FirstHR

What Is a Background Check? The Complete Guide for Small Business Owners

What is a background check? 9 types explained with costs, turnaround times, legal steps, and where it fits your onboarding. Guide for US small businesses.

Nick Anisimov

Nick Anisimov

FirstHR Founder

Hiring
42 min

What Is a Background Check?

The complete guide for US small business owners hiring without an HR department

When I hired my first employee, I did not run a background check. I assumed it was something big companies did. The hire worked out fine. The second hire also worked out fine. The third hire embellished two years of employment history on their resume, and I only discovered it four months later when their former employer came up in a conversation and the timeline did not match. By then I had invested months of training and a significant onboarding effort into someone who had misrepresented their qualifications.

That experience cost me time, money, and the realization that I had been lucky with my first two hires, not smart. Background checks are not a bureaucratic hurdle for large corporations. They are a basic due diligence step that protects small businesses from negligent hiring liability, resume fraud, and the financial damage of a bad hire that a 20-person company absorbs disproportionately compared to a 2,000-person company.

This guide covers everything a US small business owner needs to know about background checks: what they are, the 9 types with real costs, how the process works step by step, where it fits in your onboarding workflow, the federal and state laws you must follow, how to handle negative results legally, and the mistakes that create lawsuits. I built the onboarding workflow in FirstHR to handle the steps surrounding the background check (consent forms, task sequencing, document storage, onboarding automation) because at a small business, the person running the check is the same person doing everything else.

TL;DR
A background check is a pre-employment screening process where an employer reviews a candidate's criminal records, employment history, education, and other records before making a final hiring decision. US employers must follow the FCRA: provide written disclosure, get written consent, and follow the adverse action process if results affect the decision. Costs range from $30 to $200 per candidate depending on which of the 9 types you run. There is no federal law requiring background checks for general employment, but they are standard practice and protect against negligent hiring liability.

What Is a Background Check?

A background check is a process where an employer, landlord, or other authorized party investigates an individual's past records to verify their identity, criminal history, employment history, educational credentials, and other relevant information. In the employment context, background checks are conducted after a conditional job offer and before the new hire's first day of work.

Definition
Background Check (Employment)
An employer-initiated investigation of a job candidate's records, including criminal history, employment verification, education verification, driving records, credit history, drug testing, professional license verification, and other public and private records. When conducted through a third-party Consumer Reporting Agency (CRA), the process is governed by the Fair Credit Reporting Act (FCRA), which requires written disclosure, written consent, and a specific adverse action process if the results influence the hiring decision.

The term "background check" covers a wide range of screening types. At one end: a simple criminal record search that checks county, state, and federal databases for convictions. At the other end: a comprehensive screening package that includes criminal records, employment verification, education verification, credit check, driving record, drug test, and professional license verification. What you run depends on the role, your industry, and your state's laws.

For small businesses, the most important thing to understand about background checks is that they are not a single product. They are a menu. You choose which items to order based on what the job requires. A warehouse worker needs a criminal check and maybe a drug test. An accountant needs a criminal check, credit check, and education verification. A delivery driver needs a criminal check and MVR. You do not need every type for every role, and running unnecessary checks wastes money and can create legal risk.

The Cost of a Bad Hire
The average cost-per-hire in the US is approximately $4,700 (SHRM). For a small business, a bad hire can cost 2x to 3x that amount when you factor in training, lost productivity, and the cost of restarting the search. A background check that costs $30 to $100 per candidate is the cheapest insurance you can buy against a $10,000+ mistake.

Why Small Businesses Run Background Checks

Small businesses run background checks for three reasons, and only one of them is obvious.

1. Negligent Hiring Liability

If you hire someone who harms a customer, colleague, or third party, and a reasonable background check would have revealed a pattern or prior offense, you can be held liable for negligent hiring. The legal standard is "knew or should have known." Courts have consistently held that employers have a duty to exercise reasonable care in the hiring process, and that includes checking criminal records for positions where the employee has access to vulnerable people, homes, financial assets, or vehicles.

For a 500-person company, a negligent hiring lawsuit is a legal expense. For a 20-person company, it can be an existential threat. Small businesses do not have the legal reserves or insurance coverage that large corporations maintain. A single negligent hiring judgment can exceed the annual revenue of a small business. Running a $35 criminal check on every hire is the minimum standard of care that courts expect.

2. Resume Fraud Is More Common Than You Think

Research consistently shows that a significant percentage of resumes contain fabricated or exaggerated information: inflated job titles, extended employment dates, claimed degrees that were never completed, and invented certifications. At a large company with a structured interview process, multiple rounds of evaluation, and a dedicated recruiting team, some of this gets caught. At a small business where the founder conducts a single interview and makes an offer the same day, resume fraud goes undetected until the employee cannot perform the job they claimed to be qualified for. Research from the Work Institute shows that 20% of employee turnover happens within the first 45 days, and a meaningful share of that early turnover traces back to mismatched expectations that proper verification would have caught.

Employment and education verification catches this. It takes 1 to 7 days, costs $10 to $50, and confirms whether the candidate actually held the positions and earned the degrees they listed. The onboarding checklist covers all the verification steps that should happen between offer acceptance and Day 1.

3. Industry and Regulatory Requirements

Some industries require background checks by law. Healthcare employers must screen against the OIG exclusion list and state abuse registries. Financial services firms must comply with FINRA background investigation requirements. DOT-regulated transportation companies must run MVR checks and drug tests on CDL holders. Childcare facilities must conduct state-mandated criminal checks, often including fingerprint-based FBI checks. If your business operates in a regulated industry, background checks are not optional. The compliance onboarding guide covers the full set of regulatory requirements by industry.

What worked for me
After the resume fabrication incident, I implemented a simple rule: every hire gets at least a criminal check and employment verification before their start date, no exceptions. The criminal check protects against negligent hiring liability. The employment verification catches resume fraud. Together they cost about $45 per candidate and take 2 to 5 days. I have never regretted this investment. I have regretted not doing it sooner.

9 Types of Background Checks: What They Show, Cost, and Turnaround

Background checks are not one thing. They are nine different investigations that can be ordered individually or bundled into packages. Each type searches different records, costs a different amount, and takes a different amount of time. Understanding what each type does helps you build the right screening package for each role at your company.

$10-$771-5 days
Criminal Background CheckSearches federal, state, and county court records for criminal convictions, pending cases, and sex offender registries. The most common type for all roles.
$3-$10Minutes-1 day
SSN Trace / Identity VerificationVerifies the candidate's Social Security number and traces their address history. Used to confirm identity and uncover aliases or jurisdictions to search.
$12-$501-5 days
Employment VerificationConfirms previous job titles, dates of employment, and sometimes salary with former employers. Catches resume fabrication and exaggeration.
$10-$302-7 days
Education VerificationConfirms degrees, certifications, dates of attendance, and fields of study with educational institutions. Protects against diploma fraud.
$5-$20Minutes-1 day
Motor Vehicle Records (MVR)Checks the candidate's driving history: license status, violations, DUIs, suspensions. Required for any role involving driving.
$5-$15Minutes-1 day
Credit CheckReviews the candidate's credit history: outstanding debts, bankruptcies, collection accounts. Used for roles with financial responsibility. Requires separate written consent.
$25-$751-3 days
Drug TestingTests for controlled substances via urine, hair, or saliva. Required in some industries (DOT-regulated, healthcare). State laws vary significantly on when testing is permitted.
$10-$251-3 days
Professional License VerificationConfirms active professional licenses and certifications: nursing, CPA, real estate, contractor, CDL. Checks license status, expiration, and disciplinary actions.
$20-$501-3 days
Social Media ScreeningReviews public social media profiles for red flags: threats, discriminatory behavior, illegal activity. Must be conducted by a third party to avoid bias claims.

