=
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk
Estimated reading time: 6 minutes
Key takeaways
- Disclose → Authorize → Order: Always provide a standalone FCRA disclosure and obtain written authorization before requesting a consumer report.
- Notify before you act: Send a pre-adverse action packet (report + Summary of Rights) and allow a reasonable chance to respond.
- Document everything: Keep disclosures, reports, notices, and individualized assessments in each candidate file.
- Follow state/local rules: Maintain a jurisdictional matrix and apply the stricter rule when screening across locations.
Why the FCRA matters for hiring managers
The Fair Credit Reporting Act (FCRA) governs how employers use consumer reports—including background checks, criminal history, and credit reports—for employment decisions. Its core goals are accuracy, transparency, and the candidate’s right to dispute information. Noncompliance can lead to private lawsuits, regulatory enforcement, fines, and reputational harm. Importantly, even when you outsource searches, the employer (the user of the report) retains key legal duties.
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk — A Step-by-Step Checklist
Follow these steps every time you intend to use a consumer report. Treat this as your operational checklist.
1) Confirm permissible purpose
- Before ordering a report, confirm the purpose is permitted under the FCRA (employment is a permissible purpose).
- Don’t order reports “just in case.”
2) Use a qualified consumer reporting agency (CRA)
- Work with a background screening firm experienced in employment screening.
- Ensure they operate under FCRA rules, return detailed reports, and supply the “Summary of Rights.”
3) Provide a standalone disclosure and get written authorization
- Give the candidate a clear, conspicuous disclosure that a consumer report may be obtained for employment purposes. This must be a standalone document—not buried in an application or handbook.
- Obtain written authorization (electronic consent is acceptable) prior to requesting the report.
- Sample short disclosure:
“We may obtain a consumer report for employment purposes. If we take adverse action based on that report, you will be provided notice and an opportunity to respond.”
4) Keep a signed copy
Save the signed disclosure/authorization in the candidate’s file. Retention and auditability matter.
5) Review the report carefully and verify accuracy
Check names, dates, and jurisdictions. Watch for identity mismatches and stale or unverified records. If something looks off, request clarifying searches or reach out to the CRA.
6) For potential adverse actions, provide pre-adverse action materials
If you’re considering not hiring (or changing terms) because of report content, promptly send:
- A copy of the consumer report used
- The CRA’s Summary of Rights under the FCRA
- A clear statement that the report may be used to take adverse action
Allow a reasonable period for the candidate to respond (best practice: minimum of five business days, though the FCRA requires a “reasonable opportunity”).
7) Make an individualized assessment (where applicable)
For criminal records, perform an individualized assessment that considers the nature of the offense, time passed, and the job’s duties. Document your rationale.
8) Send the final adverse action notice when applicable
If you decide not to hire (or change terms) based on the report, issue a final adverse action notice that includes:
- Statement of adverse action
- Name, address, and phone number of the CRA that provided the report
- Statement that the CRA did not make the employment decision and cannot give reasons
- Notice of the candidate’s right to dispute the accuracy/completeness of the report
- Notice of the candidate’s right to obtain a free report from the CRA within 60 days
9) Certify compliance to your CRA when ordering
Many CRAs require certification that you have a permissible purpose and obtained written authorization. Complete the CRA’s certification accurately.
10) Record retention and audit trail
Keep copies of disclosures, authorizations, reports, pre- and final adverse action notices, and your rationale. Retention timelines vary—retain records at least for any period required by federal or state law and long enough to respond to disputes (commonly 2–5 years).
How to handle adverse action — the exact steps that matter
Handle adverse action deliberately: provide notice, allow response, assess individually where required, and document every step.
Pre-adverse action: timing and content
Send the candidate:
- A copy of the report you relied on
- The CRA’s Summary of Rights
- A clear notice that adverse action may follow
This gives the candidate a chance to correct identity errors or explain context.
