The regulation doesn’t specify what is required as part of the criminal background check. You can obtain these through law enforcement or a commercial company. If you obtain through a commercial company just ensure you do due diligence as you would on any third party service provider.
Jack’s Compliance Resource offers many products including policy and procedure updates, Director/Senior Manager Updates, Training Manuals, Flowcharts, Checklists and more. To see our Reg Z products click here: Reg Z Marketplace