United States: Death Of The Box: Why The Criminal History Question On Job Applications Is Heading Towards Extinction

Last Updated: November 20 2013
Article by Philip L. Gordon

As privacy professionals know too well, organizations that handle personal information, especially personal information that can trigger security breach notification obligations, have an overwhelming need to screen out untrustworthy applicants from positions that permit access to such data. One tool that many organizations have used for years is straightforward enough—asking applicants to check a box in response to the following question on an employment application: "Have you ever been convicted of a crime?"

However, a legislative trend aimed at reintegrating millions of ex-offenders into the workforce has picked up so much steam over the past year that this practice is now illegal in some jurisdictions, forcing employers to rethink whether they should ask the question at all. Privacy professionals must understand the issues surrounding the "ban-the-box" movement so that they can participate knowledgeably in their organization's inevitable re-examination of the continued viability of the criminal history questions on their organization's job application.

The Need To Screen Out Malicious Insiders vs. The Need To Find Jobs for Ex-Offenders

A report published by Forrester Research in October 2013 documents the link between malicious insiders and data breaches. According to "Understand the State of Data Security and Privacy," 25 percent of respondents who experienced a data breach during the 12 months preceding the report described abuse by a malicious insider as the cause. The Privacy Rights Clearinghouse Chronology of Data Breaches reports 483 data breaches between 2005 and 2013 that compromised 32,557,431 records—a startling average of 67,400 compromised records per breach—that occurred when "[s]omeone with legitimate access intentionally breache[d] information—such as an employee or contractor."

Given the risk posed by a malicious insider and the potentially heightened risk created by someone previously convicted of identity theft and similar offenses, it should be no surprise that many employers have used criminal history to screen out ex-offenders at the earliest stages of the hiring process. Although no empirical data is available, it is possible that many ex-offenders simply refrain from applying for jobs when confronted with the criminal history question on a job application. The criminal history question also can provide a legitimate justification for terminating the employment of ex-offenders. In Rocha v. Coastal Carolina Neuropsychiatric Crisis Services the employer terminated the employment of the plaintiff after discovering that he had intentionally concealed his criminal history by responding in the negative to the criminal history question on the job application. In rejecting the plaintiff's discrimination claims, the court concluded that his omission was a material misrepresentation that provided a legitimate, non-discriminatory reason for firing him.

While organizations clearly have legitimate business reasons for including the criminal history question on the job application, lawmakers nationwide are addressing the countervailing societal interest in finding jobs for ex-offenders. According to legislative findings by Newark, New Jersey's City Council, 65 million Americans, or 1 in 4 adults, have a criminal record. Philadelphia's City Council has found "that approximately one-fifth of Philadelphia's population has some type of [c]riminal [r]ecord." The size of the ex-offender population in the U.S. has become so alarming that the country's top law enforcement official, Attorney General Eric Holder, announced in a speech to the American Bar Association in August 2013, "It's clear —as we come together today—that too many Americans go to too many prisons for far too long, and for no truly good law enforcement reason."

The Rise of "Ban-The-Box" Legislation and Other Legal Restrictions on the Criminal History Question

As of 2011, only three jurisdictions—Hawaii, Massachusetts and Philadelphia, PA—had enacted legislation, commonly referred to as "ban-the-box" legislation, that prohibits employers from asking the criminal history question on the job application. Then, in a nine-month period between September 2012 and June 2013, Buffalo, NY, Minnesota, Newark, NJ, Rhode Island and Seattle, WA, swelled the ranks. Many similar bills are pending.

This legislative trend is remarkable not only because of its accelerated pace, but also because it is highly unusual to see municipalities taking the lead in enacting legislation with such a material impact on employers.

While these ban-the-box laws uniformly prohibit employers from inquiring into criminal history in the job application, they otherwise create a complex, legislative patchwork. Massachusetts and Seattle permit an inquiry into criminal history after the initial application. In Buffalo, Minnesota and Rhode Island, employers can ask about an applicant's criminal history at the first interview. In Philadelphia, employers must wait until after the first interview to ask about an applicant's criminal history. Finally, in Hawaii and Newark, employers must wait until after a conditional offer of employment has been made to inquire about criminal history.

In addition to these procedural restrictions on the timing of the criminal history question, at least eleven states—California, Georgia, Hawaii, Massachusetts, Michigan, Nebraska, Nevada, New York, Ohio, Pennsylvania and Washington—and one city, Newark, impose restrictions on the substantive scope of the criminal history question. For example, California and Ohio prohibit inquiries into certain, petty marijuana-related offenses; Hawaii and Washington prohibit inquiries into criminal convictions that are more than ten years old; Massachusetts generally prohibits inquiries into misdemeanor convictions that are more than five years old, and Newark's ordinance imposes five- and eight-year limits depending on the type of criminal history. Many of these restrictions have been enacted in the past three years.

