What Is a Background Check? The Complete Guide for Small Business Owners
What is a background check? 9 types explained with costs, turnaround times, legal steps, and where it fits your onboarding. Guide for US small businesses.
What Is a Background Check?
The complete guide for US small business owners hiring without an HR department
When I hired my first employee, I did not run a background check. I assumed it was something big companies did. The hire worked out fine. The second hire also worked out fine. The third hire embellished two years of employment history on their resume, and I only discovered it four months later when their former employer came up in a conversation and the timeline did not match. By then I had invested months of training and a significant onboarding effort into someone who had misrepresented their qualifications.
That experience cost me time, money, and the realization that I had been lucky with my first two hires, not smart. Background checks are not a bureaucratic hurdle for large corporations. They are a basic due diligence step that protects small businesses from negligent hiring liability, resume fraud, and the financial damage of a bad hire that a 20-person company absorbs disproportionately compared to a 2,000-person company.
This guide covers everything a US small business owner needs to know about background checks: what they are, the 9 types with real costs, how the process works step by step, where it fits in your onboarding workflow, the federal and state laws you must follow, how to handle negative results legally, and the mistakes that create lawsuits. I built the onboarding workflow in FirstHR to handle the steps surrounding the background check (consent forms, task sequencing, document storage, onboarding automation) because at a small business, the person running the check is the same person doing everything else.
What Is a Background Check?
A background check is a process where an employer, landlord, or other authorized party investigates an individual's past records to verify their identity, criminal history, employment history, educational credentials, and other relevant information. In the employment context, background checks are conducted after a conditional job offer and before the new hire's first day of work.
The term "background check" covers a wide range of screening types. At one end: a simple criminal record search that checks county, state, and federal databases for convictions. At the other end: a comprehensive screening package that includes criminal records, employment verification, education verification, credit check, driving record, drug test, and professional license verification. What you run depends on the role, your industry, and your state's laws.
For small businesses, the most important thing to understand about background checks is that they are not a single product. They are a menu. You choose which items to order based on what the job requires. A warehouse worker needs a criminal check and maybe a drug test. An accountant needs a criminal check, credit check, and education verification. A delivery driver needs a criminal check and MVR. You do not need every type for every role, and running unnecessary checks wastes money and can create legal risk.
Why Small Businesses Run Background Checks
Small businesses run background checks for three reasons, and only one of them is obvious.
1. Negligent Hiring Liability
If you hire someone who harms a customer, colleague, or third party, and a reasonable background check would have revealed a pattern or prior offense, you can be held liable for negligent hiring. The legal standard is "knew or should have known." Courts have consistently held that employers have a duty to exercise reasonable care in the hiring process, and that includes checking criminal records for positions where the employee has access to vulnerable people, homes, financial assets, or vehicles.
For a 500-person company, a negligent hiring lawsuit is a legal expense. For a 20-person company, it can be an existential threat. Small businesses do not have the legal reserves or insurance coverage that large corporations maintain. A single negligent hiring judgment can exceed the annual revenue of a small business. Running a $35 criminal check on every hire is the minimum standard of care that courts expect.
2. Resume Fraud Is More Common Than You Think
Research consistently shows that a significant percentage of resumes contain fabricated or exaggerated information: inflated job titles, extended employment dates, claimed degrees that were never completed, and invented certifications. At a large company with a structured interview process, multiple rounds of evaluation, and a dedicated recruiting team, some of this gets caught. At a small business where the founder conducts a single interview and makes an offer the same day, resume fraud goes undetected until the employee cannot perform the job they claimed to be qualified for. Research from the Work Institute shows that 20% of employee turnover happens within the first 45 days, and a meaningful share of that early turnover traces back to mismatched expectations that proper verification would have caught.
Employment and education verification catches this. It takes 1 to 7 days, costs $10 to $50, and confirms whether the candidate actually held the positions and earned the degrees they listed. The onboarding checklist covers all the verification steps that should happen between offer acceptance and Day 1.
3. Industry and Regulatory Requirements
Some industries require background checks by law. Healthcare employers must screen against the OIG exclusion list and state abuse registries. Financial services firms must comply with FINRA background investigation requirements. DOT-regulated transportation companies must run MVR checks and drug tests on CDL holders. Childcare facilities must conduct state-mandated criminal checks, often including fingerprint-based FBI checks. If your business operates in a regulated industry, background checks are not optional. The compliance onboarding guide covers the full set of regulatory requirements by industry.
9 Types of Background Checks: What They Show, Cost, and Turnaround
Background checks are not one thing. They are nine different investigations that can be ordered individually or bundled into packages. Each type searches different records, costs a different amount, and takes a different amount of time. Understanding what each type does helps you build the right screening package for each role at your company.
The most common mistake small businesses make is ordering either too few checks (just criminal, missing employment fraud) or too many (credit check for every role, which is unnecessary and potentially illegal in 13 states that restrict credit checks for non-financial positions). The right approach is to build 2 to 3 standard packages based on role type and apply them consistently. The next section covers what each check actually reveals.
