FCRA Checklist for Hiring Managers and Recruiters

Core FCRA steps to complete before you order a background screening

If you order background checks, you carry legal responsibilities that affect hiring risk, candidate experience, and litigation exposure. The Fair Credit Reporting Act (FCRA) governs how employers obtain and use consumer reports—criminal records, credit reports, employment verifications, and certain background screenings. Missing a single step in the FCRA process can produce a costly adverse-action claim even when the underlying report is accurate.

This checklist breaks the FCRA requirements and best practices into practical actions hiring managers and recruiters can use every time they screen a candidate. Follow it to reduce hiring risk, treat candidates fairly, and keep your organization compliant and defensible.

1. Confirm a permissible purpose

Only request consumer reports for a permissible purpose under the FCRA. Employment screening is a permissible purpose, but you must document the reason (e.g., pre-employment background check after a conditional offer).

2. Use a compliant consumer reporting agency (CRA)

Work with a CRA or background screening provider that follows FCRA procedures, furnishes the “Summary of Rights,” and responds to disputes. Verify that your vendor will send required notices and provide audited processes.

3. Provide a standalone disclosure and obtain written authorization

Give the candidate a clear, standalone disclosure that a consumer report may be obtained for employment purposes. The disclosure cannot be buried in an application or combined with other authorizations. Obtain the candidate’s written or electronic signature authorizing the report.

4. Make and keep internal certifications to the CRA

When you order a report, you must certify to the CRA that you have a permissible purpose, have provided the proper disclosures and authorizations, and will comply with adverse-action requirements. Keep copies of these certifications in your file.

5. Check applicable state and local rules first

State laws often add requirements or restrictions (ban-the-box rules, credit report limits, lookback periods for convictions). Confirm whether a specific check is allowed in the candidate’s work location or for the job class.

6. Consider timing (best practice: conditional offer)

Many employers wait to run criminal or credit checks until after a conditional job offer is extended. This minimizes disparate impact risk and aligns with many state/local ordinances.

The pre-adverse and adverse action process — steps you can’t skip

FCRA compliance is as much about procedure as it is about the content of a report. Follow this sequence whenever a consumer report could lead to denial of employment or a change in a job offer.

1. Pre-adverse action notice

• Before taking a final adverse action, provide the candidate:
  • A copy of the consumer report the employer relied on
  • A copy of the CRA’s “A Summary of Your Rights Under the FCRA”
  • A written statement that you are contemplating adverse action and will give the candidate a reasonable time to respond

Practical timing: The FCRA does not set a fixed number of days, but many employers allow five business days for the candidate to respond. Document the date you sent materials and any response.

2. Allow candidate response and investigate disputes

If the candidate disputes information, allow time to review. The CRA has a duty to reinvestigate, but employers should pause final decisions until the dispute is resolved or the candidate declines to respond.

3. Final adverse action notice (if you proceed)

If you decide to take adverse action, deliver a final adverse action notice that includes:

• The adverse action explanation (e.g., “We are rescinding the conditional offer based on information in the consumer report”)
• The name, address, and telephone number of the CRA that supplied the report
• A statement that the CRA did not make the employment decision and cannot provide the reason for it
• Notice that the candidate may obtain a free copy of the report within 60 days and may dispute its accuracy with the CRA

4. Keep records

Save copies of the disclosure, authorization, pre-adverse and adverse notices, report copies, certification to the CRA, and any candidate communications. These documents are your best defense if a claim arises.

What to watch for with criminal records, credit checks, and state/local restrictions

Below are practical considerations tied to specific screening types and local rules:

• Criminal records: The FCRA regulates how you obtain and deliver reports, but EEOC guidance and many state laws shape how criminal history may be used. Use individualized assessments—consider the nature of the offense, the time elapsed, and the job’s duties—particularly for convictions. Arrest records that did not result in conviction are treated differently in some jurisdictions; know the local rules.
• Credit reports: Many states restrict or prohibit use of credit reports for employment decisions unless the job involves financial responsibility. Even when permitted, document job-relatedness and necessity.
• Ban-the-box and lookback periods: Local ordinances may delay criminal-history questions until after a conditional offer or limit how far back you can consider convictions. Update your hiring workflow and forms for each jurisdiction where you hire.
• Medical and drug testing: Separate medical inquiries and maintain ADA compliance. If you use drug testing, follow state rules on authorization, collection, and notification, and avoid using unrelated medical information in employment decisions.

