Small Business Background Checks in Ontario

Ontario is one of the most statute-dense jurisdictions in North America for pre-employment screening. A single hiring decision can engage the Police Record Checks Reform Act, 2015, the Ontario Human Rights Code, the Consumer Reporting Act, and PIPEDA — each with independent consent and notice obligations.

This guide covers what a compliant small business background check in Ontario actually includes, the statutory obligations that arise before any check begins, the compliance traps most likely to catch an owner without an HR department, and how to decide between a self-serve portal and a PSISA-licensed investigator.

What Is a Small Business Background Check in Ontario

A small-business background check in Ontario is not a single product — it is a sequenced program: a criminal record check under the Police Record Checks Reform Act, 2015 (PRCRA); possibly a credit or consumer report under the Consumer Reporting Act; and optional identity, credential, and reference verification that a licensed investigator may conduct under the Private Security and Investigative Services Act, 2005 (PSISA).

Each component has its own consent trigger, its own disclosure rule, and its own human rights constraint under the Ontario Human Rights Code, R.S.O. 1990, c. H.19.

It does not include a full criminal-intelligence file, sealed youth records, or private financial statements held by a bank or government; accessing those records requires court process or statutory authority beyond what a pre-employment screening program provides.

In Ontario, a pre-employment background check is governed by a cluster of statutes rather than a single law. The PRCRA defines three tiers of police record check — a standard criminal record check, a criminal record and judicial matters check, and a vulnerable sector check — and requires the subject’s written consent before any tier is ordered and again before results are disclosed to an employer. A small-business owner who orders all three tiers without role-justified reason exposes the business to a human rights complaint under the Ontario Human Rights Code.

What Ontario Law Requires Before Any Check Begins

Four separate statutory obligations arise before a first check can lawfully be ordered, and each is independent.

Under the Ontario Human Rights Code, R.S.O. 1990, c. H.19, ss. 5(1) and 10(1), employers may not discriminate in hiring on the basis of a “record of offences,” which the Code defines narrowly: an offence under a provincial enactment, or an offence for which a pardon has been granted and not revoked. Unpardoned Criminal Code convictions fall outside the ground and may be weighed for genuine, job-related risk. The Ontario Human Rights Commission’s guidance cautions against relying on non-conviction information, such as withdrawn or never-proven charges, because doing so can have a discriminatory effect.

The timing obligation is equally specific. The OHRC’s Human Rights at Work guidance requires that a criminal record check be requested only after an employer has decided to offer the position, conditional on a satisfactory result — not during the initial application or interview stage. Requesting a check early in the process, before a conditional offer is made, can constitute discriminatory pre-screening under the Code if the check result then influences a decision that would have applied equally to a candidate without a record.

Under the PRCRA, Section 9, a police record check provider may not conduct a check unless the subject has provided written consent specifying which tier of check is being ordered. The consent process is two-stage: the individual first consents to the check being conducted, then — after the provider receives the results and discloses them to the individual for review — the individual must give a second written consent before the results are disclosed to the requesting employer. An employer who bypasses this two-stage process and obtains or uses results without the individual’s secondary consent violates the Act.

An Ontario employer who orders a consumer report on a prospective employee must also provide written notice to the applicant before doing so, under the Consumer Reporting Act, R.S.O. 1990, c. C.33, s. 10. The notice must be set out in bold type no smaller than ten-point size. Obtaining a consumer report without this advance written notice is a violation of the Act.

Finally, PIPEDA (Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5) governs the consumer reporting agencies and screening providers an employer engages — they act in the course of commercial activity and are directly subject to PIPEDA’s consent principles. Section 7.3 of PIPEDA permits a federally-regulated employer to collect employee information without separate consent only where the collection is necessary to establish the employment relationship and the individual has been informed. As a baseline, any Ontario employer running background checks should obtain written consent that specifies the purposes for which information will be collected, used, and disclosed.

What a Small Business Background Check in Ontario Actually Covers

A standard pre-employment background check for an Ontario small business typically includes some combination of:

• Police record check: one of three PRCRA tiers, matched to the role’s level of risk, ordered only after a conditional offer has been extended
• Consumer report: a credit check for roles involving financial responsibility, with the Consumer Reporting Act written notice provided in advance
• Identity verification: cross-referencing government-issued documents against the applicant’s stated identity
• Credential and employment-history verification: when it involves active investigation rather than a simple reference call, this is regulated as “investigative services” under the PSISA, s. 1 (definition) and s. 6 (licence requirement)

The last category is the one most commonly under-resourced by small businesses that rely solely on self-serve online screening portals. A portal can retrieve a police record check; it typically cannot send an investigator to verify employment tenure directly with a prior employer or confirm a professional licence against a regulatory body’s register.

For a general explanation of how PRCRA tiers work and what a licensed PI can verify beyond a standard police check, see our related guide on pre-employment background checks in Ontario.

Calibrating Your Checks to Role Risk: A Small-Business Owner’s Framework

Check depth must be proportionate to the role. The Ontario Human Rights Code, ss. 5(1) and 10(1), prohibits an employer from requiring a vulnerable sector check for a role that does not involve work with children or persons with disabilities — the check discloses non-conviction information, including mental health-related police contacts, whose use can constitute Code-prohibited discrimination. The principle: match the check tier and scope to genuine, articulable job requirements.

