Where Employee Background Checks Stand in 2026

Hello everyone. I want to return to an article from 2012 and update it for 2026. The piece I am writing now is based on Caron Beesley's 2012 overview of employee background checks. I am conducting this update for my public group, Ethics of Marijuana and Workplace Safety. Today is June 28, 2026.

So let us go back in time to 2012, when Caron Beesley examined the growing use of Facebook searches, credit reports, and criminal records in hiring. The core questions she raised still stand. Employers still need reliable information.

If something bad were to happen, an opposing party or the public could say, all you had to do was check out their Facebook page. But would that be legal, or even ethical, in some cases? I know that when I was working at the Sheriff's office, the Sheriff had social media policies, especially while on duty and in uniform. What I see today is that some departments and agencies do not seem to have any policies at all. What do you think?

And at one point, members of leadership sent me Facebook friend requests. How sweet. Maybe they were friendly, maybe they were routine, or maybe people simply notice what their colleagues post. I will let you draw your own conclusion.

Applicants still deserve accuracy, privacy, and fair treatment. Yet, as a supervisor, you want to get ahead of a political disaster if, say, a wedding or a birthday bash goes wrong, hmm?

Now, do not get me wrong, the framework around those initial questions in Beesley's article has changed a great deal. The federal baseline she described, the Fair Credit Reporting Act for third-party reports and Title VII for how results are used, remains intact. What has grown up around it is a dense and highly local body of state and municipal law, a new layer of automated screening tools, and a marijuana landscape that did not meaningfully exist as a workplace-law problem in 2012.

So this update is written for a mixed audience: private employers, public agencies, workers, safety professionals, and policymakers. Those who work in the industry know that public-sector employers face additional constitutional duties, which are addressed in their own section.

The central question has shifted

In 2012, the live question was whether an employer could collect a given piece of information. In 2026, the harder question is whether that information actually predicts the person's ability to perform the job safely and honestly. Collection is rarely the issue now. Relevance and reliability are.

Social Media and Digital Footprints

Employers can generally review what applicants make public on Facebook, LinkedIn, X, Instagram, and similar platforms. Public information does not become off-limits merely because it is online.

That said, I was told by one HR professional that she thought it was unethical. She was in the private sector.

The limits have sharpened since 2012. A profile can reveal race, age, religion, disability, pregnancy, national origin, or political activity, several of which are protected. An employer cannot reject an applicant for a discriminatory reason and escape liability by saying the information came from a social feed. Many states now also prohibit employers from demanding social-media passwords or requiring applicants to open private accounts.

When an employer hires a third-party firm to compile social media information, the resulting report may fall under the FCRA, triggering written authorization and adverse action duties. Employers should also confirm that the account belongs to the applicant. Common names, impersonation, satire, edited images, and missing context all produce false conclusions.

Membership in a discussion group, such as ours, deserves specific caution. Membership in the Ethics of Marijuana and Workplace Safety proves only that a person joined a policy conversation. It does not prove use, impairment, addiction, or opposition to workplace safety. A member could be an employer, a safety manager, a clinician, a lawyer, a parent, a researcher, a person harmed by an impaired worker, or an advocate for either side. Treating membership as evidence of marijuana use replaces evidence with speculation.

Credit Checks

Federal law does not ban employment credit checks. An employer may obtain an employment-related credit report under the FCRA by giving a stand-alone disclosure, obtaining written authorization, providing the report before adverse action, supplying a summary of FCRA rights, allowing a chance to dispute errors, and sending a final adverse-action notice. Several states and cities go further and limit credit checks to positions involving money, financial records, management authority, or access to valuable property.

The ethical issue is job relevance. A credit check can make sense for a controller who manages funds. It makes far less sense for a warehouse laborer or food-service worker with no access to financial services. Medical debt, divorce, identity theft, a business failure, or a family emergency can damage credit without proving dishonesty. Financial hardship is not character evidence.

Criminal Records

Employers may consider many convictions. They should not treat every record as an automatic lifetime bar. An arrest is not a conviction. Arrest records can be incomplete, dismissed, sealed, expunged, or attached to the wrong person.

The relevant federal benchmark is the EEOC's individualized assessment, which applies specifically to criminal history. EEOC guidance urges employers to weigh the nature and gravity of the offense, the time that has passed, and the relationship of the conduct to the job's duties before taking adverse action, and blanket no-record policies risk disparate-impact liability under Title VII. This three-factor analysis governs criminal records only. It does not govern drug-test results, which are controlled by separate state cannabis and disability laws, as well as federal rules discussed below. Applying the criminal-records test to a positive drug test is a category error.

