Background checks: risk levels and compliance

SMART Access & Identity 2025 Access Control & Identity Management, Security Services & Risk Management


In South Africa, conducting background checks is a vital step in the hiring process for employers, or when engaging service providers. These checks help to confirm that candidates are trustworthy, skilled, and suitable for the organisation. However, it is crucial to understand the legal framework and regulations governing these checks to safeguard the employer and the candidate.

When evaluating candidates, it is important to categorise them based on risk levels associated with the position:

1. Low risk: Positions with minimal access to sensitive or financial information (e.g., entry-level roles).

2. Medium risk: Roles with some responsibility (e.g., administration, support staff).

3. High risk: Positions involving significant responsibilities (e.g., finance roles, childcare workers).

Conducting background checks by risk level

Risk and legal experts should concur when developing a background screening policy, which should be approved at the executive level.

Low-risk background checks

For low-risk positions, basic checks are often sufficient:

• Identity verification: Confirm the candidate’s identity using a South African ID document or passport.

• Employment verification: Contact previous employers to verify employment history.

• Criminal record check: You can request a criminal record check with the individual’s consent.

• Education verification: Verify any qualifications claimed.

Medium-risk background checks

Medium-risk roles may require a more thorough examination:

• All low-risk checks: Start with the checks mentioned above.

• Credit checks: For roles that involve financial responsibilities, get written consent from the candidate to conduct a credit check. This must comply with the National Credit Act and the Protection of Personal Information Act (POPIA).

• Reference checks: Obtain references from previous employers to gain insight into the candidate’s work ethic and behaviour.

• Skill assessments: Ensure the individual is capable of skills they claim to have.

High-risk background checks

High-risk positions require exhaustive background checks:

• All medium-risk checks: Include all checks from medium-risk assessments.

• Psychometric assessments: Consider conducting personality assessments to determine suitability for the role, integrity of the candidate, and a behavioural profile.

• Social media screening: While not mandatory, reviewing public social media profiles can provide additional insights into a candidate’s character.

Legal considerations in South Africa

1. Compliance with PoPIA: The Protection of Personal Information Act (PoPIA) governs how personal information is handled. Employers must ensure that:

o The candidate has consented to the background check.

o Personal information is processed lawfully, minimally, and only for necessary purposes.

o Job applicants are made aware of their rights concerning their personal information.

2. Fair treatment: Ensure all candidates are treated consistently and fairly during the background check process. Discrimination based on race, gender, or any other protected characteristic is illegal and can lead to legal consequences.

3. Inform candidates: If adverse information is found during a background check, employers must inform the candidate and provide them an opportunity to respond or clarify the information.

Conducting background checks in South Africa is essential for ensuring workplace safety and integrity. By tailoring the depth of these checks to the risk levels associated with different positions, employers can make informed decisions, while remaining compliant with South African laws. Understanding the regulations, obtaining consent, and treating candidates equitably are critical steps.

Implementing thorough yet fair background checks will create a safe and productive work environment that benefits employers and employees.


Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

A platform for access and identity at Securex 2025
Securex South Africa Access Control & Identity Management Facilities & Building Management
South African companies involved in supplying access control technology, security services, and data management are well-positioned to tap into the expanding access control market at Securex 2025.

Read more...
Insurance provider uses Net2 For access management
Paxton Access Control & Identity Management Integrated Solutions Healthcare (Industry)
BestMed selected Paxton Net2 for its access control requirements because of its simplicity of installation and ease of navigation for end users, as well as the 5-year warranty.

Read more...
Identity is a cyber issue
Access Control & Identity Management Information Security
Identity and access management telemetry has emerged as the most common source of early threat detection, responsible for seven of the top 10 indicators of compromise leading to security investigations.

Read more...
Embracing contactless access solutions
HID Global Access Control & Identity Management
There has long been a discussion of the perils and virtues of authentication factors. Is it more secure to use something we have (a key card), something we know (a password), or something we are (biometrics)?

Read more...
Smart access for a safer community
neaMetrics Suprema Access Control & Identity Management Residential Estate (Industry) Products & Solutions Commercial (Industry)
Suprema has released its BioEntry W3 facial authentication access control device with multiple authentication options, including RFID cards as well as mobile credentials, designed for durability and resilience.

Read more...
The power of knowing your client
Ideco Biometrics Access Control & Identity Management Integrated Solutions
One of the most effective ways to combat the threat of fraud, identity theft, and financial crime threats is through a robust Know Your Client (KYC) process, which safeguards both businesses and clients.

Read more...
Smarter ways to secure your space
Elvey Security Technologies Access Control & Identity Management Products & Solutions
Ensuring the safety of people and assets has become more crucial than ever, and access control systems provide essential tools to regulate and monitor who can enter specific areas or access sensitive resources.

Read more...
Facial recognition in national security
Access Control & Identity Management Government and Parastatal (Industry)
As global security challenges evolve, facial recognition technology provides a vital edge by turning our unique identities into powerful assets for national defence and changing a sea of anonymity into a line of defence.

Read more...
Federated identity orchestration
Technews Publishing SMART Security Solutions Editor's Choice Access Control & Identity Management Security Services & Risk Management AI & Data Analytics
Understanding exactly who resides at the end of a digital device is key, and simple identity number verification by the Department of Home Affairs is no longer a viable solution on its own.

Read more...
Managing identities for 20 years
Ideco Biometrics Technews Publishing SMART Security Solutions Access Control & Identity Management Integrated Solutions IoT & Automation
Many companies are now more aware of the risks associated with unauthorised access to locations and sensitive data and are investing in advanced identity authentication technologies to mitigate these threats.

Read more...