Background checks: risk levels and compliance

SMART Access & Identity 2025 Access Control & Identity Management, Security Services & Risk Management


In South Africa, conducting background checks is a vital step in the hiring process for employers, or when engaging service providers. These checks help to confirm that candidates are trustworthy, skilled, and suitable for the organisation. However, it is crucial to understand the legal framework and regulations governing these checks to safeguard the employer and the candidate.

When evaluating candidates, it is important to categorise them based on risk levels associated with the position:

1. Low risk: Positions with minimal access to sensitive or financial information (e.g., entry-level roles).

2. Medium risk: Roles with some responsibility (e.g., administration, support staff).

3. High risk: Positions involving significant responsibilities (e.g., finance roles, childcare workers).

Conducting background checks by risk level

Risk and legal experts should concur when developing a background screening policy, which should be approved at the executive level.

Low-risk background checks

For low-risk positions, basic checks are often sufficient:

• Identity verification: Confirm the candidate’s identity using a South African ID document or passport.

• Employment verification: Contact previous employers to verify employment history.

• Criminal record check: You can request a criminal record check with the individual’s consent.

• Education verification: Verify any qualifications claimed.

Medium-risk background checks

Medium-risk roles may require a more thorough examination:

• All low-risk checks: Start with the checks mentioned above.

• Credit checks: For roles that involve financial responsibilities, get written consent from the candidate to conduct a credit check. This must comply with the National Credit Act and the Protection of Personal Information Act (POPIA).

• Reference checks: Obtain references from previous employers to gain insight into the candidate’s work ethic and behaviour.

• Skill assessments: Ensure the individual is capable of skills they claim to have.

High-risk background checks

High-risk positions require exhaustive background checks:

• All medium-risk checks: Include all checks from medium-risk assessments.

• Psychometric assessments: Consider conducting personality assessments to determine suitability for the role, integrity of the candidate, and a behavioural profile.

• Social media screening: While not mandatory, reviewing public social media profiles can provide additional insights into a candidate’s character.

Legal considerations in South Africa

1. Compliance with PoPIA: The Protection of Personal Information Act (PoPIA) governs how personal information is handled. Employers must ensure that:

o The candidate has consented to the background check.

o Personal information is processed lawfully, minimally, and only for necessary purposes.

o Job applicants are made aware of their rights concerning their personal information.

2. Fair treatment: Ensure all candidates are treated consistently and fairly during the background check process. Discrimination based on race, gender, or any other protected characteristic is illegal and can lead to legal consequences.

3. Inform candidates: If adverse information is found during a background check, employers must inform the candidate and provide them an opportunity to respond or clarify the information.

Conducting background checks in South Africa is essential for ensuring workplace safety and integrity. By tailoring the depth of these checks to the risk levels associated with different positions, employers can make informed decisions, while remaining compliant with South African laws. Understanding the regulations, obtaining consent, and treating candidates equitably are critical steps.

Implementing thorough yet fair background checks will create a safe and productive work environment that benefits employers and employees.


Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

The future of security: intelligent automation
Access Control & Identity Management AI & Data Analytics IoT & Automation
As the security landscape evolves, businesses are no longer looking for stand-alone solutions, they want connected, intelligent systems that automate, streamline, and protect.

Read more...
Smart automation is changing security
SA Technologies IntelliGuard Access Control & Identity Management
Security has come a long way from manual check-ins, logbooks, and standalone surveillance cameras. With the rise of intelligent automation, security is now faster, smarter, and more connected than ever.

Read more...
The future of security in South Africa
ATG Digital Access Control & Identity Management
Security technology is evolving rapidly, but is local innovation keeping pace? Some global players recognise the potential of South African products for international markets, but can our manufacturers and service providers thrive without external support?

Read more...
Integration enhances estate access control
Access Control & Identity Management
With one-third of residential burglaries starting at the front door, the continued seamless integration of Glovent’s estate management platform with Impro access control software is welcome news for estates.

Read more...
T&A in South Africa’s retail sector
ERS Biometrics Access Control & Identity Management
Using existing systems, ERSBio provides a practical and more cost-effective way for businesses to manage operations, reduce payroll mistakes, and enhance overall efficiency through innovative T&A processes.

Read more...
Navigating the complexities of privileged access management
Editor's Choice Access Control & Identity Management
Privileged Access Management and Identity Access Management are critical pillars of modern cybersecurity, designed to secure access to sensitive resources, enforce principles like least privilege, and implement just-in-time access controls.

Read more...
Rewriting the rules of reputation
Technews Publishing Editor's Choice Security Services & Risk Management
Public Relations is more crucial than ever in the generative AI and LLMs age. AI-driven search engines no longer just scan social media or reviews, they prioritise authoritative, editorial content.

Read more...
How can South African organisations fast-track their AI initiatives?
AI & Data Analytics Security Services & Risk Management
While the AI market in South Africa is anticipated to grow by nearly 30% annually over the next five years, tapping into the promise and potential of AI is not easy.

Read more...
Efficient, future-proof estate security and management
Technews Publishing ElementC Solutions Duxbury Networking Fang Fences & Guards Secutel Technologies OneSpace Technologies DeepAlert SMART Security Solutions Editor's Choice Information Security Security Services & Risk Management Residential Estate (Industry) AI & Data Analytics IoT & Automation
In February this year, SMART Security Solutions travelled to Cape Town to experience the unbelievable experience of a city where potholes are fixed, and traffic lights work; and to host the Cape Town SMART Estate Security Conference 2025.

Read more...
Paxton opens second experience centre
Paxton News & Events Access Control & Identity Management
Security technology manufacturer, Paxton, has opened a new experience centre in Cape Town on 12 February in partnership with its exclusive distributors, Reditron and Regal Security.

Read more...