For HR, talent acquisition and compliance leads in Singapore and Malaysia

The rules a hiring assessment has to survive in Singapore and Malaysia.

Pre-employment assessment is lawful in Singapore and Malaysia. What the law regulates is how you use it: selection criteria have to be job-related and applied consistently to everyone considered for the role, candidate data has to be collected with notice and consent and kept no longer than the purpose needs, and once the Workplace Fairness Act commences you have to be able to show a hiring decision was made on merit. This page sets out each instrument that applies, what it means for the assessment specifically rather than for HR in general, and — just as important — what AssessAll does not do about it.

Start with 250 free credits +91 99000 11601

At a glance

Fair Hiring & Assessment Compliance, Singapore & Malaysia: the facts, with their units

Workplace Fairness Act (Singapore)	Passed by Parliament in January 2025. Expected to take effect at the end of 2027 — later than the original 2026–2027 estimate. It does not bind employers today.
Protected characteristics under the Act	Five groups: age; nationality; sex, marital status, pregnancy status and caregiving responsibilities; race, religion and language; disability and mental health conditions.
Who is covered at the start	Employers with fewer than 25 employees are exempted initially, with a review five years after commencement.
Recruitment records	TAFEP advises keeping recruitment records for at least one year to evidence that decisions were merit-based.
Fair Consideration Framework	An Employment Pass role must be advertised on MyCareersFuture for at least 14 consecutive days. Exempt if the fixed monthly salary is S$22,500 or above, or the firm has fewer than 10 employees.
Malaysia PDPA penalties	Maximum fine raised from RM300,000 to RM1,000,000, and maximum imprisonment from two years to three, for a breach of the data-protection principles.
Malaysia, mandatory since June 2025	Appointing a data protection officer and notifying the Commissioner; breach notification to the Commissioner as soon as practicable. Biometric data is now sensitive personal data.
What AssessAll certifies	Nothing. AssessAll holds no compliance accreditation, certification or approval in either country, and this page is not legal advice.

The Act everyone is preparing for is not the Act that binds you today

The Workplace Fairness Act has been passed but is expected to commence only at the end of 2027. What governs a Singapore hiring assessment right now is the Tripartite Guidelines on Fair Employment Practices, the Fair Consideration Framework and the PDPA — all in force, all enforceable, and all quieter in the trade press. Preparing for 2027 while getting 2026 wrong is the common failure.

“Job-related” is a documentation problem, not an opinion

Both regimes turn on whether a selection criterion is genuinely required by the job. That is not settled by believing it; it is settled by having written down the requirement before you chose the instrument, and by being able to produce that record a year later. Most screens are defensible in substance and undocumented in practice.

Consistency breaks quietly at volume

A screen applied to some candidates and not others, or with a bar that moved partway through a drive, is the version of unfairness that shows up in records. Consistency is cheap to build in at the start of a wave and effectively impossible to reconstruct afterwards.

Proctoring imagery is the most sensitive thing in the file

An identity photo and face-presence monitoring are the parts of an assessment closest to Malaysia's newly-sensitive biometric category and to the PDPA's minimisation expectations in both countries. Retention, access and purpose need an answer before the first attempt, not after a request.

What you get

Built for fair hiring & assessment compliance, singapore & malaysia

The same instrument to every candidate in a drive

An assessment set is composed once per role and delivered by one share link or QR code, so every candidate for that role sits the same items for the same duration. Consistency is a property of how the wave is built rather than something a recruiter has to maintain by hand.

Disclosure and consent before anything is captured

A proctored attempt cannot start until the candidate has been shown what will be recorded — identity photo, periodic webcam capture, tab and screen-capture events, and any additional channels the assessment enables — and has ticked consent. The gate is in the player, not in a policy document.

Proctoring evidence you can open, not a summary you have to trust

Every attempt carries a High, Medium or Low integrity band with the underlying evidence attached: the identity-baseline photo, what the monitoring flagged and when. A rating that cannot be inspected is another unverifiable claim; an inspectable one is a record.

Optional adverse-impact monitoring on aggregates

The platform can compute selection rates by group and flag a four-fifths ratio below 0.80. Demographic fields are optional, groups smaller than five are shown but excluded from flagging, and the view is aggregate-only. It is an internal check on your own data — it is not, and is not offered as, an independent bias audit.

A per-candidate report that doubles as the record

Scores by section, the integrity band and its evidence, the timestamp and the instrument, retained in the workspace that commissioned the assessment. That is the artefact TAFEP's one-year record guidance actually asks for.

