Background checks help organizations verify credentials, assess risks, and ensure safety. Knowing the information typically required by background screening providers and the legal boundaries is essential for both employers and applicants. This article outlines the data commonly requested, how it is used, and best practices to stay compliant with U.S. law while protecting privacy.
What Data Employers Typically Request
Background screening providers compile reports from multiple sources. The data requested often falls into several categories: identifying information, employment history, education verification, and records checks. The following list highlights common data elements used to initiate and complete a background check.
- Full legal name and any aliases used in prior records
- Date of birth or age to distinguish individuals with similar names
- Social Security Number (SSN) or SSN last four digits for identity verification and to locate records
- Current and previous addresses to correlate records across jurisdictions
- Consent documentation showing the applicant’s authorization to perform the check
- Employment history including employers, positions, and dates for verification and gap analysis
- Educational degrees and institutions attended for credential verification
- Professional licenses or certifications held, including issuing bodies and dates
- Criminal records from courts and law enforcement, respecting jurisdictional limits
- Driving records where relevant to job duties and within allowable retention periods
- Credit history or credit-related information only if legally permissible and relevant to the role
- Sanctions, vendor, and litigation checks for red flags related to governance, integrity, or solvency
It is important to note that not every check uses all these data points. The exact data requested depends on the role, state laws, and the scope of the background check the employer intends to perform.
Legal And Compliance Considerations
Background checks in the United States are regulated to protect applicants’ privacy and prevent discrimination. The Fair Credit Reporting Act (FCRA) governs consumer reports used for employment decisions. State and local laws add additional protections, and some jurisdictions restrict certain checks for specific roles. Key compliance considerations include:
- Written authorized consent prior to obtaining a background report, with a clear description of the scope and purpose
- Disclosure and adverse action procedures that inform applicants about the report and provide a chance to dispute inaccuracies
- Sensitivity to protected characteristics and avoidance of decisions based on race, religion, gender, or other protected classes
- Limitations on criminal history by state and local laws, including considerating recency, severity, and relevance to the job
- Privacy and data minimization by collecting only information necessary for the role
- Retention and destruction policies ensuring records are kept only for appropriate periods
Employers should consult legal counsel or a compliance professional to tailor a background check program that meets all applicable laws and industry standards for their location and industry.
Consent And Disclosure Requirements
Consent is a foundational element of any employment background check. It must be informed, voluntary, and specific to the report being obtained. Important aspects include:
- Written consent on a standalone document, separate from the job application, describing the types of checks and potential uses
- Employer disclosure of the source of information (e.g., third-party background check company) and the scope of verification
- Right to dispute inaccuracies with the screening provider and the employer
- Adverse action notice if a decision is made based on the report, including a copy of the report and contact information for the consumer reporting agency
For applicants, understanding consent language and the scope of checks helps ensure transparency. For employers, clear consent processes reduce legal risk and build trust with candidates.
Sources For Background Checks
Background information is gathered from a mix of public records, private databases, and employer-provided data. Common sources include:
- Public court records for criminal history and civil filings, subject to state access rules
- National and state criminal background databases with varying coverage and accuracy
- Educational institutions and professional licensing boards for verification
- Previous employers for employment history and references, with consent
- Credit bureaus or financial data providers for job-relevant financial history where allowed
- Motor vehicle records (MVR) for roles that require safe driving
- Identity verification services to confirm social security linkage and prevent identity fraud
Accuracy and recency vary by source. Reputable screening vendors use standardized processes, provide audit trails, and maintain data quality to comply with FCRA and state laws.
Handling And Protecting Personal Data
Effective data handling reduces risk and protects both the organization and applicants. Key practices include:
- Secure transmission and storage with encryption and access controls
- Role-based access to limit who can view sensitive information
- Data minimization by collecting only data necessary for the role
- Regular audits of who accessed reports and why, with documentation
- Disposal methodologies to securely delete records after required retention periods
Clear policies and employee training support ethical handling of sensitive information and help maintain regulatory compliance.
Common Pitfalls And Best Practices
Businesses often stumble in the background-check process. Recognizing common issues can improve outcomes and fairness:
- Overlooking state-specific rules that limit certain screenings or require additional disclosures
- Failing to obtain explicit consent or using outdated authorization forms
- Inaccurate record linking due to missing or mismatched identifiers, leading to incorrect reports
- Neglecting adverse-action timelines causing delays and candidate frustration
- Ignoring candidate disputes without a clear process for correction
Best practices include tailoring checks to the job, maintaining up-to-date consent forms, and using transparent communication with candidates during each step of the process.