=
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk
Estimated reading time: 4 minutes
Key takeaways
- Always provide a standalone disclosure and obtain written authorization before ordering any consumer report.
- Follow the pre-adverse action process: give the candidate the report and the Summary of Rights and allow time to dispute.
- Document everything: disclosures, authorizations, reports, notices, and the rationale for decisions.
- Train and audit: keep hiring teams informed and periodically audit vendor certifications and your process.
Table of contents
- Title
- Key takeaways
- Why the FCRA matters to hiring managers
- The FCRA checklist (print and tape)
- 1. Clear permissible purpose and employer policy
- 2. Separate written disclosure and authorization
- 3. Identity verification and candidate context
- 4. Certify to the CRA
- 5. Review the report carefully
- 6. If considering adverse action, follow pre-adverse action
- 7. Final adverse action (if you proceed)
- 8. Document and retain records
- 9. Train hiring teams and audit regularly
- Step-by-step: From disclosure to adverse action
- Common pitfalls
- State and local law interactions
- Practical hiring-manager tips
- Practical takeaways for employers
- Final thoughts
- FAQ
Why the FCRA matters to hiring managers
The Fair Credit Reporting Act (FCRA) regulates consumer reporting agencies (CRAs) and the use of consumer reports for employment purposes. When you use a third party to deliver background information — criminal records, credit reports, driving records, or employment verifications — that report is a “consumer report” under the FCRA. Employers who obtain and act on those reports must comply with specific disclosure, consent, notice, and recordkeeping obligations. Compliance reduces legal risk, protects candidate rights, and preserves your hiring decisions from later challenges.
The FCRA checklist (print and tape)
Use this step-by-step checklist every time you order a consumer report. It’s organized to match a typical hiring workflow.
1. Clear permissible purpose and employer policy
- Confirm you have a lawful, job-related permissible purpose for the report (employment decisions).
- Use a written background screening policy that defines which checks are job-relevant, how often screens are refreshed, and who in the organization may order reports.
2. Separate written disclosure and authorization (before ordering)
- Provide a clear, standalone written disclosure that a consumer report may be obtained for employment purposes. It must not be buried in an application or other paperwork.
- Obtain a signed authorization (or electronic equivalent) from the applicant or employee authorizing the report. Keep both the disclosure and authorization.
3. Identity verification and candidate context
- Verify the candidate’s identity to reduce mismatches (full name, DOB, SSN when legally permissible).
- Screen only for information relevant to the position (e.g., driving history for drivers, credit reports only when job-related).
4. Certify to the CRA
When ordering, certify to the CRA the permissible purpose and that you will comply with FCRA obligations (including providing notices if adverse action is contemplated).
5. Review the report carefully
- Check for accuracy, multiple records, and sealed/expunged records. Reconcile any name or DOB mismatches before drawing conclusions.
- Assess job relevance and the record’s recency; document your job-related rationale.
6. If considering adverse action, follow the pre-adverse action step
Provide the candidate with:
- A copy of the consumer report used
- A copy of the Summary of Consumer Rights under the FCRA
- A clear statement that you may take adverse action based on information in the report
Allow a reasonable period for the candidate to review and dispute inaccuracies (industry best practice: at least five business days).
7. Final adverse action (if you proceed)
Send an adverse action notice that includes:
- The name, address, and phone number of the CRA that provided the report
- A statement that the CRA did not make the adverse decision and cannot provide specific reasons
- Notice of the candidate’s right to obtain a free copy of the report from the CRA and to dispute its accuracy
Keep documentation of the pre-adverse package, the candidate’s response (if any), and the adverse action notice.
8. Document and retain records
- Keep copies of disclosures, authorizations, reports, pre-adverse and adverse notices, and your decision rationale.
- Follow retention requirements set by applicable federal, state, and local law and maintain records long enough to respond to disputes or regulatory inquiries.
9. Train hiring teams and audit regularly
- Train recruiters and managers on the separate-disclosure rule, pre-adverse/adverse timing, and how to evaluate criminal records consistent with EEOC guidance.
- Audit your process and vendor certification periodically to ensure compliance.
Step-by-step: From disclosure to adverse action (what to send and when)
Before you pull the report
Standalone disclosure and authorization: Separate, clear language and explicit consent. No intermingling with offer letters or application forms.
