DBS Check Consent Form (Singapore)

A DBS Check Consent Form in Singapore records the consent or release given and the scope of what the party agrees to.

Section 13 of the PDPA establishes the Consent Obligation, requiring organisations to obtain an individual's informed, voluntary consent before collecting personal data for a stated purpose. The Personal Data Protection Commission (PDPC) has confirmed in Advisory Guidelines on the PDPA for Selected Topics (Employment) that pre-employment background checks constitute a "collection" of personal data, and that employers must inform the applicant of the purpose of the check and obtain consent before initiating any screening. The PDPC's enforcement decisions — including Re Aviva Ltd [2018] SGPDPC 14 — have penalised organisations that collected personal data for background checks without adequate consent mechanisms in place.

The Employment Act 1968 (Cap. 91), administered by the Ministry of Manpower (MOM), does not mandate criminal background checks for general employment but does not prohibit them either. Sector-specific legislation, however, imposes mandatory screening requirements in regulated industries: the Securities and Futures Act 2001 (Cap. 289) requires the Monetary Authority of Singapore (MAS) to assess the fitness and propriety of representatives of financial institutions; the Education Act (Cap. 87) requires background checks for teachers employed by schools under the Ministry of Education (MOE); and the Private Security Industry Act 2007 (Cap. 250A) requires security personnel to undergo police screening through the Singapore Police Force (SPF).

A DBS Check Consent Form typically specifies the scope of the check (criminal history, credit records via the Credit Bureau Singapore, educational verification, professional licence verification), the screening agency appointed to conduct the check, the data retention period, and the applicant's rights under the PDPA (including the right to withdraw consent and the right to access and correct personal data under Sections 21 and 22 of the PDPA). The form must be drafted clearly and in plain language to satisfy the PDPC's requirement that consent be "informed" — vague or overly broad consent forms risk being treated as ineffective consent under PDPC enforcement proceedings.

Singapore's Tripartite Alliance for Fair and Progressive Employment Practices (TAFEP), established jointly by MOM, the Singapore National Employers Federation (SNEF), and the National Trades Union Congress (NTUC), has published the Tripartite Guidelines on Fair Employment Practices, which recommend that employers conduct background checks only where relevant to the job role and refrain from discriminatory screening based on age, race, gender, religion, or marital status. The Anti-Discrimination Unit within TAFEP investigates complaints of discriminatory hiring practices, including inappropriate or disproportionate background screening requests that do not bear a reasonable connection to the job role being filled.

A DBS Check Consent Form is needed whenever an employer or screening agency intends to collect personal data about an individual for the purpose of verifying background information prior to or during employment in Singapore.

When hiring for positions involving access to sensitive financial systems, customer funds, or investment portfolios, employers in the financial sector must conduct fit-and-proper assessments as required by the Monetary Authority of Singapore (MAS) under the Securities and Futures Act 2001 (Cap. 289) and MAS Guidelines on Fit and Proper Criteria. A signed consent form authorises the screening agency to access the applicant's criminal record history and credit standing through the Credit Bureau Singapore (CBS). Financial institutions regulated by MAS face supervisory action if they fail to conduct adequate due diligence on prospective representatives.

When recruiting teachers, childcare workers, or education professionals, the Ministry of Education (MOE) and the Early Childhood Development Agency (ECDA) require criminal background screening to protect vulnerable populations. A consent form documents the applicant's agreement to the check and the specific categories of records to be accessed, including any overseas criminal records for applicants who have resided abroad.

When engaging security officers, private investigators, or armoured car personnel, the Private Security Industry Act 2007 (Cap. 250A) mandates that applicants undergo police screening coordinated through the Police Licensing and Regulatory Department (PLRD) of the Singapore Police Force. The consent form is a prerequisite to the licensing application submitted to the SPF, and applicants who refuse to consent cannot obtain a security licence.

