Compliance Corner for Employment Decisions refers to an internal or external resource hub that helps HR teams, managers, and compliance officers navigate the legal requirements tied to employment actions. It ensures decisions are consistent, documented, job‑related, and nondiscriminatory.

Here’s what a strong Compliance Corner usually includes:

  • Legal frameworks — Title VII, ADA, ADEA, FCRA, state laws, and local ordinances.
  • Adverse employment actions — what counts, how to document them, and how to avoid discriminatory impact.
  • Fair Chance hiring — compliant use of criminal history, individualized assessments, and Ban‑the‑Box rules.
  • Background check compliance — proper disclosures, authorizations, and adverse‑action procedures.
  • EEOC guidance — how to ensure decisions are job‑related and consistent with business necessity.
  • Documentation standards — how to record performance issues, investigations, and decision rationale.
  • Consistency in decision‑making — avoiding disparate treatment and disparate impact.
  • Manager training — ensuring supervisors understand legal boundaries and company policy.

“Ban the box” legislation gains momentum

Across the country, municipalities and states are enacting legislation called “ban the box” which generally prohibits employers from asking job candidates about their criminal histories on applications. The legislation also makes it unlawful for a covered employer to take any adverse action against an individual on the basis of an arrest or criminal accusation that did not result in a conviction. The states of California, Connecticut, Hawaii, Massachusetts, Minnesota, and New Mexico have enacted some form of the legislation along with more than 26 cities and counties in Illinois, Maryland, Michigan, Ohio, Oregon, Pennsylvania, Rhode Island, Tennessee, Texas, Wisconsin and Washington. (A complete list of municipalities that have “banned the box” is posted at
http://www.nelp.org/page/-/SCLP/2010/BantheBoxcurrent.pdf?nocdn=1).

However, except for Hawaii and Massachusetts, the legislation has been limited to public employers, or public employers and vendors and contractors serving public entities. The city of Philadelphia, which is the most recent addition to this growing list, is the first municipality to pass a law that covers private employers with 10 or more employees. Below are some jurisdictional highlights of the enacted legislation:

  • Hawaii and Massachusetts private and public employers cannot consider felony convictions that are more than 10 years old. And in Massachusetts, employers are not permitted to consider misdemeanor convictions that are more than five years old.
  • Hawaii and the cities of Chicago, Hartford, and Cincinnati allow an employer to ask about an applicant’s criminal record only after a conditional offer of employment has been extended.
  • Chicago, San Francisco, and Boston require a public employer denying employment on the basis of a conviction to justify its decision based on EEOC’s guidelines which include the nature and gravity of the crime, the time that has passed since the conviction, and the relativity of the crime to the position.

Proponents of “ban the box” are confident that the legislation will be a significant factor in lowering recidivism rates, as it will allow applicants to demonstrate their skills and qualifications prior to disclosing criminal histories. And many experts say that such laws will expand beyond the borders of the United States in the very near future.

More states are restricting credit reports for employment purposes

Connecticut has joined five other states (Hawaii, Illinois, Maryland, Oregon, and Washington) that, with some exceptions, prohibit the use of credit reports in employment decisions. Effective October 1, 2011, S.B. 361 will ban many employers from using credit information in determining whether to deny employment to an applicant, terminate an employee, decide compensation, or evaluate other terms and conditions of employment. Financial institutions, as well as employers who are required to obtain credit reports under federal or state law, are excluded from the Act’s provisions

There are certain exceptions to the S.B. 361 prohibitions. Employers may request or use credit reports when such information is related to a “bona fide purpose that is substantially job-related.” The bona fide purpose exception generally applies to positions involving money handling or other sensitive job duties. If an employer requests or uses credit information for a bona fide purpose, it must disclose its intent to do so in writing to the employee or applicant.

As in Connecticut’s S.B. 361, employers in the other states that have passed employment-related credit report restriction laws need to ensure that their hiring, retention, and promotion practices fall within the guidelines of their legislation.

Risk-based approach to employment screening rates high on value chain

In today’s world just about every company knows that an effective employment screening program is invaluable for hiring qualified individuals, reducing turnover, deterring fraud and other criminal actions, and avoiding or mitigating litigation.

