Client Login
Subscribe
Get A Quote
Contact us

FCRA Checklist Every Hiring Manager Should Tape to Desk

=

The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk

Estimated reading time: 6 minutes

Key takeaways

  • Always use a stand‑alone disclosure and obtain written authorization—this is the most common FCRA failure.
  • Follow pre‑adverse and adverse action steps precisely: give the report, the Summary of Rights, allow a reasonable response window, then send a compliant adverse notice.
  • Tailor screening to state and local rules and centralize vendor controls and documentation to reduce legal and reputational risk.
  • Document everything: disclosures, authorizations, delivery dates, and decision rationales serve as your primary defense.

Table of contents

Why this checklist matters now

The Fair Credit Reporting Act (FCRA) governs most employment background checks that use consumer reports—criminal records, credit history, education and employment verifications, and more. When a hiring decision hinges on a background check, small mistakes can create big legal and reputational risks.

FCRA violations lead to lawsuits, statutory damages, and remedial steps that disrupt recruiting workflows. Beyond legal exposure, mishandling background‑screening steps undermines fairness, candidate experience, and your employer brand. Use this checklist to make compliant, consistent decisions that protect applicants and your organization.

The one-page FCRA checklist (print this)

  • Do I have a standalone, clear written disclosure that a consumer report may be obtained? (Yes/No)
  • Did I obtain the applicant’s written authorization after the disclosure? (Yes/No)
  • Is the disclosure separate from other application materials and not embedded in an ACKNOWLEDGMENT box? (Yes/No)
  • If I requested an investigative consumer report, did I include the separate disclosure and summary of rights for investigative reports? (Yes/No)
  • Has the consumer reporting agency (CRA) been informed of permissible purpose and provided required certifications? (Yes/No)
  • Before taking adverse action, did I provide the candidate a copy of the consumer report and the Summary of Consumer Rights? (Yes/No)
  • Did I allow a reasonable time for the candidate to review and dispute the report? (Yes/No) — Document dates.
  • Did I send a clear adverse action notice that includes CRA contact info, statement that CRA didn’t make the decision, and a summary of rights? (Yes/No) — Attach dated copies.
  • Have I considered applicable state or local restrictions (e.g., arrest/conviction limits, credit-check bans, “ban the box” rules)? (Yes/No)
  • Have I documented retention of disclosures, authorizations, pre-adverse and adverse communications? (Yes/No)
  • If using a vendor, have I confirmed they follow FCRA-required procedures and provided the required employer certifications? (Yes/No)

Tape this to your desk. It prevents rushed mistakes and standardizes your process.

Step-by-step FCRA workflow hiring teams should follow

  1. Pre-screen policy and permissible purpose

    Confirm the role has a permissible purpose under the FCRA for obtaining a consumer report (e.g., employment). Ensure this purpose is documented in your hiring policy.

  2. Provide a clear disclosure

    Provide a written, stand-alone disclosure that a consumer report may be obtained. It must be “clear and conspicuous” and cannot be buried in an application, employee handbook, or clickwrap acceptance.

  3. Get written authorization

    Obtain a candidate’s written authorization after delivery of the disclosure. Electronic signatures and checkboxes are acceptable if they meet electronic signature standards and are clearly separate from other content.

  4. Order the report through a compliant CRA or screening vendor

    Ensure the vendor is FCRA-compliant, furnishes required notices to candidates when appropriate, and provides accurate chain-of-custody documentation.

  5. Review the report, verify identity, and assess relevance

    Verify the report matches the candidate and evaluate whether findings are job-related and consistent with business necessity.

  6. Pre-adverse action

    If you’re considering withdrawing an offer or taking another adverse employment action based on the report, first give the candidate:

    • A copy of the consumer report, and
    • A copy of the FCRA Summary of Consumer Rights (commonly called the “A Summary of Your Rights Under the Fair Credit Reporting Act”).

    Allow a reasonable, documented period for the candidate to dispute or explain (many employers use 5 business days).

