# Employment Reference Checks in Australia: Compliance and Buyer Guide

Canonical URL: https://skillsociety.com.au/blog/reference-check/employment-reference-checks-australia-compliance
Markdown URL: https://skillsociety.com.au/blog/reference-check/employment-reference-checks-australia-compliance/markdown
Published: 2026-07-12
Author: Alberto Cubeddu
Excerpt: Australian employers need reference checks that are fast, structured and respectful of candidate consent, privacy expectations and current-employer confidentiality.

Employment reference checks in Australia are common, but that does not mean they should be casual. A quick call to a former manager can influence a hiring decision, reveal sensitive information and affect a candidate's current employment if handled poorly.

For Australian employers, the practical goal is simple: collect useful, job-related evidence while respecting consent, privacy, fairness and confidentiality. This article is not legal advice, but it gives HR, TA and recruitment leaders a practical operating model before changing process or buying reference check software.

> **Need a cleaner reference check process?** Skill Society helps Australian hiring teams collect structured, consent-led reference evidence without relying on ad hoc phone calls: [book a demo](https://skillsociety.com.au/booking?utm_source=blog&utm_medium=cta&utm_campaign=employment-reference-checks-australia-intro).

## The Australian Compliance Baseline

There is no single "reference check law" that covers every Australian hiring scenario. Instead, employment reference checks sit across several overlapping duties and risk areas:

- privacy and personal information handling;
- candidate consent and collection notice practices;
- discrimination and adverse action risk;
- confidentiality and current-employer sensitivity;
- record keeping, access and correction;
- fairness when negative or serious allegations are raised;
- vendor, AI and data security due diligence when software is used.

The Attorney-General's Department describes the Privacy Act 1988 as Australia's main legislation for the handling of personal information, covering how information is collected, used, stored and disclosed in the federal public sector and private sector. The same page notes that the Australian Privacy Principles apply to Australian Government agencies and private sector organisations with annual turnover of $3 million or more, while other privacy regimes can apply in state and territory public sectors.

That matters because reference checks can create personal information about both the candidate and the referee. The OAIC's guidance on personal information says a referee's comments about a job applicant's career, performance, attitudes and aptitude can be personal information about the applicant, and may also be personal information about the referee because the comments reveal the referee's views.

In plain English: a reference check is not just "a phone call". It can create a hiring record that needs to be handled deliberately.

## What Employment Reference Checks Should Confirm

A good employment reference check should validate the evidence already collected through the hiring process. It should help answer practical questions such as:

- Did the referee work closely enough with the candidate to comment?
- What role, responsibilities and reporting line did the candidate have?
- What work did the referee directly observe?
- How did the candidate perform against role-relevant expectations?
- What strengths showed up consistently?
- What development areas or risks should the next employer understand?
- How did the candidate respond to feedback, change, pressure or conflict?
- What conditions helped the candidate do their best work?
- Would the referee rehire or work with the candidate again, and why?

The check should not become a fishing expedition into personal information, workplace gossip or subjective "fit" language. For TA leaders, the best rule is simple: if the answer does not help evaluate the candidate against the role requirements, the question probably does not belong in the reference check.

### Verification, Not Reassessment

Reference checks are strongest when they confirm or challenge evidence from interviews, work samples, scorecards and hiring manager feedback.

For example:

- If the role requires stakeholder management, ask the referee for observed examples of how the candidate handled competing priorities or difficult stakeholders.
- If the role requires leadership, ask how the candidate gave feedback, escalated risks, handled underperformance or built trust.
- If the role requires safety, compliance, financial delegation or access to sensitive information, ask direct role-related integrity questions and document how concerns were assessed.

This is more useful than asking a broad question such as "What are they like?" or "Are they a culture fit?"

## Consent Comes First

Candidates should know what is happening before references are contacted. A practical consent process should make clear:

- when reference checks will happen;
- which referees will be contacted;
- whether current employers are excluded unless the candidate gives separate permission;
- what type of questions will be asked;
- how the information will be used in the selection process;
- who inside the hiring organisation can access the reference report;
- how long the information will be kept, where that is covered by policy;
- what happens if a referee raises a serious concern.

