Idaho Code 67-3008 Background Check-small Detail, Big Impact
- 01. What Idaho Code 67-3008 Means for Background Checks
- 02. Core statutory framework (67-3008 overview)
- 03. How 67-3008 shapes fingerprint background checks
- 04. Real-world timing and stat-like examples
- 05. Step-by-step process for an Idaho background check under 67-3008
- 06. Illustrative table: Key elements of Idaho background checks under 67-3008
What Idaho Code 67-3008 Means for Background Checks
Idaho Code Title 67, Chapter 30, Section Idaho Code 67-3008 governs the release and handling of criminal history record information, including who may obtain and disseminate fingerprint-based background checks and under what conditions. In practical terms, it both establishes the Idaho State Police Bureau of Criminal Identification as the state's central repository for criminal-history data and sets strict limits on who can share or republish that information, especially to private employers or "private agencies."
Core statutory framework (67-3008 overview)
Section 67-3008 sits within Title 67's "Criminal history records" chapter and functions as Idaho's primary statute on when and how criminal-history information may be released. Under the current text, releases of criminal-history records are limited to specific, enumerated categories such as criminal-justice agencies, certain licensing bodies, and other authorized entities named in the statute or its administrative rules. The law also bars most "private agencies" from disseminating criminal-history records beyond the party that requested them, effectively preventing third-party background-check vendors from re-selling or broadly circulating raw criminal-history data.
For employers, the key takeaway is that routine employment background checks must be requested through or via the Idaho State Police system, typically using fingerprint-based submissions processed by the Bureau of Criminal Identification. This means that any organization running a criminal-history check in Idaho has to comply not only with 67-3008 but also with related administrative rules such as IDAPA 16.05.06, which spell out eligibility, timing, and record-source requirements. Failure to route checks through the proper channels can expose an employer to statutory liability and potential regulatory penalties.
How 67-3008 shapes fingerprint background checks
One of the most concrete impacts of 67-3008 is its treatment of fingerprint submissions. The statute effectively designates the Bureau of Criminal Identification as the state's sole source for fingerprint submissions for criminal-justice and applicant purposes, meaning that private companies cannot independently "re-submit" fingerprints for additional criminal-history pulls once a state-authorized check has been done. This has been reinforced in recent legislative updates that tighten procedures for submitting fingerprints of certain individuals, particularly in regulated sectors such as healthcare and long-term care.
For regulated employers-such as skilled nursing facilities and assisted living operations-the law works in tandem with Idaho Administrative Rules requiring fingerprint-based criminal history and background checks that include checks of the FBI, Idaho State Police, sexual-offender registries, and other national databases. These rules require that "direct resident access" employees be cleared before unrestricted access to vulnerable populations, and they mandate that fingerprints be submitted within 21 days of hire or contract. Because 67-3008 restricts who may disseminate those records, employers must obtain written findings from the checking entity and retain them in compliance with both state and federal employment-law standards.
- Criminal-justice agencies responsible for law-enforcement or corrections.
- Licensing and regulatory boards that require background checks for professional occupational licensing (e.g., nursing, teaching, security).
- Licensed healthcare facilities and assisted-living operations conducting resident-protection background checks.
- Certain government entities administering public-safety programs or firearm-related permits.
Private employers typically must go through the state system or a compliant third-party processor that adheres to 67-3008's dissemination rules, and in many cases must obtain the applicant's written consent before requesting a criminal-history check.
Real-world timing and stat-like examples
In regulated healthcare settings, Idaho Administrative Code rules require that "criminal history background checks" be completed so that results are received before an employee begins unsupervised direct contact with residents. For new hires, fingerprints must be submitted within 21 days of the hire or contract date, and the facility must document both the check and any written findings. If a disqualifying crime is identified-such as certain violent or sexual offenses-the individual may be barred from direct resident access, subject to the specific prohibitions outlined in IDAPA 16.05.06.
A recent fee adjustment illustrates how the 67-3008 ecosystem translates into tangible costs. As of late 2025, the state-wide fingerprint-based criminal background check fee through the Idaho State Police rose from 20 to 25 dollars, with the combined state-and-federal check moving from about 27 to 37 dollars for many employment-related screens. These fees are paid by the requesting entity or applicant and are passed through the Bureau of Criminal Identification, which then releases the authorized report under 67-3008's dissemination rules.
Step-by-step process for an Idaho background check under 67-3008
For an employer or licensing body operating under 67-3008, a compliant background-check workflow typically follows something like this sequence:
- Identify the legal authority under which the background check is required (e.g., healthcare rules, occupational licensing, or other state statutes that reference 67-3008).
- Provide the applicant with written notice that a criminal-history background check will be requested and obtain their written consent.
- Collect the applicant's biometric data (usually fingerprints) through a state-approved vendor or live-scan provider.
- Submit the fingerprints to the Idaho State Police Bureau of Criminal Identification, which performs the state-level check.
- Request a federal check through the FBI (often via the same vendor) if the position or statute calls for it.
- Receive the official findings from the checking entity and retain them in the personnel or licensure file in accordance with 67-3008 and related privacy rules.
- Apply any disqualification or mitigation criteria (e.g., for "disqualifying crimes") in line with the specific administrative rules governing the sector.
This step-by-step approach ensures that the employer remains within the narrow dissemination and release boundaries defined by 67-3008 while still meeting its operational and regulatory obligations.
