Throw away account.
I've got a coworker that got access to the resume of a potential hire who would end up being their supervisor. They then called their references and asked them questions about the applicant. I'm not sure who the references were or what the discussions were about. Only that they had told someone else that they had made those calls and “asked questions” about the applicant.
This applicant could be my supervisor and my role has nothing to do with HR or hiring anyone. I'm just a drone.
I feel like they've broken a law but I'm fully ignorant on hiring practices and how the law works with this. I also feel like this is a big deal and am unsure what I should do about it. Coming here for insights. Thanks in advance.