=
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk
Estimated reading time: 4 minutes
Key takeaways
- Always obtain a standalone disclosure and written authorization before ordering any consumer report.
- Use FCRA‑compliant CRAs and follow pre-adverse and adverse action procedures exactly.
- Document permissible purpose, keep thorough records, and follow state/local variations.
- Embed the checklist into ATS workflows and train staff to reduce legal risk and disputes.
Why this FCRA checklist matters
The Fair Credit Reporting Act (FCRA) governs how employers may obtain and use consumer reports — including criminal histories, credit reports, and employment verifications — for hiring decisions. Noncompliance can result in statutory damages, mandatory notices, and even the need to rehire or compensate wrongly denied candidates. Beyond legal exposure, mistakes undermine candidate trust and slow hiring.
A concise, repeatable checklist helps you:
- Ensure consistent handling of reports and adverse actions
- Reduce the chance of avoidable disputes and consumer complaints
- Demonstrate defensible, documented hiring practices
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk
Use this checklist every time you order or act on a consumer report for employment purposes. Each item is a discrete compliance step with a quick note about what to watch for.
- Confirm permissible purpose and document it
Verify the background check is for a permissible employment purpose (hiring, promotion, reassignment, retention). Document the business reason in the applicant’s file before ordering the report.
- Obtain clear, standalone written disclosure
Provide a clear, conspicuous disclosure that you may obtain a consumer report for employment purposes. This disclosure should not be buried in an application or combined with other consent language.
- Get written authorization from the candidate
Secure a signed authorization (electronic is acceptable) that expressly permits the employer to obtain a consumer report. Keep the authorization with the candidate’s record.
- Use an FCRA-compliant consumer reporting agency (CRA)
Work with a CRA that follows FCRA procedures and can supply required documents — the consumer report and “A Summary of Your Rights Under the FCRA.”
- Review reports for accuracy and relevance before acting
Assess whether reported items are job-related and accurate. Verify identifiers and dates; if something looks wrong, pause and investigate.
- Provide a pre-adverse action notice when appropriate
If a consumer report could lead to denial or other adverse action, give the candidate a pre-adverse action packet that includes:
- A copy of the consumer report used
- A copy of the CRA’s “Summary of Rights”
- A clear statement that the employer is considering an adverse action and instructions on how to dispute or explain the report
Allow a reasonable time for response (commonly 3–5 business days).
- Take final adverse action properly
If you make an adverse employment decision based wholly or partly on the consumer report, provide an adverse action notice that includes:
- The CRA’s name, address, and phone number
- A statement that the CRA did not make the adverse decision and cannot provide specific reasons
- A statement of the candidate’s right to dispute the accuracy or completeness of the report
- Any required codes or statutory language (as provided by your CRA)
- Keep thorough records
Retain disclosure/authorization forms, copies of reports sent to candidates, pre-adverse/adverse notices, and outcome documentation. Maintain an audit trail that shows dates, decision-makers, and communications.
- Dispose of reports securely
Follow secure disposal procedures for consumer report materials in electronic and paper form to comply with FCRA disposal requirements and data privacy best practices.
- Train staff and restrict access
Limit who can order reports and who can view sensitive report content. Train recruiters and hiring managers on FCRA steps and nondiscrimination obligations.
- Check and follow state and local rules
Confirm state-specific limits on credit checks, arrest records, and timing of background questions (ban-the-box rules). Update forms and process steps accordingly.
- Audit your process regularly
Conduct periodic audits (at least annually or after major process changes) to confirm documentation, notification timing, and CRA compliance.
Quick sample wording (adapt with counsel)
These short templates help standardize disclosure and pre-adverse language. They are starting points — modify to meet state requirements and legal advice.
Standalone disclosure (short): “We may obtain a consumer report that includes criminal, credit, and/or other background information about you for employment purposes. By signing below, you authorize [Employer Name] to obtain such a report.”
Pre-adverse action notice (short): “We have received information in a consumer report that may affect your candidacy. Enclosed is a copy of the report and a summary of your rights under the FCRA. If you believe the report contains inaccurate information, please contact [CRA name and contact] or respond to us within [X business days].”
