Hiring at a hospital, clinic, or long-term care facility means clearing a stack of federal checks before a new employee can see a patient or touch a claim. Healthcare employee background checks go well beyond a standard criminal records search: you have to screen against federal exclusion databases, query the National Practitioner Data Bank for clinical staff at hospitals, run fingerprint-based criminal history, verify licenses and education at the source, complete drug testing with medical review, document immunizations, and — for long-term care — check the state nurse aide registry. Getting any single piece wrong can cost the facility Medicare and Medicaid eligibility, trigger five- and six-figure penalties per service billed, or expose patients to harm.
What follows is the working list, with the timing, thresholds, and penalty exposure that make each one matter.
Federal Exclusion List Screening
Before anyone is hired into a role that touches a federally funded claim, check them against two databases. The Office of Inspector General’s List of Excluded Individuals and Entities catalogs people and organizations barred from Medicare, Medicaid, and every other federal healthcare program.1Office of Inspector General. Exclusions Program The General Services Administration’s System for Award Management tracks individuals and entities excluded from receiving federal contracts.2Acquisition.GOV. Federal Acquisition Regulation 9.404 – Exclusions in the System for Award Management
The authority behind exclusions comes from the Social Security Act. Section 1128 lets the OIG bar individuals convicted of offenses tied to healthcare delivery, patient abuse, fraud, or controlled substance violations.3Social Security Administration. Social Security Act Section 1128 Section 1156 covers practitioners flagged by quality review for failing recognized standards of care.4Social Security Administration. Social Security Act Section 1156
The financial exposure is what makes this check non-negotiable. If a facility hires or contracts with someone it knows or should know is excluded, Section 1128A authorizes a civil monetary penalty of up to $20,000 for each item or service the excluded person provides, plus an assessment of up to three times the amount claimed.5Social Security Administration. Social Security Act Section 1128A – Civil Monetary Penalties The statutory base is adjusted annually for inflation; as of 2026, the ceiling is $25,595 per item or service.6eCFR. 45 CFR Part 102 – Adjustment of Civil Monetary Penalties for Inflation Multiply that by the daily service volume of a working clinician and the number gets serious fast.
Screen Once, Then Screen Every Month
A single check at hire is not enough. The OIG expects healthcare entities to screen against the LEIE monthly, so that anyone excluded after hire is caught before more federal claims go out the door.1Office of Inspector General. Exclusions Program There is no defense for continuing to bill Medicare or Medicaid for services provided by an employee who has become excluded and whose status went unchecked.
Mandatory exclusions, which apply automatically for convictions tied to federal healthcare programs, last at least five years.7eCFR. 42 CFR Part 1001 Subpart B – Mandatory Exclusions Permissive exclusions are discretionary and can be triggered by misdemeanor convictions, license suspensions, or defaulted health education loans.8Office of Inspector General. Exclusion Authorities
National Practitioner Data Bank Queries
The NPDB is a federal repository of malpractice payments, adverse clinical privilege actions, and professional license sanctions. Hospitals are the only healthcare entities federal law requires to query, and the obligation runs across three moments: when a physician, dentist, or other practitioner applies for staff privileges, every two years for current staff, and whenever a practitioner seeks to expand privileges.9National Practitioner Data Bank. NPDB Guidebook – Chapter D Queries Each query is $2.50, with continuous-query enrollment available at the same annual rate per practitioner.10National Practitioner Data Bank. Billing and Fees
Health plans, professional societies, and other organizations may query but are not federally mandated to do so.9National Practitioner Data Bank. NPDB Guidebook – Chapter D Queries Many accreditation bodies require NPDB queries anyway as a condition of accreditation.11National Practitioner Data Bank. Federal Querying Requirements and Accreditation Standards
Skipping a required query has an unusual consequence. A hospital that fails to run the check is legally presumed to know whatever the NPDB file contains, and a plaintiff’s attorney can then gain access to that file for use in litigation against the hospital.9National Practitioner Data Bank. NPDB Guidebook – Chapter D Queries A missed $2.50 query can hand opposing counsel the evidence they need.
Fingerprint-Based Criminal History
Fingerprint-based checks produce the most reliable picture of a candidate’s history. Employers submit prints through state-authorized channels, and the FBI’s Next Generation Identification system — the largest biometric and criminal history database — returns a nationwide report.12FBI. Next Generation Identification (NGI) State justice departments supplement the federal return with local arrest and conviction data that may not have made it up to the FBI.