OAIC APP guidance says consent should be adequately informed, voluntary, current and specific, and given by someone with capacity to understand and communicate it. Even where an organisation is relying on another privacy basis, that is a useful standard for designing a defensible reference check workflow.

The OAIC's agency referee report guidance also says that if a prospective employer wants to seek a referee report from someone other than the person the applicant has nominated, the applicant should be notified before the report is sought. Victorian public sector guidance goes further in practical terms, stating that consent is required before a reference check is undertaken and before contacting a person the applicant has not nominated as a referee.

For private employers, the conservative operational position is clear: do not surprise candidates with informal or backchannel references.

## Current Employer References Need Extra Care

Current-employer contact is one of the highest-risk parts of employment reference checking in Australia. A candidate may be actively employed and may not have told their manager they are exploring the market. Contacting that manager without permission can damage trust, trigger workplace consequences or expose the candidate to unnecessary risk.

A safer process records a specific current-employer preference:

| Candidate instruction | Safer recruiter response |
| --- | --- |
| "Do not contact my current employer." | Respect the instruction and use alternatives. |
| "You can contact my current manager only after offer stage." | Delay contact until the agreed stage and record the condition. |
| "You can contact this former manager, not my current one." | Use the nominated referee and keep the current employer blocked. |
| "I need to brief my referee first." | Give the candidate time and confirm before contact. |

Reasonable alternatives can include previous managers, skip-level managers, project leads, clients, supervisors from contract work, board members for executive roles, or other professional contacts who directly observed the candidate's work.

The key is not simply "two references". It is two credible, role-relevant sources collected with the candidate's knowledge.

## Privacy and Record Handling

Reference checks can contain:

- information about the candidate's employment history, work performance and conduct;
- opinions about the candidate's skills, judgement, behaviour and development areas;
- referee contact details and comments;
- hiring team notes and conclusions;
- potentially sensitive or irrelevant information volunteered by a referee.

The OAIC notes that unsuccessful job applicants can generally ask for access to information about themselves, subject to exceptions, and that this can include information relating to a referee's report. The OAIC also explains that private sector employee records are exempt from the Privacy Act in certain circumstances when directly related to a current or former employment relationship, but that exemption does not cover future employment relationships and will not apply to collection about unsuccessful job applicants.

That distinction matters for hiring teams. Pre-employment reference checks should be treated as recruitment records first, not as informal manager notes.

### Practical Record-Handling Rules

Recruiters should avoid storing reference notes in personal notebooks, unmanaged documents, inboxes, messaging apps or local files. A structured system is better because access, retention, version history and audit trails can be controlled.

A workable policy should cover:

- where reference check records are stored;
- who can view full referee responses;
- whether hiring managers see raw comments, summaries or both;
- when records are deleted or archived;
- how access or correction requests are handled;
- how irrelevant or sensitive information is excluded from decision evidence;
- what happens if a data breach involves reference check data.

Under the Notifiable Data Breaches scheme, covered entities may need to notify affected individuals and the OAIC if a personal information data breach is likely to result in serious harm. Reference check records may not include identity documents, but they can include reputationally sensitive comments, employment history and contact details. Treating them casually is poor risk management.

## Questions Should Be Job-Related

The safest reference check questions are tied to the role. Ask about observable behaviour, responsibilities, working relationship and examples.

Useful questions include:

- What was your working relationship with the candidate?
- What were they responsible for?
- What period did you work with them, and in what capacity?
- Can you describe a time they handled a difficult stakeholder or priority change?
- How did they respond to feedback?
- Where did you see their strongest contribution?
- What would you coach their next manager to do to support their success?
- What support helped them perform well?
- Are there role-related development areas the next manager should know?
- Would you rehire or work with them again in a similar role? Why or why not?

Avoid questions about family, age, health, disability, religion, protected characteristics, personal life, political views or vague culture fit. If a referee volunteers irrelevant or sensitive information, the recruiter should not use it as decision evidence.

