Most security failures inside a private residence are not break-ins. They are people who were handed a key, a gate code and a routine — and were never properly checked. Household staff see everything: when the family travels, which safe is used, who visits, what the alarm code is. In the UAE, where a typical villa household might include a driver, two housemaids, a nanny and a cook, that is a considerable amount of trust distributed across people most principals have met twice.
Vetting them properly is not paranoia. It is basic hygiene. It is also, in this jurisdiction, an area where enthusiasm can get you into legal trouble, because UAE law places real limits on what you may collect, how you may collect it, and what you may do with it. Here is how we approach it.
Start with the legal boundary, not the checklist
Two constraints matter before you gather a single document.
The first is the Federal Decree-Law on Personal Data Protection. Consent must be informed and specific. You cannot tell a candidate you are “confirming their references” and then run a broad financial and social-media investigation. Tell them exactly what you intend to check, get it in writing, and keep the scope to what the role genuinely requires. A driver who will transport children justifies a deeper check than a gardener who never enters the house.
The second is the criminal record question. In the UAE, a Police Clearance Certificate is issued to the individual, not to an employer. You cannot ring Dubai Police and ask about someone. What you can do is require the candidate to obtain their own certificate and present it. That distinction sounds pedantic; it is the difference between a lawful process and an unlawful one.
Add to this the cybercrime law, which makes unauthorised access to someone’s accounts, messages or devices a criminal matter. We have been asked, more than once, to “just have a look at his phone.” The answer is no — and if a screening provider offers to do it for you, that tells you what kind of provider they are. Our note on how to choose a security partner in the UAE covers the other warning signs.
The five checks that actually catch problems
1. Identity, verified against the source
Not a photocopy. Use the UAE Pass or ICP verification route to confirm the Emirates ID is genuine and current, and confirm the passport separately. Photocopied documents with subtly altered dates are the single most common form of falsification we see, and they are trivially easy to produce.
2. Visa status and sponsorship
Check who currently sponsors the person and whether that visa is valid. Employing someone whose visa is held by another sponsor exposes you — the household — to fines and, in repeat cases, worse. If the candidate is transferring from another household, confirm the previous employer has actually initiated cancellation. Verbal assurance is not evidence.
3. Employment history, verified by telephone
Reference letters are the least reliable document in the file, because they are written by people who want the person to leave. Ring the previous employer instead. Ask three questions: what were the exact dates, what was the role, and would you rehire. The pause before the answer to the third question tells you more than the letter ever will.
Where the previous employment was overseas — the Philippines, Indonesia, India, Kenya — factor in that agency paperwork is frequently reused across candidates. If two applicants from the same agency present near-identical reference letters, you have learned something about the agency.
4. Police Clearance Certificate, obtained by the candidate
Ask for a current UAE certificate, and where the person has lived abroad within the last five years, a certificate from that country too. Set a deadline. Candidates who are genuinely clean will produce these within a fortnight; those who are not tend to develop logistical difficulties.
5. A structured interview about money
This is the check that gets skipped and it is the one that predicts loss. Household theft is overwhelmingly driven by debt, and debt in this population is usually owed to a recruitment agent or a family member back home. Ask directly and without judgment: are you currently repaying anyone, and how much per month. Someone servicing a large agency debt is not dishonest, but they are under pressure, and pressure is the variable that turns opportunity into loss. Knowing about it lets you manage it — sometimes by helping.
Vetting is not a one-off event
The check you ran at hiring decays. Circumstances change, debts accumulate, relationships end. Three practices keep the file alive:
- Re-verify annually. A short conversation and a document refresh at visa renewal costs almost nothing.
- Compartmentalise access. Nobody needs the alarm code, the safe location and the travel calendar. Separate them by role and change codes when staff leave — the same layered logic behind a proper security risk assessment and the compartmentalisation we build into family office security.
- Have an exit process. Keys returned, codes rotated, access cards deactivated, gate list updated, and the domestic worker contract properly cancelled with MOHRE or the relevant authority. Most households do the first and forget the rest.
The uncomfortable part
A thorough vetting process will occasionally tell you something you do not want to hear about someone who has worked for the family for years. That is the point of doing it. The alternative — discovering it after a loss, when the person has already left the country — is considerably more expensive and considerably less dignified.
It is also worth saying plainly: the overwhelming majority of domestic staff in the UAE are honest people working hard a long way from home. Good vetting protects them too. A properly documented household, with clear access boundaries and a paper trail, means that when something does go missing, suspicion does not simply land on whoever happened to be in the room.
If you would like a vetting protocol built around your specific household — one that stands up legally and is proportionate to the actual risk — talk to us. We do this quietly and we do it properly.
This article is general guidance, not legal advice. Data-protection and labour rules change; confirm the current position with a UAE-licensed legal adviser before implementing a screening programme.