Employee Background Checks in Romania: A Practical Guide for Employers

In Romania, conducting background checks on prospective employees is a common but regulated practice. Employers must balance their need for information with candidates’ privacy rights under Romanian and European law. This guide outlines what checks are permissible, how to obtain consent, and best practices to stay compliant.

Legal Framework

Background checks are primarily governed by the General Data Protection Regulation (GDPR) and the Romanian Labour Code. The GDPR requires that any processing of personal data—including data collected during recruitment—must have a lawful basis, such as the candidate’s consent or the employer’s legitimate interest. Additionally, the Romanian Labour Code and specific laws regulate the collection of certain types of information, such as criminal records.

What Can Employers Check?

Employers may typically verify information that is directly relevant to the job. This often includes:

• Identity (e.g., ID card or passport)
• Education and professional qualifications
• Employment history and references from previous employers
• Professional licences or certifications, where required by law

Criminal record checks are only permitted for roles where the law explicitly authorises them, such as positions involving work with children, security, or financial services. For most other jobs, employers cannot request a criminal record certificate as a general condition of employment. Credit checks are rare and generally reserved for roles involving significant financial responsibility.

Data Protection and Consent

Before conducting any checks, employers must inform candidates about what data will be collected, why, and how it will be used. For sensitive data—such as criminal records or health information—explicit consent is required. Employers should also respect the principles of data minimisation and purpose limitation: collect only what is necessary and use it only for recruitment decisions. Personal data obtained during background checks should be securely stored and deleted after a reasonable period if the candidate is not hired.

Practical Steps for Employers

To conduct background checks lawfully, employers should:

• Develop a clear, written policy on background screening that complies with GDPR and Romanian law.
• Use standardised consent forms that explain the checks and allow candidates to withdraw consent.
• Obtain information from official sources, such as educational institutions or the police, rather than informal channels.
• Keep records of all checks performed and ensure access is limited to authorised personnel.
• Train HR staff on data protection obligations and anti-discrimination rules.

Common Pitfalls to Avoid

Employers should be cautious about requesting information that is not job-related, making hiring decisions based on protected characteristics, or conducting social media checks without a lawful basis. Failing to inform candidates about background checks or mishandling their data can lead to legal consequences and damage to the employer’s reputation.

By following these guidelines, employers in Romania can conduct background checks effectively while respecting candidates’ rights and maintaining compliance.