The regulation doesn’t specify what is required as part of the criminal background check. You can obtain these through law enforcement or a commercial company. If you obtain through a commercial company just ensure you do due diligence as you would on any third party service provider.