If you talk to HR professionals who have managed multiple hiring cycles, you will hear the same concern: candidates often come into the process with significant misunderstandings about what a background check actually involves.
These misconceptions matter for employers, not just for candidates. When people believe background screening is intrusive or arbitrary, they may withdraw from the process, raise unnecessary complaints, or form a negative view of your employer brand. In some cases, misunderstandings also lead to compliance risks if checks are requested or explained in ways that do not align with GDPR, the UK GDPR, or the FCRA.
The aim here is to separate common myths from what typically applies in practice across Romania, the UK and the US, and to highlight where the rules genuinely differ.
We have also made an AI podcast, if you prefer to listen:
Myth 1: “A background check is basically just the criminal record”
This is one of the most frequent points of confusion. A background check is broader than a criminal record, and at the same time, the criminal record is often the most legally restricted element.
Screening usually brings together several independent verifications: employment history, education and professional credentials, references, and, for certain roles, targeted searches such as adverse media or court records. The criminal record (cazier judiciar in Romania) is only one component, and in many jurisdictions it can be requested only in limited circumstances.
There is also an important distinction between a “criminal record certificate” and a “background check”:
- A criminal record certificate is a single official document listing convictions (where legally available).
- A background check is a process that combines multiple confirmations, most of which do not involve police or criminal databases at all.
What employers can legally access varies significantly by country, which is where many well-intentioned teams run into problems.
| What you’re checking | Romania | United Kingdom | United States |
|---|---|---|---|
| Criminal record | Restricted. Cazier judiciar can generally only be required where a specific law demands it for the role (GDPR Article 10, Law 190/2018). Consent alone is not enough. | Tiered via the DBS: Basic, Standard or Enhanced, depending on the role. Spent convictions usually need not be disclosed except for exempt positions (Rehabilitation of Offenders Act 1974). | Widely accessible through court records, but bounded by the FCRA. Certain non-conviction information cannot be reported after seven years. |
| Employment history | Former employer may confirm role held and dates, with the candidate notified first (Labour Code Art. 29). | Standard practice; usually role and dates confirmed. | Standard; role, dates, sometimes eligibility for rehire. |
| Education / credentials | Confirmed directly with the issuing institution. | Confirmed with the institution or awarding body. | Confirmed with the institution or a verification service. |
| Adverse media / online | Only publicly available, relevant information; proportionality applies under GDPR. | Same; UK GDPR proportionality applies. | Permitted, but FCRA rules apply when a third-party agency compiles it. |
A related question many candidates ask: if I don’t have a criminal record, is there any point in screening me?
In practice, the findings that most often affect hiring decisions are not convictions. They are unconfirmable diplomas, employment dates that do not match official records, inflated job titles, or professional licences that have lapsed. No criminal record does not mean no risk.
One more distinction that matters here, and that connects to Myth 5: a court record search is not the same as a criminal record check. Civil litigation (for example a commercial dispute or an employment tribunal) sits in a different register from criminal convictions. For most roles it is irrelevant and off-limits. For a limited set of positions (senior finance, roles with fiduciary duty), a targeted legal search can be proportionate, but it must remain clearly defined and justified.
Myth 2: “They can dig through my life behind my back”
Few concerns damage candidate trust more than the suspicion that checks are happening in secret. The baseline across Romania, the UK and the US is that candidates must know a background check is taking place.
Transparency is not optional. What often causes confusion is the exact role that consent plays, and this is where many HR teams unintentionally reverse the legal logic.
A signed consent form is operationally important: it documents authorization, shows that the candidate was informed, and supports your transparency obligations. However, under GDPR, signed consent is not, by itself, what makes the processing lawful. For ordinary personal data, employers typically rely on a basis such as legitimate interests or processing necessary to take steps prior to entering a contract. For criminal-record data, which GDPR Article 10 treats as a special category, consent alone does not provide a valid legal basis; a specific legal authorization is required.ico.org+4
If this distinction is misunderstood, an employer can end up with a properly signed form but no valid basis to process someone’s cazier.
Candidates also raise practical questions:
- “Why do you need my personal documents?”
Verification must be anchored to a real identity and real records. A screener may ask for ID, proof of qualifications, or documents that confirm employment periods. The employer’s obligation is to request only what is proportionate to the role and to protect that data appropriately (limited access, secure storage, defined retention). - “Who actually sees the results?”
Typically a small, defined group: the screening provider, the relevant HR contact, and usually the hiring manager. Not the entire office, not unrelated colleagues. Results should not be kept indefinitely; retention periods should be defined in advance and limited to what is necessary, after which the data is deleted. - “Can I just refuse?”