The Fair Work Ombudsman says employers cannot take adverse action against a prospective employee for discriminatory reasons. Protected attributes under the Fair Work Act include race, colour, sex, sexual orientation, age, physical or mental disability, marital status, family or carer's responsibilities, pregnancy, religion, political opinion, national extraction, social origin, breastfeeding, gender identity, intersex status and experiencing family and domestic violence.

For reference checks, that means the question set should be designed to avoid collecting information that could influence the decision for the wrong reason.

### Better Wording Examples

| Risky wording | Better wording |
| --- | --- |
| "Do they have any health issues?" | "Were there any role-related adjustments or support needs we should discuss with the candidate directly?" |
| "Would they fit our young, fast-paced team?" | "How did they handle pace, ambiguity and changing priorities in the role you observed?" |
| "Do they have family commitments that affected work?" | "Were they able to meet the role's agreed attendance, availability and output requirements?" |
| "What are they like socially?" | "How did they collaborate with peers, managers and stakeholders?" |
| "Any red flags?" | "Were there any role-related concerns about performance, conduct or reliability that were raised and addressed?" |

The better question is narrower, more objective and easier to connect to the role.

## Backchannel References Are a Risky Shortcut

Backchannel references are informal references gathered from people the candidate did not nominate. They are common in close industries, but they create practical risks:

- the candidate may not know the contact is happening;
- the person contacted may not have worked closely enough with the candidate;
- personal bias or workplace politics may distort the feedback;
- the conversation may collect irrelevant or sensitive information;
- the hiring team may struggle to document the basis for the decision;
- the process may be inconsistent across candidates.

The OAIC's agency referee guidance says a prospective employer should notify the applicant before seeking a referee report from someone the applicant has not nominated. VPSC guidance also warns that privacy laws require consent before contacting a non-nominated referee.

For commercial employers, this is a strong signal. If your process permits backchannel checks, set strict controls:

- only use them when there is a clear, role-related reason;
- get candidate consent first;
- record who was contacted and why;
- ask the same role-related questions;
- give the candidate a fair chance to respond to serious adverse information where appropriate;
- keep the output inside the formal recruitment record.

In most teams, it is simpler and safer to design a strong nominated-referee process and avoid backchannel calls altogether.

## Handling Negative or Serious Feedback Fairly

Not every negative reference should end a hiring process. Referees can be mistaken, biased, vague, stale or speaking from a context that is not relevant to the new role. On the other hand, serious and role-relevant concerns should not be ignored.

A balanced process should separate three questions:

1. Is the feedback specific?
2. Is it relevant to the role being hired?
3. Is it credible and consistent with other evidence?

For example, "They were not a good fit" is weak evidence. "They missed regulatory reporting deadlines twice after documented reminders, in a role where reporting accuracy was a core responsibility" is more specific and role-relevant.

Victorian public sector executive reference guidance recommends cross-checking information if allegations or past misconduct are revealed and, where appropriate, giving the candidate a right of reply. That is a useful fairness principle for private-sector hiring too, especially for senior, safety, finance, education, health, aged care, child-related, integrity or regulated roles.

### A Practical Escalation Model

Use tiers so recruiters know what to do:

| Feedback type | Example | Practical response |
| --- | --- | --- |
| Low relevance | Personality preference, vague style mismatch | Do not treat as decision evidence unless connected to role criteria. |
| Moderate relevance | Missed deadlines, stakeholder issues, inconsistent communication | Compare with interviews, work samples and hiring manager concerns. Ask follow-up questions. |
| High relevance | Misconduct, safety breach, dishonesty, harassment, integrity concern | Escalate to HR/legal as appropriate, document context, and consider candidate response. |
| Unsupported claim | Rumour, "I heard", no direct observation | Avoid relying on it unless independently verified through a fair process. |

The goal is not to sanitise references. The goal is to stop one unstructured conversation from becoming an unfair or poorly documented hiring decision.

