We have an AI podcast, if you want to listen to this toppic:
Hiring decisions are often based on a combination of a CV, interviews and references. These steps can provide a useful picture of a candidate, but they do not always confirm whether the information provided is accurate.
This is where background screening can add value. It allows employers to verify relevant information such as identity, employment history, education, professional qualifications and references before making a hiring decision. Depending on the role and applicable legal requirements, screening may also include checks such as sanctions, litigation, criminal records or credit history.
Background screening has been part of the hiring process for many employers in the US and Western Europe for years. It is also becoming more relevant in Romania as companies hire across borders, work with distributed teams and recruit for positions involving access to sensitive information, systems or customers.
This article looks at what background screening involves, why companies are paying more attention to it in 2026, and how employers can build a screening process that is proportionate to the role and compliant with GDPR and Romanian data-protection requirements.
What background screening actually is
At its simplest, background screening is a structured process for verifying information provided by a candidate. Depending on the role, this can include identity, employment history, education and qualifications, and professional references.
Where legally permitted and relevant to the position, employers may also carry out checks relating to criminal records, sanctions and watchlists, litigation, shareholdings or credit history.
A well-designed screening process should have a clearly defined purpose. The information collected should be relevant to the position and proportionate to the risks associated with it. Employers should also consider the legal requirements that apply to each type of check and each jurisdiction involved.
The scope of screening can therefore vary significantly between roles. A company hiring for a position with access to financial information or sensitive systems may have different verification requirements from one hiring for a lower-risk operational role.
Why background screening matters in 2026
Several changes in the hiring environment have made verification more relevant. Remote recruitment, international hiring and the increasing use of AI-generated application materials have made it more difficult for employers to rely solely on information presented during the recruitment process.
According to the 2026 State of Screening report from iProspectCheck, 59.5% of employers now run a background check on every candidate before hiring. The same survey found that 54.1% reported discrepancies in checks either “very often” or “somewhat often,” while 40.3% had withdrawn a job offer because of resume fraud or credentials that could not be verified.
The timing of these findings is also important. Around 30% of employers reported discovering resume fraud only after the candidate had already been hired. At that point, the organisation may already have invested in onboarding and training and given the employee access to internal systems, information or customers.
AI is introducing additional challenges. Nearly 23% of employers reported that they had knowingly interviewed a proxy or suspected deepfake candidate, while 14% had encountered AI-generated resumes. This makes identity verification increasingly relevant, particularly for remote recruitment and roles where the interview process takes place entirely online.
The cost of an unsuccessful hire
The financial impact of a poor hiring decision can be significant. The U.S. Department of Labor estimates the cost of a bad hire at at least 30% of the employee’s first-year earnings. Other estimates are higher. SHRM estimates put the cost at roughly 50–75% of annual salary for entry-level roles, 100–150% for skilled and managerial positions, and more than 200% for executive positions.
The direct costs are only part of the picture. Recruitment and onboarding costs, management time, lost productivity and the impact on other team members can all add to the financial consequences. Where an employee works directly with customers or has access to sensitive information, the potential impact can be greater.
This is one reason organisations increasingly consider background screening as part of their broader approach to managing hiring risk.
5 reasons companies benefit from screening candidates
The value of background screening depends on how it is designed and applied. For many employers, five benefits are particularly relevant.
1. Supporting a safer workplace
Every new employee becomes part of the organisation and may have access to colleagues, customers, systems and company information. Depending on the role, appropriate pre-employment checks can help identify issues that may be relevant to workplace or customer safety.
The checks should be tailored to the position and carried out before the employee starts where possible, rather than being introduced only after an issue has emerged.
2. Creating a consistent hiring process
A defined screening process gives candidates and hiring teams a clearer understanding of what is verified and why.
It can also support consistency between candidates. When the same relevant checks are applied to people being considered for comparable roles, hiring decisions are less dependent on individual assumptions or informal assessments.
3. Verifying qualifications and experience
CVs and interviews provide information about a candidate’s professional background, but they do not necessarily confirm that information.
Employment and education verification can help establish whether a candidate worked for a particular organisation, held a stated position, attended a particular institution or obtained a claimed qualification. Professional references can provide additional context about previous roles and responsibilities.
This is particularly relevant for positions where specific qualifications or previous experience are important to the role.
4. Adding consistency to the decision-making process
HR teams often manage large recruitment pipelines and may not have the time or resources to verify every piece of information themselves.
A structured screening process provides a consistent method for checking information across candidates. It can also reduce the reliance on informal judgments that may vary between hiring managers.
Screening does not replace interviews or professional judgment. It adds another source of verified information to the hiring process.
5. Demonstrating due diligence
Employers have responsibilities towards their employees, customers and business partners. Depending on the role and industry, failing to carry out appropriate checks can create additional risk.
A documented screening process can help demonstrate that the company has considered the risks associated with a particular position and taken reasonable steps to verify relevant information.
The exact legal implications will depend on the jurisdiction, industry and circumstances involved, so screening policies should be developed with the applicable legal requirements in mind.
What modern screening looks like
Background screening is also changing as recruitment processes become more digital and international. Several developments are becoming increasingly relevant:
Continuous monitoring
Some organisations are moving beyond a single pre-employment check and introducing ongoing monitoring for specific roles. This may be relevant in regulated industries or positions where certain changes in an employee’s circumstances could affect their ability to perform the role.
Continuous screening should be introduced carefully, with a clear purpose and appropriate legal basis for the processing involved.
