Background Check Policy

Background Check Policy

Company Name: [Company Name]
Effective Date: [Effective Date]
Policy Owner: [Policy Owner]
Approved By: [Approved By]
Background Check Vendor: [Background Check Vendor]

PURPOSE & SCOPE
- This policy establishes the Organization's requirements for conducting pre-employment and, where applicable, periodic background checks to protect the Organization, its employees, clients, and stakeholders.
- All background checks shall be conducted in compliance with applicable federal, state, and local laws, including the Fair Credit Reporting Act and any ban-the-box legislation in effect in the candidate's jurisdiction.
- The HR department, in conjunction with the approved third-party screening provider, shall administer all background checks. No Hiring Manager or department shall independently conduct or commission background checks.

TYPES OF BACKGROUND CHECKS
- Standard background checks for all positions shall include identity verification, employment history for the preceding 7 years, educational credential verification, and a criminal record check.
- Enhanced checks for positions involving financial authority, client data access, or regulatory requirements shall additionally include credit history, professional licence verification, and sanctions screening.
- The Organization may conduct motor vehicle record checks for positions requiring driving as a regular duty. Candidates must possess a valid licence and a driving record free of major violations within the preceding 3 years.
- For positions with access to vulnerable populations, the Organization shall conduct additional checks including child abuse registry searches and adult abuse registry searches where legally required.

CANDIDATE CONSENT & NOTIFICATION
- The Organization shall obtain written authorisation from the candidate before initiating any background check. The authorisation form shall clearly describe the types of checks to be conducted and the candidate's rights.
- Candidates shall be notified promptly if a background check reveals adverse information that may affect the hiring decision. The Organization shall follow the pre-adverse and adverse action procedures required by the FCRA.
- The Organization shall not withdraw a conditional offer solely on the basis of a criminal record without conducting an individualised assessment considering the nature of the offence, the time elapsed, and the relevance to the position.

DATA SECURITY & RECORD RETENTION
- All background check reports and related documents shall be stored securely with restricted access limited to authorised HR personnel. Reports shall not be shared with Hiring Managers in their entirety.
- Background check records shall be retained for a minimum of 5 years from the date of the hiring decision or for the duration required by applicable law, whichever is longer. Secure destruction shall follow the Organization's data retention policy.
- The Organization's third-party screening provider shall be contractually required to maintain SOC 2 Type II certification, FCRA compliance, and data security standards equivalent to or exceeding the Organization's own requirements.

PERIODIC CHECKS & POLICY COMPLIANCE
- Employees in designated sensitive roles shall be subject to periodic background re-checks at intervals of no less than every 3 years. Employees shall be notified in advance and consent shall be re-obtained.
- Violations of this policy, including conducting unauthorised background checks or improperly accessing or disclosing background check information, shall result in disciplinary action up to and including termination.
- This policy shall be reviewed at least annually by the policy owner in consultation with Legal Counsel to ensure continued compliance with evolving background check legislation and regulatory requirements.