Employment decisions refer to any employer actions that determine, influence, or change the terms, conditions, or outcomes of employment. This includes decisions about recruitment, hiring, promotion, reassigning, evaluating performance, disciplining, terminating, setting wages, or assigning work hours. These decisions are legally significant because they must comply with federal and state employment laws, including anti‑discrimination rules enforced by the EEOC.

Consent for International Searches

A basic principle of conducting international searches on an individual is that you need a lawful basis for processing personal data. This principle applies to both employment-purpose and commercial background checks.

Although the number and type of lawful bases vary from one country to another (especially with the enactment of new data protection and privacy laws in many countries over the last several years), a lawful basis for processing personal data common to all international searches is the consent of the individual search subject. From a compliance perspective, obtaining an individual’s consent for the searches is the best practice.

Other than the requirements that the subject’s express consent be unambiguous and freely given, there is no universally prescribed format or wording for an international consent form.

If the subject’s consent cannot be obtained, you can look to a country’s data protection and privacy laws to determine if a different legal basis may be applicable for processing personal data that does not require the subject’s consent. It is always up to the controller of the data to determine the appropriate legal basis for processing personal data.

For individuals located in the EU or UK, there are several legal bases that will satisfy the compliance requirements under the EU GDPR, the UK GDPR and the Data Protection Act of 2018 (UK) if consent cannot be obtained. The controller can still request these searches if it has a legitimate interest in obtaining the individual’s personal data or needs the data to perform a contract.

If the request for the searches is based on a legitimate interest or performance of a contract, the individual must receive a notice of the controller’s intention to process the data. Notice can be given in several different ways, including directly to the individual, in an engagement letter or similar document, or by publication on the client’s website. The way the controller gives notice is their decision.

Reporting Employment-related Civil Lawsuits

For employment-purpose reports, the federal Fair Credit Reporting Act (FCRA) and its state law counterparts  are the laws that most often deal with when determining whether certain information is or isn’t reportable. However, federal laws prohibiting workplace discrimination can also limit what information can be included in these reports. This issue can arise when civil lawsuits are located in which a search subject has sued a former employer.

Although there are several types of federal laws dealing with workplace discrimination, taken together, these laws make it illegal to discriminate against someone (applicant or employee) because of that person’s race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age (40 or older), disability or genetic information. It is also illegal to retaliate against a person because they complained about discrimination, filed a charge of discrimination, or participated in an employment discrimination investigation or lawsuit.

Providing any such information to a prospective employer in a background screening report could be a violation of anti-discrimination laws which are typically enforced by the U.S. Equal Employment Opportunity Commission (EEOC).

Pre-Employment Screening during the Pandemic

It is a standard practice for employers to run background checks on potential new hires. Such checks help employers protect their company by learning about the trustworthiness of the candidate through their financial, criminal, and driving records and education and employment verifications. But the pandemic has affected the operations of many institutions worldwide. From court closures to remote college campuses, it may be more difficult for the screening provider to check a criminal record or verify an educational background. Nonetheless, the possibility of delay should not cause employers to lower the standards of their screening policies.

The most important reason why an employer should not temporarily waive certain parts of a background check is because it may make it harder to justify its necessity in the future. For example, say a court is closed and is unable to provide information on candidates’ criminal history. Because of this, an employer who is anxious to add the new hire to the frontline chooses to waive the criminal check requirement. Well, when a court begins to provide legal information again and an employer decides to reinstate the criminal check requirement, the employer could face compliance issues.

Under current anti-discrimination laws, namely Title VII of the Civil Rights Act of 1964, employers must demonstrate that its hiring practices are “job related” and “consistent with business necessity.” But if an employer chooses to forgo the criminal checks during the pandemic and wishes to reinstate them later, they may be violating this law. Since the criminal check was once suspended, one could argue that the practice was not job related or that it was not a business necessity. Furthermore, streamlining the employment screening process by waiving certain aspects could lead an employer to overlook valuable insight into a candidate’s character. Therefore, while a shorter background check program during the pandemic could bring short-term benefits, it runs significant long-term risks.

So, what are your options?

We have outlined up two possible avenues available to employers during these times.