Structured measurement mapped to a role, not a catalogue pick

Aptitude modules, situational judgement, written accuracy and typing, and AI-scored spoken English are assembled per role, so the screen can be made to match a written requirement rather than the requirement being bent to fit a fixed product.

Accessible delivery on any device

Candidates need no account and no card, sit on their own phone or laptop, and the player is resumable, so a dropped connection pauses an attempt instead of ending it. Uniform delivery should not quietly exclude the candidates with the weakest equipment.

How the decision is made

The sequence, in order

1
Write the job requirement down before you choose the instrument
One page per role: the tasks, the conditions they are performed in, and the level of each capability the job actually needs. This is the document that turns “we test English” into “the role handles written client escalations unsupervised, so we test written comprehension and accuracy at this level”. It takes an hour and it is the only artefact that makes every later answer easy.
2
Drop every construct you cannot tie back to that page
The screen that survives scrutiny is usually shorter than the one that was proposed. If a module measures something the requirement page does not name, either the page is incomplete or the module does not belong in the screen. TAFEP's own illustration is the fitness test for an administrative role — the principle generalises to any construct nobody asked for.
3
Give the same instrument, the same duration and the same bar to everyone considered for the role
Consistency is what a record can demonstrate and an intention cannot. Run one assessment set per role per drive, deliver it the same way to every candidate, and resist adding a module for a subset partway through. Accommodations for disability are a deliberate, documented exception to uniform delivery, not a breach of it.
4
Say what you collect, why, and for how long — before the first item
The candidate should see, before anything is captured, what is recorded, what monitors it and what happens to it afterwards. On AssessAll a proctored attempt cannot begin until the candidate has read that disclosure and ticked consent. Keep demographic questions optional, separate from the score, and out of the report the decision-maker reads.
5
Set the cut score before you look at who cleared it
Write down the bar, and the reason for it, while the pool is still anonymous to you. A bar chosen after seeing the names is a bar chosen for a reason you will not be able to state later, and it is the single most common way a defensible instrument produces an indefensible decision.
6
Check the pass rate by group in aggregate, and treat a gap as a question
A four-fifths ratio below 0.80 is a prompt to examine the instrument, not a verdict on it, and it is meaningless on tiny samples. The point of running it is that you find out from your own data rather than from a complaint. Do it on aggregates, never on a per-candidate view.
7
Re-cut the bar against who actually succeeded in the job
Six months after a drive, compare who cleared the screen with who is still performing. This is the step no vendor enjoys writing, because it is the one that can tell you the screen you bought was measuring the wrong thing — which is exactly why it is the step that makes the whole file defensible.
8
Keep the file for at least a year
TAFEP's guidance is a minimum of one year for recruitment records. The file that answers a query is not a policy document: it is the requirement page, the instrument version, the bar and when it was set, who sat what, and the scores.

Regulation & compliance

What actually applies, instrument by instrument

Every entry states where the instrument really stands, what it requires, and what it means for a hiring assessment specifically. Statuses were checked at primary sources on the date shown. Nothing here is legal advice, and none of it is a claim that AssessAll is certified against any of it.

Statuses verified at primary sources on 31 August 2026.

SiddharthanFounder, AssessAll — Bodhih Training Solutions

Founder of AssessAll and of Bodhih Training Solutions, a corporate training company in Bangalore. Works on assessment design, scoring and reporting across hiring, L&D and certification programmes.

Last reviewed 31 August 2026

Regulatory positions on this page were verified at primary sources on 31 August 2026 and are pending review by qualified counsel in each jurisdiction. Nothing here is legal advice.

Singapore

Three of the four instruments below are in force today. The fourth — the one that gets the coverage — is not yet commenced.

Workplace Fairness Act 2025

Passed January 2025 · expected to take effect end of 2027 · not yet in force

Prohibits adverse employment decisions made on the basis of five groups of protected characteristics — age; nationality; sex, marital status, pregnancy status and caregiving responsibilities; race, religion and language; disability and mental health conditions — across recruitment, appraisal, training, promotion and dismissal. Employers must run a firm-level grievance process: inquire into a grievance, review it, inform the employee of the outcome, keep records, keep it confidential, and not retaliate. Exceptions are permitted where a protected characteristic is a genuine requirement of the job — job performance (the government's own example is language fluency for an interpreter), health and safety, privacy, or legal and regulatory compliance — and religious organisations may make religion-based employment decisions. Firms with fewer than 25 employees are exempt at the start, reviewed five years later.

