Backdoor Reference Check Legal Risks in Australia

Key Takeaways

• Unauthorized background calls often violate the Privacy Act 1988 and Australian Privacy Principles.
• Off-the-record checks can cause current employers to discover a job search, leading to tortious interference or candidate harm.
• Information gathered off-the-record can trigger unlawful discrimination or adverse action claims under Fair Work laws.
• Standardized, consent-based reference checks protect your business while giving you reliable candidate data.

Understanding Informal Reference Checking

Before looking at legal dangers, it helps to review basic recruitment terms. If you need a refresher on standard background screening steps, you can review our guide on What is a reference check.

A standard reference check happens when a candidate gives you explicit permission to contact named individuals. A backdoor check happens when you bypass this list. You might call a past manager who was not listed, contact a mutual acquaintance in your industry, or send a message to a former coworker.

Hiring managers often use these unlisted calls because they want an unfiltered view of the applicant. However, collecting information without candidate consent opens your organisation to compliance failures.

Formal Reference Checks (Safe) Backdoor Checks (High Risk)

• Written applicant consent - No applicant consent
• Specific named referees - Unlisted contact persons
• Structured, documented questions - Informal, unrecorded chats
• Clear privacy disclosure - Hidden collection of data

Candidate Consent Privacy Laws in Australia

Australia has strict laws about how businesses collect, store, and share personal data. The Privacy Act 1988 and the Australian Privacy Principles (APPs) regulate candidate personal information.

When dealing with candidate consent privacy laws, your organization must follow specific rules regarding data collection.

Collection of Personal Information (APP 3)

Under APP 3, an organization must only collect personal information that is reasonably necessary for its business functions.

More importantly, you must collect personal information directly from the individual unless it is unreasonable or impractical to do so.

• Direct Collection: When candidates give you a list of referees, they give consent for those specific individuals to share details.
• Third-Party Collection: Reaching out to an unlisted contact means you are collecting personal data from a third party without the applicant's permission.
• Proof of Necessity: In a dispute, proving it was "impractical" to ask the candidate for permission is very difficult.

Notification Requirements (APP 5)

APP 5 requires you to take reasonable steps to inform an individual when you collect their personal details. If you conduct hidden background calls, you fail to notify the candidate about:

1. The identity of the person or business collecting the data.
2. The primary purpose for collecting the information.
3. The consequences if the information is not collected.
4. How the candidate can access or correct their personal data.

Key Insight: Collecting candidate details behind their back breaks basic privacy principles. If an applicant submits a formal complaint to the Office of the Australian Information Commissioner (OAIC), your business can face financial penalties and mandatory privacy audits.

Why Unsolicited Referee Calls Create Workplace Liability

Making unsolicited referee calls creates immediate legal exposure for your recruitment team. The harm caused by informal calls is not theoretical; it can directly cause financial loss for the applicant.

1. Unsolicited Call Made
2. Current Employer Informed
3. Candidate Fired / Denied Bonus
4. Legal Claim Filed

Here are the primary workplace liabilities associated with unauthorized contact:

1. Disclosing a Job Search to a Current Employer

If you reach out to someone at a candidate's current company without permission, you expose their decision to look for a new job. This contact can lead to:

• The candidate losing their current role.
• The candidate getting passed over for internal promotions or end-of-year bonuses.
• A hostile work environment for the applicant.

If your unauthorized call leads to the candidate losing their current income, they may sue your business for financial losses.

2. Defamation and Misleading Statements

Off-the-record conversations often lack structure. Unlisted referees might share personal opinions, workplace gossip, or unverified claims.

• For the Referee: Giving false or negative feedback without official authorization can expose the referee to defamation claims.
• For the Hiring Company: Relying on unverified claims to reject a candidate leaves your business vulnerable if the information proves false.

3. Breach of Confidentiality

Candidates often share details with recruitment agencies under strict confidentiality agreements. If your internal hiring team or agency partner makes unauthorized calls, you breach that duty of confidentiality.

Risks of Back-Channel Reference Checks in Modern Recruitment

The rise of professional networks like LinkedIn has made it easier than ever to locate former managers. However, using back-channel reference checks creates hidden biases and compliance traps.

Legal Compliance

High (Follows Privacy Act 1988)

Low (Breaches APP 3 and APP 5)

Data Accuracy

High (Targeted job performance data)

Low (Often relies on personal opinion)

Candidate Experience

Positive (Transparent process)

Negative (Destroys trust)

Fair Work Risk

Low (Structured questions prevent bias)

High (Risk of adverse action claims)

Record Keeping

Auditable and clear

Poor or undocumented

Modern hiring requires clear systems across all employee types. For instance, when learning How to recruit gig workers in the new economy, transparent background screening remains just as vital as it is for permanent executive roles.

Candidate sentiment around back-door checks is overwhelmingly negative. If you look at online discussions, such as Reddit human resources discussions, candidates actively share warnings about companies that conduct unapproved calls. It harms your employer brand and deters skilled talent from applying.