Hire now (but reserve the right to run future background checks)

If a company is in a position in which new hires are urgently needed, they may hire the candidates based on the information available to them at the time of the background check and reserve the right to conduct additional background checks post-hire, once information providers resume to normal operations. But if an employer takes this route, they must clearly communicate with both their background check provider and the new hire.

They should work with the background check provider to take note of those candidates whose checks are not yet completed so that the provider can easily revisit the report in the future. Employers should also make it clear in an employee’s offer letter that the offer of employment is contingent upon the successful completion of a background check that may occur at a later date.

Delay the hire

For employers who are required by law to complete background checks prior to a new hire’s start date, they may have to delay the worker’s start date. But whether a background check provider can access the required information for an employment screen depends on the location of the various sources of information, from the courthouses to the educational institutions.

All in all, although background checks may take longer during the pandemic, they are, especially now, critical to manage your risk. With the rising number of job seekers and the remote workforce, companies must do what they can to ensure that they are hiring qualified professionals who will be valuable additions to the company.

Q1 2020: UPDATE OF LAWS AFFECTING EMPLOYMENT BACKGROUND SCREENING

As the year and a new decade unfold, we bring you this update on ban-the-box legislation and laws that restrict credit report usage in employment decisions. And no update would be complete without a reminder about a standard-setting federal appellate opinion from 2019 interpreting the Fair Credit Reporting Act (FCRA) disclosure requirement for an employment background check.

Let’s start with a reminder

In January 2019, the Ninth Circuit’s opinion in Gilberg v. California Check Cashing Stores, LLC made clear that any extraneous information in an FCRA disclosure form regarding an employment background check — even if the information is related to state-mandated expansions of consumer rights — violates the FCRA’s requirement that the disclosure must be “in a document that consists solely of the disclosure.

Even seemingly innocuous content, such as asking for an acknowledgment that the candidate received the FCRA summary of rights or including a statement that hiring decisions are based on legitimate non-discriminatory reasons may run afoul of the FCRA. And any state and local notices regarding the background check must be provided in separate documents, as applicable to each candidate.

Experts believe that the number of class-action lawsuits brought under the FCRA for technical errors will continue to increase. But there is an easy way to comply:

Present the disclosure to the candidate in a separate, standalone, conspicuous document. Make it clear and simple. Keep it short.

Ban-the-box laws continue to proliferate

“Ban-the-box” measures – which generally prohibit employers from inquiring about a candidate’s criminal history (including performing background checks) until later in the hiring process – continue to proliferate. Currently, 14 states (CaliforniaColoradoConnecticutHawaii; IllinoisMaryland (effective February 29, 2020); MassachusettsMinnesotaNew JerseyNew Mexico; Oregon; Rhode Island; Vermont and Washington) and 22 local jurisdictions (Austin, TX ; Baltimore, MDBuffalo, NYChicago, ILCook County, ILColumbia, MODistrict of ColumbiaGrand Rapids, MIKansas City, MOLos Angeles, CA; Montgomery County, MDNew York City, NY;  Philadelphia, PA; Portland, ORPrince George’s County, MDRochester, NYSaint Louis, MO (effective January 1, 2021); San Francisco, CA; Seattle, WA; Spokane, WA; Waterloo, IA (effective July 1, 2020 but lawsuit filed to strike down the ordinance); and Westchester County, NY) have such laws in place for private employers.

Be mindful of credit restrictions

Less popular than state and local legislatures on ban-the-box and prohibitions on salary history inquiries, credit check restrictions remain an important consideration for employers. Ten states CaliforniaColoradoConnecticut, Hawaii, Illinois, Maryland, Nevada, OregonVermont, and Washington – as well as ChicagoDistrict of ColumbiaNew York City, and Philadelphia all place restrictions on employers’ use of credit reports with exceptions for the use of such checks when required by law or the responsibilities of the position.      

Arguably, the most imposing local credit report law to date continues to be the New York City’s Human Rights amendment that went into effect on May 6, 2015, and made requesting and using consumer credit history for hiring and other employment purposes, with certain exceptions, an unlawful discriminatory practice. The law provides that a “consumer credit report” includes “any written or other communication of any information by a consumer reporting agency that bears on a consumer’s creditworthiness, credit standing, credit capacity or credit history.”Many legal experts hold that the broad scope of this definition not only prohibits obtaining a consumer credit report but also searches of liens, judgments, bankruptcies, and financially-related lawsuits if there is no exemption. There is no case law on this matter. 

