30–40%
CVs with inaccuracies
3
Verification levels
Before final offer
Recommended timing
GDPR compliant
Data protection required
Definition
A background check is a process of verifying information provided by a candidate: qualifications, previous professional experience, references, and sometimes criminal history for sensitive positions. Whilst common in Anglo-Saxon countries, this practice is strictly regulated by data protection laws in the UK and governed by common law employment principles.
Legal Framework: What is Permitted vs Prohibited
Permitted vs Prohibited Checks in UK
| Critère | Permitted (with consent) | Prohibited or strictly regulated |
|---|---|---|
| Qualifications | Verification with educational institutions | Verification without consent |
| Experience | Confirmation of dates and roles | Investigation of personal life |
| References | Contact with former employers | Political or trade union affiliations |
| Criminal record | For certain sensitive roles only | For standard positions |
| Social media | Public professional profiles (LinkedIn) | Deep investigation of personal accounts |
| Financial status | For sensitive financial roles only | For general positions |
The Three Levels of Background Verification
- 1
Level 1 — Basic Verification (All Roles)
Identity validation, stated qualifications, dates and roles held, reference checks (2–3 contacts).
- 2
Level 2 — Enhanced Verification (Management, Strategic)
Everything from Level 1 plus certifications, CV gap analysis, non-compete clause verification.
- 3
Level 3 — Extended Verification (Finance, Security, Executive)
Everything from Level 2 plus criminal record if justified, financial standing for positions of authority.
Questions to Ask Professional References
Reference Checking Script
| Question Type | Examples | Purpose |
|---|---|---|
| Factual | Confirm dates, role, team managed | Verify CV accuracy |
| Behavioural | Strengths, development areas, pressure handling | Understand working style |
| Validation | Would you recommend? Would you re-employ? | Measure genuine enthusiasm |
| Open-ended | Is there anything I should know? | Uncover unstated concerns |
Data Protection Obligation
You must systematically inform candidates of the verifications you will conduct, obtain written consent, and guarantee access and rectification rights over collected information. Without explicit consent, any verification is unlawful.
When should background checks be conducted in the recruitment process?
Ideally after final interview but before formal job offer. This avoids investing time in non-selected candidates whilst securing your final decision. Inform candidates at the start of the process that verifications will be conducted for finalists.
How to react if you discover inconsistencies in a CV?
Distinguish legitimate embellishment (slight responsibility overstatement) from deliberate dishonesty (fake qualifications, invented experience). Always give the candidate opportunity to explain. Significant dishonesty is usually disqualifying as it reveals integrity issues.
Are candidate-provided references reliable?
Naturally biased positively since chosen by the candidate. How the reference speaks about the candidate, their enthusiasm, hesitations and what remains unsaid are very revealing. Ask open-ended questions and listen carefully. Try to obtain an unprompted reference.
Can you verify a candidate's social media?
Reviewing public professional profiles (LinkedIn) is acceptable. However, deep investigation of personal accounts (Facebook, private Instagram) violates data protection principles. Limit yourself to professional information relevant to the role.
Secure Your Hiring with Aurelia
Email templates for requesting references, standardised questionnaires, data protection checklist and centralised response management in candidate records.