  7. Final adverse action notice

    If you proceed with adverse action, send an adverse action notice that includes:

    • Statement that adverse action was taken,
    • The CRA name, address, and phone number,
    • A statement that the CRA did not make the decision and cannot provide specific reasons, and
    • Notice of the candidate’s right to obtain a free copy of the report and dispute inaccuracies.
  8. Recordkeeping

    Retain disclosures, authorizations, copies of reports provided to candidates, and communications for the period required by law or your document retention policy (industry practice ranges from 1–2 years, but check state law).

Common FCRA pitfalls and how to avoid them

  • Pitfall: Embedding disclosure in an application or using a combined acknowledgment box.
    Fix: Use a stand-alone disclosure and a separate authorization. Keep language plain and visible.
  • Pitfall: Skipping the pre-adverse action packet.
    Fix: Automate pre-adverse packet delivery through your screening vendor and document the delivery date.
  • Pitfall: Not tailoring actions to state/local law (e.g., credit checks, conviction history).
    Fix: Maintain a current map of state and local restrictions and consult legal counsel when in doubt.
  • Pitfall: Assuming the CRA’s report is infallible.
    Fix: Verify identity and corroborate critical records (employment, education, professional licenses) through primary sources when necessary.
  • Pitfall: Inconsistent policies across hiring teams.
    Fix: Centralize FCRA procedures in recruiting SOPs and train hiring managers.

State and local rules you must consider

FCRA sets the federal baseline, but states and localities often add requirements or limits. Common variations include:

  • “Ban the Box” laws: Limit when you can ask about conviction history (often delaying until a conditional offer).
  • Consumer privacy and credit‑check restrictions: Some states restrict using credit history for hiring or require extra notice for credit checks.
  • Additional notices or content requirements: Certain states require supplemental language in the disclosure or adverse action notices.

Practical step: Keep a short, maintained compliance matrix for the states where you recruit and hire. Update it annually and whenever you expand recruiting geographies.

Using a background check vendor—what to require

  • Require the vendor to honor FCRA timing for pre-adverse and adverse notices and to provide audit-ready documentation.
  • Require vendor certifications that the report was requested for permissible purpose and that identity verification steps were followed.
  • Confirm the vendor has procedures for handling candidate disputes and will provide the candidate with necessary consumer rights documents.
  • Ask for SOC 2 or similar security attestations and a clear privacy policy that aligns with your data retention rules.

When criminal records are involved: balancing compliance and fairness

Criminal history is commonly used in screening, but it’s high‑risk from both FCRA and EEOC perspectives. Best practices:

  • Use individualized assessments when a conviction is relevant to the job, documenting the connection between the conviction and job duties.
  • Avoid blanket exclusion policies that bar all applicants with any conviction.
  • Consider timing: many jurisdictions require waiting until after a conditional offer or prohibit asking about arrests/convictions outright.
  • Provide clear adverse action processes and consider rehabilitation, time elapsed since offense, and evidence of rehabilitation when making final decisions.

Practical takeaways for busy hiring managers

  • Never skip the stand‑alone disclosure and the signed authorization—this is the most common FCRA failure.
  • Treat pre‑adverse action as sacrosanct: provide the report and summary of rights and document the candidate’s response window.
  • Keep a one‑page “FCRA desk checklist” visible in hiring spaces and shared with every recruiter and hiring manager.
  • Centralize and document the vendor relationship: request certifications, dispute-handling procedures, and security proof.
  • Update policies for state and local law changes and document decision rationales for any adverse action.

Sample desk-sized adverse-action script (for documentation)

Script — “We identified information in a third-party consumer report that could affect your eligibility. We are providing a copy of that report and the Summary of Your Rights. You have X business days to review and dispute any inaccuracies. If you wish to provide additional context, please contact [HR contact].”

Customize the script to reflect your organization’s timelines and contact points. Save copies of all communications.

Conclusion: Put the FCRA checklist to work

The FCRA checklist every hiring manager should print and tape to their desk isn’t a ritual—it’s risk management. Consistent application of these steps protects candidates, reduces litigation risk, and improves hiring decisions. Make the checklist mandatory for anyone involved in background‑screening decisions and pair it with a reliable screening vendor who follows FCRA procedures.

If you’d like a printable one‑page checklist tailored to your hiring processes or an audit of your current screening workflow, Rapid Hire Solutions can help you map federal and state requirements and operationalize compliant screening practices.

FAQ