On the national level, the U.S. House of Representatives on January 29, 2020, passed legislation that prohibits employers from using credit reports for employment decisions, except when required by law or for a national security clearance. The bill also prohibits asking questions about applicants’ financial past during job interviews or including questions about credit history on job applications. The U.S. Senate, however, is not expected to introduce the legislation.

New Draft Guidelines Attempt to Clarify Territorial Scope of the GDPR

Since the adoption of the General Data Protection Regulation (GDPR) by the European Union (EU) in May 2018, businesses established outside of the EU have grappled with the question of whether the GDPR’s strict rules apply to them. Many commentators have noted that the GDPR provisions and recitals do not have an easy answer. The European Data Protection Board (EDPB) recently attempted to provide some clarification by publishing draft guidelines that include a commentary on the territorial scope of the GDPR. The EDPB’s guidelines also address the related issue of whether a non-EU company subject to the GDPR must have an EU-based representative.

GDPR’s Targeting Criteria

Arguably the most significant change to the regulatory landscape affecting an individual’s data privacy is the territorial scope of the GDPR’s Article 3 (2). Generally described as the GDPR’s “targeting criteria,” your business must be GDPR compliant if it engages in processing activities of an EU individual’s data (data subject) related to (1) offering goods or services to data subjects, or (2) monitoring data subjects’ behavior. Although the EDPB’s guidelines state that the targeting criteria is applied on a case-by-case basis, the guidelines provide several examples showing how the targeting criteria can be applied that clarify some basic points, such as:

  1. The data subject’s nationality or citizenship is irrelevant. The GDPR protects data subjects geographically located within the EU, without regard to the data subject’s nationality or citizenship. Conversely, data subjects outside of the EU, including EU citizens, are not protected by the GDPR.
  2. Geographic allocation and timing are critical. For purposes of applying the GDPR, thedata subject’s geographic location is assessed atthe moment when your activity occurs; e.g., when your goods or services are offered, or your monitoring of the datasubject’s behavior begins.
  3. Charging for services is irrelevant. The GDPR protects data subjects regardless of whether your services are free.
  4. Cookies are considered monitoring. TheGDPR protects data subjects that your business profiles or undertakes someanalysis by using cookies or similar technologies.

GDPR Compliance and an EU-based Representative

A significant point clarified by the EDPB’s guidelines is that a non-EU company subject to the GDPR must appoint an EU-based representative, even though the not have a physical location within the EU. A company’s Data Protection Officer, who can be an existing employee of the company under the GDPR, cannot fulfill the requirements for an EU-based representative. The purpose of the requirement is to ensure that a qualified individual or entity is located within the EU to whom regulatory authorities can address compliance issues. The guidelines also make clear that the EU-based representative can even be held liable for any non-compliance, including being fined or otherwise sanctioned.

Consultation Period

The territorial scope and appointment of an EU-based representative poses two of the most critical issues that a non-EU based company faces regarding GDPR compliance. The EDPB’s draft guidelines address several other GDPR issues in addition to these, and a full version of the guidelines can be found here. The EDPB is taking public comments on the draft guidelines until January 18, 2019. Comments should be sent to the EDPB at EDPB@edpb.europa.eu.

California’s overlapping background check laws

For many years, employers have struggled with California’s overlapping statutes governing the use of background checks. Now, the state’s highest court has weighed in, ruling that compliance with the requirements of both laws is mandatory, even where the laws overlap.

A little history is necessary to understand the situation. In 1970, Congress passed the Fair Credit Reporting Act (FCRA). The law defined the term “consumer report” to include an individual’s “credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living.” The FCRA distinguished between consumer reports that contained information obtained by personal interviews and consumer reports gathered by other means.

The California legislature responded with two state analogues in 1975: the Investigative Consumer Reporting Agencies Act (ICRAA) and the Consumer Credit Reporting Agencies Act (CCRAA). Modeled on the FCRA, the statutes had similar purposes and were intended to serve complementary goals.

