Continuous Criminal Monitoring vs Periodic Re-Screens: When Each Makes Sense

Continuous criminal monitoring (CCM) is the fastest-growing line item in our industry. The pitch is simple: instead of re-screening every employee annually, the CRA monitors a national arrest-data feed and alerts the employer the moment any covered employee is involved in a new criminal event.

The pitch is correct in operation and incomplete in implementation. Both CCM and periodic re-screens have a place in a mature program; choosing one without the other usually costs more than running both.

Where CCM wins

• Driver and field-service workforces where a new MVR violation or arrest can void carrier insurance overnight.
• Healthcare and human-services environments with FACIS / OIG exclusion exposure.
• Financial-services and fiduciary roles with SEC, FINRA, or NMLS triggers.
• Any role where the cost of one bad day exceeds the cost of monitoring the entire workforce for a year.

Where periodic re-screens still win

• Sectors where coverage gaps in arrest-data feeds (no SCOTUS-style national arrest index exists) leave material exclusions.
• Programs that need to refresh non-criminal components — employment, education, MVR, drug screening — that CCM does not touch.
• Workforces where the cultural cost of perpetual monitoring outweighs the marginal risk.

The compliance landmines unique to CCM

• Each CCM alert is a new consumer report under the FCRA. Each one triggers a fresh pre-adverse action workflow if used adversely.
• CCM cannot use a single 'evergreen' authorization in California, New Jersey, or Minnesota — those states require time-limited authorizations, refreshed periodically.
• Adverse decisions based on arrest-only data (no disposition) are illegal under the EEOC guidance and explicitly under California FEHA.

The SafestHires hybrid model

1. CCM on the criminal layer for every covered employee.
2. Annual full re-screen on the non-criminal layer (employment, education, MVR).
3. Quarterly state-specific authorization refresh in the states that prohibit evergreen consent.
4. Adverse-action workflow on every CCM alert routed through the same two-notice process as a new-hire screen.