## Reference Checks, Background Checks and Screening Are Not the Same

Hiring teams often group reference checks, employment verification, police checks, right-to-work checks, qualification checks and professional registration checks into one "pre-employment screening" bucket. They are related, but they answer different questions.

| Check type | What it helps answer | Typical compliance concern |
| --- | --- | --- |
| Employment reference check | How did the candidate perform in observed work? | Consent, relevance, privacy, fairness, consistency. |
| Employment verification | Did the candidate hold the role and dates claimed? | Accuracy, data minimisation, candidate notice. |
| Qualification check | Does the candidate hold required credentials? | Proportionality and role relevance. |
| Police or criminal history check | Is there relevant criminal history for a particular role? | Legal basis, role relevance, sensitive information, discrimination risk. |
| Right-to-work check | Can the person lawfully work in Australia? | Secure handling of identity and visa information. |
| Professional registration check | Is the person licensed or registered for the role? | Source accuracy and ongoing monitoring where required. |

Do not use reference checks as a substitute for regulated checks. If a role requires a specific legal, safety or licensing screen, build that into the screening policy separately.

## When to Run Reference Checks

The best time depends on hiring volume, candidate expectations and role risk. The conservative default is to run employment reference checks after shortlisting or preferred-candidate stage, when the check is necessary and proportionate.

OVIC's Victorian public sector recruitment privacy guidance says employers will usually ask applicants to provide nominated referee details to confirm suitability, but to minimise unnecessary collection, referee personal information should be collected at an appropriate stage, such as after interview and where an applicant has been shortlisted or selected.

That principle is useful beyond the Victorian public sector:

- Do not collect referee details from every applicant if only a small number will progress.
- Do not contact referees before the candidate understands the process.
- Do not over-check candidates for low-risk roles where the information is not necessary.
- Do not run broad screening before there is a genuine hiring purpose.

High-volume hiring may need earlier automation to manage throughput, but even then the candidate notice and consent flow should be clear.

## How Software Can Help

Reference check software can make a better process easier to run. The right tool can:

- capture candidate consent and current-employer restrictions;
- standardise approved question templates by role;
- send referee requests and reminders;
- record who responded and when;
- protect access to reports;
- reduce incomplete notes and inconsistent phone calls;
- support recruiter review and escalation;
- create an audit trail for process governance;
- help hiring teams compare evidence consistently.

The tool should also support human judgement. If a referee raises a serious concern, the recruiter still needs to assess context, relevance, fairness and next steps. Automation should make the process more consistent, not less accountable.

### AI and Automated Reference Checks

AI can help with transcription, summarisation, categorisation and workflow triage. It should not remove accountability from hiring teams.

The OAIC's guidance on commercially available AI products says the Privacy Act applies to all uses of AI involving personal information. For reference checking, that means buyers should understand how the vendor handles candidate and referee data, including whether AI is used to generate summaries, scores or recommendations.

For Australian HR buyers, useful vendor questions include:

- Does the platform capture candidate consent before contacting referees?
- Can candidates block current-employer contact?
- Can question templates be approved by role, location or business unit?
- Can recruiters remove irrelevant or sensitive information from decision summaries?
- Are raw recordings, transcripts and summaries retained, and for how long?
- Where is data hosted and who can access it?
- Is AI used to score, rank or recommend candidates, or only to help structure notes?
- Can a human reviewer override, annotate or escalate outputs?
- Can the system export records for internal review or access requests?
- What happens if the customer ends the contract?

The stronger the tool's automation, the more important transparency and review controls become.

> **Buying reference check software for an Australian team?** Skill Society gives recruiters a structured, consent-led workflow for voice-first reference checks, with organised evidence for human review: [book a demo](https://skillsociety.com.au/booking?utm_source=blog&utm_medium=cta&utm_campaign=employment-reference-checks-australia-mid).

## Buyer Guide: What Australian HR Teams Should Look For

If you are comparing employment reference check software in Australia, focus on the workflow controls rather than only the speed claim.

### 1. Consent and Candidate Control

Look for:

- explicit candidate consent capture;
- current-employer restrictions;
- separate handling for nominated and non-nominated referees;
- clear candidate communications;
- timestamps and audit history.

Avoid tools that make it easy for recruiters to bypass consent or contact referees informally outside the system.

