Background Check Laws by Country (2026)
Pre-employment screening rules differ across the six countries Aristo Search serves. This guide gives you the practical steps for each market so you ask the right questions at the right time.
Background checks at a glance
The table on this page summarises screening rules for the United States, Canada, the United Kingdom, Ireland, Australia and New Zealand. The notes below explain what to do before you ask about a record and how each market differs.
| Country | Criminal record checks | Right to work check | Key rules |
|---|---|---|---|
| United States | Allowed; timing limited in 15 states, DC and many cities | Form I-9 | FCRA; state ban-the-box laws |
| Canada | Police checks with consent; record protected in several provinces | Work permit check | Human rights codes; privacy laws |
| United Kingdom | Basic DBS for any role; standard and enhanced only for listed roles | Mandatory, penalties up to £60,000 | Rehabilitation of Offenders Act 1974; UK GDPR |
| Ireland | Garda vetting for relevant work only; police certificate otherwise | Employment permit or stamp | Data Protection Act 2018 s.55 |
| Australia | National police check with consent | VEVO | Spent conviction schemes; Privacy Act 1988 |
| New Zealand | Ministry of Justice check with consent | VisaView | Clean Slate Act 2004; Privacy Act 2020 |
Last checked 5 November 2026. This is general information for employers, not legal advice. Check with employment counsel in each country before you rely on it.
United States: ban-the-box laws by state
When a screening company runs a check, the Fair Credit Reporting Act sets the steps. Give a standalone written disclosure and get written authorization first. If adverse action is possible, send a pre-adverse action notice with the report and summary of rights, then wait before the final notice. Arrests older than seven years cannot be reported unless the role pays $75,000 or more. The EEOC rescinded its 2012 criminal records guidance in October 2026, but the FCRA and state and local fair chance laws still apply. New York employers must use the required multi-factor assessment before acting on a conviction. Several states protect off-duty cannabis use.
| Step (FCRA) | What the employer must do |
|---|---|
| Disclosure | Give a clear written disclosure in a document that contains only the disclosure |
| Authorization | Get the candidate's written authorization |
| Pre-adverse action | Send a copy of the report and the summary of rights, then wait a reasonable time |
| Adverse action | Send a final notice naming the screening company and explaining dispute rights |
States with private-employer ban-the-box laws
| State | When you may ask about criminal history | Covers | Credit check limits | Law |
|---|---|---|---|---|
| California | After a conditional offer | 5 or more employees | Yes | Gov. Code 12952 |
| Colorado | Not on the initial application or in job ads | All employers | Yes | C.R.S. 8-2-130 |
| Connecticut | Not on the initial application | All employers | Yes | C.G.S. 31-51i |
| Washington DC | After a conditional offer | 11 or more employees | Yes | D.C. Code 32-1341 |
| Hawaii | After a conditional offer; look-back limited to 7 years (felonies) and 5 years (misdemeanors) | All employers | Yes | HRS 378-2.5 |
| Illinois | After the interview, or after a conditional offer if there is no interview | 15 or more employees | Yes | 820 ILCS 75 |
| Maine | Not on the application | All employers | No | 26 MRSA 600-A |
| Maryland | Not before the first in-person interview | 15 or more employees | Yes | Lab. & Empl. 3-1501 |
| Massachusetts | Not on the initial written application | Most employers | No | MGL c.151B s.4(9) |
| Minnesota | After selection for interview, or after a conditional offer | All employers | No | Minn. Stat. 364.021 |
| New Jersey | After the first interview | 15 or more employees | No | N.J.S.A. 34:6B-11 |
| New Mexico | Not on the application | All employers | No | NMSA 28-2-3.1 |
| Oregon | Not before the initial interview, or before a conditional offer if there is none | All employers | Yes | ORS 659A.360 |
| Rhode Island | At or after the first interview | 4 or more employees | No | R.I. Gen. Laws 28-5-7(7) |
| Vermont | Not on the initial application | All employers | Yes | 21 V.S.A. 495j |
| Washington | After a conditional offer and once the candidate is otherwise qualified (15+ employees from July 1, 2026; all employers from January 1, 2027) | All employers from 2027 | Yes | RCW 49.94 |
Nevada and New York also restrict credit checks. Cities with their own fair chance rules include New York City, Los Angeles, San Francisco, Philadelphia, Chicago, Seattle and Portland. New York State requires an 8-factor assessment before rejecting a candidate over a conviction. The EEOC rescinded its 2012 criminal records guidance on 28 October 2026, though the FCRA and state and local laws still apply.
