If your organization works with children in any capacity, background check compliance is not optional — and it's more complex than most people expect. The rules come from multiple sources at once: a federal mandate tied to childcare funding, your state's specific licensing requirements, the Fair Credit Reporting Act, and in some cases additional sector-specific laws. Organizations that miss even one layer of this compliance picture create real legal exposure and, more importantly, real risk to the children in their care. Here's how to get it right.
Child safety background check requirements are the legally mandated screening standards that apply to any organization employing, contracting, or accepting volunteers who will have unsupervised access to children. These requirements establish who must be screened, what checks must be run, how often rescreening must occur, and which offenses disqualify someone from working with minors.
The federal baseline comes from the Child Care and Development Block Grant (CCDBG) Act of 2014, administered by the U.S. Department of Health and Human Services (HHS). Under the CCDBG Act, all states are required to conduct comprehensive criminal background checks for child care staff in licensed, regulated, and registered programs — including any individual with unsupervised access to children, not just those who work directly with them.
The federal mandate covers a comprehensive, multi-component check that includes:
That's the federal floor. States build on top of it — and many add additional requirements, more frequent rescreening intervals, expanded disqualifying offenses, and sector-specific rules that go well beyond what CCDBG mandates. For a full breakdown of state-specific school requirements, see our guide on what background checks schools legally need.
The stakes here are straightforward: the people in your care are children. The legal and human consequences of getting this wrong are severe.
Step 1: Determine which laws apply to your organization. The CCDBG Act applies to licensed and regulated childcare programs. State education codes apply to K-12 schools. Youth sports organizations, nonprofits, churches, and faith-based organizations may fall under state-specific child protection statutes or organizational accreditation standards even when federal law doesn't directly mandate it. Start by identifying your specific sector, your state's licensing agency, and any accrediting bodies your organization is affiliated with. Your state's childcare licensing agency is the authoritative starting point for licensed programs.
Step 2: Run the full federally required check — not a shortcut version. The CCDBG-compliant background check is not a simple name search. It requires all of the following, completed before the individual has unsupervised access to children:
Skipping any component — even one — is non-compliant. A national criminal database search is also strongly recommended as an additional layer, since state repositories don't always capture out-of-state records in real time. Learn more about what a complete background check includes.
Step 3: Screen everyone with unsupervised access — not just paid employees. Federal law is explicit: the requirement extends to all staff members who have unsupervised access to children, including those who don't work directly with children — bus drivers, kitchen staff, custodians, and administrative employees. It also extends to volunteers with unsupervised access, contractors, and in family childcare settings, all adults over 18 who reside in the home.
This is the area where the most compliance gaps exist. Organizations that carefully screen direct-care staff but apply a lower standard to volunteers, part-time contractors, or support staff are creating the same liability they're trying to avoid. If someone can be alone with a child, they need the same level of screening as anyone else in that role.
Step 4: Follow FCRA procedures for every check. Before ordering any background check through a third-party provider, you must:
If a background check result may negatively affect a hiring or volunteer placement decision, the two-step adverse action process — pre-adverse action notice, waiting period, then final adverse action notice — is required. Getting this wrong exposes your organization to FCRA lawsuits that have nothing to do with child safety but can be just as damaging. Bchex automates the adverse action workflow and flags state-specific requirements automatically. Learn more in our guide to adverse action in background screening.
Step 5: Build a rescreening and monitoring program — don't just rescreen every five years. The federal minimum is a background check every five years. That's a starting point, not a best practice. In the four years and eleven months between rescreens, someone's circumstances can change dramatically — and your organization may have no idea.
The more defensible and effective approach is Chex365 continuous monitoring — automated, real-time alerts the moment new criminal activity is reported for anyone enrolled in the program. For organizations working with children, this means you're not the last to know. You're notified immediately, before an incident has the chance to occur. Continuous monitoring doesn't replace the comprehensive initial check — it fills every gap that exists between them.
Step 6: Control who enters your facility — not just who works in it. Background checks on staff and volunteers protect against internal risk. But what about visitors, parents, contractors, and other adults who enter your facility on a regular basis? A visitor management system like Chexpass runs instant sex offender checks at the point of entry — so your child safety screening extends all the way to the front door, not just to the HR process.
Step 7: Document and maintain records of every check. Every disclosure form, written consent, background check result, and adverse action notice needs to be retained. Compliance experts recommend a minimum of five years for FCRA-related records. In the event of a licensing audit, an investigation, or a legal claim, documentation is your primary defense. Bchex maintains a complete, searchable compliance record for every check run through the platform, automatically.
Complying with child safety background check requirements means more than running a criminal check at hire. It means running the full federally required multi-component search, covering everyone with unsupervised access to children — including volunteers and support staff — following FCRA procedures on every check, and maintaining an ongoing monitoring program that doesn't leave years of blind spots between rescreens. For organizations that take child protection seriously, compliance isn't a burden. It's proof that you've built the kind of program that earns — and deserves — the trust of every family you serve.
Ready to build a child safety screening program that covers every gap? Talk to the Bchex team — we work with childcare providers, schools, nonprofits, and youth organizations across the country to build compliant, complete screening programs that protect children at every point of access.
Q: Does federal law require background checks for childcare workers? Yes. The Child Care and Development Block Grant (CCDBG) Act of 2014 requires all states to conduct comprehensive criminal background checks for staff in licensed child care programs — including anyone with unsupervised access to children, not just direct-care staff. This is a federal mandate, not a recommendation.
Q: What does a federally compliant childcare background check include? A compliant check under the CCDBG Act includes an FBI fingerprint check, a state criminal history check (in the current state and all states of prior residence over five years), a sex offender registry check across all relevant states, and a child abuse and neglect registry check. All components are required — skipping any one of them is non-compliant.
Q: Do volunteer background checks have the same requirements as employee checks? Yes — if a volunteer has unsupervised access to children, federal law applies the same background check requirements as it does to paid employees. This is one of the most common compliance gaps. Learn more about volunteer screening mistakes that put organizations at risk.
Q: How often do background checks need to be renewed for childcare workers? Federal law requires a comprehensive background check at hire and at least once every five years. Many states require more frequent rescreening. Best practice is continuous monitoring — automated alerts that close the gap between formal rescreens entirely. Chex365 by Bchex handles this automatically.
Q: What offenses permanently disqualify someone from working with children? Crimes against children, murder, sexual offenses, child abuse or neglect, kidnapping, violent felonies, and domestic violence are permanent bars in all 50 states. States may add further disqualifying offenses beyond this federal baseline. There are no rehabilitation pathways or waivers for these categories.
Q: Does the FCRA apply to childcare background checks? Yes. Any time a third-party screening provider is used to run a background check — for employees, contractors, or volunteers — the FCRA applies. This means written disclosure, written consent, and proper adverse action procedures are all required, on top of the sector-specific mandates. See our full FCRA compliance guide for details.
Q: Do these requirements apply to nonprofits, churches, and youth sports organizations? It depends on the organization's structure and funding. Licensed and registered childcare programs are directly subject to the CCDBG Act. Nonprofits, churches, and youth sports organizations may fall under state child protection statutes, accreditation standards, or liability standards even when not directly covered by federal childcare law. Regardless of legal mandate, the negligent hiring and retention risk of not screening is the same — and courts treat it accordingly.