The answer to this question is highly dependent on your state and country. With that being said, most countries, such as the US, will require you to send an FCRA notice or similar. Generally speaking, you’ll need the candidate to consent and sign it, with the notice containing at least: