FCRA Checklist Every Hiring Manager Should Use

Before you run a report: confirm permissibility and prepare documentation

– Confirm permissible purpose. Only obtain a consumer report for employment purposes (hiring, promotion, reassignment, retention). Verify role-specific restrictions (e.g., credit checks often limited to certain positions).

– Choose an FCRA-compliant consumer reporting agency (CRA). Verify the vendor’s processes for background data sources, reinvestigation, and state-specific compliance.

– Create a consistent policy. Use the same background check practices for comparable roles to reduce disparate-impact risk.

– Know state and local rules. Many states and cities add disclosure, timing, ban-the-box, or criminal history restrictions that are stricter than the FCRA.

– Decide report types needed. Select only job-related screens (criminal, employment/education verification, motor vehicle record, credit) and document the business justification for each.

Why this matters: The FCRA requires a permissible purpose and that employers follow consistent procedures. State laws may require additional steps or prohibit certain searches without narrow justification.

Disclosure and authorization: do these two things exactly

• Provide a clear, conspicuous disclosure in a standalone document. The disclosure must be in writing and must not be buried in an application or combined with other authorization language.
• Obtain a separate written authorization. Get a signed authorization distinct from the disclosure (electronic signatures are acceptable if compliant).
• For electronic authorizations, present disclosure and authorization in a way that makes clicking or signing comparable to a physical signature.
• Avoid vague language. Use plain English so the candidate understands a consumer report will be obtained.

Why this matters: Combining disclosure with other paperwork or using confusing language is one of the most common FCRA violations. A valid consent significantly reduces legal exposure.

Certification to your CRA: document what you tell the vendor

When you order a report, you must certify to the CRA:

• That you have a permissible purpose.
• That you will comply with FCRA adverse action procedures if you contemplate an adverse decision.
• That you will not use the information in violation of any federal or state equal employment laws.
• If applicable, confirm any state-specific restrictions in the certification.

Why this matters: CRAs rely on your certification; false certifications can expose your company to liability and may cause the CRA to refuse service.

Reviewing the report: apply job-related criteria consistently

• Evaluate findings against written, job-related criteria. Document how specific report items relate to the job duties.
• Use individualized assessments for criminal records when required. Consider the nature/severity of the offense, the time elapsed, and the connection to job duties.
• If a report contains records that appear inaccurate or belong to someone else, request the CRA’s reinvestigation before acting.
• Consult legal or compliance if a report raises a potential discrimination or accommodation issue.

Why this matters: The EEOC and many courts expect employers to use job-related criteria and consistent evaluation to avoid disparate impact claims.

Pre-adverse action: do not skip this step

If you are considering not hiring (or taking another adverse action) based wholly or partly on a consumer report:

• Provide the candidate with a copy of the consumer report used and a current copy of “A Summary of Your Rights Under the Fair Credit Reporting Act.”
• Give the candidate a reasonable opportunity to review and dispute inaccuracies (commonly 5 business days is used, though the FCRA doesn’t prescribe an exact minimum).
• Document that you provided the report and summary and record any candidate response.

Why this matters: Skipping pre-adverse action notices is a frequent and costly error. The pre-adverse action process allows candidates to correct errors and avoids unfair outcomes.

Final adverse action: include required disclosures

If you move forward with an adverse action (e.g., rescind offer, terminate, refuse to hire), send a written adverse action notice that includes:

• A statement that the decision was based in whole or in part on the consumer report.
• The name, address, and phone number of the CRA that supplied the report.
• A statement that the CRA did not make the adverse decision and cannot provide specific reasons for it.
• Notification of the candidate’s right to obtain a free copy of the report from the CRA within 60 days and to dispute the accuracy or completeness of the report.

Best practice: Send the adverse action notice via a method you can document (email read receipt, tracked mail) and retain proof of delivery.

Reinvestigation and disputes: respond promptly

• If a candidate disputes information, instruct the CRA to reinvestigate. The CRA must reinvestigate within 30 days (45 if information is forwarded).
• Cooperate with any CRA requests for additional information from you as the employer.
• If the CRA updates the report, reevaluate your decision in light of corrected information.

Why this matters: Employers that ignore disputes or rely on corrected inaccurate reports are at risk of litigation.

Record retention: keep the essential documents

• Maintain copies of disclosures, authorizations, consumer reports, adverse action notices, and related correspondence for at least two years (FCRA-relevant records).
• Keep hiring files and supporting documentation consistent with federal and state record-keeping rules.
• For positions subject to other federal rules (e.g., DOT-regulated drivers), follow the longer retention periods those rules require.

Why this matters: Good record retention defends decisions and demonstrates compliance during audits or litigation.

State-specific traps to watch for

• Ban-the-box and timing restrictions: Some jurisdictions prohibit asking about criminal history on initial applications or require waiting until a conditional offer.
• Credit report restrictions: Several states limit or ban credit checks for employment unless narrow criteria are met.
• Additional notices: Certain states require extra disclosures, written authorization forms with specific language, or different adverse action timing.

Action step: Maintain a current matrix of state/local screening rules and update it before screening an out-of-state candidate.

Practical checklist to print and tape to your desk

Paste this list where you can see it during every hiring decision—consistency is your best protection.

Practical takeaways for HR leaders and hiring managers

• Standardize forms and procedures. A single clear disclosure and authorization form reduces risk.
• Train interviewers and hiring managers. They should understand when a candidate can be asked about criminal history and who in the organization can request reports.
• Use an experienced CRA and insist on audit logs. Pick vendors who document ordering, delivery, and reinvestigation activity.
• Build job-related evaluation templates. Having a short rationale for each hire/no-hire decision that references job duties reduces exposure to discrimination claims.
• Keep legal counsel in the loop for borderline cases. Complex records, multiple jurisdictions, or high-risk positions benefit from early legal review.

The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk — final thought

Following an organized, consistent FCRA process reduces legal risk, improves hiring accuracy, and treats candidates fairly. Use the checklist above for every background screening decision and pair it with state-specific guidance and strong vendor controls.

If you’d like a customizable version of this checklist or a review of your disclosure and adverse action templates, Rapid Hire Solutions can help audit your screening workflow and provide FCRA-compliant forms and best-practice guidance.