Final adverse action: required elements
The final notice must include:
- Notice of the action taken
- Identification of the CRA (name, address, phone)
- A statement that the CRA did not make the decision and cannot provide reasons
- Notice of dispute rights and right to obtain a free report within 60 days
State and local restrictions — don’t rely on federal rules alone
Many jurisdictions layer additional rules on top of the FCRA. Examples include:
- Ban-the-box and timing restrictions: Some states/cities prohibit asking about criminal history early or impose timing limits.
- Criminal history limitations: Certain convictions may be off-limits for particular positions.
- Reporting and notice variations: State law can change adverse action procedures and retention requirements.
Action: Maintain a compliance matrix for the states and localities where you hire. When screening across jurisdictions, follow the stricter rule.
Common pitfalls and how to avoid them
- Burying the disclosure: Keep the disclosure standalone. Embedding it in an application is risky.
- Skipping pre-adverse action: Treat the pre-adverse packet as nonoptional—skipping it invites disputes and litigation.
- Overreliance on criminal records: Applying blanket bans (e.g., “no felonies”) can create disparate impact claims. Always assess relevance and time elapsed.
- Poor recordkeeping: Missing authorizations or failure to record communications undermines your defense.
- Ignoring state/local rules: A one-size-fits-all process breaks down across jurisdictions.
Practical tools and quick phrasing for day-to-day use
Keep these phrases and practices on your desk for consistency.
- Minimal disclosure line (standalone):
“We may obtain a consumer report to assist in making an employment decision. By signing below, you authorize the employer to obtain such a report.” - Consent confirmation (electronic):
“I authorize [Company] to obtain consumer reports for employment purposes.” - Pre-adverse notice header:
“Notice Regarding Information in Your Consumer Report” - Final adverse action sentence:
“We are unable to offer you employment at this time based in whole or in part on information contained in a consumer report from [CRA name].”
Documents to store in each candidate file:
- Signed FCRA disclosure and authorization
- Copy of consumer report(s) used
- Date and content of pre-adverse action notice
- Candidate response (if any)
- Final adverse action notice
- Documentation of individualized assessment and hiring rationale
Final checklist — what to tape to your desk right now
- Obtain a standalone written disclosure and signed authorization before ordering a background check.
- Confirm permissible purpose and certify to your CRA.
- Provide the candidate a copy of the report and FCRA Summary of Rights before taking adverse action; wait a reasonable time.
- If denying employment based on the report, send a final adverse action notice with the CRA’s contact info and dispute rights.
- Keep all documents and a clear audit trail; follow state/local rules.
Tip: Tape this list to your desk and use it as your quick reference during hiring decisions.
Conclusion
The FCRA is straightforward when you break it into steps: disclose, authorize, verify, notify, and document. Following this checklist reduces legal risk, improves candidate experience, and makes your screening defensible. If you’d like help operationalizing these steps—creating templates, mapping state rules, or integrating FCRA-compliant workflows—Rapid Hire Solutions can offer practical support and screening expertise to keep your hiring process compliant and efficient.
FAQ
Do I need a separate disclosure document for every candidate?
Yes. The FCRA requires a clear and conspicuous disclosure presented as a standalone document prior to ordering a consumer report. Embedding it in an application or handbook is risky—keep a separate disclosure and the candidate’s signed authorization in the file.
How long should I wait after sending a pre-adverse packet?
The FCRA requires a reasonable opportunity to respond. Best practice is at least five business days, which gives the candidate time to review the report, correct identity errors, or provide context. Document the timeframe you use.
Can I use a credit report for hiring?
Possibly, but federal and state laws restrict use of credit reports for employment. Some states prohibit using credit history except in narrow roles. If you intend to use credit reports, confirm permissible purpose and comply with any additional state restrictions.
What records should I retain and for how long?
Retain the signed disclosure and authorization, copies of consumer reports used, pre- and final adverse notices, candidate responses, and documentation of individualized assessments and hiring rationale. Timelines vary by jurisdiction; commonly retain for 2–5 years or longer if required by state law.