Convictions for violence, theft, fraud, or patient abuse carry the most weight in healthcare. A felony in any of those categories is often an automatic disqualifier for positions with patient contact or access to financial systems. Misdemeanors get closer scrutiny, with recency and job relevance driving the call. Lying about criminal history on an application is nearly always its own grounds for rescinding an offer or terminating employment.
Ongoing Monitoring With Rap Back
A single fingerprint check only captures what was on file the day it ran. The FBI’s Rap Back service closes that gap: once an employee is enrolled, the NGI system keeps searching their prints against new criminal submissions, and the subscribing agency gets an automatic electronic notification if the employee is arrested.13FBI. Privacy Impact Assessment for the Next Generation Identification (NGI) Rap Back Service
Rap Back subscriptions must be validated at least every five years, and employers must cancel a subscription within five business days once the employment relationship that justified the monitoring ends.13FBI. Privacy Impact Assessment for the Next Generation Identification (NGI) Rap Back Service Not every state has fully implemented Rap Back for healthcare; where it is available, it removes the reliance on periodic re-screens that can miss criminal activity for months.
Fair Credit Reporting Act Rules for Third-Party Reports
When a background report comes from a third-party screening company, it is a consumer report under the Fair Credit Reporting Act and strict procedural rules apply.14Federal Trade Commission. What Employment Background Screening Companies Need to Know About the Fair Credit Reporting Act The FCRA generally prohibits reporting arrest records more than seven years old that did not lead to conviction. That time limit does not apply to positions with an expected annual salary of $75,000 or more, which sweeps in a large share of clinical roles.15Office of the Law Revision Counsel. 15 USC 1681c – Requirements Relating to Information Contained in Consumer Reports Conviction records can be reported indefinitely regardless of salary.
Pre-Adverse and Adverse Action Notices
If a background report will drive a decision not to hire, the FCRA requires a two-step notice process. Before making the final call, the employer sends a pre-adverse action notice with a copy of the report and a written summary of the candidate’s rights under the FCRA.16Federal Trade Commission. Fair Credit Reporting Act The candidate then gets a reasonable window, generally at least five business days, to review and dispute anything wrong in the report.
If the rejection stands, a final adverse action notice follows. That notice must name the reporting agency, provide its contact information, state that the agency did not make the hiring decision, and inform the candidate of the right to a free copy of the report and to dispute inaccuracies.16Federal Trade Commission. Fair Credit Reporting Act Skipping either notice is one of the most common compliance failures in healthcare hiring, and it regularly produces class action litigation.
Using Criminal Records Without Running Afoul of the EEOC
The Equal Employment Opportunity Commission takes the position that blanket disqualification of anyone with a criminal record can violate Title VII of the Civil Rights Act because of disparate impact on certain racial and ethnic groups. An arrest, on its own, is never sufficient grounds to deny employment. An employer may consider the underlying conduct if it is relevant to the position, but the arrest record itself does not establish that the conduct occurred.17U.S. Equal Employment Opportunity Commission. Enforcement Guidance on the Consideration of Arrest and Conviction Records in Employment Decisions Under Title VII of the Civil Rights Act
For convictions, the EEOC expects an individualized assessment. The employer notifies the candidate they may be excluded, gives them a chance to respond, and weighs:
- The nature and circumstances of the offense
- How long ago the conviction occurred and the candidate’s age at the time
- Whether the offense relates to the duties of the position
- The candidate’s post-conviction record, including employment, rehabilitation, education, and references
If the candidate does not respond, the employer may proceed without that information.17U.S. Equal Employment Opportunity Commission. Enforcement Guidance on the Consideration of Arrest and Conviction Records in Employment Decisions Under Title VII of the Civil Rights Act Patient-safety concerns do not exempt a healthcare employer from this framework unless a specific federal or state law creates a categorical bar for the offense.
Primary Source License and Education Verification
Confirming that a clinician’s credentials are real and current means contacting the issuing authority directly rather than accepting copies from the applicant. State licensing boards can confirm the license is active, identify any restrictions on scope of practice, and disclose disciplinary history or public reprimands.
Education gets the same treatment. Employers request official transcripts or use national clearinghouses to confirm the degree, graduation date, and accreditation status of the institution. Clinical roles often require additional certifications such as Advanced Cardiovascular Life Support or Basic Life Support, which must be current and issued by a recognized credentialing body.