The most common mistake small businesses make is ordering either too few checks (just criminal, missing employment fraud) or too many (credit check for every role, which is unnecessary and potentially illegal in 13 states that restrict credit checks for non-financial positions). The right approach is to build 2 to 3 standard packages based on role type and apply them consistently. The next section covers what each check actually reveals.

What Shows Up on a Background Check

What appears in a background check depends entirely on which types of checks you order. A criminal check only shows criminal records. An employment verification only shows employment history. There is no single "background check" that reveals everything about a person. Each type searches specific databases and returns specific information.

Check TypeWhat It ShowsWhat It Does Not Show
Criminal (county/state/federal)Felony and misdemeanor convictions, pending cases, sex offender registry status, warrant informationArrests without convictions (restricted in many states), sealed or expunged records, juvenile records
SSN TraceAddress history, alias names, associated SSNs, jurisdictions where the person has livedCriminal records, employment history, credit information (it is an identity tool, not a screening tool)
Employment VerificationJob titles, dates of employment, employer name. Sometimes salary and reason for leaving (if the former employer shares it)Job performance, interpersonal skills, why they actually left, whether they were about to be fired
Education VerificationDegrees earned, dates of attendance, fields of study, honors (if applicable)GPA (unless specifically requested and the institution shares it), attendance records, disciplinary history
MVR (Motor Vehicle Records)License status (active/suspended/revoked), traffic violations, DUI/DWI convictions, accident historyVehicle ownership, insurance status, driving behavior outside of official records
Credit CheckOutstanding debts, bankruptcies, collection accounts, payment history, credit score (varies by state)Income, savings, investment accounts, credit applications, purchasing history
Drug TestPresence of controlled substances in urine, hair, or saliva at the time of testingPast drug use (except hair tests which can detect ~90 days), prescription medications (unless they contain controlled substances), alcohol use
Professional LicenseLicense type, license number, issue and expiration dates, disciplinary actions, active/inactive statusQuality of work performed under the license, malpractice claims (separate search), CE compliance details
Social Media ScreeningPublic posts, public profile information, public group membershipsPrivate messages, private accounts, posts from before the time frame searched, deleted content

A critical distinction: the check shows records, not judgments. A criminal conviction appears in the report, but the report does not tell you whether that conviction should disqualify the candidate. That is your decision, and the EEOC has specific guidance on how to make it (covered in the EEOC section below).

Still Using Spreadsheets for Onboarding?
Automate documents, training assignments, task management, and track onboarding progress in real time.
See How It Works

What Does Not Show Up on a Background Check

Understanding what background checks cannot reveal is as important as understanding what they show. Several categories of information are either legally restricted from appearing in background check reports or simply not captured by the databases that CRAs search.

Legally Restricted Information

The FCRA and various state laws prohibit or limit the reporting of certain information. Arrests that did not lead to convictions cannot be reported by CRAs in most states and are excluded from reports in California, New York, and many other jurisdictions. Sealed and expunged records should not appear in CRA reports, although database lag can sometimes cause them to surface (the CRA is responsible for removing them when notified). Bankruptcies older than 10 years and civil judgments, tax liens, and other negative financial items older than 7 years are excluded from credit reports. Medical records and genetic information are prohibited from employment background checks under GINA and HIPAA.

Information That Requires Separate Investigation

Background checks do not cover everything an employer might want to know. Work performance, management skills, cultural fit, and interpersonal dynamics are not captured in any database. Reference checks (conversations with former managers and colleagues) are the only way to assess these qualities. Immigration status and work authorization are verified through the I-9 process, not through a background check. Salary history is restricted from employer inquiry in an increasing number of states regardless of the screening method used.

Social Media Screening Risks
Running social media checks yourself, rather than through a third-party CRA, creates significant legal risk. You may inadvertently learn about a candidate's race, religion, national origin, disability, pregnancy, or other protected characteristics that you are not permitted to consider in hiring decisions. Using a third-party social media screening service that filters out protected information is strongly recommended. Never ask candidates for their social media passwords. Several states, including California, Illinois, and Maryland, explicitly prohibit this practice.

How a Background Check Works: The 5-Step Process

The background check process follows the same sequence regardless of which types of checks you order. These five steps are dictated by the FCRA and apply every time you use a third-party CRA to screen a candidate. Skipping any step creates legal liability.

1
Written disclosure and consent
Before ordering the check, provide the candidate with a standalone written disclosure stating that you will conduct a background check. The disclosure must be a separate document. It cannot be part of the job application, the offer letter, or any other form. The candidate must sign a written consent authorizing you to proceed.
2
Candidate provides personal information
The candidate provides their full legal name, Social Security number, date of birth, and address history. This information is necessary for the CRA to accurately search the correct records and jurisdictions. Most CRA providers offer secure online forms for candidates to submit this information directly.
3
CRA searches the relevant databases
The CRA searches criminal court records, credit bureaus, employer records, educational institutions, DMV databases, and other sources based on which checks you ordered. Database searches return fastest (minutes to hours). Searches requiring human verification (employment, education) take longer (1 to 7 days).
4
Report is generated and delivered to you
The CRA compiles the results into a report. Under the FCRA, the CRA must follow reasonable procedures to ensure the accuracy of the information. If the CRA finds potentially negative information, they may flag it for your review. You receive the report through the CRA's portal or via secure email.
5
You review and make an adjudication decision
Review the results against your written adjudication criteria. If the results are clear (no records found, all verifications confirmed), proceed with onboarding. If you find something that concerns you, apply the EEOC's three-factor test: nature of the offense, time elapsed, and relevance to the job. If you decide not to hire, follow the adverse action process.

The entire process takes 1 to 7 business days from consent to decision. The bottleneck is almost always employment and education verification, which requires contacting third parties who may not respond quickly. Criminal checks, SSN traces, and MVR checks typically return within 1 to 3 business days. Drug tests return in 1 to 3 days after the specimen is collected. The hiring and onboarding process guide covers how to sequence background checks within the broader hiring timeline.

What worked for me
I set up a standard process: the moment a candidate verbally accepts, I send the disclosure and consent form via e-signature. Most candidates sign within hours. I submit the check the same day. By the time we have agreed on a start date, the results are usually back. This eliminates the "waiting for the background check" delay that pushes start dates out. The key is sending the forms immediately after verbal acceptance, not waiting until the written offer is signed.

