Loading page
All-in-one HR platform · v2.0
14-day free trial · No credit cardhello@HrMagix.com
All-in-one HR platform · v2.0
14-day free trial · No credit cardhello@HrMagix.com
Background verification is the employer checking that what a candidate has told them is true: identity, education, previous employment, and in some roles, address, references or criminal records. It protects the organisation and, done properly, it is fair to the candidate.
Done badly, it collects far more personal data than it needs, runs without clear consent, and lets a minor discrepancy end an offer without the candidate being heard. This guide sets out a proportionate process. It is not legal advice; data protection obligations in particular should be confirmed with your advisers.
01
Not every role needs every check. A finance role handling payments justifies more scrutiny than an entry-level role with no access to money or sensitive data. Decide the checks per role family and write them down, so candidates in the same role are treated the same way.
Watch for itCollect only what the role needs. Under India's data protection law, personal data is meant to be processed for a specified purpose and limited to what that purpose requires. Confirm the current position with your advisers.
02
Tell the candidate, in writing, which checks will be run, who will run them (including any agency), what data will be shared with that agency, how long it will be kept and whom to contact with questions. Then ask for their consent.
Consent should be specific to verification and separate from the offer letter's other terms, not buried in a clause. Keep the signed or recorded consent with the verification file.
Watch for itThe rules on consent, notice and processing of personal data under the Digital Personal Data Protection Act 2023 and the rules made under it should be checked for your situation, including how long verification data may be retained.
03
Two common patterns. Checks run after the offer is accepted but before joining, with the offer stated to be conditional on satisfactory verification. Or checks start before joining and complete in the first weeks, with continued employment conditional on the outcome.
Whichever you use, say so in the offer letter, and say what happens if a check is unsatisfactory. A candidate who resigns from a current job on the strength of your offer is entitled to know the conditions attached to it.
04
An agency acts on your behalf, so its conduct reflects on you. Agree in writing what it checks, how it contacts previous employers and references, how it stores data, when it deletes it and what it may not do, such as contacting a current employer without the candidate's permission.
Ask for reports in a consistent format, with each check marked clear, discrepant or unable to verify, and with the evidence behind any discrepancy.
05
Many discrepancies are innocent: a former employer that closed, a designation that was renamed, dates off by a month. Before acting, tell the candidate what was found and give them a chance to explain or provide documents.
Decide in advance which discrepancies are material for which roles. A falsified degree for a role that requires it is a different matter from a three-week difference in a joining date from six years ago. Record the decision and the reason.
06
Keep the outcome, the consent and key evidence on the employee's file, with access limited to the people who need it. Raw documents collected by an agency should not sit indefinitely in shared folders.
For candidates who do not join, set a retention period and delete their verification data at the end of it.
Every guide ends here rather than in a summary. If a line below is not true yet, that is the next thing to do.
For most private employers there is no general legal requirement to verify every employee, though some regulated sectors and clients impose their own requirements. Most employers do it as a matter of risk management.
You should get informed consent before running checks, particularly because personal data is shared with third parties. Confirm the current requirements under the data protection law with your advisers.
If the offer was clearly conditional on verification, a material discrepancy can justify withdrawal. Give the candidate a chance to explain first, and take advice in unclear or senior cases.
Only as long as you need it for a stated purpose. Set a retention period for joiners and a shorter one for candidates who did not join, and confirm both against current data protection rules.
The checklist above is generic by necessity. Bring your own structures, states and rota and we will tell you which lines are already true and which are not.
14-day free trial · Full access to all 12 modules · Zero implementation fee · Cancel anytime