Background Screening a Virtual Assistant: What US Law Allows and Requires

Published September 22, 2026.

Background screening a virtual assistant

Background screening a virtual assistant is the practice of verifying identity, work history, and other role-relevant facts before granting a remote worker access to a business. It is a hiring decision with a legal layer on top: the rules depend on whether the assistant is an employee or an independent contractor, on where the business and the worker are located, and on which tools the business uses to gather information. This review examines what the primary United States sources actually require, separates those requirements from practical inference, and identifies the decisions a founder can document before a virtual assistant starts.

Why the rules are not uniform

The most common mistake is to assume that one checklist covers every engagement. It does not. A business that hires a virtual assistant as a full-time employee in New York, a business that engages a contractor who lives in the Philippines, and a business that screens through an online consumer reporting agency are all operating under overlapping but different rules.

Three variables change the analysis. The first is classification: employee versus independent contractor, a question governed by the IRS common-law test and the Department of Labor economic realities test, which we reviewed in our article on virtual assistant classification. The second is location, because states and cities layer their own requirements on top of federal law. The third is method, because the Fair Credit Reporting Act attaches procedural duties to the use of consumer reports that do not apply when a business verifies references directly.

What the Fair Credit Reporting Act requires

The FCRA regulates consumer reports, which the statute defines broadly. When a business obtains such a report for employment purposes, the Act imposes specific steps. Before the report is procured, the employer must make a clear and conspicuous written disclosure to the consumer in a document that consists solely of the disclosure, and the consumer must authorize the procurement in writing. A single combined form, or an authorization buried inside an employment application, does not satisfy this structure.

The Act then governs what happens if the business wants to take adverse action based in whole or in part on the report. The employer must provide a pre-adverse action notice, which includes a copy of the report and a written summary of the consumer's rights, and give the consumer an opportunity to dispute the information. Only after that opportunity does the employer provide a post-adverse action notice. The Federal Trade Commission's guidance for employers summarizes these steps, and the FTC also notes that businesses must properly dispose of consumer report information they no longer need under the Disposal Rule.

Whether these employment-purpose provisions apply to an independent contractor is more nuanced than the popular summaries suggest. The definition of employment purposes is written around evaluating a person for employment, promotion, reassignment, or retention as an employee. A contractor relationship is not automatically covered. Many businesses nonetheless apply the same disclosure, authorization, and adverse action sequence to contracted assistants, both as a risk-management choice and because some state consumer reporting laws use broader language. A founder should confirm the specific rule that applies rather than assume the answer either way.

What the EEOC says about criminal records

The Equal Employment Opportunity Commission and the Federal Trade Commission jointly publish guidance explaining how background checks can create discrimination risk. The EEOC's position is that a policy or practice of excluding applicants because of a criminal record can violate Title VII when it disproportionately screens out members of a protected group and is not shown to be job-related and consistent with business necessity.

The EEOC's enforcement guidance describes a targeted approach. An employer should consider the nature and gravity of the offense, the time that has passed since the conviction or completion of sentence, and the nature of the job. The employer should also give the applicant an opportunity to explain the circumstances. A blanket rule that bars anyone with any conviction from any role is the pattern most likely to create liability.

The same joint guidance reminds employers that the Americans with Disabilities Act restricts medical inquiries and that screening requests must be limited and consistent across similar applicants. The operational reading is that screening criteria should be written down before screening begins, tied to the specific role, and applied the same way to comparable candidates.

State and local rules raise the floor

Federal guidance is a floor, not a ceiling. Many states and cities require employers to delay criminal history inquiries until after an initial interview or a conditional offer, a family of rules known as ban the box. States such as California also have their own consumer reporting statutes that add disclosure and notice requirements beyond the FCRA. Some jurisdictions restrict credit checks for employment, and several require specific notices or pay transparency that interact with screening workflows.

For a virtual assistant who may work across state lines, the practical rule is to identify the location of the role and the worker before selecting a screening sequence. When a business operates in more than one jurisdiction, the safest approach is to apply the most protective combination or to define screening criteria by role rather than by office.

A defensible screening sequence

The sources above translate into a sequence a small business can follow. First, decide the classification and document it, because it drives withholding, reporting, and the applicable screening framework. Second, define the role's risk profile: does the assistant handle money, customer personal data, executive communications, or regulated information? Third, write the screening criteria in advance and confirm each one is job-related. Fourth, if a consumer reporting agency is used, use a standalone disclosure and obtain written authorization before the report is ordered. Fifth, review the report, and if adverse action is contemplated, follow the pre-adverse and post-adverse steps and allow the applicant to respond. Sixth, verify identity and work authorization using the appropriate forms. Seventh, store screening records securely and dispose of them when they are no longer needed.

What screening cannot establish

It is equally important to be clear about limits. A background check reports fragments of a person's past as recorded by other institutions. It does not measure judgment, communication quality, attention to detail, or how a person will handle confidential information under pressure. A clean record is not a guarantee, and a single old offense is not proof of untrustworthiness. The useful conclusion from the primary sources is procedural: screen consistently, tie criteria to the role, document the reasoning, and give the candidate a fair chance to respond. Combine screening with access controls, a written scope of work, and a review process for sensitive tasks, which we cover in our article on virtual assistant access and account security.

Methodology and limits

This review examined primary and authoritative guidance published by the Equal Employment Opportunity Commission, the Federal Trade Commission, the Internal Revenue Service, and the Small Business Administration, and compared their stated requirements and recommendations. Each source was checked on September 22, 2026. The review summarizes the federal framework and the existence of state variation; it does not provide legal advice, does not analyze any particular jurisdiction exhaustively, and does not apply the rules to a specific person or business. Screening law and guidance change, so a business should confirm current requirements in the relevant location and consult qualified counsel when a decision is material.

Frequently asked questions

Do I need a background check to hire a virtual assistant? No federal law requires one for every role. The decision is a business-risk choice, and the rules above govern how a check may be conducted when you choose to run one.

Does the FCRA apply to an independent contractor virtual assistant? The Act's employment-purpose provisions are written around employees, but contractor screenings can still be governed by state law and by the way information is obtained. Confirm the rule for your situation rather than assuming.

Can I reject a candidate because of a criminal record? A blanket exclusion creates Title VII risk. The EEOC expects an individualized, job-related assessment that considers the offense, the time elapsed, and the role.

Should I screen before or after an offer? Follow the timing rules that apply in your location. Many jurisdictions require criminal history questions to wait until after an initial interview or a conditional offer.

References

1. Background Checks: What Employers Need to Know, U.S. Equal Employment Opportunity Commission
2. Using Consumer Reports: What Employers Need to Know, Federal Trade Commission
3. Fair Credit Reporting Act, Federal Trade Commission
4. Hire and Manage Employees, U.S. Small Business Administration
5. Independent Contractor (Self-Employed) or Employee, Internal Revenue Service