A back-channel is a call to someone the candidate did not list. Boards like it because supplied references feel staged, and they are right that supplied references are staged. They are wrong about the remedy. On a blind general counsel succession the remedy is not a quieter leak. The Boston medtech case states the failure mode without decoration: everyone relaxes, someone quietly asks around, and by week three the market is trading the name. That is not a rate. It is the published account of how this kind of search gets bungled. The file itself was run the other way. Blind both ways. Company unnamed until mutual interest. Sitting GC not shopped. No posting. Four dossiers on day 24.
The density of the market is why the failure mode is fast. The Boston case describes a life-sciences field in which everyone lunches, and a legal department of eight to twenty lawyers. A clumsy call to a friend who might know someone is a leak because the friend can do the arithmetic: medtech, Boston, a GC-shaped question, this month. Private equity sponsors repeat the error one layer up. An operating partner phones a former colleague at the candidate’s current fund, or at the law firm on the carve-out, “just to get a sense.” The colleague does not experience that call as informal. They experience it as the seat being open. The Houston deputy search was explicit about the document that had to be confirmed — the carve-out, the transition agreement, the securities calendar — and it was confirmed in a dossier, not in a sponsor’s side conversation.
The handling rule is short. No back-channel before mutual interest. After mutual interest, a named list of people who saw the named work, told to the candidate as categories rather than as a surprise, placed by the search and not by individual directors, written up as findings with the question that was asked. Disagreement between a referee and the CV goes in the dossier as a gap, not as a verdict delivered in the corridor. If a director has already made the call, the search needs to know the same day: who, what was asked, what was said, whether the company was named. Pretending the call did not happen is how the second call happens.
There is a legal version of the same mess, and it is not optional once a vendor is in the chain. The Consumer Financial Protection Bureau’s Circular 2024-06, issued 24 October 2024, says an employer may not use background dossiers, scores, or similar third-party reports for hiring and then skip the Fair Credit Reporting Act. Those dossiers are often consumer reports. Permission comes first. Notice comes before adverse action and with it: a copy of the report, and the statement of rights. The FTC’s guide for employers, Using Consumer Reports: What Employers Need to Know, is the same sequence, starting with a standalone written disclosure and written authorization. A conversation the board holds itself is not, by itself, a consumer report. A consumer report is a communication from a consumer reporting agency. The moment a vendor compiles public records, employment history, or interview notes into a product the board relies on, the circular applies to that product. Adding a director’s own calls on top does not turn the vendor’s half off. Whether a search firm’s written memorandum is itself that product is a question for the company’s counsel. The safe operating rule is the FTC sequence whenever someone other than the company assembles the file.