Background verification sits on top of a real regulatory framework. In the United States that is primarily the Fair Credit Reporting Act, plus a patchwork of state and city rules that vary more than most employers expect. This is an orientation, not legal advice — for a specific programme, get counsel.
What is normally in scope
Identity and right-to-work confirmation. Employment history — dates, titles, and whether the person was employed at all. Education and credential verification. Criminal records within the limits your jurisdiction allows. Where genuinely relevant to the role, credit history or a motor vehicle record.
What is usually out of scope
Anything you learn by looking somewhere you were not authorised to look. Medical history and genetic information. Credit checks for roles with no financial responsibility. In a growing number of jurisdictions, salary history. And arrest records that never led to conviction, which many states prohibit as a basis for decisions.
The four rules that prevent most problems
Written consent, separately. Not a clause buried in the offer letter. A standalone disclosure and authorisation, signed before anything is ordered.
Same scope for the same role. Running a deeper check on one candidate than another for the same job is where discrimination claims begin. Define the package per role, in advance, and apply it uniformly.
Timing. Many jurisdictions require a conditional offer before a criminal record check. “Ban the box” rules also restrict when you may ask on an application.
Adverse action is a two-step process. If a report may cost someone the job: send a pre-adverse notice with a copy of the report and a summary of rights, wait a reasonable period so they can dispute an error, then send the final notice. Skipping the wait is the most common violation we see, and reports do contain errors — mismatched identities are routine.
Where verification actually pays
Employment and credential verification catches far more than criminal checks do, because it catches the ordinary embellishments: a title inflated by one level, eight months rendered as two years, a degree listed as completed that was not. None of these are sinister. All of them change whether the person can do the job.
A note on speed
A standard package takes two to five business days. When it takes three weeks, the cause is almost always an unresponsive previous employer or an institution that will only confirm by post. Start verification the day the conditional offer goes out, not the week before the start date.
