MOFA and Enjaz Visa Check Online 2026: Passport Data and Employer Record Privacy | AL AHAD GROUP
Recruitment files can contain identity, employment, assessment and sensitive health information. A useful privacy control starts with why a particular item is needed and who needs access. This AL AHAD GROUP checklist is an operational planning aid; applicable legal duties require review for the actual processing context.
Sources and planning guidance reviewed: 17 October 2026. This is educational recruitment guidance, not a current vacancy or an individual official-record check.
Define purpose before collecting records
Separate an initial employer requirement from an individual candidate-processing file. The first usually needs roles, headcount, location, package and timing; it does not justify collecting every candidate’s passport or health report. Request the minimum information necessary for the specific next decision.
Identify the responsible organization, intended recipients, permitted use and appropriate legal basis or authorization before collection. A broad consent sentence is not a substitute for understanding the actual processing. Use the official SDAIA guidance when assessing relevant Saudi obligations.
Give access by task and sensitivity
An interviewer may need a role summary and experience examples. A mobilization coordinator may need an authorized readiness status. Neither automatically needs an unrestricted medical report or a shared account password. Keep sensitive source records within the authorized route and share limited outcomes where appropriate.
Record access grants and remove them when the role ends or the purpose no longer applies. Avoid personal identity details in open spreadsheets, public links and group messages. A convenient forwarding chain is not a controlled recipient list.
Handle correction and retention deliberately
Provide an accountable route for a person to report an inaccurate recruitment record. Preserve the source history necessary to explain a correction while restricting outdated operational copies. Do not assume a discrepancy proves dishonesty or silently replace evidence in every file.
Set retention and disposal according to the actual purpose, applicable duties and justified need. This guide does not invent a universal number of months. Document why a record remains necessary, who may review it and how authorized deletion or secure disposal is implemented.
Keep external sharing and incidents accountable
Before sending records across teams or borders, identify the actual recipient, necessary fields, appropriate safeguards and applicable transfer requirements. Prefer controlled access to a current record over repeated attachments where the approved system supports it.
If a link is exposed or a file reaches the wrong recipient, follow the organization’s actual incident process, preserve relevant evidence and assess applicable response duties. Do not describe a public recruitment form as a secure document vault unless that capability has been verified.
Minimum-data access matrix
| Task | Usually relevant planning detail | Restrict or avoid |
|---|---|---|
| Initial employer inquiry | Role, headcount, location and package | Candidate identity or health scans |
| Interview preparation | Relevant experience and task brief | Unrelated family and financial records |
| Readiness report | Authorized stage and next action | Broad circulation of medical details |
| Correction | Affected field and accountable owner | Silent source replacement |
| Closeout | Justified retained record and owner | Indefinite uncontrolled copies |
Worked planning example
Illustrative case: a project manager asks for everyone’s medical report to prepare a joining list. The privacy owner reviews the actual purpose and provides an authorized readiness status through the appropriate route instead of forwarding unrestricted health files. Any genuinely necessary additional disclosure receives its own review.
Practical next steps
- Define the processing purpose.
- Request only necessary fields.
- Authorize access by task.
- Record correction, retention and transfer decisions.
- Use the actual incident and disposal processes.
Passport-based visa checks: limit access to the specific purpose
Use an internal candidate reference in a shared campaign report. Keep full passport numbers, application references, visa files and detailed responses in the appropriate restricted case record when needed and authorized. A searchable public form does not give a recruitment team a purpose to explore unrelated people’s records.
Agree who conducts the check, which service applies and what outcome is needed. Candidate account access should remain with the appropriate account holder. Do not collect passwords, one-time codes or complete identity files through an employer quotation request.
Build a useful status view without circulating identity files
Record the evidence type, reviewer, check date, supported stage and outstanding action. Separate “reference received” from “official response reviewed” and “issued document reconciled”. These are internal planning descriptions, not claimed official portal status labels.
When someone reports a missing MOFA or Enjaz-related result, begin with the service name and a description of the issue. If a screenshot is needed for an authorized support process, restrict it to what that process requires. Do not post a full passport or a visa QR image to a public jobs channel to obtain general advice.
Questions and answers
Should the employer inquiry collect passport scans?
An initial scope inquiry should not become an unrestricted personal-record collection channel.
Is consent always the only relevant legal question?
No. Review the actual purpose, applicable basis, notices, safeguards and duties.
What universal retention period applies?
This guide sets none. Determine the justified period for the actual records and obligations.
Can a readiness report replace a medical decision?
No. It should accurately relay the authorized status without making a new clinical decision.
May a campaign manager circulate all passports to check MOFA online?
Use a defined authorized purpose and a proportionate evidence process. Share a limited progress view with campaign managers rather than distributing complete personal files by default.
Can the employer inquiry act as a visa or passport lookup form?
The AL AHAD GROUP inquiry concerns genuine recruitment requirements. Perform individual government-record checks through the appropriate authorized official service.
Does “no result” belong in the report as “rejected”?
No. State the unresolved check and responsible follow-up. A missing response alone does not establish an individual decision.
Continue with related guidance
Official sources
Discuss your employer recruitment requirement
Send AL AHAD GROUP the actual employer, Saudi work location, roles, headcount, required experience, package and proposed joining needs. Use the established employer inquiry for recruitment scope; private official-account and candidate record questions follow their appropriate routes.
Related AL AHAD GROUP visa-check guidance
Current official visa-check services — reviewed 17 October 2026
- MOFA Find Applicant Data
- KSA Visa — Track Application
- MOFA — Print E-Visa
- Official tourist eVisa terms — employment restriction
- MOFA — Companies Abroad Services
Only public forms and official guidance were reviewed. No individual application was accessed, no CAPTCHA was solved and no application was submitted.