Is it legal to do these checks?

Yes, we work within the Guidelines and Principles of the Privacy Act and no checks are conducted without the signed authorisation of the applicant.