Where the Background Check Fits in Your Onboarding Workflow

Every article about background checks ends at the hiring decision. None of them show you where the check sits in the actual onboarding workflow: the sequence of steps from verbal offer through Day 1 that involves disclosure forms, consent signatures, compliance paperwork, and task sequencing. For a small business owner who is running this process themselves, seeing the full timeline matters more than any individual step.

Day -7Verbal Offer
Extend conditional offer. The offer is contingent on passing the background check. Never say 'you got the job' without that qualifier.
Day -6Disclosure + Consent
Send the standalone disclosure document and get the candidate's written consent. This is a separate form, not buried in your application. FCRA requires it.
Day -5Order Background Check
Submit the check to your CRA provider (Checkr, GoodHire, Sterling, etc.). Include the candidate's full legal name, SSN, date of birth, and address history.
Day -3 to -1Results Returned
Most checks complete in 1 to 5 business days. Criminal searches take longest. Review results and make your adjudication decision. Document everything.
Day 0Onboarding Begins
Background check is clear. Start your onboarding process: I-9 verification, W-4, state tax forms, e-signature on handbook, and Day 1 schedule.

The critical insight: the background check is not a standalone event. It is one task in a sequence that includes the preboarding process, compliance documentation, and Day 1 preparation. When you treat it as a standalone event, it creates gaps: the check comes back clear but nobody started the I-9 process, or the start date arrives but the onboarding tasks are not assigned. When you treat it as one step in an automated workflow, everything moves forward together.

This is specifically why I built task workflows into FirstHR: to sequence the steps that surround the background check (send disclosure, collect consent via e-signature, track check status, trigger onboarding tasks when clear) so that nothing falls through the cracks when the person running the process is also the person running the business. The onboarding workflow guide covers the full task sequence from offer to Day 90.

Still Using Spreadsheets for Onboarding?
Automate documents, training assignments, task management, and track onboarding progress in real time.
See How It Works

How Long Does a Background Check Take?

The total time depends on which checks you order. Some return in minutes. Others take up to a week. The bottleneck is almost always verification checks that require contacting third parties.

Check TypeTypical TurnaroundWhat Causes Delays
SSN Trace / IdentityMinutes to 1 dayRarely delayed. Automated database search.
National Criminal DatabaseMinutes to 1 dayDatabase-only search. Fast but less comprehensive than county searches.
County Criminal Search1-5 business daysSome counties require in-person courthouse retrieval by a researcher. Rural counties with limited digital records take longest.
State Criminal Search1-3 business daysDepends on whether the state has a centralized repository. Some states (Texas, California) have good digital access. Others require mail-in requests.
Federal Criminal Search1-3 business daysPACER database search. Generally fast.
MVR (Motor Vehicle Records)Minutes to 1 dayAutomated in most states. A few states still require manual processing.
Credit CheckMinutes to 1 dayAutomated search of credit bureau databases.
Employment Verification1-7 business daysDepends entirely on how quickly former employers respond. Large companies with automated verification (The Work Number) respond in hours. Small businesses may take days or not respond at all.
Education Verification2-7 business daysDepends on institutional response time. Some universities have online verification portals. Others require written requests.
Drug Test1-3 days after collectionSpecimen must be collected at a lab, shipped, and analyzed. Positive screens require confirmation testing.
Professional License1-3 business daysDepends on the licensing board. Some have online lookup tools. Others require manual verification.

For most small businesses, the practical total is 2 to 5 business days from consent to completed report. To minimize delays, submit the check immediately after receiving consent. Do not wait for the written offer to be signed. Do not wait for a start date to be agreed upon. The check runs in parallel with everything else. The onboarding timeline guide covers how to sequence all preboarding tasks to avoid delays.

The Parallel Processing Approach
The biggest time-saver in the background check process is running it in parallel with other preboarding tasks, not in sequence. While the check is processing, you can be preparing the employee's workspace, setting up their technology accounts, preparing their 30-60-90 day plan, and scheduling their first-week meetings. When the check clears, you are ready for Day 1 instead of starting preparations from scratch.

How Much Does a Background Check Cost?

Background check costs depend on two variables: which types of checks you run and which provider you use. Individual check prices range from $3 for an SSN trace to $75 for a comprehensive drug test. Most CRA providers sell bundled packages that cost less than ordering individual checks.

Package LevelWhat It IncludesTypical Cost RangeBest For
BasicCriminal (national + 1 county) + SSN trace$25-$45Low-risk administrative roles, entry-level positions, small office staff
StandardCriminal (national + multi-county) + SSN trace + employment verification (1-2 employers)$45-$85Most roles at a small business: operations, customer service, general staff
EnhancedStandard + education verification + MVR + drug test$85-$140Roles involving driving, financial access, or industry-specific requirements
ComprehensiveEnhanced + credit check + professional license verification + social media screening$140-$250Senior roles, healthcare, financial services, government contractors

For a small business hiring 5 to 15 people per year, the total annual cost of background checks ranges from $175 to $2,250 (at $35 to $150 per check). That is less than the cost of one month of a part-time HR consultant. Compared to the $15,000 to $50,000 cost of a bad hire (SHRM), background checks are the highest-ROI investment in the hiring process.

Most CRA providers do not charge monthly fees. You pay per check. This makes background checks accessible even for businesses that hire infrequently. Volume pricing kicks in at 25 to 50+ checks per year and typically saves 10 to 25% per check. The cost of hiring guide covers the full expense breakdown for bringing on a new employee.

Cost by Role: 4 Real Scenarios for Small Businesses

Abstract pricing ranges are less useful than seeing what a background check actually costs for the specific roles you are hiring. Here are four common scenarios for small businesses, with the checks you should run and the approximate total cost.

First Admin Hire
$30-$55
Your first office manager, receptionist, or administrative assistant. Low risk role with no driving, no financial access, no regulated license.
Criminal (county + national)
SSN Trace
Employment verification (1 employer)
Sales Rep Who Drives
$55-$120
Field sales, delivery driver, or any employee who operates a company vehicle or drives for work purposes.
Criminal (county + national)
SSN Trace
MVR
Employment verification (2 employers)
Drug test (if DOT-regulated)
Accountant or Bookkeeper
$75-$150
Anyone who handles company finances, processes payments, or has access to financial accounts and sensitive data.
Criminal (county + national)
SSN Trace
Credit check
Education verification
Employment verification (2 employers)
Professional license (CPA)
Healthcare Worker
$100-$200
Nurse, medical assistant, home health aide, or anyone in a patient-facing role at a medical or dental practice.
Criminal (county + national + federal)
SSN Trace
OIG/SAM exclusion check
Professional license verification
Drug test
Education verification

The pattern: the more sensitive the role, the more checks you need, and the higher the cost. But even the most comprehensive screening (healthcare worker at $100 to $200) is a fraction of what it costs to hire, train, and then replace someone who should not have been hired. The turnover cost guide breaks down the full financial impact of a hire that does not work out.

