=
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk
Estimated reading time: 6 minutes
Key takeaways
- Always disclose and obtain written authorization before ordering any consumer report.
- Use a compliant CRA, follow pre-adverse and adverse-action steps, and document every step.
- Limit checks to job relevance and apply consistent individualized assessments for criminal-history decisions.
- Keep timestamped records and stay current on federal and local rules to reduce legal and operational risk.
Table of contents
- Why the FCRA matters for hiring managers
- The FCRA checklist every hiring manager should print and tape to their desk
- Common pitfalls and how to avoid them
- Individualized assessment and anti-discrimination considerations
- Practical takeaways for employers
- Final notes on documentation and ongoing compliance
- Conclusion
- FAQ
Why the FCRA matters for hiring managers
The Fair Credit Reporting Act (FCRA) regulates consumer reporting agencies (CRAs) and employers that use consumer reports — including criminal histories, credit checks, employment and education verifications, and driving records — for employment decisions. It’s not just a legal requirement; it’s a framework that ensures accuracy, fairness, and transparency in hiring.
Key employer obligations under the FCRA include:
- Obtaining a proper disclosure and written authorization before pulling a report.
- Providing notices when an adverse decision is based on a report.
- Giving candidates an opportunity to review and dispute report findings.
Knowing and documenting these steps consistently protects your organization and helps you make defensible hiring decisions.
The FCRA checklist every hiring manager should print and tape to their desk
Keep this as your quick-reference workflow whenever you order a consumer report.
1. Confirm permissible purpose
Ensure the report is for a permissible purpose under FCRA (employment screening is a permissible purpose). Document the business reason (e.g., “pre-employment criminal and driving record check for [position]”).
2. Use a compliant CRA
Order reports only through a reputable, FCRA-compliant consumer reporting agency. Verify the CRA’s contact information and the type of report they provide (consumer report vs. investigative consumer report).
3. Provide a standalone disclosure
Give the candidate a clear, conspicuous disclosure that consists solely of the disclosure language required by FCRA. Do not bury the disclosure in an application or combine it with other authorizations.
4. Obtain written authorization
Get the candidate’s signed written consent (electronic signatures are acceptable) before the CRA pulls the report. Store proof of consent with the applicant’s record.
5. Limit scope to job relevance
Order only the types of checks that are job-related and consistent with business necessity (e.g., driving history for drivers, criminal checks where relevant). Consider job-specific timing — many employers run certain checks after a conditional offer.
6. Review report for accuracy and relevance
Verify identity matches and confirm items relate to the applicant (name, DOB, SSN where used). Assess whether reported items are job-related and not obsolete or incorrect.
7. Use pre-adverse action process if needed
If the report could lead to a denial or rescission of an offer, provide a pre-adverse action notice that includes:
- A copy of the consumer report
- A copy of “A Summary of Your Rights Under the FCRA”
- A reasonable opportunity for the candidate to review, respond, or dispute
Document the date you sent the pre-adverse action materials and any candidate response.
8. Send a final adverse action notice when applicable
If you proceed with adverse action after the candidate’s opportunity to respond, send a final adverse action notice that includes:
- A statement that an adverse action was taken
- The CRA’s name, address, and phone number
- A statement that the CRA did not make the adverse decision and cannot provide reasons for it
- A notice of the candidate’s right to dispute the accuracy or completeness of the report and to get a free report within FCRA timelines
9. Keep clear records
Archive disclosures, authorizations, copies of reports delivered, pre-adverse and adverse action notices, and documentation of the hiring decision. Maintain records long enough to demonstrate compliance and support audits or potential challenges.
10. Stay current on state and local rules
Check for state or municipal restrictions that are stricter than FCRA (e.g., limits on credit checks, autonomous waiting periods, sealed record rules). Adjust processes to comply with both federal and local requirements.
11. Train hiring teams and monitor process
Regularly train recruiters and hiring managers on FCRA steps, timelines, and the adverse action workflow. Audit your screening process to ensure checklists are followed consistently.
Common pitfalls and how to avoid them
- Mistake: Combining disclosure with other documents.
Fix: Use a standalone, clear disclosure document and collect a separate signature for authorization. - Mistake: Forgetting the pre-adverse action step.
Fix: Build the pre-adverse and adverse action workflow into your ATS so notices and report copies are automatically sent and tracked. - Mistake: Relying on a candidate’s oral explanation without documenting.
Fix: Log all communications and any candidate-supplied evidence; include assessment notes to show consistent treatment. - Mistake: Using a report from an uncertified vendor.
Fix: Vet CRAs for FCRA compliance and ask for their procedures for accuracy and dispute handling. - Mistake: Overcollecting information unrelated to the job.
Fix: Limit checks to what’s necessary and defensible for the role (reduce legal exposure and candidate friction).
Individualized assessment and anti-discrimination considerations
An adverse action based on criminal history can intersect with anti-discrimination laws and EEOC guidance. When a criminal record is relevant to a role, follow a consistent, documented individualized assessment process that considers:
- Nature and severity of the offense
- Time passed since the offense
- Job-relatedness and business necessity
Consistency is critical. Apply the same policy across similar positions and ensure decisions are based on neutral criteria to reduce risk of disparate impact claims.
Practical takeaways for employers
- Make the disclosure and authorization your first step — never pull a report without them.
- Treat pre-adverse action as an operational must-have, not an optional courtesy.
- Keep templates for disclosure, authorization, pre-adverse, and adverse notices ready and reviewed by counsel for your jurisdiction.
- Centralize background screening through vetted CRAs and integrated workflows in your ATS to reduce human error.
- Train recruiters and hiring managers on the checklist and run periodic audits to catch process drift.
Final notes on documentation and ongoing compliance
Documentation is your strongest defense. Keep organized, timestamped records that show what you disclosed, when you obtained consent, when reports were delivered, and how candidates were notified. Don’t rely on memory — rely on documented proof.
Also recognize that FCRA compliance isn’t static. Federal guidance, consumer reporting practices, and state laws evolve. Regularly review and update policies, templates, and vendor agreements.
Conclusion
The FCRA checklist every hiring manager should print and tape to their desk is a compact operational playbook: disclose, authorize, verify, provide pre-adverse notice, allow time to respond, and issue a compliant adverse action notice when necessary — all while documenting every step. Following these steps reduces legal risk, improves candidate experience, and helps your team make defensible hiring decisions.
If you’d like help building compliant workflows, training your team, or vetting consumer reporting partners, Rapid Hire Solutions can provide practical guidance and operational support to keep your background screening program audit-ready and candidate-friendly.
FAQ
The first step is to provide a standalone FCRA disclosure and obtain written authorization from the candidate. Never order a consumer report without both.
Yes. A compliant pre-adverse action package should include a copy of the consumer report, a copy of “A Summary of Your Rights Under the FCRA,” and a clear opportunity for the candidate to respond or dispute.
Keep records long enough to demonstrate compliance and to support audits or potential challenges. Retention periods may also be influenced by state law and organizational policy — document your retention policy and follow it consistently.
Follow the stricter rule. Many states and municipalities impose limitations or additional requirements; adjust your processes to comply with both federal and local requirements and consult counsel for complex conflicts.