Background checks: risk levels and compliance

SMART Access & Identity 2025 Access Control & Identity Management, Security Services & Risk Management


In South Africa, conducting background checks is a vital step in the hiring process for employers, or when engaging service providers. These checks help to confirm that candidates are trustworthy, skilled, and suitable for the organisation. However, it is crucial to understand the legal framework and regulations governing these checks to safeguard the employer and the candidate.

When evaluating candidates, it is important to categorise them based on risk levels associated with the position:

1. Low risk: Positions with minimal access to sensitive or financial information (e.g., entry-level roles).

2. Medium risk: Roles with some responsibility (e.g., administration, support staff).

3. High risk: Positions involving significant responsibilities (e.g., finance roles, childcare workers).

Conducting background checks by risk level

Risk and legal experts should concur when developing a background screening policy, which should be approved at the executive level.

Low-risk background checks

For low-risk positions, basic checks are often sufficient:

• Identity verification: Confirm the candidate’s identity using a South African ID document or passport.

• Employment verification: Contact previous employers to verify employment history.

• Criminal record check: You can request a criminal record check with the individual’s consent.

• Education verification: Verify any qualifications claimed.

Medium-risk background checks

Medium-risk roles may require a more thorough examination:

• All low-risk checks: Start with the checks mentioned above.

• Credit checks: For roles that involve financial responsibilities, get written consent from the candidate to conduct a credit check. This must comply with the National Credit Act and the Protection of Personal Information Act (POPIA).

• Reference checks: Obtain references from previous employers to gain insight into the candidate’s work ethic and behaviour.

• Skill assessments: Ensure the individual is capable of skills they claim to have.

High-risk background checks

High-risk positions require exhaustive background checks:

• All medium-risk checks: Include all checks from medium-risk assessments.

• Psychometric assessments: Consider conducting personality assessments to determine suitability for the role, integrity of the candidate, and a behavioural profile.

• Social media screening: While not mandatory, reviewing public social media profiles can provide additional insights into a candidate’s character.

Legal considerations in South Africa

1. Compliance with PoPIA: The Protection of Personal Information Act (PoPIA) governs how personal information is handled. Employers must ensure that:

o The candidate has consented to the background check.

o Personal information is processed lawfully, minimally, and only for necessary purposes.

o Job applicants are made aware of their rights concerning their personal information.

2. Fair treatment: Ensure all candidates are treated consistently and fairly during the background check process. Discrimination based on race, gender, or any other protected characteristic is illegal and can lead to legal consequences.

3. Inform candidates: If adverse information is found during a background check, employers must inform the candidate and provide them an opportunity to respond or clarify the information.

Conducting background checks in South Africa is essential for ensuring workplace safety and integrity. By tailoring the depth of these checks to the risk levels associated with different positions, employers can make informed decisions, while remaining compliant with South African laws. Understanding the regulations, obtaining consent, and treating candidates equitably are critical steps.

Implementing thorough yet fair background checks will create a safe and productive work environment that benefits employers and employees.


Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

The line between locking residents out and restricting their access
News & Events Security Services & Risk Management Residential Estate (Industry)
A June 2026 High Court judgment has clarified one of the most contested issues in modern estate governance: when an HOA's digital access restrictions amount to unlawful self-help or spoliation, and when they do not.

Read more...
Modernise field communications with Push-to-Talk over Cellular
Products & Solutions Security Services & Risk Management
Sentiv is bringing Hytera’s Push-to-Talk over Cellular (PTToC) portfolio to organisations that need a more structured and controlled way to coordinate field teams, without extending a full private radio model to every team, site, or function.

Read more...
Zero-touch automation certificate life cycle management loop
Products & Solutions Information Security Security Services & Risk Management
ManageEngine completes the certificate life cycle management loop with CA-agnostic, zero-touch automation. New post-deployment automation in Key Manager Plus removes the last manual step in certificate renewal as lifespans gradually shrink to 47 days

Read more...
Fire safety in South Africa
Technoswitch Fire Detection & Suppression Technews Publishing SMART Security Solutions Fire & Safety Security Services & Risk Management Editor's Choice
Fire safety is sometimes ignored, sometimes relegated to whatever is cheapest, and sometimes treated with the seriousness it deserves, given that it focuses on protecting life and assets. SMART Security Solutions asked Brett Birch, MD of Technoswitch, for some insights into the realities of fire safety in South Africa.

Read more...
Sophos launches AI-native cybersecurity defence system
News & Events Information Security Security Services & Risk Management
Built for a threat landscape reshaped by AI, Sophos Fusion unites security operations, endpoint, network security, identity, email, and cloud into one defence system that prevents, detects, investigates, and responds at AI speed.

Read more...
Stop supplier fraud at the moment of payment
News & Events Security Services & Risk Management
Cape Town-built platform bridges the gap between onboarding and transaction by securing identity inside the live channels where companies exchange invoices and banking details.

Read more...
Ungoverned AI agents and deepfakes pose critical threats
Information Security Security Services & Risk Management
Global study reveals 64% of South African organisations already deploy autonomous AI agents with little to no governance, while 63% of employees admit they are unlikely to be able to spot attacks such as deepfakes

Read more...
AI agents become ‘First Class Identities’
Access Control & Identity Management
AI agents are now approving transactions, accessing systems, triggering workflows, and making decisions autonomously. But uncontrolled AI agents are becoming one of the largest security gaps in modern enterprises.

Read more...
Balancing secure access control and fire safety
Editor's Choice Access Control & Identity Management Fire & Safety
In modern building management, few topics create as much tension as the intersection between security access control and fire evacuation safety. Nichola Allen of G2 Fire sheds light on this delicate balance.

Read more...
A risk-based approach to fire safety
Fire & Safety Security Services & Risk Management Industrial (Industry) Agriculture (Industry)
A report by fire engineering consultancy ASP Fire is challenging blanket assumptions around combustible-core sandwich panels, arguing instead for a rational, risk-based approach that balances fire safety requirements with commercial realities in sectors such as agriculture, manufacturing and industrial processing.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.