The local layer has expanded sharply since 2012. As of 2026, 37 states and more than 150 cities and counties have adopted Fair Chance or Ban the Box policies. Thirteen states and Washington, D.C., have enacted Clean Slate laws that meet established standards for automated record sealing.

Ban the Box laws regulate the timing and use of criminal-history inquiries. Some delay criminal questions until after an interview. Others require the employer to wait until after a conditional offer is made.++ The trigger varies by jurisdiction and should not be presented as a single national rule.

Washington strengthened its Fair Chance Act, with expanded requirements taking effect on July 1, 2026, for employers with 15 or more employees, and on January 1, 2027, for smaller employers. Clean Slate laws in states including New York, Pennsylvania, and Virginia automatically seal certain eligible records after statutory conditions are met. Using sealed or legally restricted records can expose an employer or screening company to liability, depending on the jurisdiction and circumstances.

A practical consequence: the liability has shifted from the data to the policy. Compliant screening vendors now filter out sealed and expunged records, so the larger risk often comes from an employer's own outdated internal policy rather than from the report itself.

Remember, there are millions of small businesses making their own hiring and firing decisions, and many of them may run afoul of these laws without ever realizing it.

Artificial Intelligence and Algorithmic Scores

Another of the largest structural changes since 2012 is automated screening. Employers now use systems that rank resumes, analyze video interviews, score driving behavior, measure productivity, predict turnover, and flag applicants as risks.

Calling the output a "score" does not remove it from employment law. When an outside company assembles or evaluates worker information and sells a report or score for hiring, promotion, reassignment, or retention, the FCRA may apply because the statutory definitions of "consumer report" and "consumer reporting agency" turn on the assembling-and-evaluating function, not the label. Whether a given tool qualifies is a question of the FCRA itself and how courts read it.

A note on recent guidance, for accuracy: the CFPB issued Circular 2024-06 in October 2024, taking this position, but that circular was formally withdrawn on May 12, 2025. It should be cited only as withdrawn historical context, not as current federal guidance. The underlying statutory exposure survives the withdrawal, and private FCRA litigation remains available regardless of federal enforcement posture. Anti-discrimination law also applies when an automated system screens out protected groups. "The computer rejected the applicant" is not a defense.

What I am seeing is that some employers appear eager to distance themselves from automated decisions when a screening tool produces a questionable result. Yet the employer still owns the hiring or disciplinary outcome, no matter which tool produced it.

Marijuana: The 2026 Legal Reality

So, here we go. This is the category that did not exist in Beesley's 2012 frame and now dominates screening ethics.

Federal status changed in a limited way. An April 2026 order placed specified FDA-approved marijuana products and medical-marijuana products covered by qualifying state-issued licenses into Schedule III. Products outside the order's defined categories remain subject to existing federal controls. A broader DEA hearing on marijuana rescheduling is scheduled to begin June 29, 2026, at 9:00 a.m. and conclude no later than July 15. As of this writing, it has not begun.

Rescheduling is not legalization, and it does not automatically end workplace testing. DOT rules continue to prohibit marijuana use by covered safety-sensitive transportation employees. State-authorized marijuana use does not qualify as a legitimate medical explanation for a positive DOT test. Those requirements remain in force unless and until DOT changes its regulations or issues new controlling guidance.

The decisive movement is at the state level. At least nine states, including California, Connecticut, Nevada, New Jersey, New York, Minnesota, Montana, Rhode Island, and Washington, protect some forms of lawful off-duty adult cannabis use. About half of the states with medical cannabis programs also provide some form of employment protection for registered patients.

These laws vary widely. Some name-specific occupations. Others focus on federal funding, contracts, driving, construction, patient care, firearms, or safety-sensitive duties. The exceptions are not uniform, so the claim that almost all states use the same exception overstates the case.

Federal restrictions do not automatically defeat every state-law employment claim. The result depends on the state statute, the employee's duties, federal regulations, licensing requirements, and the employer's contractual obligations.

The Ethical Core: Presence Is Not Impairment

The central problem is one of measurement. THC metabolites can remain detectable in urine for days or weeks after use, long after any impairment has ended, so a positive test does not establish that the employee was impaired at work. A positive test answers one question: whether marijuana was present within the detection window. It does not answer the workplace question of whether the employee was impaired on the job.

