A practical guide for Canadian...
Social Media Background Checks in Canada: What Employers Can Legally Review
Social media has quietly become part of the hiring process at most Canadian companies. Surveys consistently show that around 70% of hiring managers have looked up a candidate online before making an offer. The problem isn’t whether it happens. It’s how.
When a hiring manager reviews a candidate’s profiles from their personal account, they expose the company to bias claims, privacy complaints, and human rights challenges. None of that goes away just because the information was technically public.
This guide walks through what Canadian employers can legally review, what they cannot, and how to run social media checks in a way that holds up to scrutiny.
What Is a Social Media Background Check?
A social media background check reviews a candidate’s public online presence to identify content that could pose a risk to the workplace. Done properly, it surfaces job-relevant signals that a criminal record check will not catch: hate speech, harassment, threats of violence, or evidence of drug use or other behaviour that could affect the role.
Done improperly, it captures everything else too: the candidate’s religion, family status, political views, health information, and a hundred other details that have no place in a hiring decision and create direct legal exposure if they do.
The difference between a useful check and a liability is structure.
Is Social Media Screening Legal in Canada?
Yes, with conditions. Canadian privacy law and human rights legislation set the boundaries. The general principles are straightforward:
The information has to be collected for a reasonable, job-related purpose. Candidates should be informed that the check is happening. The process has to be applied consistently and cannot be used to filter out people based on protected grounds.
Note that social media screening is not available in Québec. Québec’s privacy regime is more restrictive than the rest of Canada and most compliant providers exclude the province from this type of check.
What Employers Can Legally Review
Publicly available information, with limits. Public LinkedIn profiles, public posts, blogs, and portfolios are fair game in principle. “Public” is not a free pass, though. Employers still need to justify why the information is relevant to the role.
Job-relevant content. The narrower the focus, the safer the check. Examples of legitimately reviewable content include evidence of workplace misconduct, harassment or discriminatory behaviour, breaches of confidentiality from previous employers, public threats, or admitted illegal activity.
Information collected with consent. Best practice, and increasingly the expected standard, is to obtain written consent before screening a candidate’s social media. The consent should explain what is being reviewed and why. This is what separates a defensible process from an informal Google search by a hiring manager.
What Employers Cannot Do
Access private accounts. Asking for passwords, requesting that candidates open their accounts during an interview, or attempting to bypass privacy settings is not permitted. Full stop.
Use irrelevant personal information. Even when content is public, employers cannot use it if it has no bearing on the candidate’s ability to do the job. Lifestyle, relationships, religion, and political views fall into this category.
Discriminate on protected grounds. Social media often reveals information protected under federal and provincial human rights law: race, gender identity, sexual orientation, religion, disability, family status. Once a hiring manager has seen this information, it is very difficult to prove it did not influence the decision. That is precisely the risk.
Treat public access as consent. Information being available online does not give an employer unlimited rights to use it. The legal test is purpose, not accessibility.
Where Informal Screening Goes Wrong
Three patterns create most of the legal exposure:
The hiring manager screens from their personal account, which means they see all the protected information they shouldn’t and there is no audit trail of what was reviewed.
The screening is inconsistent. Some candidates get checked, others don’t, and the criteria shift based on who is doing the looking. This is how discrimination claims get built.
There is no documented consent and no record of what was flagged, what was ignored, and why. If a rejected candidate asks how the decision was made, the company has no answer.
Credibled offers seamless integration, fraud detection, and real-time processing, helping employers make informed hiring decisions.
Best Practices
Build a written social media screening policy and apply it to every candidate at the same stage of the hiring process. Define the risk categories you are screening for in advance. Get written consent before running a check. Use a third party to filter out protected information before it reaches the hiring manager. Keep a record of what was reviewed and what informed the decision.
The goal is to make the process boring and repeatable. Boring is what holds up in front of a tribunal.
How Credibled's Social Media Check Works
Credibled’s Social Media Check is built specifically to solve the compliance problem. Three steps:
The candidate consents to the screening before anything happens. AI scans public posts and content for predefined risk categories or custom keywords you set for the role. Only flagged content is included in the report. Every other post, photo, and comment stays out of the hiring manager’s view.
The risk categories include hate speech, insults and bullying, narcotics, drug-related and explicit imagery, terrorism and extremism, threats of violence, sexual impropriety, and toxic language. You can add custom keywords on top.
Reports are typically delivered in under an hour. Setup is mobile-first for both the employer dashboard and the candidate experience. Coverage is worldwide. Screening is not available for candidates in Québec.
The result: the hiring manager gets the job-relevant signal they were trying to find, without ever seeing the protected information that creates legal risk. That is the compliance wedge.
If you want to see what a compliant social media check looks like in practice, book a demo or reach out to [email protected].
FAQs
Public information can be reviewed in some cases, but the strong recommendation, and the standard set by compliant screening providers, is to obtain written consent first.
No. Requesting login credentials or access to private accounts is not permitted under Canadian privacy law.
LinkedIn for professional history, and public content on Facebook, Instagram, X, and TikTok for risk indicators. A compliant provider scans across platforms and filters for job-relevant content only.
No. Québec’s privacy regime restricts this type of screening. Credibled excludes Québec candidates from social media checks.
With Credibled, typically under an hour.
No. They surface different information. A criminal record check tells you about the legal record. A social media check surfaces behavioural signals that would not appear on a criminal record. Most employers use them together.
Learn what employers in Canada...
Need police clearance in Toronto?...