Pre-Employment Checks In New Zealand: What Employers Can And Can’t Ask

Hiring is exciting - but it can also feel like a minefield, especially when you’re trying to do the “right thing” and avoid costly mistakes.

On the one hand, you want to protect your business by running sensible pre-employment checks. On the other, you don’t want to overstep, collect information you shouldn’t, or end up with a privacy complaint (or an employment dispute) before the person has even started.

The good news is: you can do pre-employment checks in New Zealand, as long as you do them fairly, reasonably, and in line with your obligations - particularly under the Privacy Act 2020 and general good employment practice.

Below, we’ll walk through what checks are commonly used, what you can ask for, what you should avoid, and how to set a process that protects your business from day one.

Why Pre-Employment Checks Matter For Small Businesses

In a small business, each hire has a bigger impact. One wrong hire can affect customer experience, team culture, productivity, and even your legal risk exposure.

That’s why pre-employment screening is more than “nice to have” - it’s a practical risk management step. Done properly, it can help you:

• Verify the person can do the role (skills, qualifications, licences).
• Reduce safety and compliance risks (particularly in regulated roles).
• Protect your customers, staff, and assets (where trust is central to the job).
• Avoid disputes later by setting clear expectations and documenting the process.

But there’s an important flip side: if your checks are too broad, intrusive, or inconsistent, you can create legal risk - especially around privacy and discrimination.

This is where it helps to have your foundations in place early, including a properly tailored Employment Contract and (if relevant) workplace policies that explain how information is handled.

What Rules Apply To Pre-Employment Checks In NZ?

There isn’t one single “pre-employment checks” law in New Zealand. Instead, your obligations usually come from a few key areas:

Privacy Act 2020 (Collecting And Handling Candidate Information)

If you’re collecting information about someone - whether that’s their CV, references, interview notes, or background checks - you’re dealing with personal information. That means you need to follow the Privacy Act 2020.

In practice, this usually means you should:

• Collect only what you need for a lawful purpose connected to hiring.
• Be transparent about what you’re collecting and why (including who you’ll collect it from, and who you may share it with).
• Collect information fairly and avoid misleading candidates about how their information will be used.
• Store information securely and limit access internally.
• Not keep it longer than necessary (particularly for unsuccessful candidates).

While “consent” is commonly used in hiring processes, the Privacy Act doesn’t always require consent for every collection. The safer practical approach is to give clear notice and, where you’re collecting from third parties (like referees or screening providers), get the candidate’s informed authorisation first.

If you haven’t already, having a clear Privacy Policy (and internal practices consistent with it) makes it much easier to explain your process and show you’re taking privacy seriously.

Employment Law Principles (Fairness And Process)

Even though the person isn’t employed yet, recruitment still needs to be handled in a fair and reasonable way. As a business owner, the safest approach is to build a consistent, role-based screening process and apply it evenly.

This is also why it’s smart to ensure your recruitment documents and onboarding steps line up with your employment arrangements (for example, the role description, contract, and any probationary terms).

Human Rights / Discrimination Risks (What You Ask And Why)

A big trap with pre-employment screening is asking questions that are not relevant to the role - especially where the information relates to protected personal characteristics (like age, family status, religion, disability, etc.).

As a rule of thumb: if you can’t clearly explain how the information is relevant to the job, you probably shouldn’t ask for it.

Extra Rules For Children’s Workforce Roles (VCA / Children’s Act 2014)

If the role is in the “children’s workforce” (for example, it involves regular work with children, or is in a regulated service), additional legal requirements may apply - including mandatory safety checking under the Vulnerable Children Act / Children’s Act 2014. These checks can go further than a standard reference check and may include identity verification, police vetting, and other vetting steps depending on the role.

If you’re hiring for any children’s workforce position, it’s worth getting advice so your process meets those specific obligations.

Common Pre-Employment Checks You Can Do (If They’re Relevant)

There’s no one-size-fits-all list, but these are some of the most common checks New Zealand businesses use. The key is to make sure each check is genuinely connected to the role and you run it in a privacy-compliant way.

