Background Check Laws by Province in Canada [2026]

Canada has no single statute that governs employment background checks coast to coast. The federal baseline (the Criminal Records Act, RSC 1985, c C-47 and PIPEDA, SC 2000, c 5) applies in most provinces. BC, Alberta, and Quebec each operate under their own substantially-similar privacy Acts. Provincial Human Rights Codes then determine whether criminal record is a protected ground in employment. The rules vary sharply depending on where you hire.

What is a background check under Canadian law?

Under Canadian law, an employment background check is the consent-based collection, use, and disclosure of an individual’s personal information by or on behalf of an employer. PIPEDA, SC 2000, c 5, Schedule 1, Principle 4.3 requires that the knowledge and consent of the individual are required for the collection, use, or disclosure of personal information, except where inappropriate. For most private-sector employers across Canada, that consent requirement is the legal foundation of every background check.

A background check may include:

• A police record check through the RCMP’s Canadian Criminal Real Time Identification Services (CCRTIS) or a local police database
• Reference checks and employment history verification
• Credential and education verification
• Credit history checks (for financially sensitive roles)
• Social media and open-source searches

PIPEDA, SC 2000, c 5, s 4(1)(a) limits the Act’s application to information collected in the course of commercial activities. Section 5(3) requires that collection be limited to purposes a reasonable person would consider appropriate in the circumstances. The Office of the Privacy Commissioner confirms that consent is only valid when the individual “would understand the nature, purpose and consequences” of the collection, per PIPEDA s 6.1.

For employers in BC, Alberta, and Quebec, consent requirements flow from each province’s own privacy Act rather than PIPEDA. BC’s Personal Information Protection Act, SBC 2003, c 63, Alberta’s Personal Information Protection Act, SA 2003, c P-6.5, and Quebec’s Act respecting the protection of personal information in the private sector, CQLR c P-39.1 each displace PIPEDA for intra-provincial commercial activity. The OPC confirms that organizations subject to a substantially-similar provincial law “are generally exempt from PIPEDA with respect to the collection, use or disclosure of personal information that occurs within that province.”

The three RCMP check levels: what each discloses

The RCMP’s Canadian Criminal Real Time Identification Service (CCRTIS) issues fingerprint-based certified criminal record checks in three levels for civilian employment purposes, per RCMP 2024:

1. Criminal Record Check (CRC). Searches for criminal convictions and outstanding charges held in the national CPIC database. This is the standard level for most employment applications.

2. Criminal Record and Judicial Matters Check (CRJMC). Adds absolute and conditional discharges, outstanding charges, arrest warrants, and certain judicial orders to the base CRC search. Appropriate when the role carries greater financial or reputational risk.

3. Vulnerable Sector Check (VSC). Includes everything in the CRJMC plus findings of not criminally responsible by reason of mental disorder. The VSC also searches for record suspensions granted for sexual offences — information that ordinarily cannot be disclosed in any other check. The Criminal Records Act, RSC 1985, c C-47 restricts the VSC to positions involving trust over children under 18 or vulnerable adults. Requesting a VSC for a position that does not meet those requirements is a criminal offence. The hiring organization, not the individual, must initiate the VSC request, and the individual must provide written consent. (RCMP 2024)

Name-based police record checks conducted by local police services are distinct from RCMP-certified fingerprint-based checks. Fingerprint-based checks route through CCRTIS in Ottawa and produce a certified result. Name-based checks rely on self-reported identifying information and may miss records held under different name spellings or in other jurisdictions. The RCMP states that “fingerprints are the most accurate way to confirm a person’s identity” in a criminal record check.

The federal baseline: Criminal Records Act, PIPEDA, and consent rules

The Criminal Records Act, RSC 1985, c C-47, s 4 sets two waiting periods before an individual may apply for a record suspension. The wait is five years after completion of sentence for a summary conviction offence, and ten years for an indictable offence. These waiting periods begin only after the full sentence — including imprisonment, probation, fines, and restitution — is completed.

Once the Parole Board of Canada grants a record suspension under s 2.3, the conviction “should no longer reflect adversely on the applicant’s character.” The record is kept separate from the RCMP’s CPIC database and will not appear on most employment or civilian background checks. The record is not erased: it remains accessible to the Parole Board and, in limited circumstances, to police, but it is sealed from routine employer searches.

