The part most screening vendors skip is the process — disclosure, authorisation and adverse action — and it is the part that creates liability.
The part most vendors skip: the process is regulated, not just the data
Almost every background-check provider sells you a record search. The records are the easy part. What generates litigation is the process around them — and it is the process, not the data, that the Fair Credit Reporting Act regulates.
Where a report is obtained for employment, tenancy or credit purposes it is a consumer report, and the FCRA governs how you request it, what you disclose, what you must do before you act on it, and what the subject is entitled to. The disclosure has to be a standalone document, clear and conspicuous, not buried in an application or a release full of other language — that single point has generated a long line of class actions against employers who did nothing wrong except use the wrong form. Written authorisation has to be obtained. And if you intend to act adversely on what comes back, there is a two-step process: a pre-adverse action notice with a copy of the report and the summary of rights, a reasonable interval for the subject to respond or dispute, and then the adverse action notice itself.
Where a report includes interviews about character, reputation or personal characteristics rather than pure record data, it becomes an investigative consumer report and additional disclosure obligations attach. Where a report is compiled for a business purpose that is not employment, tenancy or credit — partner vetting, an acquisition target, a counterparty — it usually sits outside that framework entirely and is investigative work with different rules.
We tell clients which of those buckets their request falls into before the work starts, because the answer changes the forms, the process and the exposure. A vendor who does not raise this is not protecting you from it.
Arizona specifics
Arizona has no statewide ban-the-box statute for private employers, though public-sector hiring and some local jurisdictions carry their own restrictions — worth checking against where you hire rather than assuming the state rule is the whole rule.
What is distinctly Arizona is the fingerprint clearance card. Many roles here — in education, childcare, healthcare, behavioural health, care of vulnerable adults, and certain licensed occupations — require a Level One or standard fingerprint clearance card issued by the Department of Public Safety, and that is a statutory eligibility requirement, not a background check you can substitute with a records search. Employers regularly confuse the two. A clearance card and a background report answer different questions, and a role that requires the card is not satisfied by the report.
Guard and investigator licensing carries its own requirements under A.R.S. Title 32, Chapters 24 and 26, which is worth knowing if you are screening for a security role. Honeybadger holds Private Investigations Agency licence 1759795 and Security Guard Agency licence 1759798.
What Honeybadger Solutions provides
Honeybadger Solutions is an Arizona-licensed security guard and private investigations agency — Guard 1759798, PI 1759795 — with investigations, digital forensics and cyber work delivered nationwide. This article is background on the problem. For what we actually provide, see Background Checks, or book a confidential consultation.