When a license lapses or a certification expires, the provider comes off clinical duty immediately. Ongoing monitoring matters as much as the initial verification. Regular audits of credentialing files keep a facility ready for accreditation surveys and protect against negligent credentialing claims from patients who argue the organization failed to properly vet a provider who caused harm.
Drug Screening and the Medical Review Officer
Pre-employment drug testing is standard. The baseline five-panel test covers amphetamines, cocaine, marijuana, opioids, and phencyclidine, mirroring the categories used in federal workplace drug testing programs.18SAMHSA. Drug Testing Resources Many facilities use a ten-panel test that adds benzodiazepines, barbiturates, and other substances. A positive result does not automatically end the hiring process.
A Medical Review Officer reviews any positive before the employer sees it. The MRO interviews the candidate, who has the chance to provide a legitimate medical explanation such as a valid prescription. If a prescription is claimed, the MRO can contact the prescriber and confirm with the pharmacy that the prescription was filled. A confirmed legitimate prescription produces a negative report, and the MRO does not second-guess the prescribing physician’s clinical judgment. One firm boundary: under federal regulations, a recommendation for a Schedule I controlled substance cannot serve as a legitimate medical explanation.19eCFR. 49 CFR Part 40 Subpart G – Medical Review Officers and the Verification Process
Where Marijuana Rescheduling Fits
In April 2026, the Department of Justice reclassified FDA-approved marijuana products and marijuana used under a state medical license from Schedule I to Schedule III under the Controlled Substances Act. This change may embolden employees to argue that adverse actions based on medical marijuana use violate the Americans with Disabilities Act, since the ADA’s exclusion of illegal drug use was historically tied to marijuana’s Schedule I status.
The practical picture is narrower than it looks. The Department of Transportation continues to prohibit marijuana use for safety-sensitive positions subject to DOT drug testing rules, regardless of rescheduling or state medical marijuana laws.20U.S. Department of Transportation. DOT Notice on Testing for Marijuana Healthcare facilities that are not DOT-regulated generally retain the ability to prohibit workplace impairment and maintain drug-free workplace policies, but the legal ground is shifting and policies should be reviewed to state clearly what is prohibited and on what authority.
Health and Immunization Documentation
New hires must document their immunization status before starting clinical work. The standard requirements include vaccination or proof of immunity for Hepatitis B, measles, mumps, rubella, and varicella. Unvaccinated workers typically receive the multi-dose Hepatitis B series. Workers born in 1957 or later need documentation of two MMR doses or lab evidence of immunity. Varicella immunity can be established through vaccination records, lab results, or a verified history of the disease.
Annual influenza vaccination is required or strongly recommended at most facilities depending on patient population and organizational policy. Immunization records are stored separately from general personnel files to comply with medical privacy rules.
Tuberculosis screening is near-universal. New hires receive a skin test or blood test, with a chest X-ray if the initial result is positive. Ongoing TB screening protocols vary by facility risk level and local public health guidance. Accreditation surveyors review these files, and gaps can trigger findings.
Long-Term Care: The Nurse Aide Registry Check
Nursing homes and other long-term care facilities carry an additional federal screening obligation. Under federal regulations, they cannot employ any individual with a finding of abuse, neglect, exploitation, or misappropriation of resident property entered into the state nurse aide registry.21eCFR. 42 CFR 483.12 – Facility Requirements The same rule bars anyone found guilty of those offenses by a court, and anyone whose professional license has been disciplined as a result of such findings.
Facilities must also report to the state registry or licensing authorities when they learn of any court action against an employee that would indicate unfitness for service.21eCFR. 42 CFR 483.12 – Facility Requirements Missing this check is one of the fastest paths to losing Medicare and Medicaid certification, which for most nursing homes effectively means closing the doors.
Costs and Turnaround
The employer pays. State-level criminal checks typically run from a few dollars up to roughly $50 depending on the state. FBI fingerprint-based checks add their own processing fees. NPDB queries are $2.50 each.10National Practitioner Data Bank. Billing and Fees Drug panels, license verifications, and education verifications through clearinghouses each add to the per-hire total, which can reach several hundred dollars when stacked.
Timelines are the other planning variable. LEIE and SAM exclusion checks can be completed the same day. Fingerprint-based criminal checks often take one to four weeks depending on state and submission volume. Primary source license verification is usually faster but depends on the responsiveness of individual boards. Build these timelines into recruiting rather than trying to rush the screening after a start date has already been promised.