FCRA Checklist Every Hiring Manager Should Use

=

The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk

Estimated reading time: 6 minutes

Key takeaways

• Follow a step-by-step FCRA workflow every time you order or act on a consumer report to reduce legal risk.
• Use stand-alone disclosures and separate authorizations — never bundle the consumer report disclosure with other documents.
• Provide pre-adverse materials and an adverse action notice with required CRA contact info and the “Summary of Rights Under the FCRA.”
• Document and retain records and train hiring managers on state/local variations and individualized assessment for criminal records.

Table of contents

• Quick primer: the FCRA basics you should have memorized
• The FCRA checklist: step-by-step workflow
• Before ordering a report
• When ordering/receiving the report
• Pre-adverse action steps
• If you decide to take adverse action
• Ongoing compliance and records
• Timing and practical guidance
• Common pitfalls
• Practical takeaways for employers
• Final note on risk reduction and good hiring practices
• Contact: Rapid Hire Solutions
• FAQ

Quick primer: the FCRA basics you should have memorized

Disclosure and authorization: Before ordering a consumer report, provide a stand-alone, written disclosure and get the applicant’s explicit authorization. The disclosure cannot be bundled with other documents or mixed into an employment application.

Permissible purpose: Employment screening is a permissible purpose for consumer reporting — you must certify that to the consumer reporting agency (CRA).

Pre-adverse action: If you’re contemplating a negative employment decision based on a report, furnish the applicant with a copy of the report and the “Summary of Rights Under the FCRA” and allow them time to respond.

Adverse action notice: After taking an adverse action, send a notice that includes the CRA’s contact info, a statement that the CRA did not make the adverse decision, and information about the applicant’s right to dispute the report.

Investigative consumer reports and credit checks: Special disclosures and limitations apply for investigative reports (e.g., third-party interviews) and for credit reports — many states restrict employer use of credit information.

Recordkeeping and certification: Maintain documentation and complete required certifications to the CRA.

The FCRA checklist every hiring manager should print and tape to their desk

Use this step-by-step workflow every time you order or act on a consumer report.

Before ordering a report

• Confirm permissible purpose: Verify the role legally allows a consumer report and that state/local laws don’t prohibit the specific check (e.g., credit checks, arrest records).
• Use a compliant, reputable CRA: Only obtain reports through a consumer reporting agency that follows FCRA processes and can provide the required disclosures and dispute handling.
• Prepare the disclosure package: Use a stand-alone written disclosure that clearly states you may obtain a consumer report for employment purposes. Do not include other consent or releases in the same document.
• Obtain signed authorization: Secure the applicant’s signature (paper or E-sign compliant) on a separate authorization form. Retain this authorization.
• Collect any role-specific permissions: If you will run an investigative consumer report or access credit information, provide the specific additional disclosure required by FCRA and any state statutes.

When ordering/receiving the report

• Certify to the CRA: Confirm you’ve provided the required disclosure and authorization and that you will comply with FCRA adverse action procedures.
• Verify identity match: Double-check the report is for the correct applicant (SSN, DOB, current and prior addresses). If identity mismatches appear, pause and clarify with the CRA.
• Flag items that could trigger adverse action: Note convictions, employment verification failures, license issues, or other disqualifying information that might affect hiring.

If the report contains potentially disqualifying information (the pre-adverse action steps)

Prepare a pre-adverse action packet that gives the applicant a fair chance to respond before you take any negative step.

• Pre-adverse packet should include:
  • A copy of the consumer report provided by the CRA
  • A copy of the “Summary of Rights Under the FCRA”
  • A clear explanation of the specific issues in the report that you’re relying on
• Give the candidate time to respond: Allow a reasonable window for the applicant to review and rebut or correct errors (commonly five business days, but document your policy).
• Suspend final decision if applicant disputes: If the applicant disputes accuracy, order an immediate reinvestigation with the CRA and delay adverse action until the report is updated or the dispute resolved.

If you decide to take adverse action

• Send an adverse action notice that includes:
  • The name, address, and phone number of the CRA that provided the report
  • A statement that the CRA did not make the adverse decision and cannot provide the reasons
  • A statement of the applicant’s right to obtain a free copy of the consumer report within 60 days and to dispute the accuracy of the information
  • Any company-specific appeal or reconsideration process (optional but helpful)
• Document the timeline: Save dates and copies of the pre-adverse packet, candidate response (if any), the CRA report, and the adverse action notice.

Ongoing compliance and records

• Keep documentation: Store disclosure, authorization, copy of the report, pre-adverse/adverse action communications, and certification to the CRA for at least two years (or longer if your state requires).
• Train hiring managers: Ensure anyone involved in making hiring decisions understands FCRA steps, individualized assessment practices for criminal records, and state/local variations.
• Review policies annually: Reconfirm permissible uses (credit checks, driving records, etc.) and update templates as laws change.
• Limit information access: Only HR or decision-makers who need the report should have access to it; follow your data retention and secure disposal policies.

Timing and practical guidance

• Pre-adverse notice window: FCRA does not set a fixed wait time, but best practice is to allow at least five business days for the candidate to contest inaccuracies. Document your chosen timeframe consistently.
• Speed versus compliance: Quick hiring is important, but don’t shortcut pre-adverse and adverse steps — errors often lead to more delay and legal risk than a consistent FCRA process.
• Electronic handling: Electronic disclosures and authorizations are permitted under the E-SIGN Act; ensure your vendor/platform meets electronic signature and recordkeeping standards.

Common pitfalls that cause the biggest compliance headaches

• Bundling consent: Combining the consumer report disclosure with other HR forms (e.g., application, arbitration agreement) — don’t do it.
• Ignoring state/local law: Many jurisdictions limit use of arrest records, credit checks, or impose “ban-the-box” rules. National templates must be adapted.
• Failing to provide the “Summary of Rights”: Omission during pre-adverse or adverse steps is a frequent violation.
• Omitting CRA contact info in the adverse notice: This is a technical but critical requirement that plaintiffs’ attorneys often challenge.
• No individualized assessment for criminal records: Blanket exclusion policies increase risk of discrimination claims. Consider job-relatedness and time passed since conviction.

Practical takeaways for employers

• Standardize forms and scripts: Use vetted, stand-alone disclosure and authorization templates and pre-approved adverse action language.
• Build the process into your ATS: Ensure background check triggers, document uploads, and alerting for pre-adverse steps are automated where possible.
• Train decision-makers: Require hiring managers to complete brief FCRA training and make the checklist visible at the point of hire.
• Audit periodically: Conduct internal audits of a sample of background checks to confirm the disclosure, authorization, pre-adverse, and adverse steps were followed and records retained.
• Partner with a knowledgeable CRA: Work with a vendor that understands FCRA nuances and state laws and provides clear reporting and dispute-handling workflows.

Quote: “Treat FCRA compliance as central to your hiring workflow, not an administrative afterthought. Consistent adherence reduces legal risk, creates fairer outcomes for candidates, and speeds hiring by avoiding rework when errors surface.”

Final note on risk reduction and good hiring practices

Summary: Treat FCRA compliance as central to your hiring workflow. Consistent adherence reduces legal risk, creates fairer outcomes for candidates, and speeds hiring by avoiding rework when errors surface.

If you want help: Rapid Hire Solutions

If you want a ready-to-print FCRA desk checklist or a review of your current background screening templates and workflows, Rapid Hire Solutions helps HR teams implement compliant procedures, train hiring managers, and audit screening practices to reduce hiring risk. Contact us to get a compliance-ready checklist and a short assessment of your screening program.

FAQ