United Kingdom
Right to work checks happen before employment starts. A missed check can bring a civil penalty up to £45,000 for each illegal worker. The duty also covers workers, individual sub-contractors and online platforms. Basic DBS checks are available for any role with candidate consent and show unspent convictions. Standard and enhanced checks apply only to roles listed in the Exceptions Order, such as regulated finance and healthcare. Criminal data needs a UK GDPR condition and usually an appropriate policy document. For FCA-regulated firms, senior manager criminal record checks are valid for six months.
- Right to work: mandatory before work starts. Penalties are up to £45,000 per illegal worker, or £60,000 for a repeat breach. From 1 October 2026 the duty also covers workers, individual sub-contractors and online platforms.
- DBS checks: a basic check (unspent convictions) is open to any employer with consent. Standard and enhanced checks are only for roles listed in the Exceptions Order, such as regulated financial and healthcare roles.
- Spent convictions: rehabilitation periods were shortened from 28 October 2023. A custodial sentence under 1 year is spent 12 months after the sentence ends.
- Scotland and Northern Ireland: Disclosure Scotland issues Level 1 and Level 2 disclosures since 1 April 2025. Northern Ireland uses AccessNI.
- Regulated firms: FCA firms assess fitness and propriety, and criminal record checks for senior managers stay valid for 6 months since April 2026.
Ireland
Garda vetting applies only to relevant work with children or vulnerable people. For that work, use a registered organisation to request vetting. For other roles, ask the candidate to supply a police certificate. Certain convictions become spent after seven years, so an old record may not justify a refusal. Criminal data processing must meet the Data Protection Act. Check that non-EEA nationals hold an employment permit or a suitable immigration stamp before they start.
- Garda vetting: only for relevant work with children or vulnerable people, through a registered organisation.
- Other roles: the candidate can supply a police certificate with consent.
- Spent convictions: certain convictions become spent after 7 years under the 2016 Act.
- Data protection: criminal data needs a basis under the Data Protection Act 2018, s.55.
Canada
Criminal record checks go through police. Request a vulnerable sector check only when the role is a position of trust with vulnerable people. Human rights laws in several provinces and federally protect candidates from discrimination based on pardoned convictions; some provinces also protect unrelated or provincial offences. Get consent under PIPEDA or the relevant provincial privacy law before collecting a record. In Ontario, give written notice before any credit check.
| Jurisdiction | Criminal record protection in employment |
|---|---|
| British Columbia | Conviction unrelated to the job |
| Quebec | Conviction unrelated to the job, or pardoned |
| Ontario | Pardoned federal offences and provincial offences |
| Prince Edward Island, Newfoundland and Labrador | Unrelated conviction |
| Yukon | Criminal charges or record |
| Federal | Pardoned or suspended convictions |
| Alberta, Saskatchewan, Manitoba, New Brunswick, Nova Scotia | No criminal record ground |
Ontario requires written notice before a credit check, and Alberta, BC and Quebec have their own private-sector privacy laws.
Australia
Use an ACIC-accredited body for national police checks and get the candidate's consent before you apply. For roles involving children, arrange the relevant state Working with Children Check; a ban in one state now blocks work across Australia. Federal spent conviction rules mean a sentence of 30 months or less can become spent after ten years, so an old record may be excluded from consideration. Tasmania, the Northern Territory and the ACT protect candidates from irrelevant criminal record discrimination. Check visa status through VEVO.
- Police checks: through ACIC-accredited bodies with the candidate's consent.
- Working with Children Checks: run by each state, with national "banned in one, banned in all" recognition since 20 August 2026.
- Spent convictions: the federal scheme treats most convictions with sentences of 30 months or less as spent after 10 years, and each state has its own scheme.
- Discrimination: Tasmania, the Northern Territory and the ACT protect against irrelevant criminal record discrimination.
- Right to work: check visas through VEVO.
New Zealand
The Clean Slate Act hides eligible convictions after seven years without further offending, so candidates can lawfully answer no for those records. Request a Ministry of Justice criminal record check with signed consent; it is free and can take up to 20 working days. You must tell candidates when you collect information about them from referees or screening firms. Check visa status through VisaView.
- Clean Slate: eligible convictions are hidden after 7 years without a conviction.
- Criminal record check: free from the Ministry of Justice with signed consent, up to 20 working days.
- Third-party information: from 1 May 2026 employers must tell candidates when they collect information about them from referees or screening firms (IPP 3A).
- Right to work: check visas through VisaView.