What it means for a hiring assessment

Language ability is the one to think about hardest, because it is both a protected characteristic and the thing a great many screens measure. The Act's own genuine-occupational-requirement exception is what makes an English test defensible — for a role actually performed in English at the level you test. It is much harder to defend the same test applied as a blanket filter across every role in a drive, or set at a bar nobody in the job has to clear. The practical instruction is unglamorous: write the requirement down before you choose the instrument, test the requirement rather than the person's background, give the same instrument and the same bar to everyone considered for that role, and keep the result.

Source: MOM fact sheet, Workplace Fairness Bill

Tripartite Guidelines on Fair Employment Practices (TAFEP)

In force · administrative, and MOM acts on breaches

Recruitment must be merit-based. Job advertisements must not carry criteria unrelated to the job — TAFEP's own examples include an age range such as “Age 25 to 30 years old”, and a language requirement stated without a job justification. On testing, TAFEP is explicit: when tests are used, administer them consistently to all candidates for the same role, and review them regularly so they stay relevant and unbiased. Its illustration of an unrelated assessment is requiring candidates for an administrative role to complete a physically demanding fitness test. TAFEP advises keeping recruitment records for at least one year.

What it means for a hiring assessment

This is the instrument that governs your screen today, and it is more specific about assessments than the Act is. Three things follow directly: same instrument to every candidate for the same role; a periodic review of what the instrument measures against what the job needs; and a retained record of who sat what and how they scored. A per-candidate report with a timestamp, a score and the instrument version is the record, and it is worth more than a policy document.

Source: TAFEP — fair recruitment practices

Fair Consideration Framework (MOM)

In force

Before an Employment Pass application, the role must be advertised on MyCareersFuture and left open for at least 14 consecutive days. Advertising is not required where the fixed monthly salary is S$22,500 or above, the firm has fewer than 10 employees, the role lasts no more than a month, or the position is filled by an internal transfer or an overseas intra-corporate transferee. The advertised salary range may not have a maximum more than twice its minimum.

What it means for a hiring assessment

The framework shapes the funnel your assessment sits in rather than the assessment itself, and the interaction worth noticing is timing: a 14-day open advertisement produces a pool that arrives across two weeks, not on one day. A screen delivered by a share link that stays open for the window, scores on submission and ranks continuously fits that shape; a scheduled batch test does not, and the pressure to close early is where fair-consideration records get thin.

Source: MOM — consider all candidates fairly

PDPA, and the PDPC Advisory Guidelines on the Use of Personal Data in AI Recommendation and Decision Systems

PDPA in force · advisory guidelines issued 1 March 2024

Personal data may be collected, used and disclosed with consent and notification, unless an exception applies. The 2024 advisory guidelines address AI systems that make or support decisions about people: organisations should use only the attributes and the volume of personal data actually needed, should pseudonymise or de-identify as a basic control, are encouraged to anonymise datasets, and are encouraged to publish their policy on such use rather than wait to be asked. The Business Improvement and Research exceptions can cover development of a system; the Legitimate Interests exception was not extended to development, testing or monitoring.

What it means for a hiring assessment

Two obligations bite at the moment of the attempt. First, notice and consent before anything is captured, stated in terms a candidate can act on — what is recorded, by what, for how long. Second, minimisation: collect the attributes the hiring decision needs and not the ones that are merely available. Demographic fields are the clearest case — they are useful for fairness monitoring in aggregate and dangerous in a per-candidate report, which is why they should be optional, separated from the score, and never shown to the person making the call.

Source: PDPC advisory guidelines (summary, Bird & Bird)

Malaysia

The 2024 amendments landed in phases through the first half of 2025, and the change that matters most to a proctored assessment is easy to miss.

Personal Data Protection Act 2010, as amended by Act A1727 (2024)

In force · phased January to June 2025

“Data user” became “data controller”. Breach notification is mandatory: notify the Commissioner as soon as practicable on discovering a breach, and notify affected individuals without unnecessary delay where significant harm is likely. Both controllers and processors must appoint at least one data protection officer and notify the Commissioner of the appointment. Individuals gained a data-portability right, subject to technical feasibility. The old cross-border transfer whitelist was replaced with a risk-based test — transfers to jurisdictions with substantially similar protection, or with adequate safeguards. Biometric data was added to the definition of sensitive personal data. The maximum fine for breaching the data-protection principles rose from RM300,000 to RM1,000,000 and maximum imprisonment from two years to three.