Companies Using FirstHR Onboard 3x Faster
Join hundreds of small businesses who transformed their new hire experience.
See It in Action

FCRA Compliance: The Law You Must Follow

The Fair Credit Reporting Act (FCRA) is the federal law that governs how employers use background checks in hiring decisions. If you use a third-party CRA (which includes every background check provider, from Checkr to local screening companies), you must follow FCRA requirements. Violating the FCRA carries statutory damages of $100 to $1,000 per incident, plus actual damages, punitive damages, and attorney fees. Class action FCRA lawsuits against employers regularly result in settlements exceeding $1 million.

The FCRA requirements for employers are straightforward but must be followed precisely.

Before the Check: Disclosure and Consent

You must provide the candidate with a clear, conspicuous, written disclosure stating that you may obtain a consumer report (background check) for employment purposes. This disclosure must be a standalone document. It cannot be included in the job application. It cannot be combined with the offer letter. It cannot be part of an employee handbook acknowledgment. One document, one purpose. The candidate must then provide written authorization for you to proceed. Electronic signatures satisfy this requirement in all 50 states.

During the Check: Permissible Purpose

You must have a "permissible purpose" for ordering the check. Employment screening is a permissible purpose, but only for the specific role the candidate is being considered for. Running a check on someone who has not applied for a job, or running checks on all employees without a legitimate business reason, can violate the FCRA. The FTC provides guidance on employer obligations under the FCRA.

After the Check: Adverse Action Process

If you decide not to hire someone (or to take any other negative action) based in whole or in part on the background check results, you must follow the adverse action process. This is a two-step procedure with a mandatory waiting period, covered in detail in the adverse action section below.

The Standalone Disclosure Rule
The single most common FCRA violation by small businesses is including the background check disclosure in the job application or bundling it with other forms. This sounds like a technicality, but it has produced significant class action settlements. The disclosure must stand alone. A one-page document that says: "We may obtain a consumer report for employment purposes. Your signature below authorizes us to do so." That is all it needs to say. Keep it simple. Keep it separate.

EEOC Rules: Non-Discrimination in Background Screening

The Equal Employment Opportunity Commission (EEOC) provides specific guidance on background checks that every employer must follow. The core principle: you cannot use background check results in a way that disproportionately excludes candidates based on race, national origin, sex, religion, disability, age, or genetic information (protected classes under Title VII, ADA, and GINA).

The Three-Factor Test

When a criminal record appears in a background check, the EEOC requires employers to evaluate it using three factors before making a hiring decision.

FactorWhat to ConsiderExample
Nature and gravity of the offenseHow serious was the conduct? Violent crimes are more concerning than minor property offenses.A conviction for embezzlement is highly relevant for a bookkeeper role. A minor vandalism charge from college is not.
Time elapsed since the offenseHow long ago did it occur? People change. A conviction from 15 years ago carries less weight than one from last year.A DUI from 10 years ago with no subsequent offenses is very different from a DUI from 6 months ago for a driving role.
Nature of the jobDoes the offense relate to the job duties? A theft conviction is relevant for a role handling money but not for a warehouse position.A fraud conviction is relevant for a financial role. A marijuana possession charge (in a non-DOT role) may not be relevant for an office position.

What the EEOC Prohibits

Blanket policies that automatically exclude anyone with a criminal record violate Title VII because they disproportionately affect certain racial and ethnic groups. You cannot have a policy that says "no felonies, ever, for any position." You must conduct an individualized assessment for each candidate with a record, considering the three factors above. You must also give the candidate an opportunity to explain the circumstances before making a final decision.

This does not mean you must hire people with criminal records. It means you must evaluate each case individually rather than applying automatic exclusions. The HR rules and regulations guide covers the broader anti-discrimination framework that applies to all employment decisions.

Ban-the-Box: State-by-State Overview

Ban-the-box laws restrict when employers can ask about criminal history in the hiring process. The term refers to removing the checkbox on job applications that asks "Have you ever been convicted of a crime?" As of 2026, 37+ states and over 150 cities and counties have enacted some form of ban-the-box legislation.

States with comprehensive ban-the-box37+ states
Prohibit asking about criminal history on the initial application. Timing of when you can ask varies by state.California, New York, Illinois, New Jersey, Massachusetts, Colorado, Washington, Oregon, Connecticut, Hawaii, Minnesota, and 25+ others
States with public-sector only~7 states
Ban-the-box applies only to government employers, not private businesses.Georgia, Indiana, Kentucky, Louisiana, Missouri, Oklahoma, Pennsylvania (state level)
States with no ban-the-box law~6 states
No state-level restriction on when employers can ask about criminal history.Alabama, Alaska, Mississippi, South Carolina, South Dakota, Wyoming

The practical implication for small businesses: in most states, you should not ask about criminal history on the job application. Make a conditional offer first. Run the background check after the candidate accepts the conditional offer. Then evaluate any results using the EEOC's three-factor test. This sequence complies with ban-the-box laws in all states and follows EEOC best practices regardless of your state's specific law.

Some states have additional restrictions. California's Fair Chance Act applies to employers with 5+ employees and requires individualized assessment. New York City's Fair Chance Act (Article 23-A) requires a written analysis of each criminal record using specific factors. Illinois requires written notice to the candidate if the check reveals a conviction. The compliance hub provides state-by-state details for all 50 states.

The Adverse Action Process: What to Do When Results Are Not Clear

Adverse action is the legal term for any negative employment decision based on a background check: deciding not to hire, rescinding an offer, terminating employment, or denying a promotion. The FCRA requires a specific two-step process with a mandatory waiting period. Skipping any step is a violation.

Step 1Pre-Adverse Action Notice
Send the candidate a copy of the background check report, a summary of their FCRA rights, and a written notice that you are considering not hiring them based on the results. This is not a rejection. It is a heads-up.
Step 2Waiting Period (5+ Business Days)
Give the candidate at least 5 business days to review the report and dispute any inaccuracies with the CRA. Some states require longer waiting periods. During this time, do not withdraw the offer or hire someone else for the role.
Step 3Final Adverse Action Notice
If the candidate does not dispute or the dispute does not change the results, send the final adverse action notice. Include: the CRA's name and contact information, a statement that the CRA did not make the hiring decision, and the candidate's right to request another copy of the report within 60 days.

The adverse action process exists to protect candidates from inaccurate background check reports. CRA databases are not perfect. Records can be misattributed (common names, data entry errors), outdated (showing arrests that were later dismissed), or simply wrong. The waiting period gives the candidate time to identify and dispute errors before you make a final decision.

For small businesses, the adverse action process feels bureaucratic. You found something concerning. You do not want to hire this person. You want to move on. But skipping the process creates legal liability that far exceeds the inconvenience of waiting 5 business days. FCRA violations carry statutory damages of $100 to $1,000 per incident, and class action suits regularly exceed $1 million in total damages. The onboarding documents guide covers the full compliance documentation timeline including adverse action records.

The Real Risk of Skipping Adverse Action
Only 12% of employees strongly agree their organization does a great job of onboarding (Gallup). The onboarding process starts before Day 1: how you handle the background check, communicate results, and manage the adverse action process (when needed) sets the tone for the entire employment relationship. Candidates talk. A professional, compliant process protects your reputation as an employer even when you decide not to hire.

Background Check Requirements by Industry

Some industries require specific background checks by law. Others have no requirements but follow industry standards. Understanding which category your business falls into determines your minimum screening obligations.