What Shows Up on a Background Check
What appears in a background check depends entirely on which types of checks you order. A criminal check only shows criminal records. An employment verification only shows employment history. There is no single "background check" that reveals everything about a person. Each type searches specific databases and returns specific information.
| Check Type | What It Shows | What It Does Not Show |
|---|---|---|
| Criminal (county/state/federal) | Felony and misdemeanor convictions, pending cases, sex offender registry status, warrant information | Arrests without convictions (restricted in many states), sealed or expunged records, juvenile records |
| SSN Trace | Address history, alias names, associated SSNs, jurisdictions where the person has lived | Criminal records, employment history, credit information (it is an identity tool, not a screening tool) |
| Employment Verification | Job titles, dates of employment, employer name. Sometimes salary and reason for leaving (if the former employer shares it) | Job performance, interpersonal skills, why they actually left, whether they were about to be fired |
| Education Verification | Degrees earned, dates of attendance, fields of study, honors (if applicable) | GPA (unless specifically requested and the institution shares it), attendance records, disciplinary history |
| MVR (Motor Vehicle Records) | License status (active/suspended/revoked), traffic violations, DUI/DWI convictions, accident history | Vehicle ownership, insurance status, driving behavior outside of official records |
| Credit Check | Outstanding debts, bankruptcies, collection accounts, payment history, credit score (varies by state) | Income, savings, investment accounts, credit applications, purchasing history |
| Drug Test | Presence of controlled substances in urine, hair, or saliva at the time of testing | Past drug use (except hair tests which can detect ~90 days), prescription medications (unless they contain controlled substances), alcohol use |
| Professional License | License type, license number, issue and expiration dates, disciplinary actions, active/inactive status | Quality of work performed under the license, malpractice claims (separate search), CE compliance details |
| Social Media Screening | Public posts, public profile information, public group memberships | Private messages, private accounts, posts from before the time frame searched, deleted content |
A critical distinction: the check shows records, not judgments. A criminal conviction appears in the report, but the report does not tell you whether that conviction should disqualify the candidate. That is your decision, and the EEOC has specific guidance on how to make it (covered in the EEOC section below).
What Does Not Show Up on a Background Check
Understanding what background checks cannot reveal is as important as understanding what they show. Several categories of information are either legally restricted from appearing in background check reports or simply not captured by the databases that CRAs search.
Legally Restricted Information
The FCRA and various state laws prohibit or limit the reporting of certain information. Arrests that did not lead to convictions cannot be reported by CRAs in most states and are excluded from reports in California, New York, and many other jurisdictions. Sealed and expunged records should not appear in CRA reports, although database lag can sometimes cause them to surface (the CRA is responsible for removing them when notified). Bankruptcies older than 10 years and civil judgments, tax liens, and other negative financial items older than 7 years are excluded from credit reports. Medical records and genetic information are prohibited from employment background checks under GINA and HIPAA.
Information That Requires Separate Investigation
Background checks do not cover everything an employer might want to know. Work performance, management skills, cultural fit, and interpersonal dynamics are not captured in any database. Reference checks (conversations with former managers and colleagues) are the only way to assess these qualities. Immigration status and work authorization are verified through the I-9 process, not through a background check. Salary history is restricted from employer inquiry in an increasing number of states regardless of the screening method used.
How a Background Check Works: The 5-Step Process
The background check process follows the same sequence regardless of which types of checks you order. These five steps are dictated by the FCRA and apply every time you use a third-party CRA to screen a candidate. Skipping any step creates legal liability.
The entire process takes 1 to 7 business days from consent to decision. The bottleneck is almost always employment and education verification, which requires contacting third parties who may not respond quickly. Criminal checks, SSN traces, and MVR checks typically return within 1 to 3 business days. Drug tests return in 1 to 3 days after the specimen is collected. The hiring and onboarding process guide covers how to sequence background checks within the broader hiring timeline.
Where the Background Check Fits in Your Onboarding Workflow
Every article about background checks ends at the hiring decision. None of them show you where the check sits in the actual onboarding workflow: the sequence of steps from verbal offer through Day 1 that involves disclosure forms, consent signatures, compliance paperwork, and task sequencing. For a small business owner who is running this process themselves, seeing the full timeline matters more than any individual step.
The critical insight: the background check is not a standalone event. It is one task in a sequence that includes the preboarding process, compliance documentation, and Day 1 preparation. When you treat it as a standalone event, it creates gaps: the check comes back clear but nobody started the I-9 process, or the start date arrives but the onboarding tasks are not assigned. When you treat it as one step in an automated workflow, everything moves forward together.
This is specifically why I built task workflows into FirstHR: to sequence the steps that surround the background check (send disclosure, collect consent via e-signature, track check status, trigger onboarding tasks when clear) so that nothing falls through the cracks when the person running the process is also the person running the business. The onboarding workflow guide covers the full task sequence from offer to Day 90.