Recognizing that a “bad” hire is a threat to the bottom line, many companies, from investment bankers to law firms, are taking a risk-focused approach to background investigations and deciding what is appropriate or how much should be done to ensure organizational success. For example, obtaining a credit report or checking civil records for an entry-level applicant with low risk responsibilities may be of limited use, while reviewing such record histories for someone who will handle money or have access to sensitive information may be imperative in assessing his/her suitability for a position of trust.

Best practices in both the government and in the private sector indicate that a risk designation should be determined for every position, based on its description of duties and responsibilities. The risk grade should be commensurate with the employee’s assigned trust level, financial accountability, access to sensitive and confidential information and critical data systems, autonomy, discretionary authority, and potential opportunity for misconduct.

To be effective and non-discriminatory, employment screening policies need to specify a uniform set of background investigation elements for all position/assignment levels, including new hires, temporary workers, interns, transferred and promoted employees, contractors and volunteers.

SI has a full suite of employment background investigation products. Please visit our website at https://scherzer.co/ to learn more or order an investigation.

Controversy abounds in employment decisions based on social media searches

In May 2011, the Federal Trade Commission (FTC) ruled that companies providing social media information to employers – and employers who use the reports – must follow the same Fair Credit Reporting Act (FCRA) regulations that apply to more traditional sources. The FTC also stated that postings on any social media site can be saved by on-line background screening companies for up to seven years.

According to the FTC’s letter dated May 9, 2011 to a company that sells information from social networking sites for employment purposes, such a company is considered a Consumer Reporting Agency (CRA) and thus must take reasonable steps to ensure the accuracy of the information obtained from online social networks (as well as other sources) and positively identify it with the subject. It also must comply with other FCRA provisions, such as providing a copy of the report to the subject and maintaining an established protocol if the subject disputes the reported information. As with “traditional” background investigations, employers who use a report prepared by a CRA must certify to the CRA that the report will not be used in violations of federal or state equal employment opportunity laws or regulations. Additionally, both the CRA and the employer have a legal obligation to keep and dispose of the reports securely and properly. (For more information, see the FTC blog, “The Fair Credit Reporting Act & Social Media: What Businesses Should Know.”)

Social media legal experts and various literature point to a multitude of issues and risks faced by both the CRA and the employer who uses social media checks, which include, but are not limited to:

  • Problems under FCRA section 607(b) in exercising “reasonable procedures to assure maximum possible accuracy” of the information.
    Since the information on social media sites is self-reported and can be changed at any time, it is often difficult if not impossible to ascertain that the information is accurate, authentic and belongs to the subject. Online identity theft is not uncommon, as are postings under another person’s name for the purpose of “cyber–slamming” (which refers to online defamation, slander, bullying, harassment, etc.)
  • Information may be discriminatory to job candidates or employees, or in violation of anti-retaliation laws.
    Social sites and postings may reveal protected concerted activity under the National Labor Relations Act (NLRA,) and protected class information under Title VII of the Civil Rights Act and other federal laws, such as race, age, creed, nationality, ancestry, medical condition, disability, marital status, gender, sexual preference, labor union affiliations, certain social interests, or political associations. And while the information may have no impact on the employment decision, the fact that the information was accessed may support claims for discrimination, retaliation or harassment.
  • Accessing the information may be in violation of the federal Stored Communications Act (SCA).
    To the extent that an employer requests or requires an employee’s login or password information, searches of social networking sites may implicate the SCA (18 U.S.C. § 2701) and comparable state laws which prohibit access to stored electronic communications without valid authorization. A California court recently ruled that the SCA also may protect an employee’s private information on social networking sites from discovery in civil litigation.
  • Assessing the information may violate terms of use agreements and privacy rights.
    While certain social media sites have stricter privacy controls than others, most if not all limit the use of their content. The terms of use agreements typically state that the information is for “personal use only” and not for “commercial” purposes. Although the definition of “commercial” in connection with employment purposes is interpretive, most legal experts indicate that employment screening fits that scope.
  • Information may be subjective and irrelevant to the employment decision.
    Blogs, photos and similar postings often do not provide an objective depiction of the subject or predict job performance. The California Labor Code, for example, specifically provides that an employer is prevented from making employment-related decisions based on an employee’s legal off-duty conduct. Employers may use such information only if the off-duty conduct is illegal, if it presents a conflict of interest to the business or if it adversely affects the employee’s ability to do his/her job. And the evidence of such activities must be clear.