HealthcareTypical checks: Criminal (federal + state + county), OIG/SAM exclusion list, professional license verification, drug test, education verificationWhy: HIPAA violations, patient safety, CMS exclusion rules. Required for Medicare/Medicaid participation.
Financial ServicesTypical checks: Criminal, credit check, FINRA registration (Series 7/63/66), employment verification, education verificationWhy: FINRA Rule 3110 requires background investigation. Fiduciary duty and access to client funds.
Transportation / DrivingTypical checks: Criminal, MVR, drug test (DOT-mandated for CDL holders), employment verification (3 years minimum for DOT)Why: FMCSA/DOT regulations. Employer liability for accidents. Insurance requirements.
Education / ChildcareTypical checks: Criminal (fingerprint-based in many states), sex offender registry, child abuse registry, education verificationWhy: State childcare licensing requirements. Title IX compliance. In loco parentis duty of care.
Government / DefenseTypical checks: Criminal (FBI fingerprint), credit check, employment verification (10 years), education verification, reference checks, citizenship verificationWhy: National security clearance requirements. FAR/DFAR contractor obligations. Public trust standards.
General Business (No Regulatory Requirement)Typical checks: Criminal (county + national), SSN trace, employment verification (1-2 employers)Why: No federal requirement for general employers to run background checks. Voluntary best practice for negligent hiring protection.

If your business does not fall into a regulated industry, background checks are voluntary. But "voluntary" does not mean "unnecessary." Negligent hiring liability applies to all employers regardless of industry. The question is not whether to run checks but which checks are appropriate for each role. The onboarding plan guide covers how to build role-specific onboarding processes that include the right level of screening.

DIY vs. Using a Background Check Provider

Small business owners sometimes consider running background checks themselves to save money. You can search county court websites, call former employers, and verify degrees directly with universities. The question is whether the savings justify the risks and the time investment.

Cost per check
DO IT YOURSELFVaries widely: $0 for free court searches to $25+ per database
USE A CRA PROVIDER$30-$100+ per package, with volume discounts
Turnaround time
DO IT YOURSELF1-10+ days depending on courthouse backlogs and manual searches
USE A CRA PROVIDER1-5 business days for most packages, instant for some databases
FCRA compliance
DO IT YOURSELFYou are responsible for every step: disclosure, consent, adverse action, dispute handling
USE A CRA PROVIDERCRA handles data accuracy and reinvestigation. You still handle disclosure, consent, and adverse action notices.
Accuracy
DO IT YOURSELFRisk of incomplete searches, missed jurisdictions, outdated records
USE A CRA PROVIDERCRAs are legally required to follow reasonable procedures for accuracy (FCRA Section 607b)
Legal liability
DO IT YOURSELFFull liability for errors, missed records, and improper use of information
USE A CRA PROVIDERShared liability: CRA liable for inaccurate reporting, employer liable for improper use
Scalability
DO IT YOURSELFWorks for 1-2 hires per year. Breaks down at 5+ hires.
USE A CRA PROVIDERBuilt for volume. Dashboard, tracking, integrations with HR software.

The recommendation for small businesses: use a CRA provider for criminal checks, credit checks, and any check that involves accessing regulated databases. You can do employment and education verification yourself (by calling former employers and schools directly), but even this is more efficient through a CRA if you are hiring more than 2 to 3 people per year. The time you spend manually verifying employment is time you are not spending on revenue-generating work. At a founder's effective hourly rate, the $40 to $80 you save by doing it yourself is almost never worth the 2 to 4 hours of effort.

What worked for me
I tried doing employment verification myself for the first few hires. Calling former employers during business hours (when I was also supposed to be running my business), getting voicemail, leaving messages, following up, getting transferred to someone in HR who asked me to submit a written request. It took 3 to 5 hours per candidate. After the third time, I signed up with a CRA provider and never looked back. The $40 per check is one of the best returns on money I spend.

How to Choose a Background Check Provider

The background check provider market has dozens of options, from enterprise platforms (Sterling, HireRight) to SMB-focused providers (Checkr, GoodHire) to local screening companies. For a small business, five criteria matter most.

CriterionWhat to Look ForRed Flag
FCRA complianceThe provider is accredited by the Professional Background Screening Association (PBSA) and conducts checks as a CRA under the FCRANo PBSA accreditation, no mention of FCRA compliance, or the provider suggests you can skip the disclosure/consent process
Pricing transparencyClear per-check pricing or package pricing published on the website. No setup fees or monthly minimums.Pricing hidden behind a 'request a quote' wall with no indication of cost range. Monthly minimums that penalize low-volume users.
Turnaround timeCriminal checks in 1-3 business days. Employment verification in 3-5 business days. Clear SLAs.Vague 'results may take up to 2 weeks' without specifying which check types cause delays.
Self-service portalOnline ordering, candidate invitation via email, real-time status tracking, downloadable reportsPhone-only ordering, fax-based processes, or paper-based reporting
Integration optionsAPI or direct integration with your HR software for automated check ordering and result trackingNo integration capabilities, requiring manual data entry between your HR system and the screening platform

For most small businesses hiring 5 to 15 people per year, a provider like Checkr or GoodHire offers the right balance of price, speed, and ease of use. Enterprise providers like Sterling and HireRight are designed for companies running hundreds or thousands of checks per year and often have pricing and feature structures that do not fit small-business needs. The HR technology guide covers how background check providers fit into the broader HR tech stack.

Background Check vs. Reference Check vs. Employment Verification

These three terms are frequently confused, but they serve different purposes and return different information.

Background CheckReference CheckEmployment Verification
What it isInvestigation of official records (criminal, credit, driving, etc.) through a CRAConversation with people the candidate selects as professional referencesConfirmation of job titles, dates, and employers with former employers
Who provides the infoCourts, credit bureaus, DMVs, licensing boards, institutionsThe candidate's chosen references (former managers, colleagues, mentors)Former employers' HR departments or automated verification services
What it revealsCriminal history, credit status, driving record, license status, verified degreesWork style, strengths, weaknesses, interpersonal skills, management styleWhether the candidate actually held the positions they claimed
Legal frameworkFCRA governs use through CRAs. EEOC governs non-discrimination.No specific federal regulation. Subject to general anti-discrimination law.Part of background check if done through CRA. Otherwise no specific regulation.
Cost$25-$250 per candidate depending on scope$0 (you make the calls) or $50-$150 (through a reference check service)$10-$50 per employer verified through a CRA
When to useAfter conditional offer, before start dateDuring the interview process or after conditional offerAs part of the background check package or independently

The best practice for small businesses: run a background check (criminal + employment verification at minimum) on every hire. Conduct reference checks on candidates for senior or high-trust roles. Use employment verification as part of your background check package rather than as a standalone step. The questions to ask new employees guide covers how to gather useful information through structured conversations at every onboarding milestone.

8 Common Mistakes That Create Legal Risk

After working with dozens of small business owners on their hiring processes, I see the same mistakes repeatedly. Every one of them creates legal exposure that is entirely preventable.