How Long Does a Background Check Take?
The total time depends on which checks you order. Some return in minutes. Others take up to a week. The bottleneck is almost always verification checks that require contacting third parties.
| Check Type | Typical Turnaround | What Causes Delays |
|---|---|---|
| SSN Trace / Identity | Minutes to 1 day | Rarely delayed. Automated database search. |
| National Criminal Database | Minutes to 1 day | Database-only search. Fast but less comprehensive than county searches. |
| County Criminal Search | 1-5 business days | Some counties require in-person courthouse retrieval by a researcher. Rural counties with limited digital records take longest. |
| State Criminal Search | 1-3 business days | Depends on whether the state has a centralized repository. Some states (Texas, California) have good digital access. Others require mail-in requests. |
| Federal Criminal Search | 1-3 business days | PACER database search. Generally fast. |
| MVR (Motor Vehicle Records) | Minutes to 1 day | Automated in most states. A few states still require manual processing. |
| Credit Check | Minutes to 1 day | Automated search of credit bureau databases. |
| Employment Verification | 1-7 business days | Depends entirely on how quickly former employers respond. Large companies with automated verification (The Work Number) respond in hours. Small businesses may take days or not respond at all. |
| Education Verification | 2-7 business days | Depends on institutional response time. Some universities have online verification portals. Others require written requests. |
| Drug Test | 1-3 days after collection | Specimen must be collected at a lab, shipped, and analyzed. Positive screens require confirmation testing. |
| Professional License | 1-3 business days | Depends on the licensing board. Some have online lookup tools. Others require manual verification. |
For most small businesses, the practical total is 2 to 5 business days from consent to completed report. To minimize delays, submit the check immediately after receiving consent. Do not wait for the written offer to be signed. Do not wait for a start date to be agreed upon. The check runs in parallel with everything else. The onboarding timeline guide covers how to sequence all preboarding tasks to avoid delays.
How Much Does a Background Check Cost?
Background check costs depend on two variables: which types of checks you run and which provider you use. Individual check prices range from $3 for an SSN trace to $75 for a comprehensive drug test. Most CRA providers sell bundled packages that cost less than ordering individual checks.
| Package Level | What It Includes | Typical Cost Range | Best For |
|---|---|---|---|
| Basic | Criminal (national + 1 county) + SSN trace | $25-$45 | Low-risk administrative roles, entry-level positions, small office staff |
| Standard | Criminal (national + multi-county) + SSN trace + employment verification (1-2 employers) | $45-$85 | Most roles at a small business: operations, customer service, general staff |
| Enhanced | Standard + education verification + MVR + drug test | $85-$140 | Roles involving driving, financial access, or industry-specific requirements |
| Comprehensive | Enhanced + credit check + professional license verification + social media screening | $140-$250 | Senior roles, healthcare, financial services, government contractors |
For a small business hiring 5 to 15 people per year, the total annual cost of background checks ranges from $175 to $2,250 (at $35 to $150 per check). That is less than the cost of one month of a part-time HR consultant. Compared to the $15,000 to $50,000 cost of a bad hire (SHRM), background checks are the highest-ROI investment in the hiring process.
Most CRA providers do not charge monthly fees. You pay per check. This makes background checks accessible even for businesses that hire infrequently. Volume pricing kicks in at 25 to 50+ checks per year and typically saves 10 to 25% per check. The cost of hiring guide covers the full expense breakdown for bringing on a new employee.
Cost by Role: 4 Real Scenarios for Small Businesses
Abstract pricing ranges are less useful than seeing what a background check actually costs for the specific roles you are hiring. Here are four common scenarios for small businesses, with the checks you should run and the approximate total cost.
The pattern: the more sensitive the role, the more checks you need, and the higher the cost. But even the most comprehensive screening (healthcare worker at $100 to $200) is a fraction of what it costs to hire, train, and then replace someone who should not have been hired. The turnover cost guide breaks down the full financial impact of a hire that does not work out.
FCRA Compliance: The Law You Must Follow
The Fair Credit Reporting Act (FCRA) is the federal law that governs how employers use background checks in hiring decisions. If you use a third-party CRA (which includes every background check provider, from Checkr to local screening companies), you must follow FCRA requirements. Violating the FCRA carries statutory damages of $100 to $1,000 per incident, plus actual damages, punitive damages, and attorney fees. Class action FCRA lawsuits against employers regularly result in settlements exceeding $1 million.
The FCRA requirements for employers are straightforward but must be followed precisely.
Before the Check: Disclosure and Consent
You must provide the candidate with a clear, conspicuous, written disclosure stating that you may obtain a consumer report (background check) for employment purposes. This disclosure must be a standalone document. It cannot be included in the job application. It cannot be combined with the offer letter. It cannot be part of an employee handbook acknowledgment. One document, one purpose. The candidate must then provide written authorization for you to proceed. Electronic signatures satisfy this requirement in all 50 states.