Illustrative table: Key elements of Idaho background checks under 67-3008
The following table illustrates how different stakeholders interact with 67-3008 in day-to-day practice.
| Stakeholder | Role under 67-3008 | Key obligation or limit |
|---|---|---|
| Bureau of Criminal Identification | Primary repository and release authority for state criminal-history records. | Must release records only to authorized entities listed in the statute or rules. |
| Private agency | Often a background-check vendor or HR software provider. | May not disseminate criminal-history records beyond the original requesting party. |
| Employer | End-user of the background-check report. | Must obtain consent and handle reports in compliance with 67-3008 privacy limits and FCRA. |
| Skilled nursing facility | Regulated healthcare entity. | Must conduct fingerprint-based checks on direct-resident-access staff within 21 days of hire. |
| Applicant | Subject of the criminal-history record. | Must be informed of the check and given an opportunity to review or dispute findings. |
Everything you need to know about Idaho Code 67 3008 Background Check Small Detail Big Impact
Who is allowed to run a background check under 67-3008?
Idaho Code 67-3008 does not allow just any employer to directly access raw criminal-history records; instead, it channels access through designated entities. Eligible requesters generally include:
Can a private company disseminate someone's criminal history?
No. Under subsection (6) of 67-3008, "a person or private agency or public agency, other than the department, shall not disseminate criminal history record information" to anyone other than the original requesting party. This means that a private background-check vendor, for example, cannot legally republish an individual's criminal-history report on a public database or to other potential employers without violating the statute. The restriction is designed to protect individual privacy and prevent the sort of unregulated "criminal record brokering" that has drawn criticism in other states.
What counts as a "criminal history record" under 67-3008?
Legally, the term "criminal history record" in 67-3008 encompasses an official compilation of information about an individual's encounters with the criminal-justice system, including arrests, charges, dispositions, and sometimes cellular or mug-shot data held by the state. It does not generally include informal or non-criminal information such as credit history or civil-court records, which may be obtained separately under federal or common-law rules. The statute is written to distinguish between formal criminal-history data held by the state and other background-related information, which can be critical when employers structure multi-vendor screening packages.
How does 67-3008 affect consent and notice requirements?
Although 67-3008 itself focuses on the release and dissemination of records, it indirectly shapes how employers must obtain consent for background check requests. Idaho employers that seek criminal-history information from state agencies are expected to comply with both the statute and parallel federal requirements, such as the Fair Credit Reporting Act (FCRA), which mandate written notice and consent before initiating a consumer-report-style background check. In practice, this means that an employer must provide a clear, standalone disclosure that it will request criminal-history information and obtain a signed authorization from the applicant, often routed through a compliant third-party processor that then interfaces with the Idaho State Police under 67-3008.
What happens if a background check reveals old convictions?
Under Idaho's regime, not every criminal record automatically bars employment or licensure, but certain "disqualifying crimes" are spelled out in administrative rules such as IDAPA 16.05.06, which apply to healthcare and similar sectors. For other positions, employers generally must apply the same fair-chance and individualized-assessment standards encouraged by federal guidance, even though 67-3008 does not itself define which offenses are "disqualifying" outside of those regulated systems. Best-practice guidance suggests that employers document how each identified conviction relates to the specific duties of the role, especially when considering criminal history record information that is years or decades old.
Can employers reuse a prior background check under 67-3008?
Yes, but with specific conditions. Idaho administrative rules allow a new employer to reuse a prior criminal-history and background check if the previous check was completed within the last three years, the findings are documented, and the new employer runs a state-only follow-up through the Idaho State Police that reveals no new disqualifying crimes. This "three-year reuse" rule is designed to reduce redundant fingerprint submissions while still ensuring that the most recent state criminal-history data is reviewed. However, the new employer may still choose to require a fresh, full background check at its discretion, even when a prior compliant check exists.
Does 67-3008 conflict with federal background-check laws?
67-3008 does not invalidate federal regimes such as the FCRA but instead operates alongside them. Federal law governs how employers may obtain and use consumer reports, including traditional background-check packages, while 67-3008 controls the release and dissemination of the underlying state criminal-history records held by the Idaho State Police. In practice, this means that employers must comply with both layers: FCRA-style notice and consent procedures plus the narrower dissemination rules of 67-3008 whenever they request Idaho criminal-history data.
What challenges do employers face under 67-3008?
One recurring challenge is aligning the statute's strict dissemination limits with the realities of multi-vendor screening platforms, where several vendors may touch the same data. Employers must ensure that each vendor is contractually barred from re-sharing or re-publishing raw criminal-history records, precisely as required by 67-3008(6). Another issue is timing: because certain regulated sectors must clear employees before they begin direct resident access, any delays in fingerprint processing or result transmission can create operational bottlenecks. Finally, fee changes-such as the recent move from 20 to 25 dollars for a state-only check-can affect the cost-benefit calculus for smaller employers that conduct frequent background screenings.
What emerging trends are shaping 67-3008 implementation?
Recent legislative and administrative activity has focused on tightening the process for submitting fingerprints of certain high-risk individuals and expanding the scope of databases checked, such as sexual-offender and child-protection registries. At the same time, advocacy groups and employers are pushing for clearer guidance on how 67-3008's restrictions apply to new technologies like live-scan kiosks and cloud-based background-check dashboards. These developments suggest that the practical interpretation of "criminal history record information" and who may disseminate it will continue to evolve, even as the core prohibition in 67-3008 remains intact.