FCRA Checklist Every Hiring Manager Should Use

Why the FCRA matters for hiring managers

The Fair Credit Reporting Act (FCRA) governs consumer reporting agencies (CRAs) and anyone who uses consumer reports for employment purposes. Consumer reports include criminal records, credit reports, motor vehicle reports (MVRs), and many third‑party background checks compiled by screening vendors. Under the FCRA, employers must:

• Obtain clear, written consent before pulling a consumer report.
• Follow specific notice and timing requirements before taking adverse action (for example, rescinding an offer).
• Provide certain disclosures and information to candidates when adverse action occurs.
• Ensure accuracy and allow candidates a chance to dispute errors.

Beyond compliance, consistent FCRA practices improve hiring quality, reduce legal and reputational risk, and help make fair, defensible decisions when screening uncovers issues.

Print-and-stick FCRA checklist (what to do, step by step)

Use this sequence every time you intend to obtain a consumer report for employment.

1. Confirm permissible purpose
   • Verify you have a permissible purpose under the FCRA (employment screening is a permissible purpose).
   • Confirm the specific type of report you need (criminal, credit, MVR, education, etc.) and that it’s job‑related.
2. Get a standalone disclosure and written authorization — before ordering the report
   • Provide a clear, conspicuous disclosure in a separate document (not buried in the job application or combined with other authorizations).
   • Obtain written authorization (electronic signatures acceptable) that specifically permits you to obtain consumer reports.
   • Keep copies of the signed disclosure and authorization.
3. Certify compliance to your screening vendor (CRA)
   • When you order a report, your vendor will ask you to certify you provided the proper disclosure and authorization and that you have a permissible purpose.
   • Ensure your internal documentation matches what you certify.
4. Review the report promptly and objectively
   • Check for accuracy and identity mismatches.
   • Document who reviewed the report, what was considered, and how it relates to the job’s essential duties.
5. If information may lead to adverse action, start the pre‑adverse action process
   • Provide the candidate a copy of the consumer report and a copy of “A Summary of Your Rights Under the FCRA” (the CRA typically supplies this summary).
   • Give the candidate a reasonable opportunity to review and dispute inaccuracies before your final decision (best practice: 5 business days; the FCRA does not mandate a specific waiting period).
6. Make a fair, job‑related decision
   • Apply uniform standards and an individualized assessment process for criminal records (consider nature, recency, and relevance).
   • Document job‑relatedness and business necessity if the decision could disproportionately impact a protected class.
7. If you decide to take adverse action, send a final adverse action notice
   • The notice must include:
     • A clear statement that adverse action was taken based in whole or part on information in a consumer report;
     • The name, address, and phone number of the CRA that supplied the report;
     • A statement that the CRA did not make the adverse decision and cannot provide the reasons for it;
     • A statement of the candidate’s right to obtain a free copy of the report from the CRA within 60 days and to dispute the accuracy or completeness of the report.
   • Retain copies of the pre‑adverse and adverse action communications.
8. Maintain records and audit trail
   • Keep disclosure, authorization, reports, dispute records, and adverse action notices in a secure file.
   • Follow your company’s document‑retention policy and applicable state retention rules.
9. Refresh consent for rescreens and ongoing monitoring
   • If you plan periodic rechecks or continuous monitoring, obtain clear consent and document frequency and purpose.
10. Train hiring managers and reviewers
    • Ensure anyone who orders or uses consumer reports understands the checklist, timing requirements, and state/local law exceptions.

Common pitfalls that trigger claims (and how to avoid them)

• Burying the disclosure: Don’t combine the FCRA disclosure with other forms or hide it on an employment application. Use a standalone, clear disclosure document.
• Skipping pre‑adverse steps: Failing to give a candidate the report and their rights summary before taking action is one of the most frequent violations.
• Using credit or criminal information without checking state law: Many states and cities limit use of credit reports or criminal history in hiring. Confirm local restrictions.
• Relying solely on vendor language: Screening vendors provide forms, but your internal process must match what you certify. Keep records proving compliance.
• Not documenting individualized assessments: If criminal history is a factor, document how the record relates to the job and why denial meets business necessity.
• Inconsistent application of policy: Apply the same rules to all candidates for a position to avoid disparate‑impact claims.

State and local considerations to remember

FCRA compliance is a federal baseline; many state and local laws add or change requirements. Key areas to check in every hiring decision:

• Ban‑the‑Box and timing rules: Several jurisdictions restrict when you can ask about criminal history — often only after a conditional offer.
• Restrictions on credit checks: Some states prohibit or limit employer use of consumer credit reports or require a job‑related justification.
• Additional notice or consent requirements: Certain states require extra language or separate consents for MVRs or credit reports.
• Record‑sealing and conviction set‑asides: State laws on expungement and sealed records affect what you can consider and what must be disclosed.

Always incorporate state/local screening rules into your standard hiring workflow and update them regularly.

Practical templates and wording tips

Use plain language and avoid legalese. Examples:

• Standalone disclosure (short, clear):
  “We may obtain a consumer report and/or investigative consumer report, which may include criminal history, driving history, and employment/education verification, for employment purposes. By signing below, you authorize [Company Name] to obtain such reports.”
• Written authorization: A signed line on the disclosure is acceptable; electronic consent must be clear and documented.
• Pre‑adverse packet: Attach the actual consumer report and the CRA’s “A Summary of Your Rights Under the FCRA” (CRAs usually provide this pdf).

Make sure all sent materials match what you certified to the CRA.

Practical takeaways for employers

• Standardize the process: Use a single, company‑wide FCRA checklist and forms so every hiring manager follows the same steps.
• Train once, test regularly: Conduct periodic audits of orders and adverse actions to catch gaps and retrain ordering managers.
• Partner with a knowledgeable screening provider: A compliant CRA can provide required summary forms, adverse action templates, and flag state/local restrictions.
• Keep an audit trail: Save disclosures, authorizations, reports, dispute communications, and adverse action notices. Documentation is your best defense.
• Use individualized assessments: When criminal history affects hiring, document job relevance and an individualized review to reduce disparate‑impact risk.

Quick printable checklist (one page)

• [ ] Confirm permissible purpose for the report
• [ ] Provide standalone disclosure (signed)
• [ ] Obtain written authorization (signed/e‑consent)
• [ ] Certify compliance to the screening vendor
• [ ] Review report for accuracy and identity matches
• [ ] If concerns exist, send pre‑adverse packet (report + rights summary)
• [ ] Wait a reasonable time for candidate response (best practice: 5 business days)
• [ ] Make a documented, job‑related decision (individualized assessment if criminal history)
• [ ] If adverse, send adverse action notice with required CRA info
• [ ] Retain records in secure file; schedule any re‑screening with fresh consent
• [ ] Check state/local rules for additional requirements

Consider printing this checklist and taping it to your desk — it’s the one‑page compliance lifeline for hiring managers.

Conclusion

The FCRA checklist every hiring manager should print and tape to their desk is less about paperwork and more about sound hiring processes: transparent consent, timely notice, careful review, and consistent documentation. Following these steps reduces legal exposure, helps you make better hiring decisions, and protects candidates’ rights.

If you’d like a customizable, printer‑ready FCRA checklist or a compliance review of your background screening workflow, Rapid Hire Solutions can help you build the documentation and vendor processes that fit your organization’s needs.