The popularity of employment-related background checks that include social media searches is growing rapidly. But the unreliable and unverifiable information from these sources is a potential landmine of legal liabilities.

Challenges of international background investigations

Many transactions today, whether they involve an employment hiring decision or a new business relationship, are cross-border or have an international component. The need for effective risk management both in the U.S. and abroad has vastly expanded in recent years with the passing of legislation and increased enforcement actions. Behind just about every business decision, there is a widening range of stakeholders — from regulators to shareholders to board members — who expect that the due diligence process will minimize unlawful activities.

International background investigations, which are essential for a comprehensive approach to due diligence, present special challenges since each country has its own laws, customs, and procedures. Language barriers, name variations and transliterations, limited information and technology, broad definitions of crimes, and proliferation of fraudulent educational and accreditation institutions, are just some of the factors that add to the complexity of these investigations.

As a general rule, in most European countries, criminal records are not available to the public. In Asia, public accessibility to most court filings is limited. In South America, public records vary greatly from country to country. South Africa provides some disclosure of police records and warrants to the public, along with   civil filings. Canada’s public records availability differs by province, and only a few permit criminal records release. India and Australia have the most searchable records, similar to the U.S.

For employment purposes, the Fair Credit Reporting Act (FCRA) imposes certain obligations for international background screening performed by a U.S. Consumer Reporting Agency (CRA), including mandating reasonable procedures to ensure the accuracy of the information it reports. If a public record such as a criminal conviction is found, the CRA must ascertain that the information is correct, up-to-date, and reported in a way that does not violate data or privacy protection rules.

In 2000, an agreement between the U.S. Department of Commerce and the European Commission established privacy and data protection guidelines, the “Safe Harbor Principles,” to enable U.S. companies to satisfy a requirement under European Union law for adequate protection of personal information transferred from the European Economic Area (the 25 member states of the European Union plus Iceland, Liechtenstein and Norway.) In addition to these principles, the Gramm-Leach-Bliley Act (GLBA) requires financial institutions and businesses that receive personal information to establish safeguards for the handling and disclosure of that information. And the Fair and Accurate Credit Transactions Act (FACTA), a federal legislation, also contains provisions to help reduce identity theft and obligates the proper disposal of personal consumer information.

The cost of an international background investigation typically is higher than domestic searches, and varies with each country, the type of information that needs to be obtained and the purpose of the investigation. When performed by a reputable firm with qualified foreign contacts, an international background investigation can reduce negligent hiring liability, and prevent a catastrophic investment or reputational damage.

U.K. Bribery Act now slated to take effect July 1, 2011

After receiving widespread criticism for the lack of guidance and compliance clarification, the U.K. Bribery Act of 2010 (Bribery Act) originally scheduled for implementation in April 2011, is now set to take effect July 1, 2011. The act’s jurisdiction extends to commercial organizations incorporated or formed in the U.K. or “which carr

[y] on a business or a part of a business in the U.K. irrespective of the place of incorporation or formation.” Determination of such existence will be made by the U.K. courts and will require “a demonstrable business presence.” The official guide states that an organization will not be deemed to be carrying on a business in the U.K. merely by virtue of having its securities listed on the London Stock Exchange or by having a U.K. subsidiary.

Unlike the anti-bribery provisions of the U.S. Foreign Corrupt Practices Act (FCPA), which focus primarily on corruption involving non-U.S. government officials, the Bribery Act  widens its scope to prohibit domestic and international bribery across both private and public sectors. And while the FCPA allows exceptions for facilitation payments (generally small payments to lower-level officials for “routine government actions,”) the Bribery Act does not. These payments were illegal under the previous legislation and the common law, but the difference under the Bribery Act is that non-U.K. organizations are broadly subjected to these restrictions for the first time.