When the report arrives
Review for identity issues and relevance. If information appears inaccurate, consider calling the CRA for clarification before moving forward.
Pre-adverse action packet (before final decision)
Provide the candidate a copy of the report and the FCRA Summary of Rights. State that you may take adverse action and allow time to dispute inaccuracies.
Final adverse action notice (after decision)
Provide the CRA’s contact details and the statutorily required statements about the CRA’s role and the candidate’s dispute rights.
Common pitfalls that cause violations
- Burying the disclosure in an application or job posting rather than providing a standalone disclosure.
- Failing to obtain a signed authorization before pulling the report.
- Skipping the pre-adverse action step and sending only a final rejection letter.
- Using a consumer report for a purpose other than employment without proper certification.
- Relying on old or irrelevant criminal records without individualized, job-related assessment (classic disparate-impact risk).
- Ignoring state and local restrictions (Ban-the-Box laws, limits on credit checks, or youth record sealing rules).
State and local law interactions — don’t treat FCRA as the only rule
The FCRA sets a federal baseline, but many states and cities impose additional restrictions on background checks: timing of inquiries, limits on credit checks, or prohibitions about certain offenses. Some local ordinances require individualized assessments before excluding a candidate for a criminal record, and “ban-the-box” rules may restrict questions on applications or delay background checks until later in the hiring process. Always consult counsel or your screening partner about applicable state and local requirements before deploying policies.
Practical hiring-manager tips
- Standardize screening decisions. Use consistent job-related criteria and document the rationale for adverse decisions to defend against discrimination claims.
- Use templates for disclosures, pre-adverse packets, and adverse action notices to avoid omissions.
- Allow at least five business days between pre-adverse packet delivery and final decision when possible; this minimizes disputes and demonstrates good faith.
- When a candidate disputes, promptly refer the dispute to the CRA and document the investigation outcome before making a final adverse decision.
- If you need credit reports, obtain a clear job-related justification in writing and check state rules; some jurisdictions heavily restrict credit checks.
- Consider delaying criminal background checks until later stages if local ban-the-box rules apply or if you want to reduce early stage bias.
Practical takeaways for employers
- Implement a written, job-related screening policy and train hiring teams on FCRA steps.
- Always provide a standalone disclosure and get a written authorization before ordering any consumer report.
- Use pre-adverse action to give candidates a chance to dispute inaccurate information — it’s both a legal requirement and a best practice that reduces litigation risk.
- Keep auditable records of every report, notice, and hiring decision; documentation is your strongest defense.
- Coordinate with your screening vendor to ensure their processes and certifications align with your compliance needs and local laws.
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk — final thoughts
Keep the checklist visible: a few minutes of process discipline prevents costly mistakes later. The Fair Credit Reporting Act is not just a legal box to check — it’s part of building a transparent, fair hiring process that protects both candidates and your organization.
If you’d like help implementing compliant templates, training hiring teams, or auditing your screening program, Rapid Hire Solutions can assist with FCRA-focused workflows and documentation to make compliance straightforward and repeatable.
FAQ
When must I provide a standalone disclosure and authorization?
You must provide the standalone disclosure and obtain written authorization before ordering any consumer report. The disclosure must be clear and separate from other application documents — not buried in an application or offer letter.
What is included in the pre-adverse action packet?
The pre-adverse packet should include: a copy of the consumer report you relied on, the FCRA Summary of Rights, and a clear statement that you may take adverse action based on the information. Provide an opportunity for the candidate to dispute inaccuracies.
How long should I wait after sending the pre-adverse packet?
Industry best practice is to allow at least five business days between sending the pre-adverse packet and making a final decision. This period demonstrates good faith and reduces the risk of disputes.
What records should I retain and for how long?
Retain copies of disclosures, authorizations, consumer reports, pre-adverse and adverse notices, and your decision rationale. Follow federal, state, and local retention requirements and keep records long enough to respond to disputes or regulatory inquiries.
How do state and local laws affect my screening process?
State and local rules may impose stricter limits than the FCRA — for example, ban-the-box ordinances, restrictions on credit checks, or requirements for individualized assessments before excluding a candidate. Always consult counsel or your screening partner to ensure your policies comply with applicable local rules.