When a company acquires another company, it acquires more than assets and revenue. It acquires people, and it inherits the risk those people carry: undisclosed litigation, regulatory bars, credential gaps, and conduct history the target never surfaced during diligence. Background screening helps a buyer see that risk before close, but the Fair Credit Reporting Act treats consent as an individual matter, not a bulk one, so an acquirer cannot simply screen an entire target workforce the way it screens its own applicants.
Here is how screening fits into an acquisition: leadership checks during diligence, the consent problem limiting what an acquirer can do before close, what changes after close, and which industries treat re-screening as a legal obligation rather than an integration choice.
Why people risk is deal risk
Diligence teams spend weeks on financial statements, contracts, and entity-level litigation exposure, while the people running the target company get far less structured scrutiny, even though a misrepresented credential or an undisclosed regulatory bar can affect valuation and post close liability just as directly as a contract problem can. Screening is one input for the deal team and its counsel, not a substitute for legal, financial, or operational diligence, and it produces information for individualized human review rather than a verdict on whether to proceed.
Leadership and key person screening during diligence
The names that come up most in diligence-stage screening are founders, executives, board members, and any key employee named as material to the deal. For this group, buyers typically want to verify claimed credentials, meaning education and professional license or certification verification, the same way they would for any management-level hire. They also look at litigation history through civil and criminal court record research, which is public record work rather than a consumer report, a distinction that matters for the consent question below.
Sanctions and watchlist screening rounds out the picture, and becomes non-negotiable when the target operates in healthcare or another sector where employing an excluded or sanctioned individual carries its own penalty exposure. Confirming that any regulatory license or authorization a key person needs is current and unencumbered is part of confirming the deal thesis holds. None of this replaces individualized assessment: EEOC guidance on arrest and conviction records is clear that a criminal record cannot serve as an automatic disqualifier, and has to be weighed against the offense, the time elapsed, and its relationship to the role.1
The consent problem: what an acquirer can and cannot do
This is the part of M&A screening most often misunderstood. An acquirer cannot simply run consumer reports on an entire target workforce as part of diligence, and cannot treat the target’s own past screening files as satisfying its own legal basis for pulling a report.
The FCRA permits a consumer reporting agency to furnish a report for employment purposes only to a person who certifies specific disclosure and authorization requirements have been met. Under 15 U.S.C. 1681b(b)(2)(A), a clear and conspicuous written disclosure must be made to the consumer that a report may be obtained, and the consumer must authorize that specific procurement in writing.2 That authorization is individual, tied to one consumer and one procuring party, and it does not transfer automatically because ownership of the employer changes hands.
In practice, an acquirer generally cannot pull fresh consumer reports on the broader target workforce before close without each employee receiving proper disclosure and authorizing the acquirer specifically, which is rarely practical on a workforce that has not yet signed anything with the buyer. That is why diligence-stage research on named leadership typically relies on public record and litigation research instead. The target’s historical screening files were obtained under the target’s own certification, for the target’s purpose, so the acquirer does not inherit that legal basis by acquiring the company and should not treat old files as current diligence. This is general information about how the statute works, not legal advice on a specific transaction; deal counsel should confirm the permissible approach given the deal’s structure and jurisdictions.
Pre-close diligence screening vs. post-close workforce screening
| Dimension | Pre-close diligence screening | Post-close workforce screening |
|---|---|---|
| Who is typically covered | Named founders, executives, board members, and employees material to the deal | The broader workforce as it transitions onto the acquirer’s employment records |
| Legal basis relied on | Public record and litigation research, sanctions checks, credential verification, generally without a new consumer report on rank and file staff | Fresh FCRA disclosure and individual written authorization, under the acquirer’s own certification to its screening provider |
| What is typically checked | Litigation history, sanctions and watchlist status, regulatory eligibility, credential and license verification | The acquirer’s standard package: criminal history, employment and education verification, MVR where relevant, sanctions checks |
| Timing | During the diligence window, before signing or closing | At or after close, as part of onboarding onto the acquirer’s policies |
| Primary purpose | Inform deal terms, valuation, and closing conditions | Bring the combined workforce onto one consistent, compliant standard |
Post-close: deciding whether and how to re-screen
Once the deal closes, the acquirer decides what happens to the workforce it just inherited. Some re-screen the full workforce against their own baseline, particularly when the target’s prior scope was thinner or roles are changing materially. Others screen selectively, going forward from close, while leaving existing staff under the target’s prior record. Either way, the same FCRA process applies as with any screening decision: disclosure and authorization before a report is pulled, and if a report leads toward an adverse decision, the pre-adverse action notice, a copy of the report, the Summary of Rights, and a reasonable waiting period before final action, as the Federal Trade Commission’s employer guidance describes.3 Our FCRA adverse action process guide walks through those steps.
