Social media background checks involve reviewing a job candidate’s publicly available online profiles to look for red flags like violent threats, illegal activity, or behavior that conflicts with workplace policies. Some employers do this informally by searching your name on Google or scrolling through your accounts. Others hire third-party screening companies that use automated tools to scan and flag specific types of content. The method an employer chooses matters, because it determines what legal protections you have as a candidate.
What Employers Are Looking For
A social media background check is not a deep dive into your personal opinions or lifestyle. Employers with well-designed screening programs focus on a narrow set of job-relevant concerns: evidence of violent threats, references to illegal activity, discriminatory or harassing language, and posts that reveal potential workplace policy violations. A photo from a vacation or a political opinion generally falls outside the scope of a legitimate screening, though not every employer draws the line in the same place.
Third-party screening companies typically use software that scans public posts, photos, and comments across platforms like Facebook, Instagram, X (formerly Twitter), LinkedIn, and TikTok. These tools use a combination of keyword matching and AI-based image and text analysis to flag content in predefined categories. A human reviewer then evaluates the flagged content before including it in a report. The goal is to filter out irrelevant personal content and surface only material tied to specific risk categories the employer has defined in advance.
DIY Searches vs. Third-Party Reports
There is a meaningful legal difference between an employer Googling your name and an employer paying a screening company to produce a formal report. When a third-party company compiles information about you for an employment decision, that report is considered a “consumer report” under the Fair Credit Reporting Act (FCRA). The FCRA is a federal law that gives you specific rights whenever a company generates a background report used to evaluate you for a job, housing, or credit.
When an employer uses an FCRA-compliant screening company, they must get your written consent before the check is run. The screening company is required to follow accuracy standards and can only report publicly available information. You also gain dispute rights if anything in the report is wrong, which is a protection you don’t get when a hiring manager simply scrolls through your Instagram on their own.
When employers conduct informal searches themselves, the FCRA does not apply. There is no requirement to notify you, no formal report is generated, and there is no built-in process for you to challenge what they found. This is one reason the EEOC has suggested that social media screening should be handled by either a third party or a designated person within the company who does not make hiring decisions. That separation reduces the risk of bias creeping into the process.
How Protected Information Gets Handled
The moment someone views your social media profile, they can see information you would never include on a resume: your race, apparent age, religion, disability status, pregnancy, national origin, and more. All of these are protected characteristics under federal employment discrimination law. The EEOC has made clear that personal information gleaned from social media may not be used to make employment decisions on any of these prohibited bases.
This is the core legal tension with social media screening. An employer who views your profile before making a hiring decision has potentially been exposed to protected information, even if they did not intend to look for it. If you are later rejected, it becomes difficult for the employer to prove that protected information played no role in the decision.
Professional screening companies address this by acting as a filter. They review your profiles but strip out protected-class information before sending a report to the employer. The employer receives a summary of flagged content, like evidence of threatening behavior or illegal drug use, without seeing your photo, religious affiliation, or other characteristics. This creates a documented wall between the screening and the decision-maker, which is exactly the structure the EEOC recommends.
Your Rights If You’re Rejected
If an employer decides not to hire you based partly or entirely on a third-party social media screening report, federal law requires them to follow a multi-step process called “adverse action.” This process exists to make sure you know what happened and have a chance to respond before the decision becomes final.
First, the employer must send you a pre-adverse action notice. This notice includes a full copy of the screening report and a document called “A Summary of Your Rights Under the Fair Credit Reporting Act,” published by the Consumer Financial Protection Bureau. At this stage, no final decision has been made yet.
You then get a waiting period, generally at least five business days as recommended by the FTC, to review the report and respond. If you spot errors, such as content attributed to you that actually belongs to someone with a similar name, you can file a dispute with the screening company. The adverse action process should pause while that dispute is investigated.
If the employer decides to move forward with the rejection, they must send a final adverse action notice within three business days. This notice confirms the decision, provides the screening company’s contact information, states that the screening company did not make the hiring decision, and reminds you of your right to dispute the report’s accuracy and get a free copy. This entire process only applies when a third-party screening company is involved. If a hiring manager rejected you after a personal Google search, none of these protections kick in.
What You Can Do to Prepare
Start by searching your own name. Open a private or incognito browser window and search your full name, any variations, and your email addresses. Look at what comes up in image results, social media profiles, and any public records or forum posts. This is roughly what an employer or screening company will see.
Review your privacy settings on every platform you use. Content set to “public” is fair game for any screening. Posts shared only with friends or connections are generally not accessible to third-party screening companies, though privacy settings can change when platforms update their policies. Check these settings periodically, not just when you are job hunting.
Delete or archive old posts that could be taken out of context. A joke from 2015 may not reflect who you are today, but automated screening tools evaluate content without that nuance. You do not need to scrub your entire online presence, but removing anything that references violence, illegal activity, or discriminatory language is a reasonable step.
If you are asked to consent to a social media background check during a job application, that is actually a good sign. It means the employer is using a formal, FCRA-compliant process, which gives you the most legal protection. You have the right to decline consent, but the employer may choose not to move forward with your application if you do.
What Employers Cannot Do
No employer can legally require you to hand over your social media passwords. Many states have enacted laws specifically prohibiting this practice, and even where no state law exists, it is widely considered a violation of platform terms of service and a significant legal liability for the employer.
Employers also cannot screen only certain candidates based on characteristics like race, gender, or age. If an employer runs social media checks on some applicants but not others, and the pattern correlates with a protected characteristic, that practice is discriminatory regardless of intent. The EEOC’s position is straightforward: the technology itself is not the issue, but how the selection tools are used determines whether discrimination has occurred.
If you believe a social media screening led to a discriminatory hiring decision, you can file a charge with the EEOC. If the screening was conducted by a third-party company and you were not given proper notice or a chance to dispute errors, you may also have a claim under the FCRA.