HireRight’s 2025 Global Benchmark Report found that more than 75% of employers worldwide caught at least one candidate discrepancy during background screening in the prior year — a figure that reflects the gap between what applicants claim and what verification uncovers. For a small-business owner calibrating check depth to role risk, this benchmark supports the value of credential and employment-history verification beyond the police record check alone. For the full cross-survey compilation of resume misrepresentation data, see our research on resume lie statistics.

The Compliance Traps That Catch Ontario Small-Business Owners Without HR

Without dedicated HR counsel, Ontario small-business owners routinely encounter four compliance gaps:

• Requesting a criminal record check before making a conditional offer: this timing violation runs counter to OHRC guidance implementing the Ontario Human Rights Code and can constitute discriminatory pre-screening if the result influences a hiring decision
• Using a police record check result without providing the applicant the opportunity to review and consent to disclosure: a violation of PRCRA s. 9’s two-stage consent rule
• Obtaining a credit check on a prospective employee without providing the required bold-type written notice first: a violation of the Consumer Reporting Act, R.S.O. 1990, c. C.33, s. 10
• Using a screening service that has no PSISA-licensed investigator in the chain for the verification components: a potential unlicensed-investigative-services issue under PSISA 2005, s. 6

In Canada, 35% of companies use at least one employee monitoring application, according to a 2022 Capterra survey — and employers who invest in pre-hire verification tend to rely less heavily on post-hire surveillance. A small-business owner who builds a documented screening program upfront reduces the monitoring burden that follows onboarding. For the full data on post-hire surveillance adoption in Canada, see our research on employee monitoring statistics.

How to Build a Proportionate Screening Program for Your Small Business

Building a compliant written screening policy requires at minimum five documented elements:

1. Stated purpose: record the specific reason for each check type, linked to the relevant job requirements — this is the foundation of both OHRC proportionality and PIPEDA’s purpose-limitation principle
2. PRCRA consent form: specifies which tier is being ordered and obtains the applicant’s written agreement in advance, meeting the two-stage disclosure requirement under s. 9
3. Conditional offer letter: issued before any check is requested, confirming that the offer is contingent on a satisfactory background check result
4. Consumer report notice: a separate written notice to the prospective employee before any credit check is ordered, meeting the Consumer Reporting Act s. 10 formatting requirements (bold type, minimum ten-point size)
5. Retention and destruction policy: documents how collected personal information will be used, retained, and destroyed, consistent with PIPEDA Schedule 1, Principles 4.5 (retention) and 4.7 (safeguards)

The policy should be reviewed any time the PRCRA regulations or OHRC guidance are amended. Getting any one of these steps out of sequence — or omitting it — creates legal exposure that an owner without HR or in-house counsel is unlikely to catch until a complaint is filed.

When to Use a Licensed PI Instead of a Self-Serve Screening Agency

Under Section 6 of Ontario’s Private Security and Investigative Services Act, 2005, no person may act as a private investigator — including conducting investigative work such as verifying an applicant’s employment history, confirming credentials, or conducting discreet reference inquiries beyond a standard phone call — unless that person holds a valid PSISA licence issued by the Ministry of the Solicitor General. A self-serve online screening platform that subcontracts verification tasks to an unlicensed person in Ontario is performing unlicensed investigative services. The penalty under Section 45(1) of the Act is a fine of up to $25,000 and/or up to one year’s imprisonment for an individual, and up to $250,000 for a corporation.

As PSISA-licensed investigators operating in Ontario, Discreet Investigations conducts pre-employment background investigations that go beyond what a self-serve portal can provide: verifying employment tenure and job titles directly with past employers, confirming professional licences against regulatory body records, and identifying discrepancies between an applicant’s stated history and the documentary record. Written reports are formatted for review by the requesting employer’s legal or HR counsel. For small-business clients without dedicated HR, the engagement also covers screening policy design — ensuring consent forms, conditional-offer sequencing, and record-retention practices comply with the PRCRA, OHRC guidance, and PIPEDA, as administered by the Office of the Privacy Commissioner of Canada.

What This Means for Your Next Hire

For an Ontario small-business owner, a compliant pre-employment screening program requires integrating obligations from at least four statutes before the first check is ordered: issue a conditional offer first (Ontario Human Rights Code); obtain specific written consent for the PRCRA tier being ordered (PRCRA s. 9); provide bold-type written notice if a credit check will be ordered (Consumer Reporting Act s. 10); and document how the collected personal information will be used, retained, and destroyed (PIPEDA). Getting any one of these steps out of sequence — or omitting it — creates legal exposure that a small-business owner without HR or in-house legal counsel is unlikely to catch until a complaint is filed.

At Discreet Investigations, small-business owners retain us when they need more than a portal can offer: a PSISA-licensed investigator who verifies what an applicant claims, produces a written report formatted for review, and helps the owner understand how to structure the consent and conditional-offer workflow before a single check is ordered. We operate across the Greater Toronto Area and serve clients in Hamilton, Ottawa, and surrounding Ontario communities. Contact us at +1 (888) 680-0036 or through our pre-employment screening service page.

Licensed · Insured · Bonded.