This produces the ethical tension. The employer has a real duty to protect coworkers, customers, patients, and the public, with the duty strongest in safety-sensitive roles. The worker has a real claim to privacy over lawful off-duty conduct. The standard test cannot cleanly serve the safety interest because it measures past behavior rather than present risk. A fairness asymmetry compounds this: the same test does not detect impairment from alcohol, fatigue, or a hangover, so a cannabis-only regime penalizes one lawful off-duty activity and ignores others.

The emerging response is to measure the thing the law actually cares about. Recommended practice now centers on documenting observable impairment and training supervisors in reasonable-suspicion procedures. Many employers are also shifting to oral-fluid testing, which generally has a shorter detection window than urine, often roughly a day or two, depending on the substance and the test, to better align with off-duty-conduct laws. Even then, a positive oral-fluid result shows recent presence, not impairment. None of these state protections creates a right to possess or be impaired by marijuana at work.

State examples show the range. California protects many workers from adverse action based on off-duty use and bars reliance on tests that detect nonpsychoactive metabolites, with exceptions. Washington limits many pre-employment marijuana screens, excluding safety-sensitive roles. New York protects off-duty use but permits action on specific, observable, performance-affecting impairment. New Jersey permits drug-free workplace policies but holds that a positive cannabinoid test alone is not enough to establish impairment without documented behavioral or physical evidence.

Fitness for Duty Is the Workable Standard

Privacy does not require tolerating impairment. The defensible rule is a fitness-for-duty rule: employees must report fit for work and may not possess, consume, distribute, or be impaired by any substance while working. That same performance standard should apply across marijuana, alcohol, prescription medication, illegal drugs, and severe fatigue. The concern increases with the hazard posed by operating vehicles, aircraft, heavy machinery, firearms, electrical systems, hazardous materials, or medical equipment.

Reasonable suspicion should rest on documented facts, not labels. "The employee appeared high" is weak. "The employee stumbled twice, could not follow a routine instruction, dropped a scanner, and walked toward a moving forklift" is defensible. Record the time, the assigned duty, the observable behavior, the unsafe acts, any statements, and witnesses. Where practical, use two trained observers. Remove the worker from danger without declaring guilt, and arrange safe transportation rather than ordering the person to drive.

Post-accident testing should connect to a real safety reason. Testing makes sense when the conduct could have contributed to an incident. Testing every injured worker, including those reporting a bee sting or an injury caused solely by another person, can be retaliatory and expose the employer. A policy should investigate incidents, not punish the reporting of injuries.

Special Duties of Public Employers

Government employers face the same FCRA and discrimination rules as private employers, as well as constitutional, civil-service, collective-bargaining, and licensing duties. These do not prevent public agencies from protecting the workplace. They require the agency to tie intrusive practices to legitimate public needs.

Drug testing and the Fourth Amendment. A drug test by a government employer is a search. Courts have upheld suspicionless testing only where a defined "special need" outweighs the employee's privacy interest, as in the railroad and Customs cases. That is not a blanket authority to test every public employee. The agency should identify the specific hazard associated with the position. Random testing of a clerical worker presents a different question from random testing of a firefighter, an armed correctional officer, or a commercial driver.

Collective bargaining and due process. Public employees may hold rights under civil service law, union agreements, and agency rules. Before discipline, an agency should examine whether the employee has a protected property interest, whether notice and a hearing are required, whether a union representative must be present, whether the agreement defines just cause or addresses state-authorized medications, whether the employer followed its own policy, whether confirmatory testing occurred, and whether the employee could contest the result. Ignoring its own policy or treating similar employees differently weakens the agency's position.

Public-employee speech. Public employees retain First Amendment protection when speaking as private citizens on matters of public concern. An agency may act in response to genuine threats, unlawful conduct, disclosure of confidential information, or speech that materially disrupts operations. It should not treat a lawful opinion about marijuana policy as proof that the person will break workplace rules.

Law enforcement and corrections. Marijuana questions grow more complex when an employee must carry a firearm. Federal firearm law, certification rules, and agency standards can create conflicts absent in an administrative role. A correctional officer, deputy, or armed investigator cannot be evaluated under the same standard as an unarmed office employee. The agency should identify the controlling firearm and the certification requirements rather than assume that a single federal rule applies to everyone.