### 2. Structured Question Governance

Look for:

- role-based question templates;
- approved question libraries;
- editable templates controlled by admins;
- version history;
- prompts that steer recruiters away from protected or irrelevant topics.

The software should make the approved question set the easiest path.

### 3. Referee Identity and Relationship Checks

Look for:

- referee contact verification;
- working relationship fields;
- role and organisation fields;
- prompts to confirm how closely the referee worked with the candidate;
- flags for weak referee relationships.

A glowing reference from someone who barely worked with the candidate should carry less weight than a measured reference from a direct manager.

### 4. Privacy, Retention and Access Controls

Look for:

- role-based access;
- retention settings;
- secure storage;
- customer-controlled exports and deletion;
- clear subprocessor and hosting information;
- audit logs;
- breach notification procedures.

If reports are emailed around as PDFs with no access control, the software has not solved the risk.

### 5. Human Review and Fairness Controls

Look for:

- recruiter review before sharing with hiring managers;
- notes for context and follow-up;
- flags for serious concerns;
- ability to separate raw comments from decision summaries;
- support for candidate response workflows where appropriate.

Good software helps teams make better decisions. It should not turn referee comments into an unchallengeable score.

### 6. Candidate and Referee Experience

Look for:

- mobile-friendly referee response flows;
- voice or asynchronous options for busy referees;
- clear explanation of why the reference is being requested;
- reminders that do not feel like spam;
- accessibility and plain-language copy.

Reference checks depend on referee participation. If the experience is clunky, the data quality suffers.

## Example: A Safer Australian Reference Check Workflow

Here is a practical workflow for a TA team hiring a mid-level manager:

1. The candidate reaches preferred-candidate stage after interview and scorecard review.
2. The recruiter asks the candidate to provide two referees who directly observed their work, ideally including a recent manager.
3. The candidate confirms whether their current employer can be contacted and, if yes, at what stage.
4. The system sends a clear consent-led request explaining the purpose of the reference check.
5. Referees are asked the same approved role-related questions.
6. The recruiter reviews responses for specificity, relevance and any sensitive or irrelevant information.
7. Any serious, role-relevant concern is escalated before the final decision.
8. The hiring manager receives a structured summary tied to role criteria.
9. Records are retained or deleted according to policy.

This workflow is faster than manual chase, but it is also easier to explain if a decision is later questioned.

## Common Mistakes to Avoid

### Asking for References Too Early

Collecting referee details from every applicant can be intrusive and creates unnecessary personal information handling. Ask when the check is genuinely needed.

### Treating Referee Comments as Facts

A reference is an opinion from a source, not an objective truth. Compare it with other evidence.

### Letting Conversations Drift

Unstructured phone calls can drift into protected attributes, rumours or personal commentary. Use approved prompts.

### Contacting Current Employers Without Permission

This can put the candidate at risk and damage your employer brand. Capture and respect current-employer restrictions.

### Sharing Raw Reports Too Broadly

Raw referee comments may include unnecessary or sensitive information. Limit access and provide structured summaries where appropriate.

### Ignoring State, Sector or Role-Specific Requirements

Public sector, regulated, child-related, safety-sensitive and senior executive roles may require more formal screening, records and review steps. Check the rules that apply to the role and jurisdiction.

## How Skill Society Fits Australian Hiring Teams

Skill Society supports structured, voice-first reference checks for modern recruiting teams. The workflow is designed to help candidates provide references clearly, help referees respond asynchronously, and help hiring teams review organised evidence instead of chasing ad hoc calls.

For Australian employers, the practical value is control:

- recruiters can use consistent question sets;
- candidates can move through a clearer consent-led process;
- current-employer sensitivity can be handled deliberately;
- referee responses can be reviewed in one place;
- hiring teams can reduce scattered notes and manual follow-up;
- evidence can be assessed by humans before final hiring decisions.

Skill Society does not replace legal advice, HR policy or human judgement. It gives teams a cleaner operating system for a process that is often too informal for the influence it has on hiring decisions.