Common FCRA missteps (and how to avoid them)

• Burying the disclosure: Disclosure must be standalone and clear. Do not hide it inside a general application or in other legal language.
• Skipping the pre-adverse step: Sending a final rejection without providing the candidate a copy of the report and Summary of Rights is an easy way to trigger a claim.
• Using stale or incomplete reports: Order current reports and check that the CRA searched appropriate jurisdictions and aliases. Document scope and search dates.
• Treating every criminal record the same: Avoid blanket exclusions. Use job-related criteria and individualized assessments to reduce disparate impact exposure.
• Failing to follow state/local rules: Maintain a compliance matrix for locations where you hire. When in doubt, delay the check until you confirm local rules or consult counsel.
• Improper disposal of records: Securely store or dispose of applicant background materials consistent with privacy laws and your retention policy.

Printable FCRA checklist — what to tape to your desk

Use this condensed checklist as a quick pre-screening workflow:

Before ordering the report:

• Confirm permissible purpose and job-related need
• Check state/local rules for restrictions
• Ensure CRA/vendor is FCRA-compliant and will handle notices
• Prepare standalone disclosure and obtain written authorization
• Certify permissible purpose to the CRA when ordering

When a report may lead to adverse action:

• Provide candidate a copy of the report
• Provide the CRA’s “A Summary of Your Rights Under the FCRA”
• Send a pre-adverse action notice and allow a reasonable response period (document dates)
• Investigate any disputes and document findings

If taking final adverse action:

• Send a final adverse action notice including CRA name/address/phone and required statements
• Retain copies of all documents (disclosure, authorization, report, notices, certifications, candidate correspondence)

Ongoing:

• Update forms for state/local variations and ban-the-box policies
• Train hiring managers and recruiters on required steps
• Review vendor contracts to confirm responsibilities for disputes, reinvestigations, and notices
• Maintain a record-retention schedule and secure storage

Sample language you can adapt

Standalone disclosure (concise):

“We may obtain a consumer report for employment purposes that includes criminal history, credit, and verification information. We will use this information only for evaluating your application. By signing below, you authorize us to obtain a consumer report.”

Pre-adverse action notice (brief):

“We are considering rescinding your conditional offer based on information in a consumer report. Enclosed is a copy of the report and a summary of your rights under the FCRA. You may respond or provide additional information within [X] business days.”

Final adverse action notice (required elements):

“We have decided to rescind your conditional offer based in whole or in part on information contained in a consumer report supplied by [CRA name, address, phone]. The CRA did not make this decision and is not able to provide the reason(s). You may obtain a free copy of the report from the CRA within 60 days and dispute the accuracy of any information with the CRA.”

Tailor language to your company tone and state requirements; consult legal counsel before finalizing forms.

Practical takeaways for employers

• Treat FCRA steps as part of the hiring playbook, not an HR afterthought. Train recruiters and hiring managers to follow the exact sequence every time.
• Use conditional offers for sensitive checks and document job-relatedness for any exclusion.
• Keep a central, auditable file for each screened candidate that includes all FCRA-required notices, authorizations, and communications.
• Periodically audit your screening vendor for compliance with reinvestigation timelines, dispute handling, and notice delivery.
• Build flexibility into your process to accommodate state and local variations—one size rarely fits all.

Conclusion — The FCRA checklist every hiring manager should print and tape to their desk

A reliable FCRA checklist reduces legal risk and improves hiring consistency. Keep the disclosure/authorization step, pre-adverse and adverse notices, state-law checks, and vendor certifications at the center of your background-screening workflow. When followed consistently, these steps protect your organization and give candidates transparent, fair treatment.

If you want a ready-to-print checklist, sample forms tailored to your industry, or a compliance review of your screening workflow, Rapid Hire Solutions can help you implement FCRA-compliant processes and screening vendor controls. Contact us to get started.