When an existing employee is promoted to a role with materially different risk exposure — for example, moving from an operational role to a senior management position with signatory authority over corporate accounts — a fresh background check and corresponding consent form may be warranted. The PDPC has indicated that consent obtained at the point of initial hiring does not automatically extend to new or different purposes arising during employment, and fresh consent must be sought for each new screening purpose.

When an organisation conducts periodic re-screening of employees in regulated roles, consent must be refreshed at each cycle. MAS-regulated institutions, for example, are expected to maintain ongoing fitness and propriety assessments, and each re-screening round requires a current, signed consent form from the employee confirming awareness of the scope and purpose of the re-screening.

A Singapore DBS Check Consent Form should contain the following essential elements to satisfy the PDPA's Consent Obligation and applicable sector-specific requirements.

Applicant / Subject Details: The full legal name, NRIC or FIN number, date of birth, nationality, and contact details of the individual undergoing the background check. The NRIC number is classified as a sensitive personal identifier under the PDPC's Advisory Guidelines on the NRIC and Other National Identification Numbers (2018), and organisations must demonstrate a clear legal obligation or necessity for collecting it — general business convenience is not a sufficient justification.

Organisation Details: The full legal name and Unique Entity Number (UEN) of the employer or organisation requesting the background check, along with the name and contact details of the Human Resources representative or Data Protection Officer (DPO) responsible for the screening process. The organisation's registration with ACRA should be verifiable through the BizFile+ portal.

Screening Agency: The name, address, and business registration details of the third-party screening agency appointed to conduct the check, if applicable. The PDPA requires organisations to verify that data intermediaries (including screening agencies) provide a comparable standard of data protection under Section 4(3) of the PDPA. The organisation should conduct due diligence on the agency's data protection policies before engagement.

Scope of Background Check: A clear, itemised description of the categories of information to be checked — criminal record history (through the Singapore Police Force or INTERPOL where applicable), credit history (obtained from the Credit Bureau Singapore), educational qualifications (verified with the issuing institution or a recognised verification service), prior employment history (confirmed with previous employers), professional licence or certification status (verified with the relevant regulatory body such as MAS, the Council for Estate Agencies, or the Board of Architects), and any other category relevant to the position. The scope must be limited to what is reasonably necessary for the role, consistent with TAFEP's Tripartite Guidelines on Fair Employment Practices.

Purpose Statement: A plain-language statement of why the background check is being conducted — for example, "to assess the applicant's suitability for a position involving access to client funds and personal data" — consistent with the Purpose Limitation Obligation under Section 18 of the PDPA. The statement should be specific enough to inform the applicant of the intended use of the collected data.

Consent Declaration: A clear, affirmative statement by the applicant consenting to the collection, use, and disclosure of personal data for the stated purpose. The PDPC requires that consent be voluntary, informed, and specific; blanket or pre-ticked consent boxes do not satisfy the Consent Obligation under Section 13 of the PDPA. The applicant must actively indicate agreement — passive or implied consent mechanisms are insufficient.

Data Handling and Retention: A statement describing how the collected data will be stored (encrypted electronic storage, locked physical cabinets), who will have access (limited to authorised HR personnel and the DPO), the retention period (aligned with the Retention Limitation Obligation under Section 25 of the PDPA), and the disposal method to be applied at the end of the retention period — such as cross-cut shredding for physical documents and cryptographic erasure for electronic records.

Rights of the Data Subject: A statement informing the applicant of the right to access personal data held by the organisation (Section 21 of the PDPA), the right to request correction of inaccurate data (Section 22), and the right to withdraw consent at any time (Section 16). Withdrawal of consent may affect the applicant's candidacy, and the form should state this consequence clearly and in plain language.

Signature and Date: The applicant's handwritten or electronic signature (valid under the Electronic Transactions Act, Cap. 88), the date of signing, and a witness signature where required by the organisation's internal procedures. Users of forms-legal.com can customise the scope and purpose sections of this DBS Check Consent Form template to match the specific requirements of the role and the applicable regulatory framework.