Running the check before making a conditional offerIn 37+ states, ban-the-box laws prohibit asking about criminal history on the initial application. Make a conditional offer first, then run the check. Even in states without ban-the-box, the EEOC recommends this sequence.
Burying the disclosure in your job applicationFCRA requires the disclosure to be a standalone document. It cannot be part of the employment application, the offer letter, or any other document. One page, one purpose: informing the candidate that you will run a background check.
Applying a blanket 'no felonies' policyThe EEOC prohibits blanket criminal record exclusions. You must consider the nature of the offense, how much time has passed, and the nature of the job. A theft conviction may be relevant for a bookkeeper role but not for a warehouse position.
Skipping the pre-adverse action noticeYou cannot go from 'the check came back with something' to 'you are not hired' in one step. The pre-adverse action notice gives the candidate 5+ business days to dispute inaccuracies. Skipping it is an FCRA violation with statutory damages of $100-$1,000 per incident.
Using the same background check package for every roleA credit check for a warehouse worker is unnecessary and potentially illegal in 13 states. A drug test for an office administrator may violate state law. Match the check to the role: driving roles need MVR, financial roles need credit, healthcare roles need license verification.
Running background checks on current employees without new consentIf you want to run periodic checks on existing employees, you need fresh written consent. The consent they signed at hiring does not automatically cover future checks unless it explicitly says so and your state allows it.
Not having a consistent adjudication policyIf you deny one candidate with a DUI but hire another with a similar record, you are creating disparate treatment liability. Write down your adjudication criteria before you start screening. Apply them consistently.
Telling the candidate why they were rejected verbally instead of in writingThe adverse action process requires written notices. A phone call saying 'the background check was an issue' does not satisfy FCRA requirements. Send the written pre-adverse and final adverse action notices every time.

The mistake behind most of these mistakes: treating the background check as informal due diligence rather than a legally regulated process. The FCRA, EEOC, and state laws create specific requirements for each step. Following them is not difficult, but you have to know they exist. The human resource laws guide covers the broader legal framework that applies to all employment decisions, not just background checks.

State-Specific Background Check Laws

Federal law (FCRA and EEOC guidance) sets the baseline. Many states add requirements on top. These state laws affect what you can search, when you can search it, how far back the results go, and what you must do with the results. Operating across multiple states means following the most restrictive applicable law.

Lookback Period Restrictions

Twelve states limit how far back a CRA can report non-conviction criminal records when the candidate's expected salary is below a threshold (typically $75,000): California, Colorado, Kansas, Maryland, Massachusetts, Montana, New Hampshire, New Mexico, New York, Texas, Washington, and Hawaii. In these states, arrests that did not result in conviction cannot appear on the report if they are older than 7 years. Convictions have no time limit at the federal level, but some states (California, for example) restrict reporting of older convictions for certain roles.

Credit Check Restrictions

Thirteen states restrict or prohibit credit checks for employment purposes unless the position involves financial responsibilities: California, Colorado, Connecticut, Delaware, Hawaii, Illinois, Maryland, Nevada, Oregon, Vermont, Washington, and New York City and Chicago (via local ordinance). If your business operates in one of these jurisdictions and the role does not involve handling money, accessing financial data, or managing company assets, do not run a credit check. The HR best practices guide covers state-specific employment requirements in detail.

Drug Testing Laws

Drug testing laws vary dramatically by state. Some states (Alabama, Florida, Georgia) have voluntary drug-free workplace programs that provide workers' compensation premium discounts for employers who test. Other states (California, Nevada, New York) have legalized recreational marijuana and restrict or prohibit testing for cannabis in most employment contexts. DOT-regulated positions (CDL holders, pipeline workers, transit employees) are federally mandated to test regardless of state marijuana laws. Before implementing drug testing, check your specific state's current law because this area is changing rapidly.

Salary History Bans

Twenty-one states and numerous cities prohibit employers from asking about salary history during the hiring process. While this is not strictly a background check issue, it intersects when employment verification includes salary disclosure. Some CRA providers automatically exclude salary information from employment verification results in states with salary history bans. If you are verifying employment in a state with a salary ban, ensure your CRA provider knows not to request or report salary information. The job offer email guide covers how to structure offers without relying on salary history data.

Multi-State Compliance
If you hire employees in multiple states, apply the most restrictive applicable law to your screening process rather than trying to maintain different processes per state. For example, if you have employees in California and Texas, use California's stricter rules for all hires. This simplifies compliance and ensures you never accidentally apply the wrong state's law to a candidate. The only exception is drug testing, where DOT-regulated positions follow federal rules regardless of state law.

How to Handle Background Check Results

When background check results come back, they fall into one of three categories: clear, flagged, and needs adjudication. Each requires a different response, and having a written policy for all three before you start screening prevents inconsistent and potentially discriminatory treatment.

Clear Results

No records found, all verifications confirmed. This is the ideal outcome and the most common one. Proceed directly to onboarding. Trigger the preboarding process: send the welcome email, begin I-9 preparation, assign Day 1 tasks, and confirm the start date. Store the background check report in the employee's personnel file with the signed disclosure and consent forms.

Flagged Results (Minor Issues)

Minor discrepancies that do not necessarily affect the hiring decision: a job title that differs slightly from what the candidate listed, an employment date that is off by a few months, an education record that shows "attended" rather than "graduated." These require a conversation with the candidate, not an adverse action. Contact the candidate, share the discrepancy, and ask for clarification. In many cases, the explanation is simple: the candidate used a working title instead of their official title, or remembered graduation dates incorrectly. Document the conversation and the explanation in the file.

Needs Adjudication (Criminal Records or Significant Discrepancies)

Criminal convictions, significant resume fabrication (claiming a degree that was never earned, fabricating an entire employer), or failed drug tests require formal adjudication. Apply the EEOC's three-factor test for criminal records. For resume fabrication, the decision is more straightforward: fabricating credentials is a trust issue that most employers consider disqualifying regardless of the position. For drug tests, follow your written drug-free workplace policy. If you decide not to hire, follow the full adverse action process. Document your reasoning in writing and retain it with the background check report.

What worked for me
I created a simple one-page adjudication policy before I started screening. Three questions: (1) Is the finding directly related to the job? (2) How long ago did it happen? (3) Is there evidence of rehabilitation or change? If the answer to #1 is no, I proceed with the hire regardless of the finding (unless it is a regulatory disqualifier). If the answer to #1 is yes, I consider #2 and #3 before making a decision. Having this written down before the first check came back with anything meant I never had to make a judgment call under pressure without a framework.

Continuous Screening and Re-Screening Current Employees

Pre-employment background checks are a snapshot. They tell you what the candidate's record looked like on the day the check was run. They do not tell you what happens after the person is hired. Some employers implement continuous screening programs that monitor employees' records on an ongoing basis, or conduct periodic re-screening at set intervals.

When Continuous Screening Makes Sense

Continuous screening is most relevant for roles where a post-hire change in status could create serious risk. CDL holders whose license gets suspended. Healthcare workers who get added to an exclusion list. Financial services employees who develop credit problems. Employees with security clearances whose circumstances change. For these roles, waiting until the next scheduled re-screen (which might be years away) creates an unacceptable risk window.

