In Spain, it is common practice for companies to run background checks of employees and suppliers before entering a contract. However, the range and depth of these checks differ from company to company, and the approach to them (and lawfulness) is not the same internationally. Among them, background checks on criminal records are a particularly sensitive matter. Yet, mixing criminal background checks and data protection regulations may not end well, as particular conditions must be met. How should background checks in Spain be handled?