## FAQ

**Q: Are employment reference checks legal in Australia?**  
**A:** Employment reference checks are common in Australia, but they should be handled with candidate notice, consent, privacy controls, job-related questions and fair decision-making. Get legal advice for high-risk or regulated roles.

**Q: Can an Australian employer contact a current manager for a reference?**  
**A:** The safer approach is to get explicit candidate permission and respect any instruction not to contact a current employer. If the candidate says no, use suitable alternatives.

**Q: Can recruiters contact someone the candidate did not nominate?**  
**A:** This is risky without notice and consent. OAIC and Victorian public sector guidance both point toward notifying or getting consent before contacting non-nominated referees.

**Q: What should an employment reference check ask?**  
**A:** Ask about the working relationship, responsibilities, role-related performance, strengths, development areas, conduct and relevant examples. Keep questions tied to the role.

**Q: What questions should Australian employers avoid in reference checks?**  
**A:** Avoid questions about protected attributes, health, family responsibilities, religion, politics, age, disability, pregnancy, personal life or vague culture fit. If irrelevant information is volunteered, do not use it as decision evidence.

**Q: Are referee reports personal information?**  
**A:** They can be. OAIC guidance says referee comments about a job applicant's career, performance, attitudes and aptitude can be personal information about the applicant and may also be personal information about the referee.

**Q: Can candidates access reference check notes?**  
**A:** Sometimes. OAIC guidance says job applicants may be able to access information about themselves, including information relating to a referee's report, subject to exceptions. Organisations should avoid promising absolute confidentiality to referees.

**Q: Should reference checks be automated in Australia?**  
**A:** Automation can help when it improves consent capture, consistency, reminders, evidence quality, access control and human review. It should not turn reference feedback into an opaque or unreviewed hiring decision.

**Q: How many references should Australian employers check?**  
**A:** There is no universal number for every private-sector role. Many teams use two role-relevant referees for preferred candidates, with more checks for senior, regulated or high-risk roles.

**Q: Is a reference check the same as a background check?**  
**A:** No. Reference checks gather work-performance evidence from people who observed the candidate. Background checks may verify identity, work rights, qualifications, criminal history or professional registration, depending on the role.

## Ready to Improve Reference Checks in Australia?

If your reference checks depend on informal calls, inconsistent notes, backchannel conversations or manual chase, it is worth tightening the workflow. [Book a Skill Society demo](https://skillsociety.com.au/booking?utm_source=blog&utm_medium=cta&utm_campaign=employment-reference-checks-australia-final) to see a more structured approach to employment reference checks in Australia.

## Sources

- [OAIC employment privacy guidance](https://www.oaic.gov.au/privacy/your-privacy-rights/more-privacy-rights/employment)
- [OAIC agency referee reports](https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/government-agencies/agency-referee-reports)
- [OAIC what is personal information?](https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/handling-personal-information/what-is-personal-information)
- [OAIC APP 6 use or disclosure of personal information](https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-6-app-6-use-or-disclosure-of-personal-information)
- [OAIC employee records exemption](https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/organisations/employee-records-exemption)
- [OAIC guidance on privacy and commercially available AI products](https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/guidance-on-privacy-and-the-use-of-commercially-available-ai-products)
- [Attorney-General's Department privacy overview](https://www.ag.gov.au/rights-and-protections/privacy)
- [Fair Work Ombudsman workplace privacy best practice guide](https://www.fairwork.gov.au/tools-and-resources/best-practice-guides/workplace-privacy)
- [Fair Work Ombudsman protection from discrimination at work](https://www.fairwork.gov.au/employment-conditions/protections-at-work/protection-from-discrimination-at-work)
- [Victorian Public Sector Commission guidance for integrity in recruitment](https://www.vpsc.vic.gov.au/recruiting-employees/recruitment-guidance/guidance-integrity-recruitment)
- [Victorian Public Sector Commission executive reference checks](https://www.vpsc.vic.gov.au/recruiting-employees/recruitment-guidance/pre-employment-and-misconduct-screening/executive-reference-checks)
- [Office of the Victorian Information Commissioner privacy during recruitment](https://ovic.vic.gov.au/privacy/resources-for-organisations/privacy-during-recruitment/)