A basic principle of conducting international searches on an individual is that you need a lawful basis for processing personal data. This principle applies to both employment-purpose and commercial background checks.
Although the number and type of lawful bases vary from one country to another (especially with the enactment of new data protection and privacy laws in many countries over the last several years), a lawful basis for processing personal data common to all international searches is the consent of the individual search subject. From a compliance perspective, obtaining an individual’s consent for the searches is the best practice.
Other than the requirements that the subject’s express consent be unambiguous and freely given, there is no universally prescribed format or wording for an international consent form.
If the subject’s consent cannot be obtained, you can look to a country’s data protection and privacy laws to determine if a different legal basis may be applicable for processing personal data that does not require the subject’s consent. It is always up to the controller of the data to determine the appropriate legal basis for processing personal data.
For individuals located in the EU or UK, there are several legal bases that will satisfy the compliance requirements under the EU GDPR, the UK GDPR and the Data Protection Act of 2018 (UK) if consent cannot be obtained. The controller can still request these searches if it has a legitimate interest in obtaining the individual’s personal data or needs the data to perform a contract.
If the request for the searches is based on a legitimate interest or performance of a contract, the individual must receive a notice of the controller’s intention to process the data. Notice can be given in several different ways, including directly to the individual, in an engagement letter or similar document, or by publication on the client’s website. The way the controller gives notice is their decision.
Consent for International Searches
InternationalA basic principle of conducting international searches on an individual is that you need a lawful basis for processing personal data. This principle applies to both employment-purpose and commercial background checks.
Although the number and type of lawful bases vary from one country to another (especially with the enactment of new data protection and privacy laws in many countries over the last several years), a lawful basis for processing personal data common to all international searches is the consent of the individual search subject. From a compliance perspective, obtaining an individual’s consent for the searches is the best practice.
Other than the requirements that the subject’s express consent be unambiguous and freely given, there is no universally prescribed format or wording for an international consent form.
If the subject’s consent cannot be obtained, you can look to a country’s data protection and privacy laws to determine if a different legal basis may be applicable for processing personal data that does not require the subject’s consent. It is always up to the controller of the data to determine the appropriate legal basis for processing personal data.
For individuals located in the EU or UK, there are several legal bases that will satisfy the compliance requirements under the EU GDPR, the UK GDPR and the Data Protection Act of 2018 (UK) if consent cannot be obtained. The controller can still request these searches if it has a legitimate interest in obtaining the individual’s personal data or needs the data to perform a contract.
If the request for the searches is based on a legitimate interest or performance of a contract, the individual must receive a notice of the controller’s intention to process the data. Notice can be given in several different ways, including directly to the individual, in an engagement letter or similar document, or by publication on the client’s website. The way the controller gives notice is their decision.
Expungement of Criminal Convictions – California Style
CaliforniaSome states allow a defendant convicted of a crime to apply for a court order limiting public access to the conviction record or to restore rights and remove disabilities caused by the conviction. This type of order is commonly referred to as an expungement; however, the qualifications for obtaining an expungement and the effect of the expungement vary among the states that allow expungements.
California has an expungement procedure set forth in Penal Code 1203.4. If a defendant meets the qualification of Penal Code 1203.4, the court will allow the defendant to withdraw a plea of guilty or no contest, to reenter a plea of not guilty, and to have the case dismissed. The defendant is also relieved from many of the negative consequences of a criminal conviction.
When reviewing California criminal records showing a conviction, it is important to note if there is also a reference to a Penal Code 1203.4 dismissal because this can impact whether the record is reportable in a background check for a California employer. For example, California law does not allow the reporting of criminal records that result in a non-conviction in employment-purpose reports. Even though the record shows a conviction, the Penal Code 1203.4 dismissal effectively means the conviction never happened.
The reference to the code section will typically be found on the case docket, dated a year or so after the conviction date.