For multi-state employers, these procedural and substantive restrictions have turned what was once a straightforward question on the employment application into an ever-expanding list of caveats and warnings to applicants from varying jurisdictions about whether they should respond to the question at all and, if so, what they should and should not disclose. In the face of this quagmire, it is not surprising that multi-state employers are starting to throw up their hands. On October 29, 2013, The New York Times reported that Target Corporation, one of the largest employers in the United States, announced it would no longer ask about criminal history on any of its job applications, not just those in the company's home state of Minnesota where the ban-the-box law becomes effective on January 1, 2014.

Given the strong likelihood that states and municipalities will enact new procedural and substantive restrictions on the criminal history question, many employers likely will feel compelled to evaluate whether they should do the same.

Implications for Privacy Professionals

Mitigating the insider threat is a critical component of any information security program, and pre-employment screening is an effective tool towards attaining that objective. At the same time, the new legislative trend to ban the box and to impose other restrictions on the criminal history question raises the risk that an organization's pre-employment screening program is illegal. Consequently, privacy professionals should now discuss with their colleagues in the human resources and legal departments whether the time has come to remove the criminal history question from their organization's employment application.

While doing so may result in some increased burden as organizations are required to interview applicants whom they otherwise might not have considered because of self-elimination or criminal history disclosed on the job application, organizations still will be able to learn about an applicant's criminal history by conducting a lawful pre-employment background check. Indeed, evaluating a candidate's criminal history with the additional context provided by a job interview and other information learned during the hiring process should put the organization in a better position to evaluate the risk to data security posed by an applicant who is an ex-offender.

Those organizations that decide not to drop the criminal history question from their job application should take two steps to reduce the risk of liability. First, they should carefully review relevant laws in all jurisdictions where they recruit to confirm that the criminal history question as posed continues to be lawful. Second, they should closely track legislative developments, at both the state and municipal level, to make sure that their criminal history question continues to be lawful for as long as it remains on the job application.

This post originally ran in the IAPP's Privacy Tracker blog

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

To print this article, all you need is to be registered on Mondaq.com.

Click to Login as an existing user or Register so you can print this article.

Philip L. Gordon
Similar Articles
Relevancy Powered by MondaqAI
Fisher Phillips LLP
Sheppard Mullin Richter & Hampton
In association with
Related Topics
Similar Articles
Relevancy Powered by MondaqAI
Fisher Phillips LLP
Sheppard Mullin Richter & Hampton
Related Articles
Related Video
Up-coming Events Search
Font Size:
Mondaq on Twitter
Register for Access and our Free Biweekly Alert for
This service is completely free. Access 250,000 archived articles from 100+ countries and get a personalised email twice a week covering developments (and yes, our lawyers like to think you’ve read our Disclaimer).
Email Address
Company Name
Confirm Password
Mondaq Topics -- Select your Interests
 Law Performance
 Law Practice
 Media & IT
 Real Estate
 Wealth Mgt
Asia Pacific
European Union
Latin America
Middle East
United States
Worldwide Updates
Registration (you must scroll down to set your data preferences)

Mondaq Ltd requires you to register and provide information that personally identifies you, including your content preferences, for three primary purposes (full details of Mondaq’s use of your personal data can be found in our Privacy and Cookies Notice):

  • To allow you to personalize the Mondaq websites you are visiting to show content ("Content") relevant to your interests.
  • To enable features such as password reminder, news alerts, email a colleague, and linking from Mondaq (and its affiliate sites) to your website.
  • To produce demographic feedback for our content providers ("Contributors") who contribute Content for free for your use.

Mondaq hopes that our registered users will support us in maintaining our free to view business model by consenting to our use of your personal data as described below.

Mondaq has a "free to view" business model. Our services are paid for by Contributors in exchange for Mondaq providing them with access to information about who accesses their content. Once personal data is transferred to our Contributors they become a data controller of this personal data. They use it to measure the response that their articles are receiving, as a form of market research. They may also use it to provide Mondaq users with information about their products and services.

Details of each Contributor to which your personal data will be transferred is clearly stated within the Content that you access. For full details of how this Contributor will use your personal data, you should review the Contributor’s own Privacy Notice.

Please indicate your preference below:

Yes, I am happy to support Mondaq in maintaining its free to view business model by agreeing to allow Mondaq to share my personal data with Contributors whose Content I access
No, I do not want Mondaq to share my personal data with Contributors

Also please let us know whether you are happy to receive communications promoting products and services offered by Mondaq:

Yes, I am happy to received promotional communications from Mondaq
No, please do not send me promotional communications from Mondaq
Terms & Conditions

Mondaq.com (the Website) is owned and managed by Mondaq Ltd (Mondaq). Mondaq grants you a non-exclusive, revocable licence to access the Website and associated services, such as the Mondaq News Alerts (Services), subject to and in consideration of your compliance with the following terms and conditions of use (Terms). Your use of the Website and/or Services constitutes your agreement to the Terms. Mondaq may terminate your use of the Website and Services if you are in breach of these Terms or if Mondaq decides to terminate the licence granted hereunder for any reason whatsoever.

Use of www.mondaq.com

To Use Mondaq.com you must be: eighteen (18) years old or over; legally capable of entering into binding contracts; and not in any way prohibited by the applicable law to enter into these Terms in the jurisdiction which you are currently located.

