Employee screening, a hiring necessity or an invasion of privacy?

Issue 1 2023 Security Services & Risk Management


Nicol Myburgh.

Employee background screening has become an integral part of the recruitment process. Many companies use it as a means to not only verify potential employees’ education, experience and other credentials before appointing them, but also to ensure that they hire the right candidate for the role – someone who will bring value to the business and be a worthy ambassador for the brand.

Checking that recruitment candidates have not falsified their CV information and will be a good culture fit for the organisation is all good and well, but how deeply can employers delve into a person’s background before the screening process becomes an invasion of privacy?

According to Nicol Myburgh, Head of the HCM Business Unit at CRS Technologies, there is a fine line between checking a potential employee’s qualifications and references, and investigating aspects of their lives that have nothing to do with their job application.

“The best indicator of future performance is your record of past performance, and good references usually mean a good employee,” he says. “There is nothing wrong with checking a candidate’s references – in fact, it is highly recommended – but if you start looking at the person’s credit history and behaviour, and whether they have a criminal record, you are treading on thin ice.”

Many companies are not aware of the National Credit Act Amendment 19 of 2014, which came into effect in March 2015. It stipulates that pre-employment checks on consumer credit records may only be performed if the role for which the candidate has applied requires honesty in the handling of cash or finances. Furthermore, this responsibility must be specified in the job description.

“So unless the position are looking to fill involves working with money, checking the candidate’s credit record constitutes a violation of their privacy and is illegal,” says Myburgh.

The same applies to criminal record searches, which are governed by labour legislation. “For example, if a person applies for a position as a driver, but was previously arrested for driving under the influence and as a result has a criminal record, they can be disqualified from the position.

“But if the person is applying for a job as say, an admin clerk, the drunk driving conviction would be irrelevant. Consequently, a criminal record check can only be done if it is pertinent to the job for which you are hiring.”

Employers also need to bear the POPI Act in mind when collecting information for background screening purposes. Accessing information that is available in the public domain – social media accounts, personal blogs and the like – is fine. All other information, including personal identity details, is protected under the POPI Act and therefore off limits.

But whether the background screening you want to do is relevant to the job or not, it is necessary to obtain the applicant’s consent before processing any of their personal information.

How not to overstep

To ensure that companies do not overstep when conducting background checks, Myburgh recommends engaging the services of a reputable background screening and vetting company. “These service providers are fully conversed with the legalities and ethics around employee screening and not only know where the line is, but where not to cross it.”

“Violating someone’s privacy during the recruitment process, or choosing not to hire them for reasons that have nothing to do with the job description can land a business in hot water, and they could find themselves slapped with a lawsuit. This will not only cost the company thousands in legal fees, but could irreparably damage its reputation and brand.”

“Conducting background checks on potential employees mitigates the risk against a bad hire, which can be costly for the business, but these must be done ethically and within the bounds of legislation,” he concludes.

For more information, go to www.crs.co.za




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

“This Is Theft!” SASA slams Mafoko Security
News & Events Security Services & Risk Management Associations
The Security Association of South Africa (SASA) has issued a stark warning that the long-running Mafoko Security Patrols scandal is no longer an isolated case of employer misconduct, but evidence of a systemic failure in South Africa’s regulatory and governance structures.

Read more...
Making a mesh for security
Information Security Security Services & Risk Management
Credential-based attacks have reached epidemic levels. For African CISOs in particular, the message is clear: identity is now the perimeter, and defences must reflect that reality with coherence and context.

Read more...
Privacy by design or by accident
Security Services & Risk Management Infrastructure
Africa’s data future depends on getting it right at the start. If privacy controls do not withstand real-world conditions, such as unstable power, fragile last-mile connectivity, shared devices, and decentralised branch environments, then privacy exists only on paper.

Read more...
From friction to trust
Information Security Security Services & Risk Management Financial (Industry)
Historically, fraud prevention has been viewed as a trade-off between robust security and a seamless customer journey, with security often prevailing. However, this can impair business functionality or complicate the customer journey with multiple logins and authentication steps.

Read more...
Security ready to move out of the basement
AI & Data Analytics Security Services & Risk Management
Panaseer believes that in 2026, a board member at a major corporation will lose their job amid rising breaches and legal scrutiny, as organisations recognise that cyber risk is a business risk that CISOs cannot shoulder alone.

Read more...
Cyber remains top business risk, but AI fastest riser at #2
News & Events Security Services & Risk Management
The Allianz Risk Barometer 2026 ranks cybersecurity, especially ransomware attacks, as the #1 risk, while AI is the biggest riser and jumps from #10 to #2, highlighting the emerging risks for companies in almost all industry sectors.

Read more...
OT calculator to align cyber investments with business goals
Industrial (Industry) Information Security Security Services & Risk Management
The OT Calculator has been developed specifically for industrial organisations to assess the potential costs of insufficient operational technology (OT) security. By offering detailed financial forecasts, the calculator empowers senior management to make well-informed decisions.

Read more...
From digital transformation to digital sovereignty
Security Services & Risk Management IoT & Automation
As cyberthreats grow, data regulations tighten, and AI becomes central to economic competitiveness, countries are recognising the need to control and protect their own digital assets.

Read more...
The age of Lean 4.0: Orchestrating intelligence and efficiency
Security Services & Risk Management
The convergence of Lean principles and AI (what we now call Lean 4.0) is no longer a theoretical exercise; it is the defining operational paradigm for survival and growth in a complex, data-intensive economy.

Read more...
Risks of open-source intelligence escalating in crime
Security Services & Risk Management Residential Estate (Industry) Smart Home Automation
CMS estimates that open-source intelligence has played a role in 20 - 30% of robberies over the past 12 months. In cybercrime, global research consistently shows that many offences rely on some form of open-source data exploitation.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.