During the Check: Permissible Purpose
You must have a "permissible purpose" for ordering the check. Employment screening is a permissible purpose, but only for the specific role the candidate is being considered for. Running a check on someone who has not applied for a job, or running checks on all employees without a legitimate business reason, can violate the FCRA. The FTC provides guidance on employer obligations under the FCRA.
After the Check: Adverse Action Process
If you decide not to hire someone (or to take any other negative action) based in whole or in part on the background check results, you must follow the adverse action process. This is a two-step procedure with a mandatory waiting period, covered in detail in the adverse action section below.
EEOC Rules: Non-Discrimination in Background Screening
The Equal Employment Opportunity Commission (EEOC) provides specific guidance on background checks that every employer must follow. The core principle: you cannot use background check results in a way that disproportionately excludes candidates based on race, national origin, sex, religion, disability, age, or genetic information (protected classes under Title VII, ADA, and GINA).
The Three-Factor Test
When a criminal record appears in a background check, the EEOC requires employers to evaluate it using three factors before making a hiring decision.
| Factor | What to Consider | Example |
|---|---|---|
| Nature and gravity of the offense | How serious was the conduct? Violent crimes are more concerning than minor property offenses. | A conviction for embezzlement is highly relevant for a bookkeeper role. A minor vandalism charge from college is not. |
| Time elapsed since the offense | How long ago did it occur? People change. A conviction from 15 years ago carries less weight than one from last year. | A DUI from 10 years ago with no subsequent offenses is very different from a DUI from 6 months ago for a driving role. |
| Nature of the job | Does the offense relate to the job duties? A theft conviction is relevant for a role handling money but not for a warehouse position. | A fraud conviction is relevant for a financial role. A marijuana possession charge (in a non-DOT role) may not be relevant for an office position. |
What the EEOC Prohibits
Blanket policies that automatically exclude anyone with a criminal record violate Title VII because they disproportionately affect certain racial and ethnic groups. You cannot have a policy that says "no felonies, ever, for any position." You must conduct an individualized assessment for each candidate with a record, considering the three factors above. You must also give the candidate an opportunity to explain the circumstances before making a final decision.
This does not mean you must hire people with criminal records. It means you must evaluate each case individually rather than applying automatic exclusions. The HR rules and regulations guide covers the broader anti-discrimination framework that applies to all employment decisions.
Ban-the-Box: State-by-State Overview
Ban-the-box laws restrict when employers can ask about criminal history in the hiring process. The term refers to removing the checkbox on job applications that asks "Have you ever been convicted of a crime?" As of 2026, 37+ states and over 150 cities and counties have enacted some form of ban-the-box legislation.
The practical implication for small businesses: in most states, you should not ask about criminal history on the job application. Make a conditional offer first. Run the background check after the candidate accepts the conditional offer. Then evaluate any results using the EEOC's three-factor test. This sequence complies with ban-the-box laws in all states and follows EEOC best practices regardless of your state's specific law.
Some states have additional restrictions. California's Fair Chance Act applies to employers with 5+ employees and requires individualized assessment. New York City's Fair Chance Act (Article 23-A) requires a written analysis of each criminal record using specific factors. Illinois requires written notice to the candidate if the check reveals a conviction. The compliance hub provides state-by-state details for all 50 states.
The Adverse Action Process: What to Do When Results Are Not Clear
Adverse action is the legal term for any negative employment decision based on a background check: deciding not to hire, rescinding an offer, terminating employment, or denying a promotion. The FCRA requires a specific two-step process with a mandatory waiting period. Skipping any step is a violation.
The adverse action process exists to protect candidates from inaccurate background check reports. CRA databases are not perfect. Records can be misattributed (common names, data entry errors), outdated (showing arrests that were later dismissed), or simply wrong. The waiting period gives the candidate time to identify and dispute errors before you make a final decision.
For small businesses, the adverse action process feels bureaucratic. You found something concerning. You do not want to hire this person. You want to move on. But skipping the process creates legal liability that far exceeds the inconvenience of waiting 5 business days. FCRA violations carry statutory damages of $100 to $1,000 per incident, and class action suits regularly exceed $1 million in total damages. The onboarding documents guide covers the full compliance documentation timeline including adverse action records.
Background Check Requirements by Industry
Some industries require specific background checks by law. Others have no requirements but follow industry standards. Understanding which category your business falls into determines your minimum screening obligations.
If your business does not fall into a regulated industry, background checks are voluntary. But "voluntary" does not mean "unnecessary." Negligent hiring liability applies to all employers regardless of industry. The question is not whether to run checks but which checks are appropriate for each role. The onboarding plan guide covers how to build role-specific onboarding processes that include the right level of screening.