Fire and EMS. Firefighters and emergency medical personnel drive emergency vehicles, administer medication, and make rapid life-and-death decisions, so the agency has strong reason to prevent impairment. That concern still does not convert a metabolite result into proof of present impairment. The agency should weigh the testing method, the employee's behavior, the facts of the incident, any medical authorization, the policy language, and the applicable law.

Florida Snapshot

Medical marijuana is legal in Florida. Recreational legalization appeared on the 2024 ballot but did not reach the required 60 percent. Employers, including public agencies, may generally maintain drug-free workplace policies.

One case is worth watching closely. In Giambrone v. Hillsborough County, decided in the Florida 13th Circuit Court on December 10, 2024, a trial court held that the Florida Civil Rights Act required the county to accommodate an EMT's off-duty medical marijuana use where the employee held a valid card and there was no evidence of workplace use or impairment. This is a trial court ruling, not a binding statewide law, and it is currently under appeal. The appeal is docketed as case 2D2025-0115 in the Second District Court of Appeal, with oral argument held on February 10, 2026. As of June 28, 2026, no published appellate decision in 2D2025-0115 has been located, and the trial court's ruling remains under appellate review.

The decision also resists broad generalization. The trial court distinguished the earlier Velez Ortiz case. There, a correctional officer's medical marijuana use was not protected, because his role carried firearm and certification restrictions that conflict with marijuana use. Giambrone's EMT position posed no comparable barrier, and the state EMT board declined to take action against his license. For armed public-safety roles, Velez Ortiz, not Giambrone, is the closer analogy. Giambrone reads as a carve-out for an unarmed clinical role rather than a general accommodation mandate.

The legislature considered competing 2026 bills and passed neither. SB 136 would have protected qualified medical-marijuana patients employed by public agencies, subject to exceptions and a procedure to contest positive tests, and it died in the Senate Health Policy Committee on March 13, 2026. CS/HB 689 moved in the opposite direction, limiting employer liability for adverse action involving workplace possession, impairment, test refusal, or certain confirmed positive tests, and it died in the House on the same day. Their failure leaves the conflict between employee accommodation and employer safety authority unresolved while the Giambrone appeal remains under review.

Six Principles for a Defensible Policy

Relevance. Collect information tied to the actual duties of the position.

Accuracy. Verify records and give the applicant a chance to correct errors.

Consistency. Apply the same standard to applicants for similar positions.

Proportionality. Do not impose a lifetime bar for conduct that creates no present job-related risk.

Privacy. Do not demand private information just because technology makes it available.

Safety. Act promptly when reliable evidence shows an employee cannot perform the job safely.

A 2026 Employer Checklist

What information do we actually need, and how does it relate to this job? Are we using a third-party reporting company, and have we obtained proper written authorization? Does a state or local law restrict or delay this inquiry? Are criminal records accurate, unsealed, and job-related, and have we run the EEOC individualized assessment? Are we using an automated tool, and can the vendor explain how its score is produced? Does the process produce discriminatory results? Does state law protect lawful off-duty marijuana use here, and do federal drug-testing rules govern the role? Does a positive marijuana test establish impairment, or only metabolite presence? Have supervisors been trained in reasonable suspicion, and are we documenting observable facts? Are post-accident tests tied to a legitimate safety reason, and does the policy protect injury reporting? Are we treating similar employees consistently? Has counsel reviewed the policy for every state where we operate?

Conclusion

The law lets employers investigate applicants. It does not grant unlimited authority to collect, assume, or discriminate. Facebook posts can be false or misread. Credit problems do not prove dishonesty. Arrests do not prove guilt. Old convictions do not always predict present conduct. Marijuana metabolites do not establish workplace impairment. Automated scores do not guarantee accuracy or fairness.

The disciplined question is the same for a private employer, a public agency, and a safety professional: Does reliable, lawful, job-related evidence show that this person cannot perform the work safely and responsibly?

That standard protects the organization. It also protects the dignity of the worker.

Discussion question for the group: Should an employer be permitted to reject an applicant for lawful off-duty marijuana use when there is no evidence of workplace impairment? And does your answer change for an armed or safety-sensitive public-safety role?

This article is general educational information. Employment, privacy, cannabis, and drug-testing laws vary by state, locality, industry, contract, and job classification.

Please like, share, and help get this group going. The impact of marijuana is growing more and more each day. Thanks for being a part, the best part, of this group.