Yes. If you're screening a current employee for a promotion, the same federal rules that cover a brand-new applicant apply to them too. That surprises a lot of HR teams. It shouldn't.
A lot of employers assume that once someone's already on payroll, background check law doesn't touch them anymore. That's not how the Fair Credit Reporting Act, the federal law behind almost every background check, actually works. Let's get into why.
The logic usually goes something like this. "We already ran a check when we hired her three years ago. She's proven herself. Why would we need paperwork again just because she's moving up?"
Here's the problem with that. FCRA doesn't attach to the person, it attaches to the report. Every time you, or a company acting on your behalf, pulls a new consumer report on someone for an employment purpose, the obligations reset. A promotion decision that involves a fresh criminal search, a new credit pull, or a new driving record check counts the same as hiring a stranger off the street.
So to say that a different way: it's not about how long someone's worked for you. It's about whether a new report gets pulled.
Before you can run that check, three things need to be in place. Written authorization from the employee. A clear disclosure telling them exactly what you're doing. And a permissible purpose, meaning a real reason tied to the job they're moving into.
That part's not optional, no matter how long the person's worked for you.
Here's where a lot of employers trip up on current employees specifically. FCRA requires the disclosure to live in its own document. Not folded into the employee handbook. Not tacked onto a performance review packet. Not buried in the fine print of a promotion offer letter.
I've seen HR teams try to save a step by adding a line to the internal transfer paperwork the employee already has to sign. That doesn't satisfy the requirement. The disclosure has to be its own document, clear and about the background check, and nothing else.
It's an easy mistake to make. It's also an easy one to get sued over.
Not always, legally. Whether you re-screen for a promotion is usually your own company's policy choice, not a federal mandate, unless the new role brings its own legal requirement. A driving job needs a motor vehicle record. A job handling company funds might trigger a credit check, where that's still legal in your state. A licensed role needs the license verified.
If the new role doesn't change what the job actually touches, plenty of employers skip re-screening and rely on the original check plus real job performance. That's a reasonable call. Just make it on purpose, not by accident, and write it into your policy so it applies the same way to every employee, not just some.
One more wrinkle worth flagging. Regulators, including the CFPB, have raised concerns in recent years about background screening tools that use algorithmic or AI-driven scoring, including on internal candidates, warning that these tools can trigger the same FCRA obligations as a traditional report, sometimes without the employer realizing it.
I'm hedging the specifics here on purpose. Guidance in this area keeps moving, and I'd rather send you to check it yourself than hand you a stale citation. If your provider uses any kind of automated scoring or risk rating on current employees, ask them directly how that interacts with FCRA disclosure and adverse action rules before you rely on it.
A handful of states add their own layer on top of FCRA, sometimes with extra notice requirements, sometimes with limits on which checks you can run on an existing employee at all. I'm not going to hand you a state-by-state list here. That list changes more often than people expect, and a wrong one is worse than none. Confirm the current rule with a lawyer or your background check provider's compliance team before you screen someone for a promotion, not after.
The short version. A promotion doesn't mean exemption. Treat an internal candidate's paperwork with the same care you'd give someone walking in off the street, and you won't have a problem.