Skipping this step is not an abstract risk. An acquirer that integrates a workforce without confirming who is on it takes on the same negligent hiring risk any employer takes on by not screening, except now at scale, for people it did not hire in the first place.
Integrating two screening policies into one
Two companies rarely screen the same way: different look-back windows, different verification scope by role, one running continuous monitoring and the other screening only at hire. Integration means reconciling those differences into a single, documented policy: map both companies’ screening scope by role rather than defaulting to whichever is more familiar, align adjudication criteria so equivalent roles are held to the same standard regardless of which company an employee came from, and decide whether continuous monitoring becomes part of the combined policy, since a one-time screen at hire tells you less over time than ongoing monitoring that flags new arrests or license changes as they happen.
Industries where re-screening is a regulatory requirement
In some sectors, re-screening after an acquisition is a standing legal obligation, not integration housekeeping. Healthcare entities have an ongoing duty to confirm employees and contractors are not excluded from federal healthcare programs. The HHS Office of Inspector General maintains the List of Excluded Individuals/Entities, and its guidance states that healthcare entities should routinely check the list to confirm new hires and current employees are not on it, with civil monetary penalties available against anyone who knowingly employs or contracts with an excluded individual.4 When a healthcare organization is acquired, that obligation attaches to the combined workforce immediately. Our guide to healthcare exclusion screening against the OIG LEIE and SAM databases covers how that check works.
In financial services, individuals in registered roles, such as those holding securities licenses, carry eligibility obligations tied to their registration that exist separately from any employer’s internal policy, and an acquisition does not reset them. Outside formally regulated sectors, re-screening is a business decision rather than a legal mandate, but the acquirer is still accountable for who is on its payroll, regardless of who screened them first.
Frequently asked questions
Can an acquirer run background checks on target company employees before closing?
An acquirer can generally research named leadership and key employees using public record sources, such as civil and criminal court records, sanctions lists, and license verification, without triggering FCRA consumer report requirements. Running a consumer report on the broader target workforce before close is more complicated, because that requires proper disclosure and individual written authorization to the acquirer as the procuring party, which is difficult to obtain from employees who are not yet the acquirer’s employees. Deal counsel should confirm what is permissible given the specific deal structure.
Does FCRA consent transfer from the seller to the buyer in an acquisition?
No. Under the Fair Credit Reporting Act, the written authorization a consumer gives is tied to a specific disclosure and a specific procuring party, not to the employer relationship in the abstract. A consent an employee gave to the target company does not automatically extend to the acquirer, and historical screening files obtained under the target’s own certification do not become the acquirer’s legal basis for future reports simply because ownership changed.
Which industries require re-screening after a merger or acquisition?
Healthcare is the clearest example, since federal healthcare programs require entities to confirm employees and contractors are not on the HHS Office of Inspector General’s exclusion list, an obligation that applies to a newly combined workforce as soon as the deal closes. Financial services roles that carry individual licensing or registration requirements carry similar standing obligations. Outside regulated sectors, re-screening is a policy decision the acquirer makes as part of integration rather than a legal mandate.
What background checks should be done on executives during M&A due diligence?
Common areas of focus include verifying claimed education and professional credentials, civil and criminal litigation history, sanctions and watchlist screening, and confirmation that any required regulatory license or authorization is current. This information supports the deal team’s broader diligence and requires individualized human review; it is not a substitute for legal or financial diligence, and a record on its own should never be treated as automatically disqualifying.
Related Reading
This article is general information about background screening in M&A transactions, not legal advice. Requirements under the FCRA, EEOC guidance, and industry-specific regulations vary by jurisdiction, by deal structure, and change over time. Employers and deal teams should confirm current obligations with their own counsel before making screening decisions in connection with a transaction.
Sources: 1. U.S. Equal Employment Opportunity Commission, Enforcement Guidance on the Consideration of Arrest and Conviction Records in Employment Decisions Under Title VII, eeoc.gov. 2. 15 U.S.C. 1681b, law.cornell.edu. 3. Federal Trade Commission, “Using Consumer Reports: What Employers Need to Know,” ftc.gov. 4. U.S. Department of Health and Human Services, Office of Inspector General, Exclusions Program, oig.hhs.gov.
Reveal Background provides employment background checks and leadership and management screening for companies navigating growth, integration, and change of control. See pricing for current packages.
