Legal Reference Checks For Employers In New Zealand

Hiring someone new can be exciting (finally, some extra capacity), but it can also feel like a gamble - especially when you’re a small business and every hire matters.

That’s where reference checks come in. Done well, they help you confirm a candidate’s skills, work style and reliability before you commit.

But reference checks aren’t just a “common sense” step - they also involve real legal risk. In New Zealand, checking references usually means handling personal information, potentially sensitive opinions, and sometimes information that could unfairly disadvantage someone if it’s used the wrong way.

Below, we’ll walk you through how to run reference checks that are genuinely useful and legally safer, including practical scripts, what to ask, what to avoid, and how to document your process.

Why Reference Checks Matter (And Where Employers Get Caught Out)

Reference checks can protect your business from costly hiring mistakes, like:

• Hiring someone who can’t actually perform the role as described;
• Bringing in a person who doesn’t meet safety or compliance expectations (especially in customer-facing, care, trades or high-risk roles);
• Employment disputes later, where the candidate claims your decision-making process was unfair or discriminatory;
• Reputational issues if you rely on “informal” references or gossip.

The tricky part is that reference checks sit at the intersection of good recruitment practice and legal obligations. For example:

• You’re typically collecting personal information (so the Privacy Act 2020 matters).
• You need a recruitment process that’s fair and consistent, particularly if you’re making decisions that could be challenged.
• You should avoid questions that could lead to (or look like) discrimination under the Human Rights Act 1993.

A strong reference checking process helps you make better decisions while reducing the risk of misunderstandings, complaints, or avoidable disputes.

What Laws Apply To Reference Checks In New Zealand?

You don’t need to be a lawyer to run reference checks, but you do need to know the legal guardrails. Here are the main ones most NZ employers should keep in mind.

The Privacy Act 2020 (Personal Information Rules)

In most cases, reference checks involve “personal information” about the candidate. That means you should think about:

• Collecting information fairly (for example, avoiding surprise “back-channel” checks where the candidate wouldn’t reasonably expect you to contact someone);
• Being transparent about what you’ll do with the information;
• Keeping the information secure and only for as long as you actually need it;
• Accuracy - if you’re relying on information to make a decision, you should have a process that reduces the risk of incorrect or misleading info.

It’s also worth remembering that, in many cases, a candidate may be able to request access to personal information you hold about them (including reference-check information) under the Privacy Act (subject to any applicable withholding grounds). That’s another reason to keep questions job-relevant and notes factual.

If you’re hiring regularly (or you store candidate information), it’s worth having a clear Privacy Policy and a recruitment privacy process so your team is consistent.

The Human Rights Act 1993 (Discrimination Risks)

Even if you don’t intend to discriminate, reference checks can accidentally invite information about protected grounds (for example, age, family status, religious beliefs, disability, ethnicity).

If those factors influence the hiring decision - or it looks like they did - you can create risk for your business. This is why it helps to keep reference questions tightly linked to the role.

A useful cross-check is: “If this answer came up later in a complaint, could we clearly explain why it was relevant to the job?”

Employment Law Considerations (Fair Process Mindset)

While the Employment Relations Act 2000 mainly governs the employment relationship once someone is hired, employers are still expected to act reasonably and run fair processes during recruitment (and a poor recruitment process can contribute to disputes later).

If your reference checks are inconsistent, sloppy, or rely on irrelevant personal commentary, you’re more likely to end up with a messy situation later.

Defamation And Negligent Misstatement (Usually A Bigger Risk For Referees, But It Affects You Too)

Defamation risk usually sits with the person giving the reference (if they say something untrue and damaging). But as an employer, you should still aim to:

• Ask for factual examples, not rumours;
• Avoid collecting irrelevant negative opinions;
• Keep careful notes so you can show your decision was based on role-relevant information.

This approach isn’t just “legal” - it also makes your reference checks far more reliable.

How To Run Reference Checks Properly (A Practical Process You Can Repeat)

The easiest way to reduce legal risk is to make reference checks a repeatable process, not an ad-hoc phone call when you have time.

Here’s a practical workflow that works well for small businesses.

1) Tell Candidates Early That You’ll Do Reference Checks

You don’t want reference checks to feel like a surprise. A simple line in your interview process helps set expectations, such as:

• “If we progress your application, we’ll conduct reference checks (and we’ll let you know who we plan to contact).”

This also encourages candidates to think carefully about who they nominate.

2) Get Clear Permission (And Confirm Who You’re Contacting)

Best practice is to get clear permission in writing (email is fine) confirming:

• Who you will contact;
• That the candidate authorises you to approach those referees for information relevant to the role;
• Whether you can contact their current employer (some candidates won’t want this until an offer is close).

You don’t always need “consent” in a strict legal sense to collect information, but it’s often the cleanest and fairest way to run reference checks (and it helps avoid privacy complaints).

Avoid “back-channel” references (for example, calling someone in your network who worked with them, but wasn’t nominated) unless you’ve clearly told the candidate you’ll do that and they’ve agreed.

3) Only Ask Job-Relevant Questions (Use A Script)

When you’re busy, it’s tempting to “just have a chat” with the referee - but unstructured chats lead to:

• Inconsistent hiring decisions;
• More irrelevant or biased commentary;
• Poor documentation (which is a problem if your decision is challenged).

A script keeps things clean, faster, and fairer. It also helps if you have multiple people in your business doing hiring.

4) Keep Notes (And Store Them Securely)

Reference checks should be documented. Your notes should focus on:

• What was said (as close to verbatim as practical);
• Examples given by the referee;
• Any limitations (for example, “referee only managed them for 3 months”);
• Your conclusion and why it matters to the role.

Store reference check notes securely and limit access internally. If you’re building out your employment documents, an Employee Privacy Handbook can help set internal expectations around handling staff and candidate information.