1. Identity Checks (Right Person, Right Role)

It’s generally reasonable to confirm the candidate’s identity, particularly if they’ll have access to sensitive systems, client property, or financial accounts.

Common approaches include sighting (not necessarily copying) ID such as a driver licence or passport. If you do copy ID, make sure you have a good reason, keep it secure, and don’t retain it longer than necessary.

2. Reference Checks

Reference checks are a classic pre-employment step - and when handled well, they’re also one of the most useful.

Good practice includes:

• Getting the candidate’s permission before contacting referees (even if the referee is listed on their CV).
• Keeping questions role-based (for example: reliability, teamwork, customer handling, technical competency).
• Being consistent between candidates for the same role.
• Documenting what was said (briefly and objectively).

Avoid “fishing” questions that drift into irrelevant personal areas. If you’re unsure what’s appropriate, it can help to create a standard reference check template for each role.

3. Qualification And Licence Checks

If the role requires a specific qualification, registration, or licence, verifying it is usually reasonable - and sometimes essential for compliance.

Examples include:

• Trade qualifications for certain technical work.
• Current practising certificates or professional registration (where required).
• A valid driver licence (if driving is a core part of the job, not just occasional).

The key is relevance: don’t ask for documents that don’t actually affect whether the person can perform the job.

4. Criminal Record Checks (When They’re Justified)

Criminal record checks can be lawful, but they’re an area where businesses should slow down and be careful.

Rather than asking broad questions like “Do you have a criminal record?”, it’s usually better to (1) assess whether a check is genuinely needed for the role, and (2) if it is, use an appropriate process (such as a Ministry of Justice criminal record check or a police vet, where applicable).

In particular, be aware that the Criminal Records (Clean Slate) Act 2004 can limit what a person has to disclose about older, eligible convictions in many situations. That means a blanket “tell us everything” question can be misleading or unfair, and a one-size-fits-all “any record = no job” approach can create risk.

A better approach is to assess:

• Is the check relevant to the role? (For example, roles involving vulnerable people, financial responsibility, or high-trust access.)
• What type of offences would actually matter? (Not all convictions are relevant.)
• How will you assess results fairly? (Consider relevance, time passed, and the nature of the role.)

If you’re planning to make a criminal record check part of your standard recruitment process, it’s worth getting legal advice so the process is defensible, consistent, and proportionate.

5. Credit Checks (Only For Certain Roles)

Credit checks are particularly sensitive, and for most roles they’ll be hard to justify. They’re usually only appropriate where the employee will be handling significant money, financial decisions, or access to financial systems.

If you’re considering credit checks, you should be clear on:

• Why it’s necessary for the role (not just “nice to know”).
• How you’ll get informed authorisation for the check.
• How you’ll store and limit access to that information.

6. Skills Testing And Work Samples

Skills tests can be one of the fairest types of pre-employment screening - because you’re assessing real capability rather than assumptions.

To keep things reasonable:

• Keep the test proportionate in time and complexity.
• Make it relevant to actual tasks they’ll do.
• Avoid asking for unpaid “free work” that creates value for your business beyond assessing skill.
• Tell candidates how their work sample will be used and whether it will be retained.

What You Generally Can’t Ask (Or Should Avoid) During Pre-Employment

When businesses get into trouble with pre-employment checks, it’s often because they collect information that is:

• too personal,
• not relevant to the role, or
• collected without proper transparency or authority.

Here are common areas to avoid or approach with care.

Health And Medical Information (Including Mental Health)

It’s understandable to want confidence that a new hire can perform the role safely. But asking broad questions about someone’s medical history or mental health can be intrusive and risky.

If health is relevant, focus on the role requirements instead. For example:

• “This role involves lifting up to 20kg repeatedly. Are you able to do that safely, with reasonable support if needed?”
• “This role requires overnight work once per week. Can you meet that availability?”

Keep it job-focused, and avoid requesting medical records unless there’s a lawful and genuinely necessary reason.

Discriminatory Or Personal Life Questions

Questions that touch on protected personal characteristics can create discrimination risk, even if that wasn’t your intention.

