Background check best practices: Balancing the law with business needs