What it means for a hiring assessment

The biometric line is the one that reaches into a proctored sitting. An identity-baseline photo and face-presence monitoring are the closest thing an assessment holds to biometric data, and whether a given implementation falls inside that definition depends on how the images are processed — a stored photograph a human reviews is not self-evidently the same as a face template used for matching. That is a question for your advisers rather than for a vendor page, and the useful preparation is being able to answer it: what is captured, what it is compared against, where it is stored, who can open it, and when it is deleted. The transfer change matters too — if the platform stores attempts outside Malaysia, that is now a risk-based assessment you are expected to have made rather than a list you can point at.

Source: Mayer Brown — key amendments to Malaysia's PDPA

National Guidelines on AI Governance & Ethics (AIGE)

Voluntary · published by MOSTI in 2024 · not binding law

National guidance on responsible AI development and deployment, published by the Ministry of Science, Technology and Innovation. It is guidance, not statute, and creates no offence.

What it means for a hiring assessment

Treat it as a checklist a client or an auditor may hold you to rather than a rule you must meet. The parts that map onto hiring assessment are the ordinary ones — be able to explain how a score is produced, keep a human accountable for the decision, and be able to show the system was checked for disparate outcomes.

Source: MOSTI / Malaysia.gov.my — AIGE

AssessAll holds no compliance accreditation, certification or regulatory approval in Singapore or Malaysia, and does not certify that any deployment of its platform complies with the PDPA of either country, the Tripartite Guidelines, the Fair Consideration Framework or the Workplace Fairness Act. Compliance depends on how you configure and use assessments, which is your decision and your responsibility. This page summarises publicly available material as at 31 August 2026 for orientation only. It is not legal advice, and it is not a substitute for qualified counsel in the jurisdiction you hire in.

Compare the approaches

Four ways to make a hiring decision, and how each one holds up

Approach-level, not vendor-level. The question is what evidence each approach leaves behind when someone asks a year later why one candidate was chosen over another — which is the question both the Tripartite Guidelines today, and the Workplace Fairness Act from commencement, are ultimately about.

External facts verified at source on 31 August 2026.

Approach	What it measures	What it costs	When to choose it instead
Unstructured interview only	Whatever each interviewer chose to ask that day. Different candidates are asked different questions, so the results are not on a common scale and cannot be ranked against one another.	30–60 minutes of interviewer time per candidate, and more of it the larger the pool.	Choose it when the pool is small enough that every candidate genuinely gets the same panel, and the role is senior enough that judgement of fit is the decision. Pair it with a written scoring guide agreed before the first interview — that alone turns it into a record.
Degree, institution or employer-brand filter	Nothing about the candidate directly. It measures access to particular institutions, which correlates with capability unevenly and with background strongly.	Almost nothing to run, which is the reason it persists.	Choose it only where a qualification is a genuine legal or regulatory requirement of the role — a licensed profession, a statutory registration. In that case it is not a proxy at all, it is the requirement, and it should be stated as one.
An off-the-shelf personality or aptitude test used as a gate	A general trait or ability profile, consistently and on a common scale — but against a specification written for a generic role rather than for yours.	Typically a per-candidate or licence fee; enterprise vendors quote on request rather than publish.	Choose it when the publisher can give you norm data and validity evidence for a role genuinely like yours, and you are prepared to read it. Published norms across decades are a real asset that a newer platform cannot manufacture. Use it as one input among several rather than as a single gate.
A structured assessment mapped to a written job requirement, with records retained	The capabilities your requirement page names, scored on one scale, with the same instrument delivered to every candidate for the role and a per-candidate report retained as the record.	US$8–13 per candidate on AssessAll (1 credit = US$0.50), with no seat licence or annual minimum; 250 free credits to pilot.	It is the wrong approach when the bottleneck is sourcing rather than selection — measuring a pool you do not have does nothing — and when the requirement genuinely cannot be written down, which usually means the role is not yet defined. Fix the definition first; the assessment is downstream of it.

Costs for the approaches other than AssessAll are stated qualitatively on purpose: enterprise assessment vendors generally quote on request rather than publish a price, and inventing a figure for them would be exactly the kind of unverified claim this page exists to avoid. AssessAll's own prices are published and are what checkout charges.

Sources: TAFEP — fair recruitment practices · MOM fact sheet, Workplace Fairness Bill · MOM — consider all candidates fairly

Common use cases

Documenting that a hiring screen is job-related before a drive opens
Standardising selection across a multi-country ASEAN hiring hub
Preparing recruitment records ahead of the Workplace Fairness Act's commencement
Reviewing an inherited assessment stack for constructs nobody can justify
Answering a candidate query about what was recorded during a proctored sitting
Internal fairness monitoring of selection rates before anyone else asks

Pricing for singapore & malaysia compliance

There is no separate charge for any of this — the records, the consent gate, the proctoring evidence and the adverse-impact view are part of the platform, not a compliance module sold on top. Assessments are paid for per candidate in US dollars: 1 credit = US$0.50, a structured hiring screen runs US$8–13 per candidate, and new organisations get 250 free credits. No seat licences, no annual minimum, and no compliance tier.