Examples that are often inappropriate (unless there’s a rare, role-specific reason) include questions about:

• age, family status, pregnancy or plans to have children,
• religion, ethnicity, nationality (beyond confirming legal right to work where relevant),
• sexual orientation, relationship status,
• disability (beyond ability to safely perform role requirements),
• political views.

If a question feels “personal” rather than “job-related”, it’s a good sign to leave it out.

Social Media Screening (Without Clear Boundaries)

Many employers look at social media. The risk is that you might accidentally collect information you shouldn’t consider (for example, religion, sexuality, disability), or make assumptions based on posts taken out of context.

If you do any online screening:

• Do it consistently (not only for certain candidates).
• Only consider information relevant to the role (for example, serious reputational risk for a public-facing position).
• Avoid requesting passwords or access to private accounts.
• Document your reasoning carefully if you decide not to hire based on online information.

“Blanket” Background Checks That Go Beyond The Role

A big red flag is running broad checks simply because you can, rather than because you need to.

For example, demanding a criminal record check for an entry-level role with no trust or safety factors can look unreasonable. Likewise, collecting extensive personal information “just in case” is generally not a good idea under privacy principles.

How To Run Pre-Employment Checks The Right Way (A Simple Process)

Having a consistent process makes your hiring smoother and helps protect you if a decision is challenged later.

Here’s a practical approach many small businesses use.

Step 1: Decide What Checks Are Role-Based (Not Person-Based)

Start by listing what matters for this job. For example:

• Is it a role dealing with kids or vulnerable people?
• Will they handle cash, banking, or financial approvals?
• Will they drive a vehicle or use heavy equipment?
• Will they access confidential business or client data?

Then, match checks to those risks. This keeps the checks defensible and proportionate.

Step 2: Tell Candidates Upfront What You’ll Check

Transparency is one of the easiest ways to stay on the right side of privacy obligations.

Consider including in your job ad or interview process:

• what checks will be done (for example, references, qualification verification),
• whether checks happen before an offer or as conditions of an offer, and
• what happens if a check raises concerns (for example, you’ll discuss it with them before making a decision).

Step 3: Get Clear Authorisation (Especially For Third-Party Checks)

Reference checks, criminal record checks, and credit checks often involve collecting information from someone else, or through a third-party provider. In most cases, you should get the candidate’s informed authorisation before you do this.

Authorisation should be meaningful - not buried in fine print. A quick email confirming “we’d like to contact X and Y for references, is that okay?” can go a long way.

Step 4: Keep Records Secure (And Don’t Keep Them Forever)

Recruitment files often contain sensitive data: CVs, notes, reference call summaries, and sometimes identification documents.

Make sure you:

• limit access to only the people involved in hiring,
• store information securely (including passwords and access control), and
• set a sensible retention period (especially for unsuccessful candidates).

As your team grows, it can also help to formalise how you handle workplace data and confidentiality through internal documents and clauses in your employment agreements, as well as fit-for-purpose workplace policies.

Step 5: Make Conditional Offers Clear In Writing

If you’re making an offer subject to checks (like references, a licence verification, or a background check), say so clearly in writing.

This is where having a properly drafted Employment Contract (and offer documentation) helps you avoid misunderstandings. You want the candidate to understand what still needs to happen before everything is final.

If you’re unsure how to word conditions, it’s worth getting advice so the conditions are enforceable and don’t create confusion.

Key Takeaways

• Pre-employment checks are allowed in New Zealand, but they should be role-based, reasonable, and consistent across candidates.
• The Privacy Act 2020 applies to candidate information, so you should collect only what you need, give clear notice, and store data securely.
• Common checks include identity verification, reference checks, qualification and licence checks, and (where justified) criminal record checks - noting Clean Slate rules may affect what candidates must disclose in many situations.
• For children’s workforce roles, additional legal safety-checking obligations may apply.
• Be careful about health and medical questions, discriminatory questions, and broad background checks that aren’t genuinely connected to the role.
• Set a clear hiring process, get informed authorisation for third-party checks, and use written conditional offers where checks are pending.
• Having the right documentation in place - like an Employment Contract and a fit-for-purpose Privacy Policy - helps protect your business from day one.

If you’d like help setting up your hiring process, reviewing your pre-employment screening steps, or putting the right documents in place, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.