[REVISION HISTORY]

Validato expands EU background screening for IT & law firms

Updated 9 times since CLSTR started tracking revisions of this situation.

What changed

2026-08-27 08:16 UTC → 2026-08-28 07:07 UTC · added ~~removed~~

In late July 2026, Validato confirmed that Swiss background checks remain lawful under the revised nDSG provided that purpose, consent, and retention rules are met. The company launched a GDPR-compliant screening platform for Germany, Austria, and Switzerland, featuring 18 configurable modules for pre-employment, in-employment, and third-party checks across more than 200 countries. By early August, German hospitals, nursing homes, and medical-technology firms began using the service to meet tighter GDPR, NIS2, and national data-protection requirements for critical-infrastructure personnel. On 4 August 2026, Validato announced a further rollout targeting German law firms and additional healthcare providers, extending the platform to cover GDPR, Bundesrechtsanwaltskammer rules, AML, and KYC obligations. Simultaneously, an EU-wide version was introduced for public-sector IT contractors, cloud providers, and law firms to address the EU NIS2 directive, national KRITIS rules, and the BSI C5 personnel-security standard. In late August, Validato emphasized its risk-based approach to screening, designed to comply with the GDPR and § 26 BDSG principle of necessity. Rather than applying uniform depth to all applicants, the methodology creates specific risk profiles based on factors such as data access, financial responsibility, and leadership roles. Managing Partner Reto Marti stated that “uniform deep screening is disproportionate,” noting that aligning diligence with actual risk ensures legal certainty and cost efficiency through a pay-per-use model. To maintain data sovereignty, the company hosts all information on its own infrastructure within the EU to prevent personal data transfers to third countries. ~~The process incorporates human evaluation and a four-eyes principle to ensure quality, specifically targeting medium-sized enterprises in the DACH region.~~ On 27 August 2026, the company announced that all security features, including AES-256 encryption and ISO-27001 certification, are provided as standard to all clients. To combat sophisticated credential fraud, Validato utilizes systematic verification by performing direct comparisons with issuing institutions and analyzing patterns such as inconsistent timeframes or non-existent degree titles.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.