See full pricing solutions@bodhih.com

Frequently asked questions

Is pre-employment testing legal in Singapore?+

Yes. There is no law in Singapore prohibiting pre-employment assessment, and the Tripartite Guidelines on Fair Employment Practices assume tests are used. What the guidelines require is that a test be relevant to the job, administered consistently to all candidates for the same role, and reviewed regularly so it stays relevant and unbiased. TAFEP's illustration of the wrong thing is requiring candidates for an administrative role to complete a physically demanding fitness test. Keep recruitment records for at least one year.

Does the Workplace Fairness Act ban hiring assessments?+

No. The Act prohibits adverse employment decisions made on the basis of protected characteristics — age; nationality; sex, marital status, pregnancy status and caregiving responsibilities; race, religion and language; disability and mental health conditions. It does not restrict measuring the capabilities a job requires, and it permits decisions where a protected characteristic is a genuine requirement of the job. Note also that it is not yet in force: it was passed in January 2025 and is expected to take effect at the end of 2027, so what governs your screen today is the Tripartite Guidelines and the PDPA.

Can we require an English test in Singapore when language is a protected characteristic?+

Yes, where the role genuinely requires English at the level you test. The Workplace Fairness Act's own exception covers a protected characteristic that is a genuine requirement of the job, and the government's stated example is language fluency for an interpreter. The risk sits in the gap between the test and the job: an English screen applied uniformly across every role in a drive, or set at a level nobody in the job has to reach, is much harder to defend than one whose level was written down from the role's actual tasks before the instrument was chosen.

What does Singapore's PDPA require when we run an online assessment?+

Notice and consent before personal data is collected, use limited to the purpose notified, and no more data than the purpose needs. The PDPC's March 2024 advisory guidelines on AI recommendation and decision systems add that organisations should use only the attributes and the volume of data actually required, should pseudonymise or de-identify as a basic control, and are encouraged to publish their policy on such use. In practice: disclose what is recorded before the attempt starts, keep demographic fields optional and separate from the score, and be able to say how long attempt data is retained.

Is AssessAll certified as compliant with the PDPA or the Workplace Fairness Act?+

No. AssessAll holds no compliance accreditation, certification or regulatory approval in Singapore or Malaysia, and does not certify that any deployment of its platform is compliant. Compliance depends on how you configure and use assessments — which constructs you score, who you deliver them to, what you retain and for how long — and those are your decisions. What the platform provides is the controls and the records: a consent gate before proctoring, consistent delivery, inspectable evidence, and per-candidate reports you can retain. The compliance judgement is yours and your advisers'.

What changed in Malaysia's PDPA, and does it affect proctored assessments?+

The 2024 amendments took effect in phases through the first half of 2025. Breach notification to the Commissioner became mandatory, appointing a data protection officer became mandatory for controllers and processors, individuals gained a data-portability right, the cross-border transfer whitelist was replaced by a risk-based test, and the maximum fine rose from RM300,000 to RM1,000,000 with imprisonment up to three years. The change most relevant to proctoring is that biometric data is now sensitive personal data. Whether a particular identity photo or face-presence check falls inside that definition depends on how the images are processed, which is a question for your advisers — the useful preparation is being able to state exactly what is captured, where it is stored and when it is deleted.

How long should we keep assessment results and proctoring evidence?+

TAFEP advises keeping recruitment records for at least one year so that merit-based decisions can be evidenced, and that is a sensible floor for scores and the per-candidate report. Proctoring imagery deserves a shorter and separately-decided retention period, because it is the most sensitive material in the file and its purpose — verifying one sitting — expires long before the record of the decision does. Both periods should be written down, applied, and disclosed to candidates before the attempt rather than after a request.

Do we have to advertise on MyCareersFuture before hiring?+

For roles you intend to fill with an Employment Pass holder, yes: under the Fair Consideration Framework the job must be advertised on MyCareersFuture and left open for at least 14 consecutive days. Advertising is not required if the fixed monthly salary is S$22,500 or above, the firm has fewer than 10 employees, the role lasts a month or less, or it is filled by an internal transfer or an overseas intra-corporate transferee. The advertised salary range may not have a maximum more than twice its minimum.