Maintaining Fair Work Compliance and Avoiding Adverse Action

Under the Fair Work Act 2009, job applicants have protected rights. Making sure your recruitment process maintains Fair Work compliance is crucial to avoid general protection claims.

General Protections and Protected Attributes

The Fair Work Act makes it illegal for an employer to refuse to hire someone based on protected attributes, such as:

• Race, color, or national origin
• Sex, sexual orientation, or age
• Physical or mental disability
• Marital status or family responsibilities
• Pregnancy or parental status
• Political opinion, trade union activity, or religion

The Risk of Off-the-Record Comments

When you conduct formal reference checks, you ask standardized, job-related questions. In contrast, informal chats often lead to unlawful disclosures.

For example, an unlisted contact might casually mention:

• "She was out sick a lot last year due to health issues."
• "He had to leave early often to take care of his children."
• "She was involved in a union dispute at our firm."

If you reject an applicant after receiving this informal feedback, the candidate can claim you took adverse action based on a protected attribute.

Pro Tip: In Fair Work adverse action cases, the burden of proof rests on the employer. You must prove that unlawful reasons did not influence your hiring decision. Undocumented, informal phone calls make it almost impossible to prove your decision was unbiased.

Compliant Ways to Handle Difficult Recruitment Scenarios

Hiring teams often use backdoor checks because official referees take too long to respond, or because the applicant provided references that seem inadequate. Fortunately, you can resolve these issues without breaking privacy laws.

What to Do When Referees Do Not Respond

If you cannot reach listed contacts, do not take matters into your own hands by calling unlisted numbers. Instead, talk directly to the applicant.

To learn more about resolving communication bottlenecks legally, read our guide on How to handle unresponsive referees in hiring.

How to Request Additional References Compliantly

If you want feedback from a specific past company or manager, follow this step-by-step process:

1. Identify the Gap: Determine why you need details from a past role not listed on the resume.
2. Contact the Candidate: Explain clearly why you need a reference from that specific employer.
3. Obtain Written Consent: Ask the candidate to provide the contact details and sign an authorization form.
4. Document the Request: Store the written consent in your candidate management system before making the call.
5. Identify Data Need
6. Request Candidate Consent
7. Receive Signed Form
8. Perform Formal Reference Check

If the candidate refuses to provide consent for a specific past employer, you can ask them why. They may have a valid reason, such as a past dispute or an active non-disclosure agreement. You can then request alternative proof of performance, such as past performance reviews or tax records.

Safe Reference Checking Best Practices for HR Teams

To shield your company from legal risk, you need a structured policy for pre-employment screening. Modern HR platforms help you automate these steps to maintain total compliance.

To build a modern, secure screening workflow, check out our Ultimate guide to automated reference checks.

Follow these rules to keep your reference checks safe and legal:

1. Build a Written Policy

Establish a clear company policy that forbids staff from making unauthorized contact with third parties regarding applicants.

• Train hiring managers on privacy laws and Fair Work rules.
• Make sure external recruitment agencies adhere to your compliance standards.
• Enforce consequences for employees who conduct hidden checks.

2. Use Standardized Question Frameworks

Ensure every reference check uses a set of job-related questions. Avoid asking open-ended questions that invite personal opinions or gossip.

Focus your questions on:

• Specific job duties and technical skills.
• Dates of employment and job titles.
• Punctuality, performance achievements, and teamwork.
• Rehire eligibility based on objective company criteria.

3. Store Reference Records Securely

Keep all reference reports in a secure, confidential file. Under the Privacy Act, candidates may have the right to request access to the personal data you hold about them. Maintaining clean, objective, professional records protects your team during audits or legal inquiries.

Frequently Asked Questions

Can I search for a job applicant on LinkedIn?

Yes, reviewing public social media profiles is common practice. However, using LinkedIn to message a candidate's current colleagues or past managers without written permission creates privacy risks and can lead to legal claims.

Is it legal to contact a candidate's current employer?

Contacting a candidate's current employer without explicit written consent is extremely risky. If your contact causes the candidate to lose their job or miss out on bonuses, your business can be held liable for damages.

What happens if a candidate refuses to give a reference from a past job?

If a candidate refuses permission for a past job reference, respect their decision. Ask for the reason behind their choice, or offer safe alternatives, such as former clients, different supervisors, or written performance appraisals.

How does Righteo keep reference checking compliant?

Righteo automates candidate consent collection and reference requests. The platform ensures candidates explicitly approve all contacted referees, keeping your business compliant with Australian privacy principles and workplace regulations.

Protect Your Business with Compliant Reference Checking

Stop taking legal risks with informal background checks. Righteo helps Australian HR teams conduct secure, automated, and legal reference checks with complete candidate consent. Get started with Righteo today to make your hiring process safe, simple, and fast.