What HR needs to know about background checks

Executive overview

Background checks protect your organisation from legal liability and workplace harm, but mishandling them can expose you to discrimination claims, FCRA violations, and wrongful rescission. Compliance is non-negotiable: timing, consent, and adverse-action procedures all carry legal weight.

Results are not always accurate — contested findings require a defined process before acting.

The safest approach: run checks consistently, after a conditional offer, using a third-party vendor, and follow the federal adverse-action process before rescinding.

Purpose and legal basis

• Background checks verify that a hire won't become a hazard to employees, the organisation, or themselves
• They surface information that interviews cannot — prior convictions, false identity, undisclosed history
• The Fair Credit Reporting Act (FCRA) classifies background checks as consumer reports, triggering specific compliance obligations
• The EEOC requires consistency — running checks more frequently for protected classes (race, religion) is discriminatory
• Run checks for everyone, or at least everyone in a specific role, location, or defined category

Timing and consent

• Only run background checks after extending a conditional offer — not before
• Ban the box laws in many states restrict when criminal history can be asked about; California's Fair Chance Act prohibits checks before a conditional offer
• Written (or electronic) consent is required — no consent means FCRA non-compliance
• Include language in the offer letter making employment contingent on passing the check
• Use an HRIS to collect the disclosure form electronically during onboarding — faster processing before the hire starts

What checks cover and who runs them

• Third-party vendors access criminal databases, motor vehicle records, and more
• Vendors are already calibrated to federal and state requirements
• Turnaround is typically one to two days
• You do not need to share results unless rescinding an offer or running an investigative report (character, reputation, lifestyle — used for sensitive roles like military)
• Retain background check reports for a minimum of one year federally; check state-specific requirements

If someone fails a background check

• Outcome depends on the role, the nature of the finding, and organisational values
• A DUI eight years ago may be irrelevant for most roles but disqualifying for a driving position
• Voluntary disclosure before the check is a positive signal — weigh it accordingly
• If the result requires rescission, follow the federal adverse-action process precisely

Federal adverse-action process

• Before acting, provide the candidate: (1) a copy of the consumer report, (2) a summary of their FCRA rights (supplied by your vendor)
• Give them time to review and respond — reports can contain errors
• If you proceed with adverse action, notify them in writing, electronically, or verbally:
  • State that the decision is based on information in the background check
  • Provide the vendor's contact details
  • Clarify the hiring decision is made by the employer, not the vendor
  • Inform them they can dispute the report and request a free copy within 60 days
• Check for additional state-level requirements beyond these federal minimums

Disputed or inaccurate results

• Identity theft and name confusion can cause false positives — treat disputes seriously
• You cannot take a candidate's word alone, but require proof before acting
• If a report is found to be incorrect after rescission, decide whether to reinstate or continue the search — no single right answer