Legal Requirements for Re-Screening

If you want to run background checks on current employees, you need fresh written consent. The consent the employee signed at hiring does not automatically extend to future checks unless it explicitly stated that ongoing screening would occur. Even with broad consent language, some courts have held that consent must be "knowing and voluntary" for each individual check. The safest approach is to include a continuous screening consent clause in your initial authorization and then notify employees before each re-screen.

Apply the same FCRA requirements to employee checks that you apply to candidate checks: written disclosure, written consent, and adverse action process if the results lead to any negative employment action (termination, demotion, reassignment). The personnel file guide covers what documentation to keep for each employee, including background check records.

Practical Approach for Small Businesses

Most small businesses with 5 to 50 employees do not need continuous screening programs. The cost and administrative burden outweigh the risk reduction for general roles. Instead, implement re-screening triggers: run a new check when an employee is promoted to a role with greater responsibility, when they transfer to a position that requires additional screening (moving from office work to a driving role), or when a specific incident raises concerns. The employee lifecycle guide covers how to manage employee transitions including role changes that may trigger re-screening.

Background Checks for International Candidates

If you are hiring someone who has lived or worked outside the United States, domestic background checks will not cover their international history. International background checks are more complex, more expensive, and take longer than domestic checks. They are also less standardized because each country has different record-keeping systems, privacy laws, and access rules.

What International Checks Cover

International criminal checks search the equivalent of court records in the countries where the candidate lived. Response times range from 5 to 30+ business days depending on the country. Some countries (UK, Canada, Australia) have centralized criminal record systems that respond relatively quickly. Others (many countries in Asia, Africa, and South America) require in-country researchers to visit local courts, which takes weeks. International education and employment verification follows the same pattern: centralized systems respond quickly, manual systems take time.

Cost and Turnaround

International background checks typically cost $50 to $200+ per country searched, on top of domestic check costs. Turnaround ranges from 5 to 30+ business days per country. For a candidate who lived in two countries before the US, the international component alone could cost $100 to $400 and take 2 to 4 weeks. For most small businesses hiring domestically, international checks are unnecessary. They become relevant when hiring foreign nationals, employees with significant international work history, or remote employees working from abroad.

The USCIS I-9 verification process confirms work authorization but does not replace a background check. I-9 verifies that the person is legally authorized to work in the United States. It does not search criminal records, verify employment history, or confirm educational credentials. They are separate processes with separate purposes. The contractor onboarding guide covers the documentation differences between W-2 employees and independent contractors, including international contractors.

Building Your Background Check Policy

A written background check policy protects your business from inconsistent screening practices, discrimination claims, and FCRA violations. The policy does not need to be long. One to two pages covering the essentials is sufficient for most small businesses.

What to Include in Your Policy

Policy SectionWhat to DocumentWhy It Matters
ScopeWhich positions require background checks. Whether all roles are screened or only specific categories.Prevents allegations of selective or discriminatory screening. Consistency is legally important.
Types of checks by role categoryWhich check types apply to each role category (entry-level, driving, financial, healthcare, leadership).Prevents over-screening (running credit checks on warehouse workers) and under-screening (skipping MVR on delivery drivers).
TimingWhen in the hiring process the check is ordered: after conditional offer, before start date.Ensures compliance with ban-the-box laws and demonstrates a consistent process.
Adjudication criteriaThe factors you consider when evaluating negative results. Must include EEOC three-factor test at minimum.Provides a documented, consistent framework for decisions. Protects against discrimination claims.
Adverse action processStep-by-step procedure for handling negative results: pre-adverse notice, waiting period, final notice.Ensures FCRA compliance every time. Prevents shortcuts under time pressure.
Record retentionHow long background check reports, consent forms, and adverse action notices are retained.Federal and state retention requirements vary. EEOC recommends 1 year minimum. Some states require longer.
Continuous screeningWhether current employees are subject to re-screening and under what circumstances.Avoids surprises for employees and ensures you have the legal basis (fresh consent) for post-hire checks.

The most important element is the adjudication criteria. Without written criteria, every negative result becomes an ad hoc decision. Ad hoc decisions are inconsistent. Inconsistent decisions create disparate treatment liability. Write down your criteria before you run your first check, apply them consistently, and document your reasoning for every adverse decision. The onboarding policy guide covers how to structure your broader onboarding policies including background check integration.

Why Onboarding Structure Matters
Only 12% of employees strongly agree their organization does a great job of onboarding (Gallup). Background checks are part of the onboarding experience. When the process is professional, consistent, and transparent, it signals to the candidate that your company takes employment seriously. When it is disorganized, delayed, or confusing, it signals the opposite. The onboarding experience starts at the conditional offer, not on Day 1.

Record Keeping and Storage

Background check records are employment records subject to federal and state retention requirements. Proper storage protects your business during audits, litigation, and compliance reviews.

What to Retain

For every background check you run, retain the following documents: the signed disclosure form, the signed consent form, the complete background check report, any adverse action notices (pre-adverse and final), the candidate's response to adverse action notices (if any), and your written adjudication analysis (if the check returned negative results). These documents should be stored together, either in a physical file or in a digital document management system.

How Long to Retain

The EEOC recommends retaining all hiring-related records for at least 1 year from the date of the hiring decision (or from the date of the adverse action, whichever is later). Title VII record-keeping requirements mandate 1 year for all personnel records. Some states require longer retention. California requires 4 years for employment applications and related records. The safest approach is to retain background check records for 5 to 7 years, which exceeds all state requirements and provides coverage for potential litigation with longer statutes of limitation. The employee records retention guide covers retention periods for all types of HR documents.

Storage and Access

Background check reports contain sensitive personal information: Social Security numbers, dates of birth, criminal history, credit data. These records must be stored securely with limited access. Physical files should be in a locked cabinet separate from general employee files. Digital files should be in a system with role-based access controls. Only people with a legitimate business need (the hiring manager, the owner, the HR person if you have one) should have access to background check reports.

SHRM recommends maintaining background check records in a separate confidential file, not in the employee's main personnel file. This prevents accidental disclosure of criminal history or credit information to supervisors who do not need access. The HR document management guide covers how to set up a secure filing system for all employment records.

Background Check Playbook for Your First Hire

If you have never run a background check before, the process can seem overwhelming. FCRA, EEOC, ban-the-box, adverse action, CRA providers, adjudication criteria. It sounds like you need an employment lawyer before you can hire your first employee. You do not. Here is the simplified playbook for a small business owner running their first background check.

1
Sign up with a CRA provider
Choose an SMB-friendly provider (Checkr and GoodHire are the most common for small businesses). No setup fee, no monthly minimum. Create an account in 10 minutes.
2
Select a basic package
For your first hire, start with criminal (county + national) + SSN trace + employment verification. This covers negligent hiring liability and resume fraud for $35 to $65.
3
Make a conditional offer
Tell the candidate: 'We would like to offer you this position, contingent on a satisfactory background check.' This satisfies ban-the-box requirements in all states.
4
Send disclosure and consent via e-signature
Most CRA providers include FCRA-compliant disclosure and consent forms in their platform. The candidate receives an email, reads the disclosure, signs consent, and enters their personal information. Takes 5 minutes.
5
Wait for results
Most basic packages return in 1 to 3 business days. You will receive an email when the report is ready. While you wait, start preparing for their first day.
6
Review and proceed
If clear: start onboarding. If not: apply the three-factor test, have a conversation with the candidate if appropriate, and follow the adverse action process if you decide not to hire.

