International Background Checks: What’s Legal Where
Background checks are a standard part of hiring — but what’s legal in one country may be illegal in another. In 2026, with companies hiring globally, understanding international background check laws is essential for compliance and fair hiring.
This guide covers what you can and cannot check in major hiring regions, with practical guidance for staying compliant.
Why International Background Checks Are Complex
The Challenge
Background check laws vary dramatically by country:
- What you can check: Criminal records, education, employment history, credit — each has different rules
- How you can check: Direct verification, third-party providers, government databases — access varies
- When you can check: Before offer, after offer, after start date — timing requirements differ
- What consent is required: Written consent, specific disclosures, data processing agreements
The Stakes
Getting background checks wrong can result in:
- Legal liability: Fines, lawsuits, and regulatory action
- Data privacy violations: GDPR fines up to 4% of global revenue
- Discrimination claims: Using background check data inappropriately
- Reputational damage: Candidates sharing negative experiences
Regional Guide
United States
What’s allowed:
- Criminal records (federal and state)
- Employment verification
- Education verification
- Credit checks (with restrictions)
- Professional license verification
- Reference checks
- Social media (with caution)
Key regulations:
- Fair Credit Reporting Act (FCRA): Requires written consent, pre-adverse action notice, and adverse action notice
- Ban-the-box laws: Many states/cities prohibit asking about criminal history on initial applications
- EEOC guidance: Criminal history must be relevant to the job and consider time since conviction
- State-specific restrictions: Some states limit credit checks, salary history inquiries
Best practices: Always get written consent, provide required notices, and evaluate criminal records on a case-by-case basis considering relevance, recency, and rehabilitation.
See our US hiring guide。 for state-specific requirements.
European Union (GDPR Countries)
What’s allowed (varies by country):
- Employment verification: Generally allowed with consent
- Education verification: Generally allowed with consent
- Criminal records: Heavily restricted — only for specific roles
- Credit checks: Very restricted — usually only for financial roles
- Reference checks: Allowed with consent
Key regulations:
- GDPR: Requires lawful basis for processing, data minimization, purpose limitation
- National implementations: Each country has additional restrictions
Country-specific notes:
Germany: Criminal records only through official certificates (Führungszeugnis). Employers cannot request directly. Credit checks require specific justification.
France: Criminal records only for specific regulated roles. Employers must justify why the check is necessary and proportionate.
Netherlands: Criminal records only through official screening. Background checks must be proportionate to the role.
Key principle: Background checks must be necessary and proportionate to the role. You cannot conduct blanket checks across all positions.
See our GDPR hiring guide。 for detailed compliance requirements.
United Kingdom
What’s allowed:
- Basic criminal disclosure: Available for any role
- Standard/Enhanced criminal disclosure: Only for specific regulated roles
- Employment verification: Allowed with consent
- Education verification: Allowed with consent
- Credit checks: Allowed for financial roles with consent
- Right to work check: Mandatory for all employees
Key regulations:
- Rehabilitation of Offenders Act: Some convictions become “spent” after a period and don’t need to be disclosed
- DBS (Disclosure and Barring Service): Government body for criminal record checks
- Right to Work checks: Mandatory — employer must verify immigration status
Post-Brexit note: EU nationals now require immigration status verification. See our UK post-Brexit hiring guide
India
What’s allowed:
- Employment verification: Standard practice
- Education verification: Standard practice
- Criminal records: Court record checks available
- Address verification: Common
- Reference checks: Standard practice
- Drug testing: Allowed with consent
Key considerations:
- No comprehensive national criminal database: Checks are done at local/state level
- Data protection: Personal Data Protection Bill (pending implementation) will affect background checks
- Cultural sensitivity: Some checks may be viewed negatively by candidates
Japan
What’s allowed:
- Employment verification: Common
- Education verification: Common
- Criminal records: Very restricted — no public criminal database
- Credit checks: Rare and restricted
- Reference checks: Not culturally common
Key considerations:
- Privacy is paramount: Japan’s APPI restricts data collection