The Bribery Act specifically criminalizes the offering, promising or giving a bribe (active bribery) and the requesting, agreeing to receive or accepting a bribe (passive bribery) to obtain or retain business or secure a financial or other advantage. It also contains a provision whereby an organization that fails to prevent bribery by anyone associated with the organization can be charged under the Bribery Act unless it can establish the defense of having implemented preventive “adequate procedures.” The official guide recommends the following six principles as foundation for developing “adequate procedures” to prevent bribery:

  • Proportionality – Actions should be proportionate to the risk, nature, size and complexity of the organization.
  • Top-level Commitment – Board of directors, owners, officers or equivalent top level- management should establish and promote a culture where bribery is never acceptable and be committed to preventing bribery, both within the organization and with anyone associated with the organization externally.
  • Risk Assessment – Various risk exposures, both internal and external, such as country of operation, business sector, types of transaction, new markets, and business partnerships should be evaluated and documented on an ongoing basis.
  • Due Diligence – Proportionate, risk-based approach to due diligence procedures assessing existing and proposed relationships should be taken to ensure trustworthy associations and mitigate identified bribery risks.
  • Communication – Appropriate channels of communication, awareness and training, both internal and external, on anti-bribery policies and procedures should be implemented and evaluated on a regular basis.
  • Monitoring and Review – Anti-bribery policies and procedures should be monitored on an ongoing basis and amended as quickly as possible when activities and risks change.

The penalties for violating the Bribery Act are severe, with individuals facing up to 10 years in prison and organizations facing unlimited fines. Violations also may result in damaging collateral consequences such as director disqualification, ineligibility for public contracts, and asset confiscation.

 

Maryland resident charged with making false statements on federal job applications

The Department of Justice reported yesterday that Karen M. Lancaster, of Upper Marlboro, MD, has been charged with four counts of making false statements, three counts of submitting false documents and one count of engaging in a concealment scheme in connection with her multiple job applications to U.S. federal government agencies.

According to the indictment, Lancaster was employed in various positions with the U.S. Department of Defense (DoD) from 1991 until March 2005. She subsequently was notified by DoD that she was being fired due to performance failures. In October 2006, according to the indictment, Lancaster reached a settlement with DoD whereby she was allowed to resign, retroactive to March 2005.

Between 2006 and 2008, Lancaster applied for jobs at the U.S. Departments of State, Commerce and Defense, as well as with the SEC. The indictment states that as part of the application processes, Lancaster allegedly submitted documents that falsified and concealed information about her criminal history, employment history and suitability for employment with the federal government. Specifically, Lancaster allegedly concealed and falsified informatabout her prior arrests, charges, convictions and prison terms, the unfavorable circumstances under which she had resigned from prior federal employment, the roles and responsibilities she had at previous federal jobs; and her salary history.Lancaster will be arraigned on March 25, 2011, in U.S. District Court in Alexandria. The maximum penalty for each count of making a false statement, submitting a false document and engaging in a concealment scheme is five years in prison. Lancaster also faces a maximum fine of $250,000 per count.

The Department of Justice notes that an indictment is merely an accusation, and a defendant is presumed innocent unless proven guilty in a court of law.

Fraudulent credentials rampant in China

Media sources report that scholars in China say that fraud in education and scientific research, and faking credentials to get work or advance in careers is staggering. With frequent news of falsified resumes by prominent officials and company heads, employers in the country have adopted stricter background checks of job candidates.

According to news reports, Fang Zhouzi, known for exposing plagiarism and academic fraud in China, said that Tang Jun, who was president of Microsoft’s China operations from 2002 to 2004, had falsely claimed in his autobiography that he earned a doctorate degree from the California Institute of Technology, when in fact, the degree was bought from California-based Pacific Western University, known as a “diploma mill.” The scandal was later dubbed the “fake credentials gate” by Chinese media.

Several media publications also brought up the case of Zhang Wuben, who through television shows, DVDs and a best-selling book, convinced millions of people that raw eggplant and immense quantities of mung beans could cure lupus, diabetes, depression and cancer. Zhung’s patient consultations, for which he charged $450 for ten minutes, were booked solid through 2012. But when Chinese journalists dug deeper into Zhung’s background, they learned that contrary to his claims, Zhung was not from a long line of doctors (his father was a weaver) nor did he earn a degree from Beijing Medical University. His only formal education was a correspondence course that he took after losing his job at a textile mill.

The exposure of Zhang’s fake credentials gained media focus and started a new round of scrutiny into the dishonest practices that plague Chinese society, and the Chinese government has vowed to address the problem. To facilitate employers’ checks of their job candidates, the China’s Ministry of Education released a list of approved Chinese-foreign jointly-run schools and a list of overseas colleges. And employers now have a greater awareness of the value of background investigations. Zhu Shibo, manager of recruitment at the China International Intellectech Corporation, one of the country’s leading human resources service providers, told media sources that the company has received unprecedented commissions to investigate job applicants. A typical background investigation includes highest education verification, employment experience confirmation and criminal record searches.

