There is no requirement in the current laws for background review to be a prerequisite for hiring certain type of personnel. However, with the consent of the data subject, an employer may conduct such a review. However, institutions must exercise due discretion when it comes to such decisions, and ensure that proper measures be taken for the security of the data.