Total time investment: 15 to 30 minutes of your time, plus 1 to 3 days of waiting. Total cost: $35 to $65. That is less time and money than a single job posting. The hiring plan guide covers how to build the full process from job posting through onboarding, with the background check properly sequenced in the workflow.

What worked for me
For anyone overwhelmed by the legal details in this article: your CRA provider handles most of the compliance for you. They provide the disclosure form. They collect the consent. They run the checks against the right databases. They format the report. You need to understand the adverse action process (because you execute that yourself), but the rest is largely handled by the platform. The biggest mistake is not running checks at all because the process seems complex. It is not. Sign up, order the check, review the results. Everything else is documentation.
Key Takeaways
A background check is a pre-employment screening process that investigates a candidate's criminal records, employment history, education, and other records. It is not one check but a menu of 9 different types, each with different costs, turnaround times, and legal requirements.
There is no federal law requiring background checks for general employment, but negligent hiring liability means you can be sued if you skip them and a hire causes harm. At minimum, run a criminal check and employment verification on every hire.
The FCRA requires three things: a standalone written disclosure, written consent before the check, and a two-step adverse action process if results affect the hiring decision. Violations carry statutory damages of $100 to $1,000 per incident.
Match checks to roles. Driving roles need MVR. Financial roles need credit checks. Healthcare roles need license verification and OIG screening. Do not run the same comprehensive package on every hire.
The background check fits between the conditional offer and Day 1 of onboarding. Run it in parallel with other preboarding tasks (workspace setup, technology provisioning, 30-60-90 planning) to avoid delaying the start date.
Use a CRA provider, not DIY. The time and legal risk of running checks yourself almost never justifies the savings, even for businesses that hire only a few people per year.
Ban-the-box laws in 37+ states prohibit asking about criminal history on the application. The safest sequence everywhere: make a conditional offer, then run the check, then evaluate results using the EEOC's three-factor test.
The adverse action process is non-negotiable. Pre-adverse notice, 5+ business day waiting period, final adverse notice. Skipping it is the most expensive FCRA mistake a small business can make.

Frequently Asked Questions

What is a background check?

A background check is a process where an employer reviews a job candidate's criminal records, employment history, education, driving record, credit history, and other public and private records to make an informed hiring decision. In the US, employers must follow the Fair Credit Reporting Act (FCRA) when using a third-party provider. This means providing written disclosure, obtaining written consent, and following the adverse action process if the results affect the hiring decision.

How long does a background check take?

Most background checks take 1 to 5 business days to complete. SSN traces and MVR checks can return in minutes. Criminal searches take 1 to 5 days depending on whether the search is database-only or includes county courthouse records. Employment and education verification take 1 to 7 days because they require contacting third parties. Drug tests return in 1 to 3 days. The total time depends on which types of checks you order and how responsive former employers and institutions are.

How much does a background check cost?

Background check costs range from $30 to $200 per candidate depending on which checks you include. A basic criminal check with SSN trace costs $30 to $55. Adding employment verification, MVR, and education verification brings the total to $75 to $150. Healthcare and financial services roles with credit checks, license verification, and drug testing can cost $100 to $200. Most CRA providers offer package pricing with volume discounts for businesses that screen frequently.

How far back does a background check go?

The lookback period varies by check type and state law. Criminal records have no federal time limit, but 12 states limit reporting to 7 years for non-conviction records when the salary is below a threshold (typically $75,000). Employment and education verification typically cover 7 to 10 years. Credit checks report up to 7 years for most negative items and 10 years for bankruptcies. MVR records typically go back 3 to 5 years depending on the state.

Can you fail a background check?

There is no pass or fail. A background check returns information, and the employer decides how to evaluate it. Under EEOC guidance, employers cannot apply blanket exclusion policies (such as no felonies ever). Instead, employers must consider the nature of the offense, how much time has passed, and the nature of the job. A conviction from 15 years ago for a non-related offense should be evaluated differently than a recent conviction directly related to the job duties.

What disqualifies you on a background check?

No single item automatically disqualifies a candidate unless the disqualification is required by law (for example, sex offender registries for childcare roles, or OIG exclusion lists for healthcare roles receiving federal funding). For most employers, disqualification depends on the nature of the offense, how recent it was, and the job's responsibilities. Lying on the application about criminal history is often a bigger disqualification than the record itself, because it demonstrates dishonesty.

Do all employers run background checks?

No. There is no federal law requiring private employers to run background checks for general employment. However, certain industries require them by law: healthcare (CMS/OIG exclusion screening), financial services (FINRA background investigation), transportation (DOT/FMCSA requirements for CDL holders), education and childcare (state licensing requirements), and government contractors (security clearance requirements). For general employers, background checks are a voluntary best practice.

Can I run a background check on someone without their consent?

No. Under the FCRA, employers must provide written disclosure to the candidate that a background check will be conducted, and the candidate must provide written consent before the check can proceed. The disclosure must be a standalone document, not part of the job application. Running a check without consent is an FCRA violation with statutory damages of $100 to $1,000 per violation, plus actual damages and attorney fees.

What is the difference between a background check and a reference check?

A background check verifies factual records through official databases and institutions: criminal courts, former employers, educational institutions, credit bureaus, and DMV records. A reference check is a conversation with people the candidate chooses to vouch for them. Background checks verify facts. Reference checks gather opinions. Both are useful, but they serve different purposes. A background check catches fabrication and criminal history. A reference check reveals work style, strengths, and how the person operates in a team.

Can I run a background check on a current employee?

Yes, but you need fresh written consent. The consent the employee signed at hiring does not automatically cover future checks unless it explicitly stated that ongoing checks would be conducted. Some states have additional restrictions on when and why employers can run checks on current employees. Common reasons for re-screening include promotion to a role with greater responsibility, a compliance requirement, or a workplace incident that triggers investigation.

What is a Consumer Reporting Agency (CRA)?

A CRA is a company that compiles and sells background check reports to employers. Under the FCRA, any company that regularly assembles or evaluates consumer information for the purpose of furnishing consumer reports is a CRA. Major CRA providers include Checkr, GoodHire, Sterling, HireRight, and Accurate Background. Using a CRA means the provider handles data collection and is legally responsible for the accuracy of the report. The employer remains responsible for proper disclosure, consent, and adverse action.

Do background checks show employment history?

Only if you order employment verification as part of the check. A standard criminal background check does not include employment history. Employment verification is a separate check where the CRA contacts the candidate's former employers to confirm job titles, dates of employment, and sometimes salary and reason for leaving. Former employers are not legally required to respond, so verification can take 1 to 7 days and may come back with limited information.

Ready to transform your onboarding?

7-day free trial No credit card required
Start Your Free Trial