Pre-Employment Screening Checklist for Sri Lankan Employers

A pre-employment screening checklist covers five stages: collect identity and qualification documents, obtain the candidate's written consent, verify identity, employment, education, and references before the offer, add criminal and sanctions checks for sensitive roles, and store all records securely under Sri Lanka's Personal Data Protection Act. A complete multi-check case can be verified within 7 working days.

The stakes justify the effort. An estimated 40–50% of resumes contain some inaccuracy or exaggeration, and a bad hire can cost up to 30% of the employee's first-year potential earnings. A written checklist keeps your screening consistent across every hire, which matters both for fairness and for compliance. This guide walks through each stage, then recaps everything in a single list you can print and pin next to your hiring workflow.

Step 1: Documents to Collect From Every Candidate

Start every screening file the same way, regardless of the role. Collecting a complete document set up front prevents the most common cause of delay: chasing candidates for missing paperwork after checks have already started.

• National Identity Card or passport copy — the anchor document for identity verification.
• Proof of current address — a recent utility bill, bank statement, or Grama Niladhari certificate.
• Educational certificates and transcripts — degrees, diplomas, and professional certifications the candidate has claimed.
• Full employment history — employer names, job titles, dates, and HR contact details for at least the last two or three employers.
• Professional reference details — names, designations, and contact information for referees who supervised the candidate's work.
• Signed consent form — covered in detail in the next section.

If you work with a background verification provider, look for one that offers a secure candidate document portal. Candidates upload their documents directly, which keeps sensitive files out of email inboxes and gives you a clean audit trail of what was collected and when.

Step 2: Get Consent Right Before Any Check Begins

Background verification is lawful in Sri Lanka, but candidate consent is mandatory before any check begins. The Personal Data Protection Act (No. 9 of 2022) is the primary law governing how you collect and handle candidate data, and there is no single dedicated background-check statute — so your consent process carries the compliance load. Make sure your consent covers the following:

• It is in writing, signed and dated by the candidate.
• It names each check you intend to run — employment, education, criminal record, identity and address, references, sanctions screening, or drug testing.
• It explains the purpose: assessing suitability for the specific role.
• It states who will process the data, including any third-party screening partner.
• It is obtained before any verification work starts, never after.
• A copy is retained in the candidate's screening file.

For a deeper look at lawful purpose, candidate rights, and data-security duties, see our Personal Data Protection Act guide for employers.

Step 3: Run Checks by Hiring Stage

Not everything needs to happen at once. Sequencing checks around the offer keeps your pipeline moving while making sure nothing critical is skipped. Individual checks run in parallel — identity and address typically take 2–4 working days, employment 3–5, education 4–7, and criminal checks 5–7 — so a full case still completes within 7 working days when they start together.

Before the offer

Complete the low-cost, high-signal steps: review the resume against the documents collected, confirm identity and current address, and speak to professional references. Reference conversations are often where inflated job titles and vague exit reasons surface first — structured reference checks with consistent questions make those conversations comparable across candidates.

At the offer stage

Issue the offer letter conditional on satisfactory verification, then run the substantive checks: employment history with previous employers, academic credentials through education verification, and a criminal record and legal check where the role warrants it. Making the offer conditional protects you legally if a serious discrepancy appears, without forcing strong candidates to wait weeks for an offer.

During the first week

Close out anything still pending: global sanction and watchlist screening for finance or export-facing roles, drug testing through certified laboratories where your policy requires it, and a final file review confirming every planned check returned a result. Do not let a new hire pass probation with an incomplete screening file.

Which Checks for Which Role Level

Screening depth should match role risk. A junior retail assistant and a finance director do not need the same level of screening. The table below maps each check to a sensible default for entry-level, mid-level, and executive hires.

If your hiring volume is steady, standardize these combinations per role level so recruiters never have to decide check-by-check. A good provider of employee screening services will agree these standard combinations with you up front and price them per candidate, so every hire at a given level is screened the same way.

Step 4: Build In a Red-Flag Review Step

A checklist is only as good as what happens when a check comes back with a discrepancy. Decide in advance who reviews flagged results, and separate the finding from the decision: a two-month gap in employment dates is not the same as a fabricated degree. Give candidates a chance to explain discrepancies before withdrawing an offer — many turn out to be administrative errors on an old employer's side. Quality control on the verification side matters too; dual-analyst review is how leading providers sustain 98%+ report accuracy. For a practical framework on grading discrepancies and responding fairly, read our guide to background check red flags and what employers should do next.

Step 5: Record-Keeping and PDPA Hygiene

Screening generates exactly the kind of personal data the PDPA is designed to protect, so close every case with the same discipline you opened it:

• Store screening files in a restricted-access system, not shared drives or inboxes.
• Keep the signed consent form attached to each candidate's file.
• Collect only what the declared purpose requires — no fishing expeditions.
• Set a defined retention period and delete candidate data when it lapses, especially for unsuccessful applicants.
• Ensure any screening partner handles data under equivalent safeguards.
• Be ready to respond to candidate requests about the data you hold on them.

The One-Page Screening Checklist

Here is the whole process as a single ordered list. Print it, adapt the role-level table to your organization, and attach it to every requisition.

1. Collect NIC/passport copy, proof of address, certificates, employment history, and referee details.
2. Obtain signed, dated, check-specific written consent before anything else starts.
3. Choose the checks that match the role level (see table above).
4. Before the offer: verify identity and address; complete reference checks.
5. Issue the offer letter conditional on satisfactory verification.
6. At offer stage: run employment, education, and (where warranted) criminal checks in parallel.
7. First week: complete sanctions screening, statutory checks, and drug testing where applicable.
8. Route any discrepancy through your red-flag review step and hear the candidate out.
9. Confirm every planned check returned a result before probation ends.
10. File the report and consent form in a restricted-access system with a set retention period.

A checklist keeps you consistent; a verification partner keeps you fast. Ontriq runs all of these checks — identity, employment, education, criminal, references, sanctions, and drug testing — as complete background checks in Sri Lanka, delivered within 7 working days with real-time case tracking. If you want help turning this checklist into a screening program for your organization, talk to our team — we serve employers island-wide from our Colombo district office.