District of Columbia: Limitations on Reporting Negative Information in Background Checks Used for Employment Purposes
Other States with FCRA LawsAlthough several states have laws analogous to the federal Fair Credit Reporting Act (FCRA), the District of Columbia does not. As a rule, the District of Columbia follows the federal FCRA regarding the limitations on reporting negative information in background check reports used for employment purposes. However, there are three notable exceptions where district law differs from the FCRA regarding reporting criminal records:
(1) Records of arrests or criminal accusations that did not result in a conviction cannot be reported (unless the charges are pending);
(2) Inquiries about criminal convictions cannot be made unless a conditional offer of employment is made; and
(3) Convictions with a completed sentence that is more than 10 years old cannot be reported.
The first two exceptions are found in the district’s Fair Criminal Record Screening Amendment Act of 2014 codified at Sections 32-1341 – 32-1346 of the Code of District of Columbia, and the third exception is found in Section 2–1402.66 of the district’s Human Rights Law.
Decoding Criminal Case Dispositions
GeneralA “disposition” is the final outcome of a case, regardless of what it is called. Here is a list of typical criminal case dispositions.
Guilty or Conviction: This is the worst possible disposition if you are the defendant. It means that the case was heard and decided against you. With a conviction, the court will impose a sentence that may include jail time, probation, and paying a fine and court fees.
Not Guilty: The case actually proceeds to a trial, where a jury (or a judge in certain types of cases) decides that the evidence against the defendant was insufficient for a conviction. It does not mean the defendant was innocent – just that the case was heard and decided in the defendant’s favor.
Dismissal: A dismissal is entered when the court determines that the case should not move forward for some reason. There are many reasons for dismissals. For instance, there can be procedural errors, a lack of proper jurisdiction over the type of case, or the prosecutor decides to dismiss the charges (see below).
Nolle Prosequi or Nolle Prosse: A Latin phrase meaning “no more prosecution.” This is another way of saying that a case is dismissed by the prosecutor. This approach is often used when a defendant may agree to plead guilty to a lesser offense that guarantees the prosecution a conviction for a related offense, in exchange for the prosecutor “dismissing” the more serious charge.
Reporting Disclosed Criminal Convictions
GeneralJob applicants often disclose criminal convictions during the application process. It may seem logical that we can include the disclosed record in our background reports. After all, we are simply verifying what the subject already disclosed, right?
Actually, it’s wrong. The subject’s disclosure of a criminal conviction does not affect our reporting obligations under the federal Fair Credit Reporting Act (FCRA) or similar state laws. Our background reports must always comply with these laws regardless of what is disclosed to us. Under the FCRA, convictions can appear in a report regardless of when they occurred. Most states follow this rule, but several do not. California, Kansas, Maryland, Massachusetts, Montana, New Mexico, New York, New Hampshire, and Washington, all limit the reporting of a criminal conviction to seven years after the conviction occurred. The District of Columbia sets a 10-year reporting limit.
Does New York law require notice to the employee in order to have a consumer reporting agency conduct a background check in connection with the employee’s misconduct?
New YorkThe NY FCRA sets forth notice and authorization requirements for investigative consumer reports as shown in “https://law.justia.com/codes/new-york/2017/gbs/article-25/380-c/” NY Gen Bus L § 380-C. However, this section is silent on the issue of employee misconduct investigations and we found no language in NY FCRA law that is analogous to the federal FCRA exemption for employee misconduct investigations as provided in 15 U.S.C.1681a(y)(1).
When analyzing this question, we reviewed a 2006 opinion by the Oklahoma Attorney General that addressed a very similar issue. A state senator wanted to know whether OK employers could rely on the FACTA amendment to the federal FCRA that provides the exemption for employee misconduct investigations and dispense with the OK notice requirements for consumer reports. The OK AG said “no,” the reason being that the OK statute (which specifically references the previously enacted federal FCRA) was enacted before FACTA and the OK legislature did not indicate in the statute that amendments to the original FCRA would also be adopted.
Of course, the AG opinion is not a binding law anywhere, including in OK. But it does show how the issue may be analyzed to the detriment of the employer if it arose in litigation. Like the OK statute, the NY FCRA was enacted well before the FACTA amendment in 2003 (NY FCRA was enacted in 1977). However, unlike the OK statute, the NY FCRA does not include any references to the federal FCRA and, therefore, does not rely on any of its language as originally enacted. That is a distinction that can undermine an OK AG-type analysis to the NY FCRA.