As originally enacted, the ICRAA applied to consumer reports that included character information obtained only through personal interviews. It defined an “investigative consumer report” as one “in which information on a consumer’s character, general reputation, personal characteristics, or mode of living is obtained through any means.” The statute requires that the person procuring the report provide the consumer a “clear and conspicuous disclosure in writing” and that the consumer in turn provide a written authorization for the report’s procurement.

Lawmakers took a slightly different approach with CCRAA, which defined a “consumer credit report” as “any written, oral or other communication of any information by a consumer reporting agency bearing on a consumer’s credit worthiness, credit standing, or credit capacity, which is used or is expected to be used … for … employment purposes.” The definition excluded “any report containing information solely on a consumer’s character, general reputation, personal characteristics, or mode of living which is obtained through personal interviews with neighbors, friends, or associates of the consumer reported on, or others with whom he is acquainted or who may have knowledge concerning any such items of information.”

In 1998, the California legislature amended ICRAA to eliminate the personal interview limitation and expand the statute’s scope to include character information obtained under CCRAA or “obtained through any means.”

Since then, CCRAA continues to govern consumer reports that include character information obtained from a source other than personal interviews, as long as those reports contain information “bearing on a consumer’s credit worthiness, credit standing, or credit capacity.”

What does all this mean for employers? And how did the California Supreme Court get involved?

The two statutes came to the attention of the court when a group of current and former school bus drivers filed suit against their employers, First Student and First Transit, as well as the investigative consumer reporting agency (ICRA) that conducted background checks on the drivers. Eileen Connor led the class action.

After First Student acquired the company where Connor worked as a driver, it requested that the ICRA run background checks to confirm that Connor and the other workers were properly qualified to perform their job duties. The background reports elicited information about the employees’ criminal records, sex offender registries, address history, driving records and employment history.

Prior to conducting the background checks, First Student sent Connor a “Safety Packet” booklet. The booklet included an “Investigative Consumer Report Disclosure and Release” that provided authorization for the ICRA to prepare a consumer report or investigative consumer report. The notice included a checkbox that generally described Connor’s rights under ICRAA, informed her that she could check the box if she wanted to receive a copy of the report and released First Student from all claims and damages arising out of or relating to its background investigation if the box was checked.

Connor filed suit, arguing that the notice failed to satisfy ICRAA’s specific requirements and that First Student neglected to obtain her written authorization to conduct the background check, as required by ICRAA.

First Student asked the court to dismiss the suit, arguing that ICRAA is unconstitutionally vague as applied to the lawsuit because it overlaps with CCRAA and that the notice satisfied CCRAA.

The California Supreme Court found that while the statutes overlap to some degree, achieving compliance with both did not render ICRAA unconstitutional. The two statutes were not intended to be exclusive of each other, the court said, and potential employers can comply with both statutes without undermining the purpose of either.

“If an employer seeks a consumer’s credit records exclusively, then the employer need only comply with CCRAA,” the court explained. “An employer seeking other information that is obtained by any means must comply with ICRAA. In the event that any other information revealed in an ICRAA background check contains a subject’s credit information and the two statutes thus overlap, a regulated party is expected to know and follow the requirements of both statutes, even if that requires greater formality in obtaining a consumer’s credit records.”

First Student complained that because the ICRAA and CCRAA cover the same subject matter, it was unclear which statute applied in the context of employment background checks. But the court disagreed. Connor’s report, for example, fell within the scope of both statutes and “such a duality does not make legal compliance particularly difficult, must less impossible,” the court said.

“Any partial overlap between the statutes does not render one superfluous or unconstitutionally vague,” the court wrote. “They can coexist because both acts are sufficiently clear and each act regulates information that the other does not.”

The California Supreme Court opinion was a loss for First Student and the ICRA, as the court found the defendants had no excuse for not complying with both statutes. For employers more generally, the decision sends an important message: compliance with the requirements of both ICRAA and CCRAA is mandatory, even where the two statutes overlap.

Amendment to San Francisco’s Fair Chance Ordinance goes into effect October 1, 2018

In April 2018, the San Francisco Board of Supervisors passed an amendment to the Fair Chance Ordinance (FCO), which takes effect on October 1, 2018. The full text of the amendment can be found here.