Screening senior hires across borders
1. Get consent before any check
In every market, start with valid consent. In the US, the FCRA requires a standalone written disclosure and written authorization before a third party screening company runs a check. In Canada, consent must meet PIPEDA or the relevant provincial privacy law. In New Zealand, signed consent is required for the Ministry of Justice check. Do not screen without it.
2. Verify work rights before day one
In the UK, complete right to work checks before employment starts and remember the civil penalty can reach £45,000 for each illegal worker. In Ireland, confirm non-EEA nationals hold an employment permit or a suitable immigration stamp. In Australia and New Zealand, check visa status through VEVO or VisaView before the worker begins.
3. Time the criminal question
In the US, many states and cities have fair chance rules that delay criminal history questions. Washington now delays the question until after a conditional offer for many employers. Do not ask about records on an early application form unless you have checked the state and city rules that apply to the role.
4. Match the check to the role
In Australia, arrange a Working with Children Check only for child-related roles; bans now carry national recognition. In Canada, vulnerable sector checks are only for positions of trust with vulnerable people. In Ireland, Garda vetting is limited to relevant work with children or vulnerable people. A basic DBS check is available in any UK role with consent.
5. Handle adverse findings carefully
In the US, send a pre-adverse action notice with the report and summary of rights before any final decision. In New York, apply the required multi-factor assessment before acting on a conviction. In Canada, do not reject someone based on pardoned convictions in jurisdictions that protect them. Pause and check local fair chance rules before you finalise.
How Aristo Search handles references and checks
Aristo Search reference-checks every shortlisted candidate with their written consent, using structured questions about the work they actually did. We tell clients early which background checks the role and location allow, and when they may be run. Where fair chance rules apply, criminal history checks wait until after a conditional offer. If anything could affect the decision, we raise it with you before the offer stage so there are no late surprises.
More hiring guides and tools
Sources
- US ban-the-box: nelp.org
- Washington: atg.wa.gov
- UK spent convictions: gov.uk
- Scotland: disclosure.gov.scot
- UK right to work: gov.uk
- FCA: fca.org.uk
- New Zealand, IPP 3A: bellgully.com
- New Zealand, criminal record checks: justice.govt.nz
Questions employers ask
When should we ask about criminal history in the US?
Many states and cities require you to wait until later in the process. Fifteen states plus DC have ban-the-box laws for private employers, and Washington now delays the question until after a conditional offer for many employers. Check the state and city rules that apply to the role before adding a criminal history question to an application.
Do we need consent before a background check in Canada and Australia?
Yes. In Canada, consent must meet PIPEDA or the relevant provincial privacy law before you collect a record. In Australia, national police checks through ACIC-accredited bodies require the candidate's consent. In New Zealand, the Ministry of Justice check also needs signed consent. Start every screening process with a clear consent step and keep a record of it.
Can we run a DBS check for any UK role?
A basic DBS check is open to any employer with the candidate's consent and shows unspent convictions. Standard and enhanced checks are only for roles listed in the Exceptions Order, such as regulated financial and healthcare roles. For FCA-regulated firms, criminal record checks for senior managers are valid for six months. Start with right to work before employment.
What is the clean slate rule in New Zealand?
The Clean Slate Act hides eligible convictions after seven years without further offending. A candidate with a clean slate can lawfully say they have no criminal record. You should not ask about convictions that are eligible to be hidden. Use the Ministry of Justice criminal record check with signed consent, which is free and can take up to 20 working days.
How do we handle adverse findings in the US under the FCRA?
Before you reject a candidate based on a third party screening report, send a pre-adverse action notice with a copy of the report and the summary of rights. Wait a reasonable period before sending the final adverse action notice. Arrests older than seven years cannot be reported unless the role pays $75,000 or more. State and local fair chance laws may add extra steps.
Do we need to verify work rights in every country?
Yes. In the UK, right to work checks are mandatory before work starts and civil penalties can reach £45,000 per illegal worker. In Ireland, non-EEA nationals need an employment permit or suitable immigration stamp. In Australia and New Zealand, check visa status through VEVO or VisaView. Do this before any job offer is confirmed or employment begins.
When do we need a Working with Children Check or vulnerable sector check?
In Australia, Working with Children Checks apply to child-related roles and are issued by state; a ban in one state now blocks work across Australia. In Canada, vulnerable sector checks are only for positions of trust with vulnerable people. These checks are not general purpose. Use them only when the role meets that legal threshold.
Ready to Make a Fully Vetted Hire?
Tell us the role and where it sits. We run structured reference checks and plan background checks around the rules that apply in that location.
Aristo Search - Your Global Partner in Professional Recruitment
Get a Quote