Identity verification and deepfakes
Remote recruitment has increased the importance of confirming that a candidate is the person participating in the recruitment process.
AI-generated video, audio and other forms of synthetic identity fraud are creating additional challenges for employers. Identity verification can therefore form an important part of screening, particularly for remote and international recruitment.
Social media screening
Social media screening is used by some employers, although it requires particular care in Europe. Publicly available information is not automatically appropriate to collect or use in an employment decision.
Any social media screening should have a legitimate purpose, be relevant to the role and comply with applicable data-protection and employment requirements. Employers should avoid collecting information about a candidate’s private life simply because it is publicly accessible.
Verifiable digital credentials
Digital credentials are also developing as a way to verify education, professional qualifications and other achievements. Technologies such as blockchain can support the creation of credentials that are easier to verify and harder to alter, although adoption and practical implementation still vary between organisations and jurisdictions.
AI-assisted screening
AI is increasingly being used in recruitment and screening processes. It can help with administrative tasks, document processing and identifying information that requires further review.
However, automated tools should not be treated as a substitute for appropriate human oversight. Employers also need to consider data protection, transparency, accuracy and applicable rules concerning automated decision-making.
Legal considerations in Romania and the EU
Background screening in Romania is subject to the General Data Protection Regulation (GDPR) and Romanian legislation, including Law no. 190/2018, with the National Supervisory Authority for Personal Data Processing (ANSPDCP) responsible for supervising data-protection compliance.
Employers therefore need to consider the purpose of each check, the legal basis for processing, the type of information being collected, how long it will be retained and who will have access to it.
One common misconception is that obtaining a candidate’s consent automatically makes a background check lawful. Consent is only one possible legal basis under the GDPR, and its use in an employment context requires particular care because of the relationship between the employer and candidate.
The appropriate legal basis depends on the specific processing activity and the circumstances. Employers should also apply the principles of purpose limitation, data minimisation and proportionality. Information should be collected for a defined purpose and should be relevant to the position being assessed.
Criminal-record information requires additional attention. Article 10 of the GDPR specifically regulates personal data relating to criminal convictions and offences. Processing this type of information is subject to specific requirements and should not be treated in the same way as ordinary employment or education verification.
In Romania, employers should therefore establish whether a particular criminal-record check is permitted or required by applicable legislation for the role before requesting or processing this information.
Other categories of personal information may also be subject to restrictions or require a specific legal justification.
| Generally appropriate when relevant to the role | Restricted, inappropriate or requiring specific justification |
|---|---|
| Identity verification | Religious beliefs |
| Employment history | Sexual orientation |
| Education and qualifications | Political affiliation |
| Professional references | Health or medical information, unless there is a specific lawful basis and relevant requirement |
| Litigation or legal checks where relevant and lawful | Lie-detector tests and similarly invasive methods |
| Criminal-record checks where permitted or required by law | Information collected without a defined purpose |
| Credit history where relevant and legally permissible | Personal information unrelated to the requirements of the role |
The legal framework can vary depending on the type of check, the industry and the position. Employers should therefore assess each screening activity individually rather than applying the same checks to every employee.
Data-protection violations can result in significant administrative fines and other enforcement measures. The potential consequences depend on the nature and severity of the infringement and the applicable legal provisions.
How to build a screening process that holds up
Organisations introducing or reviewing a background-screening programme can start with a few practical steps.
1. Define a clear screening policy
Establish which roles require screening, which checks apply to each role and the reason for including them.
Documenting this approach can also help ensure that comparable candidates are treated consistently.
2. Inform candidates and establish the appropriate legal basis
Candidates should receive clear information about the screening process, including the purpose of the checks and the categories of personal data involved.
The organisation should also identify the appropriate legal basis for each processing activity rather than relying on consent as a blanket solution.
3. Match the screening to the role
The depth of screening should reflect the responsibilities and risks associated with the position.
For example, a role involving access to sensitive financial information may justify checks that would not be appropriate for a lower-risk position.
4. Consider specialist support
International screening can become complex when a candidate has lived, studied or worked in several countries. Requirements, available records, turnaround times and data-protection considerations can differ between jurisdictions.
Working with a specialist provider can help organisations manage these differences while maintaining a consistent internal process.
5. Document how discrepancies are handled
A screening result does not automatically mean that a candidate should be rejected. Organisations should have a documented process for reviewing discrepancies, giving candidates an opportunity to clarify information where appropriate, and making decisions consistently.
According to the iProspectCheck data cited above, fewer than half of employers have a documented adverse-action process. Having a defined procedure can help create greater consistency and transparency when screening results affect a hiring decision.
Getting started with background screening
Background screening cannot predict how someone will perform in the future, but it can give employers additional verified information before they make a hiring decision.
For organisations hiring across countries, working with sensitive information or recruiting for higher-risk positions, a structured screening process can be an important part of broader HR and risk-management practices.
The key is to keep the process proportionate. Not every candidate needs the same checks, and collecting more information does not automatically produce a better hiring decision. The most effective approach is to identify the risks associated with each role, determine which information is genuinely relevant, and build the screening process around those requirements.
At Mindit Consulting, we provide background screening services across Romania, Europe and the UK. Our approach combines local knowledge with a structured verification process designed to help employers obtain relevant information while taking data-protection requirements into account.
If you are reviewing your current screening process or considering introducing one, we would be happy to discuss your requirements and help you identify an appropriate approach.
You can reach us at office@mindit.ro.
