Records That Almost Never Appear in a Standard Background Check

Health information is among the most comprehensively protected data in the United States. Under HIPAA, covered entities — hospitals, clinics, insurers, and their business associates — are prohibited from disclosing individually identifiable health information without patient authorization. This protection applies to diagnoses, treatment histories, prescriptions, mental health records, and substance use disorder treatment records, the last of which carry additional protections under 42 C.F.R. Part 2.

Standard background check companies have no legal mechanism to obtain this information. It does not flow into public record databases and is not accessible through court records searches. Our dedicated article on medical records and public access explains precisely where HIPAA's protections begin and end.

While certain financial events — bankruptcies, tax liens, and civil money judgments — do enter the public record and can appear in background reports, the underlying account-level data does not. Account balances, transaction histories, brokerage holdings, and retirement account details are protected under the Gramm-Leach-Bliley Act and related financial privacy regulations. Banks and financial institutions are prohibited from sharing this information with third-party screeners without consent.

It is worth understanding the distinction: a bankruptcy filing is a court record and therefore public; the account statements that led to that filing are not. For a full breakdown of which financial records can legitimately appear, see our guide on financial records that appear in background checks.

Emails, text messages, direct messages on social platforms, and private online communications are not accessible to background screeners. The Electronic Communications Privacy Act (ECPA) prohibits unauthorized interception or retrieval of electronic communications. Even if posts or comments are technically public on a social media platform, background check companies operating under the FCRA face significant legal risk if they compile this information into a consumer report — particularly if the content reveals protected characteristics such as race, religion, or disability.

Some employers conduct informal social media searches on their own, which operates outside the FCRA framework. However, this practice carries its own legal risks and is distinct from a formal background check report.

When a court seals or expunges a criminal record, it removes that record from public access — at least in theory. In most states, properly expunged arrests or convictions should not appear in a consumer background report. Background check companies are generally required to exclude these records, and individuals whose records have been expunged may legally answer "no" to questions about prior arrests or convictions in many jurisdictions.

The reality is more complicated. Record sealing is administered at the state level and implementation is inconsistent; some older databases may retain records that have since been expunged. If a sealed or expunged record appears on a background report, it likely constitutes a reportable error under the FCRA. The nuances are explained in our article on what criminal records are included and what are not.

Religious membership, political party registration, and ideological affiliations are not part of standard background check reports. While voter registration records are technically public in many states — including party affiliation — responsible consumer reporting agencies typically do not include this information in employment or tenancy background checks. Including religious affiliation would expose employers to significant liability under anti-discrimination provisions of Title VII of the Civil Rights Act.

The broader framework protecting these categories from routine disclosure is covered in our article on categories of records exempt from disclosure.

The Genetic Information Nondiscrimination Act (GINA) prohibits employers from requesting, requiring, or purchasing genetic information about employees or applicants. Genetic data — including results from consumer DNA tests — cannot lawfully be incorporated into an employment background check. Health insurers face similar restrictions. This protection extends to family medical history, which is considered genetic information under the law.

Although consumer DNA databases are growing rapidly, the information within them is governed by separate privacy agreements and cannot be compelled or accessed by background screeners for employment or housing decisions.

Background checks can verify employment dates, job titles, and — in some cases — whether a candidate is eligible for rehire. What they almost never capture is performance review content, internal disciplinary records, salary history (in jurisdictions where asking is restricted), or details of interpersonal conflicts. Former employers are typically cautious about disclosure due to defamation liability, so most will confirm only basic employment facts.

This limitation is important for anyone relying on a background check to evaluate a candidate's workplace conduct. Our article on employment history verification explains what checks can and cannot confirm in detail.