Adverse action notice (short): “Based in whole or part on information contained in a consumer report from [CRA name], we are unable to offer employment at this time. Contact [CRA phone number/address]. The CRA did not make this decision and cannot provide the reason.”
Always include the CRA’s “Summary of Rights” when providing report copies.
How state and local rules affect the FCRA checklist
Federal FCRA obligations are the baseline. State and local laws can add requirements or limits:
- Ban-the-box and timing restrictions: Some jurisdictions restrict when employers may ask about conviction history or require criminal history checks only after a conditional offer.
- Credit and salary checks: Several states limit or prohibit employment-related credit checks unless the role justifies it.
- Record sealing/expungement protections: States may prohibit using certain records for hiring if sealed, dismissed, or expunged.
- Additional notice or consent language: Some states require specific language or separate forms.
Treat state/local rules as mandatory supplements to your FCRA checklist. Maintain a jurisdictional checklist in your ATS or screening provider configuration.
Practical implementation: make this checklist part of the hiring workflow
Turning compliance items into an enforceable habit requires systems and training, not just memos.
- Embed steps in your ATS: Configure workflows so background checks cannot be ordered without completed disclosure/authorization forms and a recorded permissible purpose.
- Use automated pre-adverse/adverse notice templates: Pre-populate these with CRA details and attach the report and summary automatically.
- Limit ordering access: Only trained HR staff or designated hiring managers should be able to request consumer reports.
- Establish decision documentation standards: Require hiring managers to record the specific report items relied on for any adverse action and attach supporting notes.
- Train new and existing staff quarterly: Cover FCRA basics, state variances, and how to handle candidate disputes.
- Perform regular audits: Sample recent hires and candidates to verify documentation, timing compliance, and that proper notices were delivered.
- Maintain a remediation plan: If an error is found, have clear steps for investigation, candidate outreach, correction, and documentation.
Practical takeaways for employers:
- Treat disclosure and authorization as non-negotiable gating items before ordering a report.
- Use pre-adverse and adverse notices exactly as required; timeframes matter.
- Keep careful records — a comprehensive audit trail is your best defense.
- Consult counsel and your screening partner on state-specific obligations and complex disputes.
Common pitfalls to avoid
- Combining the disclosure with other application language so it isn’t a standalone notice
- Failing to provide the consumer report copy and Summary of Rights during pre-adverse action
- Acting immediately on a report without allowing the candidate a chance to explain or dispute
- Using a CRA that cannot support FCRA-required notices or documentation
- Neglecting state/local laws that impose tighter restrictions than the FCRA
Conclusion
The FCRA checklist every hiring manager should print and tape to their desk is a short list of non-negotiable steps: obtain a standalone disclosure and authorization, use a compliant CRA, provide pre-adverse and adverse notices with required materials, keep careful records, and follow state rules. Apply these steps consistently and you’ll reduce legal risk, improve candidate experience, and make more defensible hiring decisions.
If you’d like a printable checklist or help integrating these steps into your ATS and screening workflow, Rapid Hire Solutions can help you adapt the process to federal and state requirements and provide FCRA-compliant screening services and templates. Contact us to discuss a compliance review or to get a ready-to-print checklist for your team.
FAQ
Do I always need a candidate’s signed authorization to run a background check?
Yes. Under the FCRA, employers must obtain a clear, standalone written authorization before ordering a consumer report for employment purposes. Electronic signatures are acceptable when collected properly.
What is a pre-adverse action notice and when must I provide it?
A pre-adverse action notice is provided when information in a consumer report may lead to a negative employment decision. The packet should include a copy of the report, the CRA’s Summary of Rights, and a statement that the employer is considering an adverse action. Allow a reasonable time (commonly 3–5 business days) for the candidate to respond.
What should an adverse action notice contain?
An adverse action notice must include the CRA’s name, address, and phone number; a statement that the CRA did not make the decision; and a statement of the candidate’s right to dispute the report’s accuracy or completeness. Include any codes or statutory language your CRA requires.
How do state laws change the checklist?
State and local laws may restrict timing (ban-the-box), limit credit checks, protect sealed or expunged records, or require additional notice language. Treat federal FCRA rules as the baseline and layer state/local obligations on top — maintain a jurisdictional checklist in your ATS.