The most we can say is that the NY FCRA does not address employee misconduct investigations and that the federal FCRA does set forth an express exemption from its notice requirements for such investigations. Whether there is a conflict between the NY notice requirements (or any other state’s notice requirements) and the federal exemption for employee misconduct investigations remains to be seen and there are no court opinions addressing the issue.
In the absence of guidance from NY FCRA regarding employee misconduct investigations, the employer can follow the federal FCRA exemption for these investigations. It would be prudent for the employer to document the need for confidentiality of the investigation, specifying the reasons why alerting the employee would undermine the investigation.
Arrest record but no charges
GeneralTypically, an arrest record will show the date, arresting agency, and the subject’s name (and other identifiers such as DOB and address), without specifying the charge or charges. The reason for this is twofold: (1) until the district attorney (“DA”) files a criminal case, there are no charges; and (2) the charges filed by the DA may be different than the charges on which the arresting officer based the arrest. An “arrest” and “being charged with a crime” are different things (although obviously related). An “arrest” means that a person is taken into custody because they have been accused either by a warrant or by probable cause of committing a crime. Once in custody, the prosecutor’s office will decide whether the person will be charged with a crime. The person will then be given a charging document (complaint or information) that will state what charges they are facing.
A record will never show that an arrest was “dropped.” At best, you can infer that no charges were filed after an arrest if there is no corresponding court case.
New Jersey Crime Categories
GeneralAs explained in our previous posts, the most serious offenses are categorized as “felonies” and less serious as “misdemeanors.” While this is true in nearly every state, there is an exception (of course) and that exception is New Jersey.
In New Jersey, crimes are not categorized as felonies and misdemeanors but as “indictable crimes,” “disorderly person offenses,” and “petty disorderly person offenses.”
According to New Jersey law, indictable offenses are the equivalent of felonies in other states. Courts classify charges into first, second, third, and fourth-degree charges. A first-degree offense is the most serious of all charges. “Indictable” means that a grand jury has found enough evidence against the defendant to make them face trial.
“Disorderly person offenses” and “petty disorderly person offenses” (sometimes referred to as “DP offenses”) are the equivalent of misdemeanors in other states because they are less serious offenses and are punishable by less than one year in jail.
Civil Cases and Garnishees
GeneralA common occurrence when searching civil case records for a company is to locate a record that identifies the company’s role in the case as a “garnishee.” What’s a garnishee and should these cases be included in background reports?
A garnishee can be any company (or person) who holds property (including money) owed to a debtor – that is, someone who has an unpaid judgment against them.
Employers often become a garnishee because they hold wages to be paid to an employee who is a debtor. A creditor can use a procedure called a wage garnishment, which is a court order, that requires the debtor’s employer to hold the debtor’s wages to pay the creditor. The employer as garnishee simply pays the employee-debtor’s wages to the court.
Because a garnishee’s involvement in a civil case is neither negative nor noteworthy, it typically should not be included in the report.
Reporting Disclosed Criminal Records — Non-Convictions
GeneralPreviously, we emphasized the limitations that several states and the District of Columbia place on reporting criminal convictions even though a job applicant discloses the conviction during the application process. What about limitations on reporting disclosed criminal records that do not result a conviction? Criminal records of non-convictions include:
Although the federal Fair Credit Reporting Act (FCRA) permits convictions to be reported regardless of when the conviction occurred, the FCRA limits the time for reporting non-convictions. Records of non-convictions are reportable for seven years from the earliest file date for the record and can appear on a background report for seven years. After seven years, the record cannot be reported unless the candidate is or will be earning more than $75k annually.
The FCRA seven-year rule applies in all states except California, Kentucky, New York, and New Mexico. These states prohibit reporting any records non-convictions, regardless of date of the record. California, New York, and New Mexico provide an exception for records of pending criminal cases.