FCRA Checklist Hiring Managers Should Print and Tape

=

The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk

Estimated reading time: 6 minutes

Key takeaways

• Always use a standalone disclosure and obtain written authorization before requesting a consumer report.
• Follow pre-adverse and adverse action steps exactly: provide the consumer report, the CRA Summary of Rights, allow response time, then send the final adverse action notice with CRA contact details.
• Limit checks to job-relevant information and document permissible purpose, individualized assessments, and vendor compliance.
• Preserve and secure records and account for state and local law differences; train staff and audit CRAs regularly.

Table of contents

• Quick FCRA primer (what triggers FCRA rules)
• The FCRA checklist (print-and-tape version)
• Pre-request: Disclosure & Authorization
• Before ordering: Permissible purpose & scope
• If report returns potentially disqualifying information: Pre-adverse action
• Final adverse action
• Recordkeeping & data security
• Fairness & scope controls
• Ongoing compliance
• How to use the checklist within your hiring process
• Common pitfalls hiring teams trip over
• Practical takeaways
• When to involve legal or compliance
• Summary
• FAQ

Quick FCRA primer (what triggers FCRA rules)

FCRA applies when you obtain a “consumer report” from a consumer reporting agency (CRA) for employment purposes. That includes criminal history, credit checks, driving records, and investigative reports obtained from a third party.

Key points:

• Permissible purpose: Employment screening is a permissible purpose, but you must document it.
• Written authorization: You must obtain written authorization before pulling a consumer report.
• Adverse action procedures: The FCRA requires specific notices and procedures when adverse actions are taken based on a report.

The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk

Use this as a front-line compliance tool. Check each box before requesting a consumer report or taking action based on one.

Pre-request: Disclosure & Authorization

• [ ] Have I given the candidate a clear, standalone written disclosure that a consumer report may be obtained for employment purposes? (not buried in an application)
• [ ] Do I have the candidate’s written authorization? (signed or e-sign consent is required)
• [ ] Is the disclosure separate from other documents and clearly labeled?

Before ordering: Permissible purpose & scope

• [ ] Do I have a permissible purpose documented (e.g., conditional offer, employment screening)?
• [ ] Is the scope limited to job-relevant information? (criminal checks relevant to role, driving records only for driving duties, avoid extraneous credit checks unless job-related)
• [ ] Have I chosen a CRA that provides FCRA-compliant reports and required notices?

If report returns potentially disqualifying information: Pre-adverse action

• [ ] Will I give the candidate a pre-adverse action notice that includes:
  • [ ] A copy of the consumer report
  • [ ] A copy of the CRA’s Summary of Rights under the FCRA
  • [ ] A written statement that adverse action may follow and the candidate can dispute inaccuracies?
• [ ] Have I allowed the candidate a reasonable period to respond or contest the report? (best practice: 5 business days; document any extensions)

Final adverse action

• [ ] If moving forward with adverse action, does the notice include:
  • [ ] A clear statement of adverse action (e.g., rescinding offer or termination)
  • [ ] The name, address, and phone number of the CRA
  • [ ] A statement that the CRA did not make the adverse decision and cannot explain reasons
  • [ ] Notice of the candidate’s right to obtain a free report within 60 days and dispute accuracy?
• [ ] Is the adverse action notice documented in the candidate file?

Recordkeeping & data security

• [ ] Have I documented certifications to the CRA (per FCRA) that there is a permissible purpose?
• [ ] Are all disclosures, authorizations, reports, pre-adverse and adverse notices retained per company policy and local law?
• [ ] Is candidate report data access restricted to authorized personnel only?
• [ ] Is there a secure disposal policy for consumer report information when no longer needed?

Fairness & scope controls

• [ ] Have I completed an individualized assessment for criminal records where applicable (consider nature, time since offense, and job relevance)?
• [ ] Have I checked state and local “ban-the-box,” arrest record, credit-check, and background-check timing laws that may override or add duties beyond the FCRA?
• [ ] Is screening applied consistently across similar roles to avoid disparate impact claims?

Ongoing compliance

• [ ] Are HR and hiring managers trained on FCRA steps and state/local variations?
• [ ] Do we audit our screening vendor for FCRA compliance and confirm they provide the Summary of Rights and copies of reports when required?
• [ ] Are our disclosure/authorization and adverse action templates reviewed by legal at least annually?