5) Make The Decision Using More Than One Input

One of the safest ways to use reference checks is to treat them as one piece of the overall picture, alongside:

• Interview performance;
• Skills testing or work samples (where appropriate);
• Role requirements (including any licences or registrations);
• Cultural and team-fit factors (kept professional and non-discriminatory).

If a reference check reveals a concern, consider whether you should clarify it with the candidate before finalising your decision - especially if it could be a misunderstanding.

What You Can (And Should) Ask In Reference Checks

Good reference checks are specific. The goal isn’t to get a “yes, they were great” - it’s to test whether the person can succeed in your role, in your business.

Here are examples of questions that are typically job-relevant and useful.

Role And Employment Basics

• What was the candidate’s job title and key responsibilities?
• How long did they work with you, and in what capacity (manager, team lead, peer)?
• What were their strongest areas in the role?

Performance And Capability

• How did they go with meeting deadlines and managing workload?
• Can you describe a time they handled a difficult situation (customer issue, conflict, pressure) and how they managed it?
• What kind of supervision did they need (high-touch vs self-directed)?

Reliability And Professional Conduct

• How would you describe their attendance and punctuality?
• How did they handle feedback or performance conversations?
• Were there any conduct issues that impacted the team or workplace?

Role-Specific Checks

This is where your reference checks become powerful. Tailor questions to your actual risks and needs, such as:

• Cash handling or inventory: “Did they have responsibility for money or stock, and how did they handle it?”
• Health and safety: “Did they follow safety procedures consistently?”
• Client-facing roles: “How did they communicate with customers and handle complaints?”
• Leadership roles: “How did they manage performance issues in others?”

Once you hire, make sure expectations are clearly recorded in an Employment Contract so there’s no confusion about duties, performance standards, and workplace policies.

What To Avoid: Common Reference Check Mistakes That Create Legal Risk

Reference checks can go wrong quickly when questions drift into personal territory, or when employers rely on informal information.

Here are the most common traps we see.

Asking Questions That Drift Into “Protected Ground” Territory

Avoid questions that could lead to discriminatory information, such as anything about:

• Age, pregnancy, childcare arrangements or family status;
• Religion or cultural practices;
• Health conditions or mental health (unless it is directly relevant and handled carefully);
• Relationship status or sexuality.

If you’re not sure where the line is, it’s worth tightening up your recruitment process so your interview questions and reference questions stay consistent - the same thinking that applies to illegal interview questions applies here too.

Contacting Referees The Candidate Didn’t Agree To

This one is a biggie. It might feel harmless to call a “mutual contact”, but if the candidate hasn’t agreed, you could be collecting personal information in a way that’s unfair or unexpected.

If you want to verify something with an additional person, the cleaner approach is to ask the candidate first.

Over-Relying On One Negative Comment

Sometimes a referee will give a vague negative comment, like “they weren’t a great fit.” On its own, that’s not very useful - and it can be unfair to treat it as a deciding factor.

Instead, ask follow-up questions:

• What specifically didn’t work?
• Was it performance, conduct, or role mismatch?
• Can you give an example?

This helps you separate genuine role risks from personality clashes or poor communication.

Failing To Keep Reference Information Confidential

Reference check notes should generally be treated as sensitive recruitment information. You should avoid sharing them widely inside your business, and you should be careful about what you repeat back to the candidate (particularly given they may request access to information held about them).

If your team needs help setting expectations around workplace confidentiality more broadly, a well-drafted Confidentiality Clause (or confidentiality obligations in employment documents) can help reduce loose handling of sensitive information.

Not Matching The Reference Check To The Actual Engagement Type

If you’re engaging someone as a contractor rather than an employee, your risk profile changes - and so should your checks. For example, you may care more about:

• Quality control and deliverables;
• Reliability and communication;
• Whether they’ve successfully serviced similar clients.

Also make sure your documentation matches the engagement, such as a properly drafted Contractors Agreement if they won’t be an employee.

How To Document Reference Checks (So They’re Useful If Something Goes Wrong)

Even if you never expect a dispute, documentation is one of the easiest ways to protect your business.

Here’s what we recommend capturing in your reference check record:

• Date and time of the reference check;
• Name and role of the referee;
• How they worked with the candidate (direct manager, HR, colleague);
• The questions asked (ideally consistent across candidates for the same role);
• Key responses and examples (facts over opinions where possible);
• Any red flags and the role relevance;
• Your outcome (progress / do not progress / clarify with candidate).

From a privacy perspective, also think about:

• Access controls: who in your business can see reference notes?
• Retention: how long will you keep unsuccessful candidate records?
• Security: where are notes stored (email inboxes, shared drives, HR system)?

These small operational details often matter more than people realise - especially when your business grows and more people get involved in hiring.

Key Takeaways

• Reference checks are a valuable risk-management tool for small businesses, but they should be structured and job-focused (not informal chats).
• The Privacy Act 2020 is usually relevant because reference checks involve collecting personal information - be transparent, take a fair approach to who you contact, and store notes securely.
• Remember candidates may be able to request access to personal information you hold about them (including reference-check information), so keep questions role-related and notes factual.
• Keep questions linked to the role to reduce discrimination risk under the Human Rights Act 1993, and avoid personal topics that aren’t genuinely job-related.
• Use a consistent script, document your calls, and rely on factual examples rather than vague opinions or gossip.
• Don’t contact “back-channel” referees without the candidate’s agreement, and be cautious about over-relying on one negative comment without clarifying details.
• Make sure your hiring documentation matches the relationship you’re creating - whether that’s an Employment Contract or a Contractors Agreement.

If you’d like help tightening up your recruitment process, employment documents, or privacy compliance, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.