Key Takeaways
- Workforce due diligence can help identify screening gaps alongside financial and operational risks.
- Different screening standards don’t automatically justify repeating every employee’s checks.
- Prioritise changed responsibilities, sensitive access, financial authority, professional licensing, and work rights.
- Map existing evidence before commissioning additional workforce screening.
- Use consistent criteria, clear communication, and appropriate privacy and consent processes to support employee trust.
When an organisation acquires or merges with another business, it inherits more than customers, systems and intellectual property. It may also take responsibility for a workforce recruited under different screening policies, employment practices, and record-keeping standards.
Some employees may gain access to sensitive information, increased financial authority, or responsibilities their previous checks did not cover. Others may continue in unchanged roles with appropriate screening records already available.
For employers considering employee screening, mergers and acquisitions provide an opportunity to review whether existing information supports the workforce’s future responsibilities. However, that doesn’t mean automatically screening everyone again.
A proportionate approach starts with understanding the roles, assessing available evidence, and identifying material gaps. It can help support integration while respecting the experience and contribution of established employees.
What workforce risks can emerge during a merger or acquisition?
Merger and acquisition (M&A) due diligence commonly examines financial performance, contracts, and operational liabilities. Workforce screening adds another question: What evidence supports the credentials, permissions and eligibility of people who will perform important functions after completion of the merger or acquisition?
Relevant information may include professional qualifications, licences, work rights, and role-specific screening. Contractors and temporary workers also warrant consideration when they access systems, handle sensitive information, or perform regulated work.
The transaction itself may change the risk profile. An employee who previously managed a local customer database might receive access to records across the combined business. A finance officer could gain authority to approve larger payments.
Workforce risk can also emerge from incomplete information. A spreadsheet marked “checked” may not identify what was verified, when it happened, or which role the check supported.
Before completion, access to individual records requires particular care. Australia’s Office of the Australian Information Commissioner (OAIC) recommends considering de-identified information during business-sale due diligence and limiting disclosure of personal information. An initial review can therefore assess policies and aggregated screening coverage without circulating employees’ full reports.
Why can screening standards differ between organisations?
Different checks and screening policies
Two businesses can conduct employee background screening but use different combinations of checks.
One might verify qualifications and employment history for designated roles. Another might focus on criminal history checks or professional registration. Their policies may also differ on contractors, internal transfers, and ongoing reviews.
Additionally, definitions of higher-risk work can vary. A position treated as routine in one organisation may carry greater responsibility within the combined business.
Integration leaders should compare each policy’s purpose and scope before deciding whether differences represent meaningful gaps. A different screening package isn’t automatically an inadequate one. The question is whether existing checks remain appropriate for the person’s responsibilities and applicable requirements.
Different providers and record-keeping practices
Screening providers, reporting formats, and storage arrangements may also differ. Records might sit across HR systems, provider portals, local spreadsheets, and paper files. A completion date alone may not explain the check’s coverage, source, or outcome. Equally, an unavailable report does not establish that screening did not occur.
A useful review distinguishes between checks that weren’t performed, checks that cannot yet be evidenced, and checks that no longer address the role’s requirements. That distinction can help prevent unnecessary duplication.
Which roles may require closer review?
Sensitive systems access
Review roles with privileged access to systems, confidential records, or commercially sensitive information. Consider what each person can view, change, download, or authorise after integration.
For example, an IT administrator moving from a standalone business into a shared environment may gain access to substantially more infrastructure. That change may justify reviewing role-relevant screening alongside access permissions.
Screening is one part of the response. Access controls, approval processes, and security training also help address the risks associated with expanded responsibilities.
Financial authority and regulated roles
Employees who approve payments, manage investments, or exercise significant financial authority may warrant closer review when their responsibilities change. However, the appropriate checks depend on the role, jurisdiction, and applicable requirements. Financial responsibility does not automatically justify every available financial or criminal history check.
New Zealand’s privacy regulator, for example, advises that recruitment checks should be undertaken only when a role carries significant financial risk. Consent alone does not replace the need for a relevant purpose.
Roles involving children, vulnerable people, or regulated services might require specific clearances. Employers should assess the relevant scheme rather than assume a general background check covers those requirements.
Professional licences and work rights
A qualification confirms an educational achievement; it does not necessarily establish current permission to practise. Review relevant registration status, licence conditions, and renewal dates.
For Australian health practitioners, the Australian Health Practitioner Regulation Agency’s (Ahpra) public register provides current registration information. Other professions and New Zealand roles require checks with the relevant authority.
Work rights also deserve attention when visa conditions, expiry dates, or employer arrangements could affect the intended role. Australia’s VEVO and New Zealand’s VisaView allow eligible employers to check visa information with the holder’s permission. A transaction involving a change of employing entity might also call for specialist immigration advice.
How can organisations build a proportionate integration process?
Map existing screening information
Begin with a controlled inventory linking people, roles, and available screening evidence. Include relevant contractors and temporary staff, and identify which organisation is responsible for their screening.
For each role, record:
- Current and planned responsibilities;
- Required credentials, licences, or clearances;
- Checks completed, along with their dates and scope;
- Where supporting evidence is held; and,
- Relevant renewal dates and unresolved questions.
Keep access limited to people who need the information. A central status register may support integration planning without giving every project participant access to sensitive reports.
