Background and Reference Checks in Italy: What Employers Can and Can't Ask

US hiring teams are used to a standard routine. Run a background check, call references, search social media, ask about past jobs and personal history. In Italy, much of that routine is restricted. Privacy rules and labor protections limit what an employer may ask a candidate, and what it may find out about them.

This article explains the main boundaries. It is a practical overview, not legal advice. Confirm your process with Italian counsel before you roll it out.

The basic rule: relevance to the job  

Italian law sets a simple test. You may collect information only if it is needed to judge whether the person can do the job. The Workers’ Statute bars employers from investigating a candidate’s political, religious or union views. It also bars questions on facts that are not relevant to professional skills. The EU data protection regime (GDPR) adds the principle of data minimization. You collect what you need and nothing more.

This applies before the hire, during the interview stage, and during the employment relationship.

What you can ask and verify  

You can ask about things tied directly to the role:

• Work history, job titles and responsibilities.
• Education, degrees and professional certifications.
• Skills, languages and technical experience.
• Availability and notice period at the current employer.
• Professional licenses required for the position.

You can verify credentials, but do it openly. Ask the candidate for the diploma or certificate, or ask for their agreement to contact the issuing institution. Do not go around the candidate.

What you cannot ask  

Avoid these topics in interviews, forms and screening tools:

• Political opinions, religion and union membership.
• Health conditions, disabilities and medical history.
• Pregnancy, plans to have children and marital status.
• Sexual orientation and ethnic origin.
• Personal habits and private life unrelated to the job.

Some of these are special categories of data under GDPR. Others are protected by anti-discrimination rules. A single careless question in an interview can create exposure, even if you never use the answer.

Criminal records  

This is where US teams are most often surprised. In Italy, an employer cannot freely demand a criminal record check. Data on criminal convictions can be processed only where the law specifically allows it. For most roles, there is no such basis. Some regulated positions are the exception, for example roles involving minors or certain financial functions.

Do not make a clean record a blanket condition of every offer. If a role truly needs it, confirm the legal basis for that role first.

Health checks  

An employer should not ask candidates about their health. Medical fitness is handled through the workplace health surveillance system. A designated occupational physician carries out the assessment, and the employer receives only the outcome on fitness for the job. The employer does not get the diagnosis.

Reference checks  

Calling a former employer is not forbidden. But it needs care.

• Tell the candidate you will contact references.
• Prefer references the candidate names and agrees to.
• Keep questions to job performance and dates of employment.
• Do not contact the current employer without the candidate’s clear consent. It can put their job at risk.
• Do not ask a referee about health, family, union activity or private conduct.

A former employer also has duties. It should not share personal data about a past employee without a proper basis. Expect many Italian employers to confirm only basic facts, such as role and tenure. Do not read this as a red flag.

Social media and online searches  

A quick look at a public professional profile is usually fine. A deep search into a candidate’s personal accounts is not. What you find may reveal protected information, such as religion, opinions or health. Once you have seen it, you carry the risk. If you use online sources, limit them to professional material, and keep a record of why the information was relevant.

Credit checks and third-party screening  

Credit and financial checks are hard to justify for most roles. Using an outside screening vendor does not remove your responsibility. The vendor acts for you, so you need a data processing agreement, a clear scope, and a check that its methods respect Italian rules. Many standard US packages include items that do not fit here. Strip them out.

Transparency toward candidates  

Give every candidate a privacy notice. It should say what data you collect, why, how long you keep it, and who sees it. Keep candidate data only as long as the hiring process needs it. Delete the files of rejected candidates on a set schedule. If you transfer data to the US, for example to a headquarters HR system, you need a valid transfer mechanism.

A practical checklist  

• Replace your US background check package with an Italy-specific version.
• Train interviewers on the questions they must not ask.
• Limit screening to what the role needs, and document the reason.
• Get the candidate’s agreement before any reference call or credential check with third parties.
• Do not request criminal records unless the law allows it for the role.
• Publish a candidate privacy notice and a retention schedule.
• Keep health matters with the occupational physician.

The takeaway  

Italy does not ban checks. It asks that every check be needed, proportionate and open to the candidate. If your process follows that logic, you can hire well and stay compliant.

Before you plan your first Italian hire, try the cost calculator.