Background checks are valuable because they help people and organisations verify important claims before making decisions that carry financial, legal, safeguarding or reputational risk. A good background check is not a trawl through somebody's private life. It is a proportionate process that asks a defined question, uses lawful sources, separates verified fact from allegation, and records limitations so that the result can be assessed fairly.
At Trojan Investigations, we use background enquiries as part of wider due diligence, litigation support, fraud enquiries and personal investigations. The scope depends on the decision the client needs to make. A director appointment, supplier relationship, senior recruitment decision or sensitive personal concern may each justify different checks.
Published: 15th December 2024 | Updated: 4th September 2026
Why Are Background Checks Important?
Background checks can reduce avoidable risk by testing information that matters before a relationship or transaction progresses. Depending on the lawful purpose, they may help to verify:
- identity and address history;
- employment, directorship and business claims;
- professional qualifications or memberships;
- insolvency, disqualification or relevant court information that is lawfully available;
- references and career history;
- publicly available adverse information that is genuinely relevant;
- company ownership and corporate relationships;
- sanctions or regulatory issues where applicable; and
- in eligible employment contexts, the correct level of criminal-record disclosure.
The check should always be matched to the risk. More information is not automatically better information.
Background Checking Is Not One Single Product
The phrase “background check” is often used as if it describes a standard report. In reality, lawful background enquiries can range from simple verification of a company director to a structured pre-employment vetting programme or a deeper commercial due-diligence investigation.
The first question should therefore be: what decision are we trying to make? If the concern is whether a proposed supplier exists and is properly controlled, company and ownership research may be appropriate. If the concern is whether an applicant is eligible to work with vulnerable people, the employer must follow the correct safeguarding and DBS framework. If the concern is a potential fraud, the scope may move into a formal business investigation.
Employment Background Checks Need a Clear Purpose
Employers have legitimate reasons to verify candidates, but pre-employment vetting is intrusive and should not be performed indiscriminately. The Information Commissioner's Office says employers should identify why vetting is necessary, tell candidates what checks will be carried out, and collect only information that is relevant to the role.
This matters because recruitment screening can reveal sensitive information that has little or nothing to do with a person's ability to perform the job. The more intrusive the check, the stronger the justification and safeguards should be.
Examples of proportionate employment verification
- confirming stated employment dates and job titles;
- checking qualifications where the role genuinely depends on them;
- verifying professional registration for regulated work;
- obtaining references relevant to the proposed role;
- confirming identity and right-to-work evidence through the appropriate process;
- carrying out the correct DBS check where the role is eligible;
- checking public professional information where a documented role-specific risk justifies it; and
- recording discrepancies and giving the candidate a fair opportunity to explain them.
DBS Checks Are Frequently Misunderstood
A private investigator cannot simply obtain somebody's complete criminal record on request. In England and Wales, criminal-record checking is governed by the Disclosure and Barring Service and by rules that determine which level of certificate a role is eligible for.
| Level | What it broadly shows | Important limitation |
|---|---|---|
| Basic | Unspent convictions and conditional cautions | There is no role-eligibility requirement for a basic check, but data protection and employment-law duties still apply. |
| Standard | Spent and unspent convictions and cautions subject to filtering rules | The role must be legally eligible. Employers cannot choose this level simply because they would prefer more information. |
| Enhanced | Standard-level information plus relevant local police information where the statutory test is met | Only eligible roles can receive it; some roles may also qualify for barred-list information. |
DBS eligibility guidance was updated on 1st September 2026. The recruiting organisation remains responsible for deciding whether a standard or enhanced check is legally available for the role. A broad “background-check package” should never be used to bypass those rules.
Criminal-offence information is particularly sensitive
The ICO treats criminal-offence data as high-risk information. Employers need a lawful basis and additional legal authority under the Data Protection Act 2018 when processing it. Vetting should normally focus on the successful candidate and the level of information genuinely required for the role.
Social Media Checks Can Easily Become Unfair
Public social media can sometimes assist verification, but it is easy to overreach. The ICO's recruitment guidance says employers should be able to identify and document a specific risk before checking a candidate's public social-media profiles. Candidates should be told if this forms part of vetting, and irrelevant information should be screened out from the hiring decision.
Online information can also be inaccurate, old, sarcastic, impersonated or taken out of context. A profile with a matching name is not proof that it belongs to the candidate. Decisions should not be based on online material alone without appropriate verification and an opportunity for the person to comment on significant discrepancies.
Credit Checks Should Not Be Routine
Credit information can be relevant to a small number of roles, particularly where the work involves significant financial authority, but it should not be collected simply because it is available. The ICO states that employers should be able to justify why a credit-reference check is necessary for the role and should tell candidates about the proposed check as early as possible.
A poor personal credit history is not the same thing as dishonesty. Economic hardship, divorce, illness and other life events can all affect financial records. Context and relevance matter.
Business Background Checks and Commercial Due Diligence
Commercial decisions often justify a broader investigation because the subject may be a company, director, supplier, investor or proposed business partner rather than an employee. A structured legal or litigation-support enquiry may examine corporate records, ownership, directorships, insolvency information, litigation history, public regulatory findings, trading addresses, connected entities and inconsistencies between representations and official records.
The goal is not to label a person or company as “good” or “bad”. It is to give the decision-maker a clearer evidence base and identify issues that warrant further legal, financial or compliance review.
Personal Background Enquiries Require the Same Legal Discipline
Individuals sometimes request checks in connection with online dating, new relationships, family concerns or suspected deception. A private client can have a legitimate reason to verify identity or public claims, but that does not create a right to private messages, protected records, bank information or confidential government data.