For larger workforces, reviewing groups of comparable roles can make the process more manageable. First Advantage’s enterprise screening solutions provide a relevant starting point for organisations assessing screening across multiple business units.
Identify material gaps
Compare available evidence with the requirements of the future role. Prioritise gaps that could affect eligibility, regulated responsibilities, or access to important systems.
An expired professional registration may need prompt attention. A missing copy of an old qualification verification might first require a search of the previous provider’s records.
Document the reason each gap matters. This helps distinguish operational priorities from administrative inconsistencies and gives decision-makers a clearer basis for action.
Consider a hypothetical acquisition in which an accounts employee gains payment approval authority. Existing screening may have been suitable for their former duties but might not address the new responsibilities. Reviewing that specific change is more proportionate than repeating the same checks for every employee in the acquired business.
Determining which checks may need to be completed or refreshed
Choose additional checks according to the gap identified. These might include confirming a required qualification, checking current licence status, or verifying work rights.
Criminal history checks could be relevant for some roles where lawful and appropriate. The Australian Criminal Intelligence Commission describes a nationally coordinated criminal history check as a point-in-time check; it reflects records when the result is released. Its age and original purpose therefore matter when assessing suitability for a different role.
Before requesting further checks, review the applicable employment arrangements, privacy requirements, and consent process. Assign responsibility, set realistic timeframes, and record the outcome or rationale for taking no further action.
First Advantage’s background screening services include checks that organisations can consider when developing a role-relevant approach. Its workforce risk resource on critical infrastructure also discusses personnel risk and ongoing screening in that specific context.
How can employers maintain employee trust during organisational change?
Employees may already be navigating uncertainty about reporting lines, systems, and their future roles. An unexplained request for personal information can add to that uncertainty.
Explain why the review is happening, which roles it covers, and how the information relates to the combined organisation’s responsibilities. Make clear that a missing record is an information gap rather than evidence of employee wrongdoing.
Apply consistent criteria to comparable roles across both organisations. Asking acquired employees to complete checks while overlooking equivalent gaps in the acquiring business can undermine confidence in the process.
Privacy arrangements also need careful review. Integration plans covering Australia and New Zealand should account for the different privacy frameworks in each country.
Tell employees what information is requested, who will receive it, and how it will be protected. Obtain consent where required, and avoid assuming that an earlier authorisation covers a new check or purpose.
Provide a contact for questions and an opportunity to clarify discrepancies before decisions are made. A relevant finding requires assessment in context rather than an automatic conclusion about suitability.
A merger or acquisition provides an opportunity to establish a coherent screening approach for the combined workforce. Clear ownership of records and future review triggers can help sustain that approach beyond the integration period.
Frequently asked questions
What should employers verify after a merger or acquisition?
Employers should review role-relevant screening records, required qualifications, professional licences, work rights, and responsibilities. The review should consider both the information already available and any changes to duties, access, or regulatory requirements following the transaction.
Should employees be rescreened after an acquisition?
Not automatically. Background checks after acquisition should respond to identified gaps, changed responsibilities, or applicable requirements. Existing evidence may be sufficient for employees whose roles remain unchanged. Any further screening should have a clear, lawful and proportionate purpose.
How can organisations identify gaps in inherited screening records?
Create an inventory showing which checks were completed, when, for what purpose, and where evidence is stored. Compare it with current role requirements. Distinguish missing documentation from checks that were not performed before deciding what additional verification is needed.
How can employers apply a consistent screening approach after an acquisition?
Define screening criteria for comparable roles across the combined business. Document exceptions, assign responsibility, and communicate the process to employees. Consistent employee due diligence means applying the same decision framework while allowing for different duties, jurisdictions, and available evidence.
Sources
- Office of the Australian Information Commissioner. “Selling a Business.” Office of the Australian Information Commissioner. Accessed Oct. 8, 2026.
- Office of the Australian Information Commissioner. “Employee Records Exemption.” Office of the Australian Information Commissioner. Accessed Oct. 8, 2026.
- Office of the Privacy Commissioner, New Zealand. “” Office of the Privacy Commissioner, New Zealand. Accessed Oct. 8, 2026.
- Office of the Privacy Commissioner, New Zealand. “Case Note 298263 [2019] NZPrivCmr 8: Employer Conducted Unwarranted Credit Check on Job Applicant.” Office of the Privacy Commissioner, New Zealand. Accessed Oct. 8, 2026.
- Australian Health Practitioner Regulation Agency. “Tips for Using the Public Register.” Australian Health Practitioner Regulation Agency. Accessed Oct. 8, 2026.
- Department of Home Affairs, Australia. “Check Visa Conditions Online (VEVO).” Department of Home Affairs. Accessed Oct. 8, 2026.
- Immigration New Zealand. “VisaView for Employers.” Immigration New Zealand. Accessed Oct. 8, 2026.
- Australian Criminal Intelligence Commission. “Nationally Coordinated Criminal History Check Validity.” Australian Criminal Intelligence Commission. Accessed Oct. 8, 2026.
- First Advantage. “Background Checks.” First Advantage Australia. Accessed Oct. 8, 2026.
- First Advantage. “Enterprise Organisations.” First Advantage Australia. Accessed Oct. 8, 2026.
- First Advantage. “Security of Critical Infrastructure (SOCI) Act 2018 Overview.” First Advantage Australia. Accessed Oct. 8, 2026.
