Due diligence in the legal sense is the care a reasonable person takes before entering into an agreement. In HR practice, it's the systematic pre-decision investigation that prevents expensive surprises later. An HR team that skips due diligence on a target company in an acquisition ends up with unexpected EEOC charges and pension liabilities as part of the deal. An executive hired without proper background checks becomes a scandal when their prior firm's settlement agreement surfaces. A vendor handling employee data without proper certifications creates a breach that lands on the hiring company. Each scenario is preventable with the right process.
M&A HR Due Diligence M&A due diligence on the HR side covers four main areas. Workforce composition: demographics, geography, compensation levels, exempt vs. non-exempt classifications, union presence, and key employee retention risk. Benefits and retirement obligations: health plan liabilities, pension or DB plan funded status, deferred compensation arrangements, executive comp contracts. Compliance posture: open EEOC charges, pending litigation, past enforcement actions, I-9 audit status, wage-and-hour compliance, OSHA history. And culture and engagement: retention patterns, exit-interview themes, employee survey results, prior restructurings.
Each area can produce deal-altering findings. A hidden pension liability or a cluster of harassment cases that hasn't yet surfaced can shift purchase price or change deal structure.
Executive Hiring Due Diligence Senior hires deserve more rigorous due diligence than junior hires because the potential downside is larger. Core elements: education verification, employment history verification, criminal background check (with FCRA-compliant disclosures), civil litigation search, regulatory actions search (especially for finance, healthcare, and licensed professionals), and structured reference checks including back-channel references beyond the candidate-provided list. For truly senior hires, specialized firms run enhanced due diligence that includes media searches, professional network interviews, and verification of stated accomplishments.
What About Reference Checks That Reveal Concerning Information? Document the findings carefully. If the concerning information is verifiable and job-related, it can support a decision not to hire. If it's hearsay or unverifiable, it shouldn't drive the decision because using unverified information can create defamation or discrimination exposure. Work with legal counsel before rejecting a candidate based on concerning due-diligence findings, especially when the findings relate to protected characteristics or prior complaints.
Vendor and Contractor Due Diligence Any vendor handling employee data, performing HR services, or interacting with the workforce should clear due diligence before engagement. SOC 2 Type II reports for data security. Insurance certificates for professional liability and cyber liability. Business continuity and breach response documentation. Sample contracts reviewed by counsel for data-handling and liability terms. And ongoing monitoring, because vendor compliance can erode between the initial due diligence and a later incident.
Running HR Due Diligence as a Discipline Build standardized checklists for each due-diligence context (M&A, executive hire, vendor). Assign clear ownership: HR, legal, and finance share responsibility but the work happens when someone is accountable. Document findings, because in a dispute the existence of due diligence is the employer's best defense against claims the decision was careless. Use HR case management platforms to track due-diligence workflows for sensitive hires and M&A integrations. The compliance and legal teams functions depend on the underlying HR due-diligence work, so integrating the tooling reduces handoff friction. Due diligence that isn't documented might as well not have happened, because the audit trail is what makes it useful in disputes and regulatory reviews.
The Federal Trade Commission publishes FCRA requirements for employment background checks at ftc.gov . The SEC publishes M&A disclosure and due-diligence expectations for public companies at sec.gov .