A candidate can decline to participate. What happens next depends on the role and how essential the check is. There is an important difference between refusing a check outright and simply being unable to produce a particular document. The first is a choice. The second is common and often innocent, and should not automatically be treated as a red flag.
Background screening, when done correctly, is not open-ended snooping. It is a bounded, documented process carried out with the candidate’s knowledge. If candidates perceive it otherwise, that usually points to a communication gap on the employer’s side rather than a flaw in screening itself.
Myth 3: “It’s all a bit intrusive, isn’t it?”
This concern is closely related to Myth 2, but worth addressing separately because “intrusive” is a feeling, not a fact, and feelings influence whether someone accepts an offer.
A properly run background check is narrow by design. It focuses on what is relevant to the job: not health information, not family circumstances, not political views, not private messages. Proportionality is central. A cashier and a chief financial officer should not receive the same checks, because the relevant risks are different.
The key question screening asks is: can this person safely and competently perform this specific job, and is what they told us about their background accurate? Anything that does not serve that question should not be included in the report.
Myth 4: The individual checks, and what each one can (and can’t) confirm
Many candidate questions come down to: “Wait, they can check that?” Below is a straightforward overview of what each verification typically covers.
Can an employer confirm I really worked somewhere?
Yes, and this is one of the most common checks. Employment verification confirms the essentials: that you held the role, and the dates you held it.
In Romania, the Labour Code (Article 29) is specific: a prospective employer may seek information from a former employer about the functions held and the duration of employment, and only after notifying the candidate first. The scope is narrow: it is not a character assessment, but confirmation of role and period.
Can they ask my current employer?
This is a frequent concern, especially for candidates who are still employed and do not want their current manager to know they are looking. A responsible screener will not contact a current employer without clear justification and, in most cases, the candidate’s explicit approval. Such contact is usually delayed until late in the process. For HR leads, this courtesy matters: candidates remember who protected their confidentiality
Can they find out I was fired?
A former employer can confirm your dates and role. Whether they comment on why you left is a separate matter, and many choose not to as a matter of policy.
For screening purposes, the important distinction is between:
- Employment period – verifiable and relevant.
- Reason for departure – often neither confirmable nor, for most roles, particularly relevant.
A gap between “I left to pursue other opportunities” and “the record shows a dismissal” may warrant a conversation, but it is not automatically disqualifying.
Can they check my salary?
Mostly no, and it is important not to conflate two different things. Employment verification is not salary verification.
Confirming that you were a marketing manager from 2021 to 2024 is standard. Asking what you were paid is more sensitive and increasingly restricted; several US jurisdictions now prohibit asking about salary history altogether. For verifying experience, past pay is largely beside the point. What you did and for how long is what matters.
Why verify my diploma if I already handed it over?
Because “I have a diploma” and “the issuing institution confirms this diploma” are two different statements, and credential fraud often lives in the gap between them.
Education verification confirms directly with the university or awarding body. Sometimes an institution is slow to respond, has merged, or has changed its records system, so a diploma that cannot be confirmed immediately is not necessarily fake; it may simply mean confirmation is still in progress.
Does it check my online activity?
Sometimes, and this is where concerns arise. There are two different processes that are often confused:
- Social media screening looks at what you have posted publicly. It is easy to overreach with, and easy to do badly, which is why it is used cautiously and only where genuinely job-relevant.
- Adverse media screening searches public news and records for material red flags (fraud, sanctions, serious misconduct reported in the press), typically for senior or high-risk roles.
Both are bounded by one principle: public and relevant. Private accounts are off-limits. A holiday photo from 2018 is not “adverse media.” The threshold for what counts should be, and generally is, high.
Myth 5: “One red flag and I’m finished”
This is one of the most anxiety-inducing beliefs among candidates, and it is mostly false. However, how employers handle findings is also where they face some of the sharpest legal risk, so this area deserves careful attention.
A negative finding does not automatically end a candidacy. Relevance and gravity are what matter. A “negative finding” simply means something in the check did not match expectations or surfaced a concern. It is the start of an assessment, not the end of one. A minor parking-related issue is not equivalent to a fraud conviction. A three-week discrepancy in employment dates is not the same as a fabricated career.
Consider a small discrepancy in dates. A minor error in a CV is not the same as a lie. Someone writes “2019 to 2022” and official documents show “June 2019 to May 2022.” That is an administrative rounding of dates, the kind almost everyone does. Contrast that with claiming a degree that was never awarded, or a role that never existed. The first situation may be a simple error. The second is false information. Treating them the same is unfair to candidates and can expose the employer to challenge if someone is rejected over a trivial mismatch.