DIY vs. Using a Background Check Provider
Small business owners sometimes consider running background checks themselves to save money. You can search county court websites, call former employers, and verify degrees directly with universities. The question is whether the savings justify the risks and the time investment.
The recommendation for small businesses: use a CRA provider for criminal checks, credit checks, and any check that involves accessing regulated databases. You can do employment and education verification yourself (by calling former employers and schools directly), but even this is more efficient through a CRA if you are hiring more than 2 to 3 people per year. The time you spend manually verifying employment is time you are not spending on revenue-generating work. At a founder's effective hourly rate, the $40 to $80 you save by doing it yourself is almost never worth the 2 to 4 hours of effort.
How to Choose a Background Check Provider
The background check provider market has dozens of options, from enterprise platforms (Sterling, HireRight) to SMB-focused providers (Checkr, GoodHire) to local screening companies. For a small business, five criteria matter most.
| Criterion | What to Look For | Red Flag |
|---|---|---|
| FCRA compliance | The provider is accredited by the Professional Background Screening Association (PBSA) and conducts checks as a CRA under the FCRA | No PBSA accreditation, no mention of FCRA compliance, or the provider suggests you can skip the disclosure/consent process |
| Pricing transparency | Clear per-check pricing or package pricing published on the website. No setup fees or monthly minimums. | Pricing hidden behind a 'request a quote' wall with no indication of cost range. Monthly minimums that penalize low-volume users. |
| Turnaround time | Criminal checks in 1-3 business days. Employment verification in 3-5 business days. Clear SLAs. | Vague 'results may take up to 2 weeks' without specifying which check types cause delays. |
| Self-service portal | Online ordering, candidate invitation via email, real-time status tracking, downloadable reports | Phone-only ordering, fax-based processes, or paper-based reporting |
| Integration options | API or direct integration with your HR software for automated check ordering and result tracking | No integration capabilities, requiring manual data entry between your HR system and the screening platform |
For most small businesses hiring 5 to 15 people per year, a provider like Checkr or GoodHire offers the right balance of price, speed, and ease of use. Enterprise providers like Sterling and HireRight are designed for companies running hundreds or thousands of checks per year and often have pricing and feature structures that do not fit small-business needs. The HR technology guide covers how background check providers fit into the broader HR tech stack.
Background Check vs. Reference Check vs. Employment Verification
These three terms are frequently confused, but they serve different purposes and return different information.
| Background Check | Reference Check | Employment Verification | |
|---|---|---|---|
| What it is | Investigation of official records (criminal, credit, driving, etc.) through a CRA | Conversation with people the candidate selects as professional references | Confirmation of job titles, dates, and employers with former employers |
| Who provides the info | Courts, credit bureaus, DMVs, licensing boards, institutions | The candidate's chosen references (former managers, colleagues, mentors) | Former employers' HR departments or automated verification services |
| What it reveals | Criminal history, credit status, driving record, license status, verified degrees | Work style, strengths, weaknesses, interpersonal skills, management style | Whether the candidate actually held the positions they claimed |
| Legal framework | FCRA governs use through CRAs. EEOC governs non-discrimination. | No specific federal regulation. Subject to general anti-discrimination law. | Part of background check if done through CRA. Otherwise no specific regulation. |
| Cost | $25-$250 per candidate depending on scope | $0 (you make the calls) or $50-$150 (through a reference check service) | $10-$50 per employer verified through a CRA |
| When to use | After conditional offer, before start date | During the interview process or after conditional offer | As part of the background check package or independently |
The best practice for small businesses: run a background check (criminal + employment verification at minimum) on every hire. Conduct reference checks on candidates for senior or high-trust roles. Use employment verification as part of your background check package rather than as a standalone step. The questions to ask new employees guide covers how to gather useful information through structured conversations at every onboarding milestone.
8 Common Mistakes That Create Legal Risk
After working with dozens of small business owners on their hiring processes, I see the same mistakes repeatedly. Every one of them creates legal exposure that is entirely preventable.
The mistake behind most of these mistakes: treating the background check as informal due diligence rather than a legally regulated process. The FCRA, EEOC, and state laws create specific requirements for each step. Following them is not difficult, but you have to know they exist. The human resource laws guide covers the broader legal framework that applies to all employment decisions, not just background checks.
State-Specific Background Check Laws
Federal law (FCRA and EEOC guidance) sets the baseline. Many states add requirements on top. These state laws affect what you can search, when you can search it, how far back the results go, and what you must do with the results. Operating across multiple states means following the most restrictive applicable law.
Lookback Period Restrictions
Twelve states limit how far back a CRA can report non-conviction criminal records when the candidate's expected salary is below a threshold (typically $75,000): California, Colorado, Kansas, Maryland, Massachusetts, Montana, New Hampshire, New Mexico, New York, Texas, Washington, and Hawaii. In these states, arrests that did not result in conviction cannot appear on the report if they are older than 7 years. Convictions have no time limit at the federal level, but some states (California, for example) restrict reporting of older convictions for certain roles.