The FCO notice/poster has also been updated and can be accessed here. Employers must provide this notice to applicants and employees prior to conducting a criminal background check, and post it in English, Spanish, Chinese, and any other language is spoken by at least 5% of the employees at the workplace or job site.

New FCRA Summary of Rights

 

Effective September 21, 2018, section 605A(i) of the Fair Credit Reporting Act (FCRA), added by the Economic Growth, Regulatory Relief, and Consumer Protection Act requires that a new notice (which explains consumer rights about placing fraud alerts and credit freezes with nationwide consumer reporting agencies (NCRAs)) be included whenever a consumer is required to receive a summary of rights under FCRA’s section 609. Although the new notice requirement is aimed at NCRAs and potentially consumer reporting agencies, the Consumer Financial Protection Bureau published a revised “FCRA Summary of Rights” form on September 13, 2018 (which includes the new notice and updates certain contact information) and the conservative approach for employers is to use the new form also.

The new version of the “FCRA Summary of Rights” form can be accessed HERE.

When employment meets antitrust

 

Can employers be criminally liable for antitrust violations? According to the Department of Justice (DOJ), the answer is yes.

Violations of antitrust law in the employment context have made headlines in recent years, as the government has cracked down on “no-poach” and “salary-fixing” agreements between companies. Taking the issue increasingly seriously, the DOJ issued guidance promising to bring criminal charges against employers for such illegal conduct.

First, some background. From an antitrust perspective, greater competition among employers not only helps employees – who can negotiate for higher wages or better benefits between companies – but also benefits consumers more generally. Therefore, Section One of the Sherman Act prohibits employers from expressly or implicitly agreeing not to compete with one another, even for seemingly innocuous and beneficial reasons (like saving money).

Demonstrating the government’s interest in employment antitrust violations, the DOJ filed suit in 2010 against Adobe Systems, Apple, eBay, Google, Intel, Intuit, Lucasfilm, and Pixar, accusing the companies of promising not to recruit each other’s employees. While the cases resulted in consent judgments for the companies involved, the deals didn’t come cheap. Intuit, Lucas Films, and Pixar paid a total of $20 million to settle, while Adobe, Apple, Google, and Intel agreed to a $324 million settlement.

In 2016, the DOJ and the Federal Trade Commission (FTC) – the two federal agencies that share the responsibility to enforce the antitrust laws – released guidance to help employers avoid potential violations of federal law. The overriding message from the agencies: an agreement among competing employers to limit or fix the terms of employment for potential hires may violate the antitrust laws if the agreement constrains individual firm decision making with regard to wages, salaries or benefits, the terms of employment or even job opportunities.

The DOJ also vowed to proceed criminally against naked wage-fixing or no-poach agreements going forward.

“These types of agreements eliminate competition in the same irredeemable way as agreements to fix product prices or allocate consumers, which have traditionally been criminally investigated and prosecuted as hardcore cartel conduct,” the DOJ explained. If an investigation uncovers wage-fixing or no-poaching agreements, the agency “may, in the exercise of prosecutorial discretion, bring criminal, felony charges against the culpable participants in the agreement, including both individuals and companies.”

To avoid facing jail time for an employment crime, businesses need to educate human resources professionals and employees responsible for hiring about the dangers of no-poach and salary-fixing agreements and establish a compliance program to avoid any errors.

Top on the “not to do” list: entering into agreements regarding the terms of employment with companies that compete to hire employees. This prohibition applies to all agreements, whether written or unwritten, spoken or unspoken. Even informal agreements – for example, where individuals at two competing companies agree that employees at a given position should not be paid above a certain amount or a particular range, or the individuals promise each other not to hire or solicit each other’s workers – are illegal.

It is important to remember that the prohibition on salary-fixing extends beyond simply what a worker is paid and includes other benefits as well, from transit subsidies to meals. If one HR professional wants to stop offering increasingly expensive gym memberships to employees and reaches out to other companies to ask that they stop offering gym memberships as well, that would likely violate antitrust law if the companies reached an agreement.