Our personal investigation services are scoped around a defined concern and lawful information. We do not use hacking, pretexting for protected records or other unlawful methods simply because the client is anxious about another person.
Identity Matching Is One of the Biggest Sources of Error
Background research can be dangerously misleading when records are attributed to the wrong person. Common names, old addresses, spelling variations, maiden names, reused usernames and incomplete dates of birth can all create false matches.
A match is not a fact until it is corroborated
Finding a court result, company appointment or adverse news article under the same name is not enough. Reliable work uses multiple identifiers and records uncertainty. A report should be able to explain why a record is believed to relate to the subject and what evidence would be needed to increase confidence.
What a High-Quality Background Report Should Separate
| Category | Meaning | Example |
|---|---|---|
| Verified fact | Supported by a reliable source and correctly matched to the subject | A Companies House appointment linked through name, date and company history |
| Client-supplied information | Information provided at instruction but not independently verified | An allegation that the subject previously traded under another name |
| Open-source indication | Potentially relevant public material that requires corroboration | A social profile appearing to use the same photograph |
| Inconsistency | Two sources do not align | A CV and former employer provide different employment dates |
| Not established | The available evidence is insufficient for a conclusion | An allegation cannot be linked to the correct individual |
Data Protection Still Applies to Public Information
Publicly available personal information can still be personal data. The UK GDPR and Data Protection Act 2018 therefore remain relevant when organisations collect, analyse, combine and report information about identifiable people.
In March 2026, the ICO updated its legitimate-interests guidance to reflect the Data (Use and Access) Act changes. Organisations still need a lawful basis and must consider necessity, fairness, transparency and people's rights. The fact that information can be found online does not remove those duties.
More Data Can Produce Worse Decisions
One of the least obvious risks in background checking is information overload. Large reports can encourage decision-makers to focus on colourful but irrelevant detail. A short, well-supported finding can be more valuable than hundreds of pages of unfiltered search results.
Good screening is risk-led
Define the decision, identify the facts that could materially change it, choose lawful sources capable of answering those questions, and stop when the objective has been met. This reduces cost and intrusion while improving defensibility.
How We Structure a Background Investigation
1. Define the decision
We establish why the information is needed and what would materially affect the client's decision.
2. Confirm lawful scope
We identify which information can properly be obtained and any special restrictions, such as criminal-record or employment-vetting rules.
3. Verify identity first
Before attributing adverse information, we build enough identifiers to reduce false matches.
4. Research proportionately
We use relevant public, corporate and other lawful sources rather than collecting everything available.
5. Corroborate material findings
Important claims are cross-checked where possible, and conflicting evidence is recorded rather than hidden.
6. Report limitations
The client receives findings with source context, confidence and gaps so that the report supports a decision rather than pretending uncertainty does not exist.
When Should a Business Use an Investigator Rather Than a Standard Screening Provider?
Routine employment verification can often be handled through established HR and screening processes. An investigator becomes more useful where the question is unusual, disputed or high-risk: complex ownership, suspected false identity, significant corporate inconsistencies, cross-border connections, a live fraud concern or evidence likely to be needed for legal proceedings.
In those circumstances, the ability to follow leads, document reasoning and explain evidential limitations is usually more important than producing a standard database report.
Background Checks Should Support Fair Decisions
The purpose of a background check is not to eliminate all uncertainty. It is to reduce avoidable uncertainty using information that is relevant, lawful and sufficiently reliable for the decision being made.
If you need a background enquiry for a business, legal or personal matter, you can book a confidential consultation with Trojan Investigations. We can help define the question first, then determine what level of research is proportionate.
International Background Checks Need Extra Caution
Cross-border checking can be valuable where a candidate, director or business has lived or traded overseas, but records are not standardised globally. Company registers, criminal-record systems, insolvency procedures, court access and naming conventions vary by country. A “no result” in one jurisdiction therefore does not mean the event did not happen; it may mean the information is not publicly accessible or cannot lawfully be obtained by a private investigator.
Translations and transliterations can also create false matches. A reliable international report should identify the jurisdiction searched, the source used, the identifiers matched and the limitations of the record system rather than presenting every country as if it operates like the UK.
Retention Matters After the Decision Has Been Made
Background-check information can be sensitive, especially criminal, financial and personal-history material. The ICO's employment guidance stresses that vetting information should not be kept longer than necessary. In many recruitment situations the detailed material should be securely destroyed once the decision has been made, while a limited record of the outcome and decision may be retained where justified.
This principle is useful beyond recruitment. Clients should ask why the investigation file is still needed, who can access it and when it will be deleted. Keeping a dossier indefinitely “just in case” can create unnecessary privacy and security risk.
Background Checks Should Be Repeated When the Risk Changes
A check carried out five years ago does not prove that nothing has changed since. For higher-risk business relationships, organisations may need proportionate periodic review when there is a meaningful trigger such as a change of ownership, new regulatory exposure, a senior appointment, a major transaction or credible adverse information.
Repeat checking should still be justified. Continuous monitoring of a person simply because they were checked once can become excessive. The review should focus on the new risk or decision rather than recreating the entire original investigation without reason.
Sources and References
- Disclosure and Barring Service — DBS eligibility guidance, updated 1 September 2026.
- Disclosure and Barring Service — Check someone's criminal record: types of DBS check.
- Information Commissioner's Office — Employment practices and data protection: recruitment and selection.
- Information Commissioner's Office — Pre-employment vetting of candidates.
- Information Commissioner's Office — Legitimate interests guidance, updated 23 March 2026.
- Information Commissioner's Office — Data protection fee guidance and register information.
- Data Protection Act 2018 — provisions governing criminal-offence data and employment-related processing.
- UK GDPR — principles of lawfulness, fairness, transparency, data minimisation and accuracy.