Credit Check Restrictions
Thirteen states restrict or prohibit credit checks for employment purposes unless the position involves financial responsibilities: California, Colorado, Connecticut, Delaware, Hawaii, Illinois, Maryland, Nevada, Oregon, Vermont, Washington, and New York City and Chicago (via local ordinance). If your business operates in one of these jurisdictions and the role does not involve handling money, accessing financial data, or managing company assets, do not run a credit check. The HR best practices guide covers state-specific employment requirements in detail.
Drug Testing Laws
Drug testing laws vary dramatically by state. Some states (Alabama, Florida, Georgia) have voluntary drug-free workplace programs that provide workers' compensation premium discounts for employers who test. Other states (California, Nevada, New York) have legalized recreational marijuana and restrict or prohibit testing for cannabis in most employment contexts. DOT-regulated positions (CDL holders, pipeline workers, transit employees) are federally mandated to test regardless of state marijuana laws. Before implementing drug testing, check your specific state's current law because this area is changing rapidly.
Salary History Bans
Twenty-one states and numerous cities prohibit employers from asking about salary history during the hiring process. While this is not strictly a background check issue, it intersects when employment verification includes salary disclosure. Some CRA providers automatically exclude salary information from employment verification results in states with salary history bans. If you are verifying employment in a state with a salary ban, ensure your CRA provider knows not to request or report salary information. The job offer email guide covers how to structure offers without relying on salary history data.
How to Handle Background Check Results
When background check results come back, they fall into one of three categories: clear, flagged, and needs adjudication. Each requires a different response, and having a written policy for all three before you start screening prevents inconsistent and potentially discriminatory treatment.
Clear Results
No records found, all verifications confirmed. This is the ideal outcome and the most common one. Proceed directly to onboarding. Trigger the preboarding process: send the welcome email, begin I-9 preparation, assign Day 1 tasks, and confirm the start date. Store the background check report in the employee's personnel file with the signed disclosure and consent forms.
Flagged Results (Minor Issues)
Minor discrepancies that do not necessarily affect the hiring decision: a job title that differs slightly from what the candidate listed, an employment date that is off by a few months, an education record that shows "attended" rather than "graduated." These require a conversation with the candidate, not an adverse action. Contact the candidate, share the discrepancy, and ask for clarification. In many cases, the explanation is simple: the candidate used a working title instead of their official title, or remembered graduation dates incorrectly. Document the conversation and the explanation in the file.
Needs Adjudication (Criminal Records or Significant Discrepancies)
Criminal convictions, significant resume fabrication (claiming a degree that was never earned, fabricating an entire employer), or failed drug tests require formal adjudication. Apply the EEOC's three-factor test for criminal records. For resume fabrication, the decision is more straightforward: fabricating credentials is a trust issue that most employers consider disqualifying regardless of the position. For drug tests, follow your written drug-free workplace policy. If you decide not to hire, follow the full adverse action process. Document your reasoning in writing and retain it with the background check report.
Continuous Screening and Re-Screening Current Employees
Pre-employment background checks are a snapshot. They tell you what the candidate's record looked like on the day the check was run. They do not tell you what happens after the person is hired. Some employers implement continuous screening programs that monitor employees' records on an ongoing basis, or conduct periodic re-screening at set intervals.
When Continuous Screening Makes Sense
Continuous screening is most relevant for roles where a post-hire change in status could create serious risk. CDL holders whose license gets suspended. Healthcare workers who get added to an exclusion list. Financial services employees who develop credit problems. Employees with security clearances whose circumstances change. For these roles, waiting until the next scheduled re-screen (which might be years away) creates an unacceptable risk window.
Legal Requirements for Re-Screening
If you want to run background checks on current employees, you need fresh written consent. The consent the employee signed at hiring does not automatically extend to future checks unless it explicitly stated that ongoing screening would occur. Even with broad consent language, some courts have held that consent must be "knowing and voluntary" for each individual check. The safest approach is to include a continuous screening consent clause in your initial authorization and then notify employees before each re-screen.
Apply the same FCRA requirements to employee checks that you apply to candidate checks: written disclosure, written consent, and adverse action process if the results lead to any negative employment action (termination, demotion, reassignment). The personnel file guide covers what documentation to keep for each employee, including background check records.
Practical Approach for Small Businesses
Most small businesses with 5 to 50 employees do not need continuous screening programs. The cost and administrative burden outweigh the risk reduction for general roles. Instead, implement re-screening triggers: run a new check when an employee is promoted to a role with greater responsibility, when they transfer to a position that requires additional screening (moving from office work to a driving role), or when a specific incident raises concerns. The employee lifecycle guide covers how to manage employee transitions including role changes that may trigger re-screening.
Background Checks for International Candidates
If you are hiring someone who has lived or worked outside the United States, domestic background checks will not cover their international history. International background checks are more complex, more expensive, and take longer than domestic checks. They are also less standardized because each country has different record-keeping systems, privacy laws, and access rules.
