FCRA Checklist Every Hiring Manager Should Keep

Why the FCRA matters to hiring managers

The Fair Credit Reporting Act (FCRA) protects consumer accuracy, privacy, and due process when third-party consumer reporting agencies (CRAs) compile information used for employment decisions. For employers, compliance reduces legal risk, preserves candidates’ rights, and improves hiring fairness.

Key employer obligations under the FCRA:

• You need a permissible purpose before requesting a consumer report for employment.
• Provide a clear, standalone disclosure and obtain written authorization before getting a report.
• If a report leads toward adverse action, provide the required pre-adverse and adverse notices.
• Consumers have the right to dispute and obtain copies of reports through the CRA.
• State and local laws frequently add requirements or restrict checks (e.g., ban-the-box, timing limits).

The FCRA checklist every hiring manager should print and tape to their desk

Before you order a consumer report

• Confirm permissible purpose: Is this for employment decisions? Is the candidate an applicant or employee? (Employment is a recognized permissible purpose.)
• Check state/local rules: Does the candidate’s location impose timing or substance limits (e.g., criminal-history restrictions, ban-the-box)? If so, follow the stricter rule.
• Use a compliant vendor: Make sure the background screening provider is an FCRA-compliant CRA (ask for their attestation).
• Prepare disclosure and authorization: Provide a clear, standalone written disclosure that you will obtain a consumer report and get the candidate’s signed authorization before ordering. Don’t bury it in other documents or combine it with consent for other purposes.
• Verify candidate identity: Confirm full legal name and date of birth match your search inputs to reduce false matches.

When ordering and reviewing reports

• Specify scope: Order only the searches relevant to the position (criminal, education, employment history, motor-vehicle record, credit where job-related).
• Review for accuracy and context: Look for incomplete records, common-name matches, and outdated convictions; verify dates and locations.
• Avoid automatic rejections: Don’t establish blanket policies that exclude candidates for whole offense categories without job-related analysis.
• Conduct individualized assessments: If criminal history is a factor, consider the nature of the offense, its relevance to the job, and how long ago it occurred. Document your rationale.

Before taking adverse action (pre-adverse step)

Deliver a pre-adverse action notice that includes:

• A copy of the consumer report your decision is based on
• A copy of “A Summary of Your Rights Under the FCRA” (or equivalent summary the CRA supplies)
• A clear statement that you are considering adverse action and what that action would be

Allow a reasonable time for the candidate to review and dispute (commonly 5 business days in practice, but no specific FCRA timeframe mandates this; document the period you provide). Accept and investigate disputes promptly by notifying your CRA as needed.

If you proceed with adverse action

Send a final adverse action notice that includes:

• A clear statement that adverse action was taken
• The name, address, and phone number of the CRA that supplied the report
• A statement that the CRA did not make the adverse decision and cannot provide specific reasons
• A notice of the candidate’s right to obtain a free copy of the report from the CRA within 60 days and to dispute the accuracy or completeness of the report

Document the action and maintain records of the notices sent and any candidate responses.

Recordkeeping and audits

• Keep copies of the disclosure, authorization, the consumer report, pre-adverse and adverse notices, and any dispute communications.
• Maintain these records according to company policy, state law, and litigation risk (a common best practice is to retain for at least two years; extend retention where state law or internal audit requirements apply).
• Periodically audit your screening process and vendor compliance to spot gaps or inconsistent practices.

Protect candidate privacy and data security

• Treat consumer reports as sensitive information: limit access, use secure file transfer and storage, and delete reports when no longer needed per retention policy.
• Train staff on who may view reports and how to handle disputes and adverse action steps correctly.

Practical checklist (printer-friendly, one line each)

• Confirm permissible purpose
• Check state/local rules
• Use FCRA-compliant vendor
• Provide standalone disclosure + written authorization
• Verify candidate identity
• Order only job-related searches
• Review reports for accuracy and context
• Conduct individualized assessment for criminal records
• Send pre-adverse notice + report + Summary of Rights
• Allow reasonable dispute time; investigate disputes
• Send final adverse action notice with CRA contact and 60-day disclosure right
• Document and retain records; secure data

Pre-adverse and adverse action: the sequence that trips people up

Many FCRA violations result from skipping or mishandling the pre-adverse/adverse sequence. Follow these practical steps every time a background report triggers concern:

1. Pause the hiring process so a hiring manager or HR rep can review the report for accuracy and job relevance.
2. If you’re considering a negative decision based on the report, prepare the pre-adverse packet:
   • A plain-language pre-adverse letter explaining the concern (cite the specific report item, not conclusions).
   • A copy of the consumer report itself.
   • A copy of the consumer’s Summary of Rights (usually provided by the CRA).
3. Provide a reasonable window for the candidate to dispute or explain. Record the date you delivered the packet and the deadline you set.
4. If the candidate disputes, notify the CRA promptly and allow time for reinvestigation.
5. If you still decide to take adverse action, send a final adverse action letter with the required elements (CRA name/contact, statement CRA didn’t make decision, disclosure of right to obtain report within 60 days and dispute).

Keeping this sequence consistent and documented is one of the most defensible steps you can take.

State and local rules to watch (and why a checklist matters)

FCRA compliance is federal, but state and local laws often impose additional or different requirements:

• Ban-the-box and “fair chance” laws may prohibit asking about criminal history until a conditional offer or later.
• Some states restrict use of credit checks for employment or limit how far back convictions may be considered.
• Local ordinances can require specific timing or notice language beyond the FCRA.

A printed desk checklist that includes “Check state/local rules” forces the reviewer to pause and consider jurisdictional limits before ordering a report.

Best practices that reduce hiring risk (and improve candidate experience)

• Standardize decision criteria and document job-relatedness for each role. This reduces unconscious bias and disparate-impact risk.
• Train everyone who handles reports — recruiters, hiring managers, and HR — on the FCRA process and your internal protocol.
• Use conditional offers when local law requires delay of background checks; make the offer contingent on satisfactory screening results.
• Keep communication transparent with candidates: a brief explanation of the steps and timing reduces confusion and dispute friction.
• Leverage vendor expertise: a reputable CRA can provide the Summary of Rights, dispute handling support, and state-specific compliance guidance.

Practical takeaways for employers

• Never order an employment consumer report without a standalone written disclosure and the candidate’s authorization.
• Always provide the candidate a copy of the report and the Summary of Rights before taking adverse action; then send a final adverse action notice if you proceed.
• Make individualized, documented assessments when criminal history could affect employment decisions.
• Check state and local rules before running searches; follow the stricter rule when in doubt.
• Securely store and document every step in the process — it’s your best protection if a dispute or claim arises.

Conclusion

The FCRA checklist every hiring manager should print and tape to their desk isn’t a legal brief — it’s a practical, step-by-step safeguard that reduces hiring risk, protects candidates’ rights, and keeps your organization out of trouble. When your team follows a consistent process for disclosure, review, pre-adverse and adverse action, and recordkeeping, background screening becomes a reliable part of talent decisions rather than a legal liability.

If you’d like a printable one-page checklist tailored to your company’s screening policy or a compliance review of your current processes, Rapid Hire Solutions can help assess gaps and provide FCRA-aligned screening workflows to fit your hiring program.