Beware of background investigation companies that offer FBI NCIC checks

All you need to do is type in a few key words into Google and headlines pop up promising easy access to FBI criminal records. But when you click on the link, it goes nowhere or to a background screening company’s Web site which then states that it searches public records only, and makes no further mention of the teasing lead.

And except for a few non-government entities, such ones performing authorized criminal justice functions under contract with law enforcement agencies, entities whose purpose is to provide information to authorized agencies to facilitate the apprehension of fugitives or locate missing persons and stolen property, or similar objectives, and federally chartered banking institutions, their bank subsidiaries and direct affiliates, the records are off-limits to the public. Of course, an individual can request his/her own record, typically for a personal review, to challenge the information on file, to meet a requirement for adopting a child in the U.S. or internationally, to satisfy a mandate to live, work, or travel in a foreign country, or to obtain certain professional licenses.

So exactly what is the FBI’s National Crime Information Center? The NCIC, as it is commonly known, is the United States’ central database for tracking crime related information. Maintained by the FBI’s Criminal Justice Information Services Division, the NCIC is interlinked with similar systems held by each state. Data is received from federal, state, local and tribal law enforcement agencies, along with railroad police, and non-law enforcement agencies, such as state and federal motor vehicle registration and licensing authorities.

The NCIC was launched January 27, 1967 with five files and 356,784 records. By the end of 2009, it amassed more than 15 million active records in 19 files, separated into seven property files containing records of stolen articles, boats, guns, license plates, parts, securities, and vehicles, and 12 person-related files containing information in connection with supervised releases, national sex offender registry, foreign fugitives, immigration violators, missing persons, protection orders, unidentified persons, U.S. Secret Service protective list, gangs, known or suspected terrorists, wanted persons, and identity theft. Also a part of the system is the Interstate Identification Index, which provides images that can be associated with NCIC records to help identify people and property items.

The database is not infallible. Its many critics say that the underfunded system is limited in content, contains errors and has outdated information. But the black market for NCIC records is flourishing, despite risks of prison time and financial penalties. While in most instances the motivation for misuse is monetary gain, in an extreme example of personal incentive, a former law enforcement officer in Arizona obtained NCIC information from three other officers and used it to track down and murder his girlfriend.

More on legal troubles from employer misuse of social media information

Legal experts say that litigation resulting from employer misuse of social media information is likely to rise, at least until more case law is established. And even if the company prevails in such lawsuits, there may be reputational risks as the cases grab national spotlight.

Media sources reported that next week, for example, a National Labor Relations Board judge will rule whether American Medical Response of Connecticut illegally fired a worker after she criticized her boss on
Facebook. In what labor officials and lawyers view as a ground-breaking case involving employees and social media, the NLRB stepped in to argue that workers’ criticisms of their supervisors or companies on social networking sites are generally a protected activity and
that employers are violating the law by punishing workers for such statements. According to media reports, American Medical denied the board’s allegations, stating they are without merit, and that “the
employee was discharged based on multiple, serious complaints about her behavior.” The company added that “the employee was also held accountable for negative personal attacks against a coworker posted publicly on Facebook…”

Media sources reported on another pending case, filed in Georgia against a school district, a former high school teacher is claiming that she was essentially forced to resign over Facebook photos that
showed her drinking alcohol during a European vacation.

And in a case settled in 2009, two workers in New Jersey sued their employer, Hillstone Restaurant Group, after they were fired for violating the company’s core values. According to court documents, their supervisors gained access to postings on a password-protected
Myspace page meant for employees but not managers. The jury found that the employer violated the federal Stored Communications Act and the equivalent New Jersey law, and awarded the employees $3,403 in back pay and $13,600 in punitive damages. Hillstone appealed before the parties reached an undisclosed settlement.

Labor relations pros caution that before taking any adverse action based on social media postings, the employer should consider whether the information could be construed as a complaint or report of inappropriate or unlawful behavior. This includes, but is not limited
to discrimination, harassment, unpaid overtime and other wage violations, or any activities that may trigger an employee’s whistleblower protection.

Go to Top