You may use the Website as an unregistered user, however, you are required to register as a user if you wish to read the full text of the Content or to receive the Services.

You may not modify, publish, transmit, transfer or sell, reproduce, create derivative works from, distribute, perform, link, display, or in any way exploit any of the Content, in whole or in part, except as expressly permitted in these Terms or with the prior written consent of Mondaq. You may not use electronic or other means to extract details or information from the Content. Nor shall you extract information about users or Contributors in order to offer them any services or products.

In your use of the Website and/or Services you shall: comply with all applicable laws, regulations, directives and legislations which apply to your Use of the Website and/or Services in whatever country you are physically located including without limitation any and all consumer law, export control laws and regulations; provide to us true, correct and accurate information and promptly inform us in the event that any information that you have provided to us changes or becomes inaccurate; notify Mondaq immediately of any circumstances where you have reason to believe that any Intellectual Property Rights or any other rights of any third party may have been infringed; co-operate with reasonable security or other checks or requests for information made by Mondaq from time to time; and at all times be fully liable for the breach of any of these Terms by a third party using your login details to access the Website and/or Services

however, you shall not: do anything likely to impair, interfere with or damage or cause harm or distress to any persons, or the network; do anything that will infringe any Intellectual Property Rights or other rights of Mondaq or any third party; or use the Website, Services and/or Content otherwise than in accordance with these Terms; use any trade marks or service marks of Mondaq or the Contributors, or do anything which may be seen to take unfair advantage of the reputation and goodwill of Mondaq or the Contributors, or the Website, Services and/or Content.

Mondaq reserves the right, in its sole discretion, to take any action that it deems necessary and appropriate in the event it considers that there is a breach or threatened breach of the Terms.

Mondaq’s Rights and Obligations

Unless otherwise expressly set out to the contrary, nothing in these Terms shall serve to transfer from Mondaq to you, any Intellectual Property Rights owned by and/or licensed to Mondaq and all rights, title and interest in and to such Intellectual Property Rights will remain exclusively with Mondaq and/or its licensors.

Mondaq shall use its reasonable endeavours to make the Website and Services available to you at all times, but we cannot guarantee an uninterrupted and fault free service.

Mondaq reserves the right to make changes to the services and/or the Website or part thereof, from time to time, and we may add, remove, modify and/or vary any elements of features and functionalities of the Website or the services.

Mondaq also reserves the right from time to time to monitor your Use of the Website and/or services.


The Content is general information only. It is not intended to constitute legal advice or seek to be the complete and comprehensive statement of the law, nor is it intended to address your specific requirements or provide advice on which reliance should be placed. Mondaq and/or its Contributors and other suppliers make no representations about the suitability of the information contained in the Content for any purpose. All Content provided "as is" without warranty of any kind. Mondaq and/or its Contributors and other suppliers hereby exclude and disclaim all representations, warranties or guarantees with regard to the Content, including all implied warranties and conditions of merchantability, fitness for a particular purpose, title and non-infringement. To the maximum extent permitted by law, Mondaq expressly excludes all representations, warranties, obligations, and liabilities arising out of or in connection with all Content. In no event shall Mondaq and/or its respective suppliers be liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an action of contract, negligence or other tortious action, arising out of or in connection with the use of the Content or performance of Mondaq’s Services.


Mondaq may alter or amend these Terms by amending them on the Website. By continuing to Use the Services and/or the Website after such amendment, you will be deemed to have accepted any amendment to these Terms.

These Terms shall be governed by and construed in accordance with the laws of England and Wales and you irrevocably submit to the exclusive jurisdiction of the courts of England and Wales to settle any dispute which may arise out of or in connection with these Terms. If you live outside the United Kingdom, English law shall apply only to the extent that English law shall not deprive you of any legal protection accorded in accordance with the law of the place where you are habitually resident ("Local Law"). In the event English law deprives you of any legal protection which is accorded to you under Local Law, then these terms shall be governed by Local Law and any dispute or claim arising out of or in connection with these Terms shall be subject to the non-exclusive jurisdiction of the courts where you are habitually resident.

You may print and keep a copy of these Terms, which form the entire agreement between you and Mondaq and supersede any other communications or advertising in respect of the Service and/or the Website.

No delay in exercising or non-exercise by you and/or Mondaq of any of its rights under or in connection with these Terms shall operate as a waiver or release of each of your or Mondaq’s right. Rather, any such waiver or release must be specifically granted in writing signed by the party granting it.

If any part of these Terms is held unenforceable, that part shall be enforced to the maximum extent permissible so as to give effect to the intent of the parties, and the Terms shall continue in full force and effect.

Mondaq shall not incur any liability to you on account of any loss or damage resulting from any delay or failure to perform all or any part of these Terms if such delay or failure is caused, in whole or in part, by events, occurrences, or causes beyond the control of Mondaq. Such events, occurrences or causes will include, without limitation, acts of God, strikes, lockouts, server and network failure, riots, acts of war, earthquakes, fire and explosions.

By clicking Register you state you have read and agree to our Terms and Conditions