PIPEDA, SC 2000, c 5, s 5(1) applies to private-sector organizations collecting personal information in the course of commercial activities, and to employee information for federally regulated employers. Every organization must comply with Schedule 1’s consent obligations. The OPC’s 2012 finding in Report of Findings #2012-007 established that “general statements regarding how the information supplied is to be used are overly broad and not sufficient to obtain consent to collect personal information from a third party.” Broad authorization language in an employment application form does not satisfy PIPEDA’s meaningful-consent standard.

Bill C-27, which would have replaced PIPEDA with the Consumer Privacy Protection Act, died on the Order Paper in January 2025 when Parliament prorogued. Per Parliament of Canada LEGISinfo, the 44th Parliament session ended before the bill received Royal Assent. PIPEDA remains the operative federal private-sector privacy statute as of June 2026.

BC, Alberta, and Quebec: where provincial privacy law overrides PIPEDA

Three provinces have been declared to have legislation substantially similar to PIPEDA — meaning PIPEDA is displaced for intra-provincial private-sector activity in each of them.

• British Columbia. BC PIPA, SBC 2003, c 63 applies to all private-sector employers operating within BC, other than federally regulated businesses. The BC PIPA consent framework is equivalent to PIPEDA’s Principle 4.3. The OPC confirms that BC PIPA employers “are generally exempt from PIPEDA with respect to the collection, use or disclosure of personal information that occurs within that province.”

• Alberta. AB PIPA, SA 2003, c P-6.5 applies to all Alberta private-sector employers and defines “personal employee information” as information reasonably required to establish, manage, or terminate an employment relationship. Alberta’s Information and Privacy Commissioner has binding order-making power — a stronger enforcement mechanism than the federal OPC, which issues recommendations only.

• Quebec. The Act respecting the protection of personal information in the private sector, CQLR c P-39.1 was significantly modernized by Law 25, which received Royal Assent on September 22, 2021. The final tranche of obligations took effect September 22, 2024. Law 25 requires express consent for sensitive personal information and imposes a mandatory privacy impact assessment before any cross-border disclosure — requirements that exceed PIPEDA’s baseline.

PIPEDA still applies in all three provinces for cross-border data transfers. When a BC organization discloses personal information outside the province, PIPEDA applies to that specific transaction. Federally regulated businesses (banks, airlines, telecommunications companies, and interprovincial railways) remain subject to PIPEDA in all provinces regardless of substantially-similar designations.

Background check rules by province: a comparison table

Sources: provincial statutes and CanLII entries cited inline; OPC substantially-similar determinations 2023; OHRC 2024.

Human Rights Code limits on asking about criminal records

The federal Canadian Human Rights Act, RSC 1985, c H-6, s 3(1) does not list criminal record as a standalone prohibited ground. The only criminal-history protection under the CHRA is “conviction for an offence for which a pardon has been granted or in respect of which a record suspension has been ordered.” Federally regulated employers (banks, airlines, and telecommunications companies) cannot discriminate against applicants whose convictions have been suspended, but can consider other criminal convictions.

Ontario’s protection operates differently. The Human Rights Code, RSO 1990, c H-19, s 10(1), defines “record of offences” as covering pardoned federal convictions and any provincial enactment conviction. The OHRC confirms that employment decisions cannot be based on a pardoned federal conviction or a conviction under a provincial law. Unpardoned federal convictions fall outside the Ontario protection, unlike BC’s or Quebec’s broader statutory grounds.

Quebec’s Charter of Human Rights and Freedoms, CQLR c C-12, s 18.2 goes furthest: “No one may dismiss, refuse to hire or otherwise penalize a person in his employment owing to the mere fact that he was convicted of a penal or criminal offence, if the offence was in no way connected with the employment or if the person has obtained a pardon for the offence.” This covers all unrelated convictions, pardoned or not.

The OHRC’s employment guidance states that background checks “should be the last step in a recruitment process” and should be requested only after a conditional offer has been made. When an employer considers declining a candidate based on a criminal record, it must show the offence “would have a real effect on the person’s ability to do the job and risk associated with them doing it.” Blanket policies refusing all applicants with any criminal record violate the Human Rights Code in Ontario, BC, Quebec, PEI, NL, and the territories. The OHRC also notes that requiring background checks disproportionately affects racialized persons and those with mental illness, due to discriminatory policing practices.

Ontario’s Police Record Checks Reform Act, 2015: what changed

Ontario’s Police Record Checks Reform Act, 2015, SO 2015, c 30 came into force on November 1, 2018, after a three-year delay. The Act standardized three check types across all Ontario police services: a Criminal Record Check (disclosing applicable convictions); a Criminal Record and Judicial Matters Check (adding discharges, outstanding charges, and arrest warrants); and a Vulnerable Sector Check (adding findings of not criminally responsible on account of mental disorder and record suspensions for sex offences). Before the PRCRA, Ontario police services disclosed inconsistent information, including non-conviction data, across different check requests.

