Who this is for

Built for HR, hiring managers, and background screening vendors for candidates and certain sensitive role changes.

Every section below is included in your download, summaries only shown here, not the policy text.

• —

  Document control

  Owner, version, review cycle, and approval fields ready to customize.

• 1

  Purpose

  Why this policy exists and the outcomes it supports.

• 2

  Scope

  Who and what systems, locations, and activities are in scope.

• 3

  Definitions

  Key terms defined in a table for consistent interpretation.

• 4

  Roles and responsibilities

  Accountability for executives, owners, managers, staff, and IT.

• 5

  Policy requirements

  Numbered, audit-ready controls you can adopt or tailor.

• 6–8

  Exceptions, monitoring, enforcement

  Exception process, review cadence, and consequences of non-compliance.

• 9–10

  Regional compliance and framework mapping

  US, EU, and global obligations plus mapped control themes.

• A–C

  Appendices

  Customization notes, document history, and approval signatures.

Requirement themes addressed, not the verbatim policy language.

• Conduct background checks only where job-related and consistent with business necessity.
• Obtain written candidate consent and provide pre-adverse and adverse action notices…
• Use accredited screening vendors with secure data handling and retention limits.
• Limit checks to categories approved for role tier (e.g., credit checks only for…
• Apply ban-the-box and fair chance hiring rules in applicable jurisdictions.
• Evaluate criminal records individually considering nature, time
• Protect screening results as confidential HR records with restricted access.
• Do not use social media screening in ways that discriminate on protected grounds.
• Re-screen employees transferring to high-trust roles where policy requires.
• Review screening criteria annually with legal counsel for regulatory updates.