What International Checks Cover
International criminal checks search the equivalent of court records in the countries where the candidate lived. Response times range from 5 to 30+ business days depending on the country. Some countries (UK, Canada, Australia) have centralized criminal record systems that respond relatively quickly. Others (many countries in Asia, Africa, and South America) require in-country researchers to visit local courts, which takes weeks. International education and employment verification follows the same pattern: centralized systems respond quickly, manual systems take time.
Cost and Turnaround
International background checks typically cost $50 to $200+ per country searched, on top of domestic check costs. Turnaround ranges from 5 to 30+ business days per country. For a candidate who lived in two countries before the US, the international component alone could cost $100 to $400 and take 2 to 4 weeks. For most small businesses hiring domestically, international checks are unnecessary. They become relevant when hiring foreign nationals, employees with significant international work history, or remote employees working from abroad.
The USCIS I-9 verification process confirms work authorization but does not replace a background check. I-9 verifies that the person is legally authorized to work in the United States. It does not search criminal records, verify employment history, or confirm educational credentials. They are separate processes with separate purposes. The contractor onboarding guide covers the documentation differences between W-2 employees and independent contractors, including international contractors.
Building Your Background Check Policy
A written background check policy protects your business from inconsistent screening practices, discrimination claims, and FCRA violations. The policy does not need to be long. One to two pages covering the essentials is sufficient for most small businesses.
What to Include in Your Policy
| Policy Section | What to Document | Why It Matters |
|---|---|---|
| Scope | Which positions require background checks. Whether all roles are screened or only specific categories. | Prevents allegations of selective or discriminatory screening. Consistency is legally important. |
| Types of checks by role category | Which check types apply to each role category (entry-level, driving, financial, healthcare, leadership). | Prevents over-screening (running credit checks on warehouse workers) and under-screening (skipping MVR on delivery drivers). |
| Timing | When in the hiring process the check is ordered: after conditional offer, before start date. | Ensures compliance with ban-the-box laws and demonstrates a consistent process. |
| Adjudication criteria | The factors you consider when evaluating negative results. Must include EEOC three-factor test at minimum. | Provides a documented, consistent framework for decisions. Protects against discrimination claims. |
| Adverse action process | Step-by-step procedure for handling negative results: pre-adverse notice, waiting period, final notice. | Ensures FCRA compliance every time. Prevents shortcuts under time pressure. |
| Record retention | How long background check reports, consent forms, and adverse action notices are retained. | Federal and state retention requirements vary. EEOC recommends 1 year minimum. Some states require longer. |
| Continuous screening | Whether current employees are subject to re-screening and under what circumstances. | Avoids surprises for employees and ensures you have the legal basis (fresh consent) for post-hire checks. |
The most important element is the adjudication criteria. Without written criteria, every negative result becomes an ad hoc decision. Ad hoc decisions are inconsistent. Inconsistent decisions create disparate treatment liability. Write down your criteria before you run your first check, apply them consistently, and document your reasoning for every adverse decision. The onboarding policy guide covers how to structure your broader onboarding policies including background check integration.
Record Keeping and Storage
Background check records are employment records subject to federal and state retention requirements. Proper storage protects your business during audits, litigation, and compliance reviews.
What to Retain
For every background check you run, retain the following documents: the signed disclosure form, the signed consent form, the complete background check report, any adverse action notices (pre-adverse and final), the candidate's response to adverse action notices (if any), and your written adjudication analysis (if the check returned negative results). These documents should be stored together, either in a physical file or in a digital document management system.
How Long to Retain
The EEOC recommends retaining all hiring-related records for at least 1 year from the date of the hiring decision (or from the date of the adverse action, whichever is later). Title VII record-keeping requirements mandate 1 year for all personnel records. Some states require longer retention. California requires 4 years for employment applications and related records. The safest approach is to retain background check records for 5 to 7 years, which exceeds all state requirements and provides coverage for potential litigation with longer statutes of limitation. The employee records retention guide covers retention periods for all types of HR documents.
Storage and Access
Background check reports contain sensitive personal information: Social Security numbers, dates of birth, criminal history, credit data. These records must be stored securely with limited access. Physical files should be in a locked cabinet separate from general employee files. Digital files should be in a system with role-based access controls. Only people with a legitimate business need (the hiring manager, the owner, the HR person if you have one) should have access to background check reports.
SHRM recommends maintaining background check records in a separate confidential file, not in the employee's main personnel file. This prevents accidental disclosure of criminal history or credit information to supervisors who do not need access. The HR document management guide covers how to set up a secure filing system for all employment records.
Background Check Playbook for Your First Hire
If you have never run a background check before, the process can seem overwhelming. FCRA, EEOC, ban-the-box, adverse action, CRA providers, adjudication criteria. It sounds like you need an employment lawyer before you can hire your first employee. You do not. Here is the simplified playbook for a small business owner running their first background check.