Two further points are important here.
First, “unable to verify” does not mean “false.” If a former employer never replies (companies close, HR departments lose records, people move on), the correct label is “unverified,” not “fabricated.” A good process then looks for alternative documentation rather than assuming the worst. Penalizing a candidate for a former employer’s silence is both unjust and risky.
Second, the discrimination question, because “background checks are discriminatory” is a belief many people hold sincerely. Used carelessly, screening can produce discriminatory outcomes. Used properly, it is a structured guard against exactly that. The safeguards, especially relevant in the US, are worth knowing:
- Individualised assessment. Do not apply blanket bans. The US framework built on the EEOC’s “Green factors” asks you to weigh the nature of the conduct, the time that has passed, and its relevance to the specific job.
- The adverse action process under the FCRA. Before rejecting someone based on a report, you provide a pre-adverse-action notice with a copy of the report, then allow a pause for the candidate to respond (commonly cited as around five business days, though this should be treated as a rough guide and confirmed against current requirements), then issue the final adverse-action notice.
- Fair-chance and ban-the-box laws. Many US states and cities restrict when in the process you can ask about criminal history at all. These vary widely, so the specific jurisdiction must be checked.
The common thread across Romania, the UK and the US is the same: screening should support a fair, evidence-based decision, weighed alongside skills, qualifications and experience. It is not a trapdoor.
Myth 6: Timing, “perfect” candidates, and one-size-fits-all
Several process-related myths become much easier to address once the underlying logic is named.
“If I passed every interview, why check my CV at all? Don’t you trust me?”
This is not about distrust; it is about process. Verification often runs after interviews for a practical reason: it costs time and money, so it is done once you are serious about a candidate, not for everyone in the first round. Some companies verify before the offer, some after; both approaches are normal. This reflects workflow and cost, not specific suspicion of one person.
“Why screen candidates who look perfect?”
Because screening is risk management applied evenly, not an accusation aimed at one person. The mindset is not “we think you lied,” but “we run the same standard process for everyone in this type of role.” A polished CV is exactly the kind that benefits from confirmation, and a candidate with nothing to hide has nothing to fear from a consistent policy. Consistency is also your best legal defence: applying the same checks to everyone in a role helps avoid claims that you singled someone out.
“How long does this take?”
It depends, and honestly it depends on factors neither you nor the candidate fully control. Some verifications come back in a day. Others take longer because they rely on third parties: a former employer’s HR team, a university registry, a public authority. Part of the timeline depends on the candidate (how quickly they supply documents) and part on institutions that move at their own pace. Setting that expectation early reduces a lot of anxious follow-ups.
“Is it the same for every job?”
Definitely not, and it should not be. The scope of screening scales with the role’s risk. A banking role that touches client funds, a healthcare role, a position handling sensitive data, or any role working with children carries requirements an IT support job simply does not. Matching the depth of the check to the sensitivity of the role is not inconsistency; it is proportionality in practice.
Myth 7: “This is a big-corporation thing”
This last myth is particularly costly for smaller companies that hold it.
Background screening is not reserved for large corporations. Businesses of every size can benefit, and the practice scales down as easily as it scales up. A small firm often has more to lose from a single bad hire, not less: fewer people to absorb the damage, a tighter budget, a reputation built on a handful of clients. Screening can be tailored to the roles that actually matter and to a realistic budget. You do not need an enterprise HR department to make one informed, well-documented hiring decision.
What is important for HR teams
Most background screening myths share a single root: people picture screening as surveillance rather than what it is—a bounded, consent-anchored, proportionate check on the specific things that matter for a specific job. Once that is clear, many anxious questions answer themselves.ico.org+2
For you as the employer, three habits do most of the work:
- Apply checks consistently within each role type.
- Keep everything proportionate and well documented, with a defined retention period.ico.org+2
- Communicate the process to candidates in plain language, because the way you explain screening is quietly part of your employer brand. Candidates who understand what is happening tend to cooperate. Candidates left guessing may withdraw or, worse, complain.ico.org+1
When handled with care, respect for the rules across Romania, the UK and the US, and a genuine commitment to fairness, background screening does exactly what it is meant to do: it protects the organisation and the people in it, without treating good candidates like suspects.ico.org+4
If you would like a screening process built to hold up across Romanian, UK and US requirements, the team at Mindit works with HR and compliance teams to get exactly that right. You can reach us at office@mindit.ro or at https://mindit.ro.
