Put a simple, consistent reference policy in place. Route every request to one trained point of contact (usually HR), share only information your documentation supports, and answer the specific question asked rather than volunteering extra commentary. Asking departing employees to sign a release that authorizes reference disclosures — and treating every employee the same way — further reduces your exposure.