process depend on the requirements of the employer and the responsibilities of the role. The most common checks carried out by DISA include:
- Identity Verification: Verification of a candidate's identity using official identity documents. Identity verification often constitutes the basis of the screening process.
- Employment Verification: Verification of previous employers, job titles and periods of employment.
- Education and Qualification Verification: Verification of the authenticity and validity of academic qualifications, certificates and other credentials with the issuing institutions.
- Professional References: Obtaining professional references from previous employers or managers to verify information about a candidate's previous responsibilities and performance.
- Criminal Background Check: Support with obtaining a standard or extended Certificate of Good Conduct in Germany, as well as foreign equivalents, for candidates with an international background.
- Credit Check: For roles involving financial responsibility or access to corporate assets, a credit check may be appropriate. A documented legitimate interest is required.
- Sanctions List Check: Verification of whether a candidate appears on national or international sanctions lists. This is particularly relevant for organisations operating in regulated industries or with an international business presence.
- Media Research: A structured review of publicly available information to identify role-relevant information about a candidate's public profile and professional activities.
The scope of a screening process varies depending on the role. While some positions require only a limited number of background checks, roles in regulated industries or with higher security standards often require a more comprehensive screening process.
How long does a screening process take?
The duration of a screening process depends on the checks required and whether international checks are involved. A screening conducted within Germany that includes identity verification, employment verification, educational verification and a criminal background check is typically completed within five to ten business days. International checks or professional references may take longer, as they depend on the processing times of external organisations. Employers and candidates can track the status of the screening at any time through the DISA screening portal.
Screening process for international candidates
Candidates with an international background often require additional considerations during the screening process. A German Certificate of Good Conduct only covers periods of residence in Germany and therefore does not include information relating to previous stays abroad. Likewise, educational qualifications and employment history gained outside Germany cannot be verified using German records. Instead, verification is carried out through the relevant authorities, employers or educational institutions in the respective country.
A particular advantage of DISA's approach is that, in selected countries, we obtain the required documents directly and integrate them into the screening process. More generally, DISA conducts background checks in over 50 countries, taking into account the applicable national requirements in each jurisdiction.
Why run your screening process with DISA?
- Experience since 1998: For more than 25 years, DISA has delivered screening processes for organisations across Germany and Europe. This experience forms the foundation for standardised, proven and efficient screening processes.
- Fully GDPR compliant: Personal data is processed exclusively within the European Union and stored in Germany and Ireland. DISA's ISO 27001, ISO 9001 and ISAE 3000 Type 2 certifications demonstrate high standards of data protection, information security and quality.
- Screening tailored to your risk profile: The scope of each screening process is tailored to the requirements of the role, the industry and the applicable legal framework. From the outset, DISA ensures that all checks are appropriate and proportionate.
- Efficient support from DISA: DISA manages the operational delivery of the entire screening process, from inviting candidates to providing the final report. This includes international background checks, document verification and communication with candidates throughout the process.
Frequently asked questions about the screening process
A job interview is designed to assess a candidate's qualifications, experience and suitability for a role. A pre-employment screening complements this assessment by verifying educational qualifications, employment history and other role-relevant information using official documents and other reliable sources. This enables employers to confirm the accuracy of the information provided, reduce potential risks, and strengthen the security of their hiring processes.
Under the GDPR and the German Federal Data Protection Act (BDSG), the processing of certain categories of personal data is prohibited as part of the screening process. These include information relating to ethnic origin, political opinions, religious beliefs, trade union membership, health data, sexual orientation and gender identity. This prohibition also applies to publicly available information where it falls within these protected categories of personal data.
Whether consent is required depends on the type of check being carried out. Depending on the check, different legal bases may apply, including legitimate interest where appropriate. Regardless of the legal basis, candidates must always be informed in advance about the purpose, scope, and process of the screening.
A screening process that includes identity verification, employment verification, educational verification and a criminal background check is typically completed within five to ten business days. The overall timeframe depends on the scope of the checks, the availability of the required documents and whether international checks or professional references are involved. The digital DISA screening portal enables employers to track the status of a screening at any time.
If a background check identifies discrepancies, these are documented objectively and assessed in the context of the role. Such findings do not automatically disqualify a candidate. Where a finding may influence the hiring decision, the candidate must be informed and given the opportunity to respond. The final hiring decision always remains with the employer.
DISA also provides comprehensive pre-employment screening for candidates with an international background. Checks can be carried out in more than 50 countries. These include obtaining foreign equivalents of the German Certificate of Good Conduct, verifying internationally awarded educational qualifications and conducting professional reference checks with previous employers. In selected countries, DISA also obtains the required documents directly and integrates them into the screening process.