FCRA Checklist Hiring Managers Should Keep at Their Desk

=

The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk

Estimated reading time: 4 min read

Key takeaways

• Follow a strict, repeatable process: disclosures, written authorization, identity verification, pre-adverse notice, and adverse-action notice.
• Use FCRA-compliant vendors: they should supply the Summary of Rights and automate required notices and dispute workflows.
• Document everything: preserve disclosures, authorizations, reports, candidate communications, and time-stamped decisions.
• Respect state and EEOC constraints: tailor checks and decision criteria to role-related business necessity and local law.

Table of contents

• Quick FCRA primer (what to keep top of mind)
• The FCRA checklist every hiring manager should print and tape to their desk
• 1. Confirm permissible purpose
• 2. Use a reputable, FCRA-compliant CRA
• 3–6. Disclosures, authorization, identity, and evaluation
• 7–9. Pre-adverse procedures and adverse action
• 10–13. Documentation, disputes, retention, and training
• Common sticking points hiring teams trip on
• Tips for balancing compliance with hiring velocity
• State and EEOC considerations you can’t ignore
• Practical takeaways for HR leaders and hiring managers
• Conclusion

Quick FCRA primer (what to keep top of mind)

The Fair Credit Reporting Act (FCRA) governs how consumer reporting agencies (CRAs) and employers can collect, share, and use consumer reports — including background checks — for employment decisions.

Core points:

• Scope: “Consumer report” covers criminal history, credit reports, driving records, and other third‑party data used to evaluate candidates.
• Employer responsibility: Employers must follow FCRA notice, disclosure, and adverse-action procedures even when using third‑party screening firms.
• Local constraints: State and local laws may add requirements or restrictions (ban‑the‑box, conviction-related limits, credit-check bans). Always consider federal plus state/local rules.

The FCRA is a practical, enforceable framework — not a trap. When followed correctly, it protects both candidates and employers.

The FCRA checklist every hiring manager should print and tape to their desk

Use this as a practical, step-by-step workflow every time you order or act on a consumer report. Keep a laminated card with these steps at hand.

1. Confirm permissible purpose

Action: Only use consumer reports for a permissible purpose (e.g., employment decisions). Verify the job role allows the type of check you plan to run.

2. Use a reputable, FCRA-compliant CRA

Action: Order reports only from compliant consumer reporting agencies. Confirm they supply the required Summary of Rights and can provide an electronic copy of the report to the candidate if needed.

3. Obtain a standalone disclosure (written or electronic)

Action: Provide a clear, standalone disclosure that a consumer report may be obtained for employment purposes. This disclosure must not be buried in an employment application or combined with other authorizations.

4. Get written authorization

Action: Secure the candidate’s explicit authorization (signature or compliant e-signature). Keep a copy.

5. Verify identity and match candidate information

Action: Match name, date of birth, and SSN (as appropriate) before acting on the report to avoid mistaken identity issues.

6. Evaluate the report for relevance and accuracy

Action: Apply job-relatedness: does the reported item materially affect the candidate’s ability to perform essential job functions?

• Check for errors, outdated records, and sealed/expunged items.
• Document how the item relates to the role’s responsibilities before moving toward adverse action.

7. If adverse action is likely, prepare a pre-adverse action packet

Action: Before denying or rescinding an offer because of a report, provide the candidate:

• A copy of the consumer report used
• A copy of the FCRA Summary of Rights (CRAs supply this)
• A clear notice stating you may take adverse action based on the report

8. Allow a reasonable time for the candidate to respond

Action: Give the candidate a reasonable opportunity to review and dispute inaccuracies. Many employers use a standard waiting window (commonly five business days) before finalizing the decision, but follow legal counsel or vendor guidance if different.

9. Make the final adverse action decision and send the adverse action notice (if applicable)

Action: If you proceed with an adverse action, deliver a clear adverse action notice that includes:

• The decision was based in whole or in part on the consumer report
• The name, address, and phone number of the CRA that furnished the report
• A statement that the CRA did not make the adverse decision and cannot explain why it was made
• A notice of the candidate’s right to dispute the accuracy or completeness of the report and to get an additional free report within a specified period

10. Document everything

Action: Save copies of disclosure, authorization, report, pre-adverse packet, any candidate responses, and the adverse action notice. Record dates and communications.

11. Handle disputes promptly

Action: If the candidate disputes items on the report, notify the CRA and allow the CRA to investigate. Do not take final adverse action until the CRA’s re-investigation is complete or you have a reasoned basis to proceed.

12. Follow record retention and privacy protocols

Action: Keep screening records per your retention policy and applicable laws. Protect candidate data with appropriate access controls and secure disposal.

13. Train hiring managers and auditors

Action: Make sure anyone involved in hiring understands the steps and their responsibilities. Regularly audit compliance to catch process gaps.

Common sticking points hiring teams trip on (and how to avoid them)

• Disclosure buried in the application: Always provide a standalone disclosure separate from the employment application or general consent language.
• Misunderstanding “consumer report” scope: Background research done manually through public records or social media may still create risk; when in doubt, use a CRA and document the permissible purpose.
• Failing to provide the CRA’s contact information in adverse notices: This is required; don’t assume a generic line will suffice.
• Skipping the pre-adverse packet: Treat this as a required pause to let candidates correct errors and to protect your organization.
• Ignoring state/local laws: A credit check may be allowed under FCRA but banned by state law for certain positions — check local rules before ordering.

Tips for balancing compliance with hiring velocity

• Standardize your workflow: Use a checklist template integrated into your applicant tracking system so disclosures and authorizations are obtained automatically.
• Preauthorize common checks: For roles where you’ll always check criminal history or driving records, build compliant language into initial candidate communications to shorten turnaround.
• Use CRAs that automate notices: A compliant vendor will provide the required pre-adverse and adverse notices and documentation, reducing administrative burden and legal risk.
• Train on job-relatedness: A consistent rubric for assessing criminal records or credit history reduces bias and EEOC risk.

State and EEOC considerations you can’t ignore

Many states and cities impose additional limits on what you can consider (e.g., refusals to consider arrests without conviction, time limits for reporting convictions, or outright bans on credit checks). The Equal Employment Opportunity Commission (EEOC) expects employers to use criminal records in a way that’s job-related and consistent with business necessity. That often means tailoring queries and decision criteria to specific roles and documenting the risk analysis.

Practical takeaways for HR leaders and hiring managers

• Keep a printed checklist at the desk: a simple laminated card with the steps above dramatically reduces process mistakes.
• Treat pre-adverse procedures as mandatory: they protect your organization and candidates.
• Use a trusted, FCRA-compliant screening partner: ensure they supply the Summary of Rights and can handle notices and dispute workflows.
• Keep records and train people: documentation and consistent staff training are often the difference between a defensible decision and a costly claim.
• Build job-related decision criteria: define which offenses or report elements disqualify a candidate for each role and document the rationale.

Conclusion

The FCRA is a practical, enforceable framework not a trap. When you follow the right steps it protects candidates and employers alike. Keep this FCRA checklist within reach, standardize how reports are ordered and reviewed, and document every step from disclosure to final decision. That discipline reduces legal risk, speeds hiring, and preserves candidate trust.

If you’d like help building FCRA-compliant workflows, creating denial notices and templates, or integrating screening into your hiring systems, Rapid Hire Solutions can advise on practical screening processes and vendor-managed compliance that make it easy for hiring teams to get it right.

FAQ