Background Checks: Best Practices, Trends, and Legal Compliance

Pre-employment background checks are governed by a complex web of federal, state, and local laws that employers must navigate carefully to avoid significant legal liability. At the federal level, the Fair Credit Reporting Act (FCRA) establishes strict procedural requirements: employers must provide a clear standalone disclosure to applicants informing them a background check will be conducted, obtain written authorization before ordering the report, and follow a two-step adverse action process if the report influences a hiring decision. The adverse action process requires sending a pre-adverse action notice with a copy of the report and a summary of rights, waiting a reasonable time for the applicant to dispute inaccuracies, and then sending a final adverse action notice if the decision stands. Many states layer additional requirements on top of FCRA, including ban-the-box laws that restrict when criminal history may be considered, credit report restrictions, and shorter lookback periods. Lester Rosen's background check webinar at Aurora Training Advantage provides a ten-point legal compliance audit that HR professionals can apply to their current programs.

Negligent hiring is a legal theory under which employers can be held liable for harm caused by an employee if the employer knew, or should have known through reasonable investigation, that the employee posed a foreseeable risk. The doctrine creates direct financial incentive for thorough pre-employment due diligence: courts have awarded substantial damages in cases involving workplace violence, theft, fraud, and professional misconduct where background screening would have revealed disqualifying history. The key elements of negligent hiring liability are foreseeability of harm (did the criminal history indicate a risk relevant to the position?), employer knowledge or constructive knowledge (would a reasonable background check have revealed the issue?), and causation (did the employee's act cause the harm?). A well-designed, consistently applied background screening program—covering criminal history, employment verification, reference checks, and credential verification appropriate to the role—is the primary defense against negligent hiring claims and demonstrates the due diligence courts expect.

The EEOC's 2012 guidance established that blanket exclusions of all applicants with criminal records likely constitute disparate impact discrimination against protected groups, and many state and local ban-the-box laws independently restrict or prohibit considering criminal history before a conditional job offer. Best practice requires an individualized assessment process: when criminal history is discovered, HR should evaluate the nature and gravity of the offense, the time elapsed since the conviction, and the nature of the job—particularly whether it creates a specific, relevant risk based on the offense. This three-factor analysis, derived from the EEOC guidance, provides a defensible framework for consistent decision-making. Many jurisdictions also impose notice requirements before adverse action based on criminal history, giving applicants an opportunity to provide evidence of rehabilitation or to dispute inaccurate records. Working with legal counsel to develop a written criminal history policy that complies with all applicable laws is essential for organizations that operate in multiple states.

Background screening is an evolving field where HR professionals must stay current on both technology and regulation. Several significant trends are shaping the industry: the rapid expansion of ban-the-box legislation at city and state levels is complicating compliance for multi-state employers, requiring jurisdiction-specific hiring workflows. 'Fair chance' laws increasingly require individualized assessment processes and provide applicants with appeal rights before adverse action. Credit report restrictions have expanded to limit their use to positions where financial responsibility is directly relevant. Continuous screening—ongoing monitoring of employees' criminal records after hire—is growing in sectors with safety-sensitive roles. Social media screening is legally risky and increasingly discouraged given its potential to expose protected class information. AI-based screening tools are under regulatory scrutiny, with the EEOC and FTC issuing guidance on algorithmic bias. Aurora Training Advantage's background checks webinar keeps HR professionals current on all of these developments with practical compliance guidance.

The choice of background screening company (also called a Consumer Reporting Agency or CRA under the FCRA) has significant legal implications because employers share responsibility for FCRA compliance with their screening partner. When evaluating providers, employers should first verify accreditation through the Professional Background Screening Association (PBSA)—the industry's voluntary accreditation body with standards for data accuracy, compliance, and operational practices. Review the provider's data quality practices: how frequently do they update court records, and what is their process for expunging records that have been sealed or expunged? Understand their adverse action workflow support—do they facilitate the two-step FCRA adverse action process? Assess their geographic coverage for positions in multiple states and their ability to configure searches to match specific jurisdictions' legal requirements. Finally, review their data security practices and FCRA-compliant disclosure and authorization forms. Working with an accredited, legally sophisticated CRA dramatically reduces compliance risk and improves the quality and defensibility of the information employers receive.