Total time investment: 15 to 30 minutes of your time, plus 1 to 3 days of waiting. Total cost: $35 to $65. That is less time and money than a single job posting. The hiring plan guide covers how to build the full process from job posting through onboarding, with the background check properly sequenced in the workflow.
Frequently Asked Questions
What is a background check?
A background check is a process where an employer reviews a job candidate's criminal records, employment history, education, driving record, credit history, and other public and private records to make an informed hiring decision. In the US, employers must follow the Fair Credit Reporting Act (FCRA) when using a third-party provider. This means providing written disclosure, obtaining written consent, and following the adverse action process if the results affect the hiring decision.
How long does a background check take?
Most background checks take 1 to 5 business days to complete. SSN traces and MVR checks can return in minutes. Criminal searches take 1 to 5 days depending on whether the search is database-only or includes county courthouse records. Employment and education verification take 1 to 7 days because they require contacting third parties. Drug tests return in 1 to 3 days. The total time depends on which types of checks you order and how responsive former employers and institutions are.
How much does a background check cost?
Background check costs range from $30 to $200 per candidate depending on which checks you include. A basic criminal check with SSN trace costs $30 to $55. Adding employment verification, MVR, and education verification brings the total to $75 to $150. Healthcare and financial services roles with credit checks, license verification, and drug testing can cost $100 to $200. Most CRA providers offer package pricing with volume discounts for businesses that screen frequently.
How far back does a background check go?
The lookback period varies by check type and state law. Criminal records have no federal time limit, but 12 states limit reporting to 7 years for non-conviction records when the salary is below a threshold (typically $75,000). Employment and education verification typically cover 7 to 10 years. Credit checks report up to 7 years for most negative items and 10 years for bankruptcies. MVR records typically go back 3 to 5 years depending on the state.
Can you fail a background check?
There is no pass or fail. A background check returns information, and the employer decides how to evaluate it. Under EEOC guidance, employers cannot apply blanket exclusion policies (such as no felonies ever). Instead, employers must consider the nature of the offense, how much time has passed, and the nature of the job. A conviction from 15 years ago for a non-related offense should be evaluated differently than a recent conviction directly related to the job duties.
What disqualifies you on a background check?
No single item automatically disqualifies a candidate unless the disqualification is required by law (for example, sex offender registries for childcare roles, or OIG exclusion lists for healthcare roles receiving federal funding). For most employers, disqualification depends on the nature of the offense, how recent it was, and the job's responsibilities. Lying on the application about criminal history is often a bigger disqualification than the record itself, because it demonstrates dishonesty.
Do all employers run background checks?
No. There is no federal law requiring private employers to run background checks for general employment. However, certain industries require them by law: healthcare (CMS/OIG exclusion screening), financial services (FINRA background investigation), transportation (DOT/FMCSA requirements for CDL holders), education and childcare (state licensing requirements), and government contractors (security clearance requirements). For general employers, background checks are a voluntary best practice.
Can I run a background check on someone without their consent?
No. Under the FCRA, employers must provide written disclosure to the candidate that a background check will be conducted, and the candidate must provide written consent before the check can proceed. The disclosure must be a standalone document, not part of the job application. Running a check without consent is an FCRA violation with statutory damages of $100 to $1,000 per violation, plus actual damages and attorney fees.
What is the difference between a background check and a reference check?
A background check verifies factual records through official databases and institutions: criminal courts, former employers, educational institutions, credit bureaus, and DMV records. A reference check is a conversation with people the candidate chooses to vouch for them. Background checks verify facts. Reference checks gather opinions. Both are useful, but they serve different purposes. A background check catches fabrication and criminal history. A reference check reveals work style, strengths, and how the person operates in a team.
Can I run a background check on a current employee?
Yes, but you need fresh written consent. The consent the employee signed at hiring does not automatically cover future checks unless it explicitly stated that ongoing checks would be conducted. Some states have additional restrictions on when and why employers can run checks on current employees. Common reasons for re-screening include promotion to a role with greater responsibility, a compliance requirement, or a workplace incident that triggers investigation.
What is a Consumer Reporting Agency (CRA)?
A CRA is a company that compiles and sells background check reports to employers. Under the FCRA, any company that regularly assembles or evaluates consumer information for the purpose of furnishing consumer reports is a CRA. Major CRA providers include Checkr, GoodHire, Sterling, HireRight, and Accurate Background. Using a CRA means the provider handles data collection and is legally responsible for the accuracy of the report. The employer remains responsible for proper disclosure, consent, and adverse action.
Do background checks show employment history?
Only if you order employment verification as part of the check. A standard criminal background check does not include employment history. Employment verification is a separate check where the CRA contacts the candidate's former employers to confirm job titles, dates of employment, and sometimes salary and reason for leaving. Former employers are not legally required to respond, so verification can take 1 to 7 days and may come back with limited information.