Keep this checklist printed and visible — it’s the quickest way to prevent avoidable FCRA missteps.

How to use the checklist within your hiring process

A checklist only works if integrated into everyday workflows. Here’s a simple process map that aligns with the checklist:

1. Initial screening and conditional offer

• Use the checklist to confirm job relevance and determine which reports are permissible.
• Provide the standalone disclosure and obtain written authorization before initiating the CRA request.

2. Ordering and reviewing reports

• Order reports only after authorization and document your permissible purpose.
• Review reports for accuracy and relevance; flag any potentially disqualifying items for further review.

3. Pre-adverse notice and candidate response

• Send the required pre-adverse packet (copy of the report + Summary of Rights).
• Allow a reasonable response period and document any candidate communications or disputes.

4. Final decision and adverse action notice

• If adverse action is taken, send the FCRA-compliant adverse action notice and keep proof of delivery.
• If the candidate disputes and the CRA reinvestigates, follow CRA guidance and refrain from adverse action until the dispute is reasonably resolved.

5. Recordkeeping and disposal

• Securely store the documentation for the period required by applicable state law and your record retention policy.
• Dispose of consumer report information securely when retention ends.

Common pitfalls hiring teams trip over (and how to avoid them)

• Confusing consumer-supplied information with CRA reports: If you rely on information the candidate supplied directly (like a written admission or an application answer), FCRA adverse action procedures may not apply — but be cautious: if you supplement or verify that information through a CRA, FCRA protections kick in.
• Burying the disclosure: Including the FCRA disclosure mixed into an employment application or buried in a long document violates the “standalone” requirement. Use a separate form.
• Not providing the Summary of Rights: The FCRA requires that a copy of the consumer report and the CRA’s Summary of Rights accompany a pre-adverse action notice. Missing this step is a frequent violation.
• Ignoring state and local rules: Many states and municipalities have additional steps or timing rules (e.g., California, New York City). The checklist calls for a state/local compliance check before screening.
• Skipping the individualized assessment for criminal records: To reduce disparate impact risk and comply with EEOC guidance, document the job relevance analysis and offer candidates an opportunity to explain before final adverse action.

Practical takeaways for hiring managers and HR teams

• Use a standalone disclosure and get written consent every time you pull a consumer report.
• Limit background checks to job-relevant information and document your reasoning.
• Follow the pre-adverse/adverse action steps exactly: send a copy of the report and the FCRA Summary of Rights, allow a response period, then send the final adverse action notice with required CRA contact info.
• Train all team members who touch background checks and audit vendors regularly for FCRA compliance.
• Keep a visible, printed FCRA checklist at the desk — it reduces human error and makes compliance routine.

When to involve legal or compliance

• Using broad credit checks or deep investigative reports: Get legal review first, especially in jurisdictions that restrict credit checks for employment.
• Complex criminal history or sealed records: Consult counsel to evaluate job relevance and minimize legal exposure.
• Expanding screening across multiple states or municipalities: Have compliance counsel confirm your templates and timing meet local standards.

The FCRA checklist every hiring manager should print and tape to their desk (summary)

• Provide a standalone disclosure and obtain written authorization.
• Confirm permissible purpose and limit report scope to job relevance.
• Send pre-adverse notice with a copy of the report + Summary of Rights; allow a reasonable response time.
• If adverse action is taken, send a complete adverse action notice with CRA contact details and record retention documentation.
• Secure, limit access to, and properly dispose of consumer report information.
• Account for state and local law, train staff, and audit your CRA partners.

This checklist isn’t just paper to tape to your monitor — it’s a practical shield against compliance risk and a tool for fair, defensible hiring decisions.

Conclusion: Print it, use it, update it

Make the FCRA checklist a visible part of your hiring station. The simple act of following a step-by-step process reduces litigation risk, protects candidate rights, and keeps hiring decisions defensible.

For teams that want help reviewing templates, confirming state-specific obligations, or auditing screening vendors for FCRA compliance, Rapid Hire Solutions can help you translate this checklist into customized policy and operational controls. Contact Rapid Hire Solutions to arrange a compliance review or to get FCRA-compliant templates you can implement today.

FAQ