So-called “gentleman’s agreements” with other companies are equally illegal, even if they are unwritten and informal; nor does the use of a third party intermediary insulate an employer from liability under antitrust law, such as a situation where a group of nonprofits hire a consultant who communicates a “pay scale” to all the organizations to establish a wage cap.

Employers should also take care to avoid sharing sensitive information with competitors, which could serve as evidence of an implicit illegal agreement.

Even the mere suggestion of an illegal agreement may constitute an antitrust violation, despite the fact that an agreement is not reached. The FTC filed an enforcement action against an online retailer that emailed a proposal to a competitor that both companies offer their products at the same price. The competitor passed on the invitation and notified the FTC. Even though no agreement was reached, the “invitation to collude” was sufficient for the company to face legal action.

With salary-fixing and no-poach agreements on the government’s radar – and the threat of criminal charges and penalties looming – employers should make an effort to develop antitrust training and compliance programs before a problem arises.

Reminder to California employers about requirements when taking adverse action based on a criminal record

With the enactment of an updated ban-the-box statute (the Fair Chance Act) on January 1, 2018, employers in California may need a refresher on how to take adverse action based on the criminal record of an applicant.

For those businesses located in Los Angeles, the requirements take on an additional level of complication due to slight differences in the city’s ordinance.

Pursuant to California law, employers with five or more employees must wait until after a conditional offer of employment has been made to ask any questions about a criminal history. This means inquiries about convictions, running a background check or other efforts to find out about an applicant’s criminal past.

As an aside, several types of criminal records are not allowed to be used by employers in the hiring process (including juvenile records, diversions and deferrals, non-felony marijuana convictions that are more than two years old and arrests that did not lead to a conviction).If the employer decides not to hire the applicant, it must conduct an individualized assessment of the conviction at issue to evaluate whether it has a “direct and adverse relationship with the specific duties of the job that justify denying the applicant the position.”

The applicant needs to be notified of the potential for adverse action based on the conviction. Such notice must identify the conviction at issue and include a copy of any background check report; the employer must also provide a deadline for the applicant to submit additional information with regard to the conviction (such as rehabilitation efforts or other mitigating circumstances).

Federal law also kicks in. For those employers that intend to rely in whole or in part on a background check report to take adverse action such as rescinding a conditional job offer, the Fair Credit Reporting Act (FCRA) mandates that applicants be given a pre-adverse action notice, a copy of the report and a notice of rights.

Once the applicant has provided any information and the employer makes a final decision, a second notice is required. This time, the notice should inform the applicant of the final adverse action, explain any procedure in place for the applicant to challenge the decision or request reconsideration and describe the applicant’s right to file a complaint with the state’s Department of Fair Employment and Housing (DFEH). If the FCRA has been triggered by the use of a background check report, the employer must also provide the applicant with an adverse action notice that contains FCRA-required text.

While this process may seem onerous, employers that hire workers in Los Angeles face additional requirements under the city’s Fair Chance Initiative for Hiring Ordinance (FCIHO). The law, which took effect on January 22, 2017, applies to employers with 10 or more workers (defined to include individuals who perform at least two hours of work on average in Los Angeles and are covered by the state’s minimum wage law).

The FCIHO has a narrower definition of a “conditional offer of employment” than that under state law – here, an offer of employment to an applicant “is conditioned only on an assessment of the applicant’s criminal history, if any, and the duties and responsibilities of the employment position.”

Regardless of the source of criminal history, if an employer elects not to hire an applicant, a written assessment that “effectively links the specific aspects of the applicant’s criminal history with risks inherent in the duties of the employment position sought by the applicant” must be performed.

This assessment needs to be provided to the applicant as part of the “fair chance process,” along with any other documentation or information used by the employer as well as a pre-adverse action notice. Again, if a background check report was used, the FCRA requirements apply. The applicant also receives an opportunity to share information the employer should consider before making a final decision, such as evidence of rehabilitation.

After at least five business days, the employer may make a final decision. If the applicant provided additional documentation or information, the employer is obligated to consider it and conduct a written reassessment. If the employer decides to take adverse action against the applicant anyway, the employer must notify the applicant and provide a copy of the reassessment along with the adverse action notice.

Go to Top