- Criminal records: Only available through police certificate for specific purposes (immigration, certain regulated roles)
- Cultural norms: Extensive background checking may be viewed as distrustful
Australia
What’s allowed:
- National criminal history check: Allowed with consent
- Employment verification: Allowed
- Education verification: Allowed
- Working with children check: Required for child-related roles
- Right to work check: Mandatory
- Credit checks: Allowed for financial roles
Key regulations:
- Spent convictions scheme: Some convictions become spent after 10 years
- Anti-discrimination laws: Criminal history must be relevant to the role
- Privacy Act: Governs collection and use of personal information
Best Practices for International Background Checks
1. Establish a Global Policy with Local Flexibility
Create a global background check policy that sets minimum standards while allowing country-specific adjustments:
Global minimum:
- Employment verification
- Education verification
- Right to work verification
Country-specific additions:
- Criminal records (where legally available and proportionate)
- Professional license verification
- Credit checks (for financial roles only)
2. Use Reputable Providers
International background check providers with global coverage:
- Checkr: Strong US coverage, expanding globally
- Sterling: Global coverage, enterprise-focused
- HireRight: Comprehensive international checks
- First Advantage: Strong APAC coverage
- Certn: Modern platform, good for remote hiring
3. Get Proper Consent
Every background check requires consent. Ensure your consent:
- Is in the local language
- Specifies exactly what will be checked
- Explains how data will be used and stored
- Complies with local data privacy laws
- Is separate from the employment contract
4. Follow Adverse Action Procedures
When a background check reveals concerning information:
- Review the findings: Are they relevant to the role?
- Consider context: How recent? What’s the rehabilitation evidence?
- Notify the candidate: Provide a copy of the report and pre-adverse action notice
- Allow response: Give the candidate time to dispute or explain
- Make a documented decision: Record your reasoning
- Send final notice: If adverse action is taken, send required notices
5. Timing Matters
| Check Type | When to Conduct |
|---|---|
| Right to work | Before start date (mandatory) |
| Employment verification | After conditional offer |
| Education verification | After conditional offer |
| Criminal records | After conditional offer (where allowed) |
| Credit checks | After conditional offer (where allowed and relevant) |
6. Maintain Data Privacy
- Minimize data: Only collect what’s necessary for the role
- Secure storage: Encrypt background check reports
- Limited access: Only authorized personnel should view results
- Retention limits: Delete data per local requirements (typically 6–24 months)
- Cross-border transfers: Ensure legal basis for transferring data internationally
Using AI for Background Check Compliance
AI tools can help manage international background check compliance:
- **Compliance automation Automatically apply country-specific rules
- **Document management Track consent forms and disclosures
- **Candidate communication Automated status updates and notifications
- **Analytics Track completion rates and turnaround times
EasyHire AI integrates with major background check providers and automates compliance workflows across jurisdictions.
FAQ
Can I run the same background check in every country?
No. Background check laws vary dramatically by country. What’s standard in the US (criminal records, credit checks) may be illegal in Germany or Japan. Always follow local law.
Do I need consent for international background checks?
Yes, in every jurisdiction. The form and specificity of consent varies by country, but some form of consent is always required.
Can I use criminal records in hiring decisions?
It depends on the country and role. In the US, criminal records can be considered but must be relevant and evaluated case-by-case. In the EU, criminal records are heavily restricted. Always check local law.
How long do international background checks take?
Typically 3–15 business days depending on the country and check type. Criminal record checks in some countries (India, Brazil) can take 2–4 weeks.
What if a candidate refuses a background check?
In most countries, you can make employment conditional on passing a background check. However, you cannot conduct checks without consent. If a candidate refuses, you can withdraw the offer (where legally permitted).
Ready to Transform Your Hiring?
International background checks are complex but essential for global hiring. With the right knowledge and tools, you can conduct thorough checks while staying compliant.
Try EasyHire AI free or Book a demo to see how our platform automates compliance across jurisdictions.