The PRCRA’s central reform is the bar on non-conviction disclosure. Before the Act, some police services disclosed mental-health crisis contacts, witness statements, and other non-criminal interactions in background checks. Under SO 2015, c 30, this information cannot be disclosed in a standard criminal record check or judicial matters check. It may appear only in a Vulnerable Sector Check and only in narrowly defined circumstances. The Government of Ontario confirms that information cannot be disclosed “regarding whether someone was a victim or witness or had non-criminal mental health contact with police.”

The PRCRA also establishes a mandatory consent model. Employers and organizations “cannot request a police record check for an individual without their knowledge and consent.” Under SO 2015, c 30, the individual receives the results first — directly from the police service — before any result is disclosed to the requesting organization. The individual can then verify accuracy before the employer sees the result. Youth criminal records “should not be shared with anybody else, including a potential employer,” per Ontario government guidance.

For tenant screening in Ontario, the companion post on tenant screening laws by province covers how the same PRCRA check-type framework applies outside the employment context.

What employers can and cannot do: consent, adverse action, and disclosure limits

Across Canada, the consent obligations for background checks flow from PIPEDA or the applicable provincial privacy Act. Employers must:

• Inform the applicant in advance what information will be collected and why
• Obtain written consent before initiating the check
• Limit collection to information relevant to the position
• Store results securely and discard them when no longer needed

Per PIPEDA, SC 2000, c 5, Schedule 1, Principle 4.3, broad authorization language — such as “I agree that my information may be verified” — is not sufficient. The OPC’s meaningful-consent standard requires specificity about what is being collected, for what purpose, and how it will be used.

When a background check reveals adverse information, the employer cannot automatically refuse to hire. In provinces where criminal record is a protected ground, a bona fide job-nexus analysis is required. The OHRC requires the employer to show the record “would have a real effect on the person’s ability to do the job and risk associated with them doing it.” Blanket policies are unlawful under the Human Rights Codes of Ontario, BC, Quebec, PEI, and NL.

For positions involving children or vulnerable persons, the employer must request a Vulnerable Sector Check. Under the Criminal Records Act, RSC 1985, c C-47 and Ontario’s PRCRA, a VSC is the only check that surfaces record suspensions for sexual offences. Requesting a VSC for a position that does not involve vulnerable persons is an offence under the Criminal Records Act. For employers navigating the recording laws by province alongside background checks, the intersecting consent-and-disclosure framework is covered in depth in that post.

Pre-employment screening conducted by a licensed agency is subject to the same consent rules. Licensed practitioners access broader database sources than individual employers can reach, but cannot circumvent PIPEDA’s or a provincial Act’s consent obligations. For employers seeking professional background-check support, pre-employment screening services are bound by the same statutory framework described in this article. The broader range of employer-facing legal topics sits within the workplace research hub.

What this means if you are conducting or receiving a background check

For individuals subject to a check: the Criminal Records Act, RSC 1985, c C-47, s 2.3 provides the record suspension mechanism. A granted suspension seals the conviction from most civilian and employment searches. Five years after completing a summary conviction sentence, or ten years after an indictable sentence, an individual may apply to the Parole Board of Canada. Once granted, the suspension means the conviction “should no longer reflect adversely on the applicant’s character” and will not appear in CPIC-based employment checks.

For employers and investigators conducting checks: consent is not merely best practice — it is a statutory requirement under PIPEDA or the applicable provincial privacy Act. A joint investigation by the Office of the Privacy Commissioner of Canada, BC’s OIPC, and Alberta’s OIPC into Certn (Canada) Inc. was launched June 4, 2024. The probe focuses on whether the commercial background-check company obtained proper consent and used accurate data in tenant screening. As of June 2026, no final determination has been published; the investigation is ongoing. The cross-jurisdictional probe signals active regulatory attention to how commercial background-check services handle consent obligations.

As licensed PIs, we conduct background checks as agents of the organizations that retain us. The same consent rules that bind employers bind us. We access sources and databases beyond what individual employers can reach, but cannot circumvent the consent obligations under PIPEDA or a provincial privacy Act. Any personal information obtained must be used only for the purpose for which the subject consented — no exceptions.

This article provides general legal information, not legal advice. Canadian law varies by jurisdiction and changes over time. For advice specific to your situation, consult a lawyer licensed to practise in your province.