=
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk
Estimated reading time: 6 minutes
Key takeaways
- Follow a consistent, documented screening workflow to protect candidate rights and reduce legal risk.
- Use standalone disclosures and documented consent before ordering any consumer report.
- Provide pre-adverse and adverse notices correctly and document individualized assessments when criminal history is used.
- Keep records, check state/local rules, and train staff to ensure defensible, compliant hiring.
Why this FCRA checklist matters
Following the FCRA isn’t just about avoiding penalties. A consistent, well-documented screening workflow:
- Protects candidates’ rights and reduces later disputes
- Demonstrates fair, non-discriminatory hiring practices
- Lowers legal and reputational risk for the employer
- Produces cleaner, faster results when paired with a compliant screening partner
Keep this checklist visible. Make it the default playbook for anyone involved in pre-employment screening.
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk
- Confirm permissible purpose and job-related need
Only obtain a consumer report for a permissible purpose under the FCRA (employment decisions). Confirm that the type of report (criminal, credit, MVR, etc.) is job-related and consistent with company policy.
- Use a clear, standalone disclosure
Provide a clear, conspicuous disclosure that a consumer report may be obtained. The disclosure must be a standalone document (not buried in an application or hidden behind other language).
- Obtain written authorization before ordering
Get the candidate’s signed written authorization (electronic signatures are acceptable). Do not order a report without documented consent.
- Verify candidate identity before matching records
Confirm candidate identifiers (full name, date of birth, and a corroborating identifier such as last-four SSN or other acceptable information) to reduce mismatches.
- Confirm state and local restrictions
Check for state/local limits (ban-the-box, credit-check bans, restrictions on reporting arrests or sealed records, required local forms). Adjust your process for candidates in those jurisdictions.
- Choose the right search types for the role
Order only necessary searches (e.g., criminal background for safety-sensitive roles, motor-vehicle records for drivers). Limit credit checks to positions where they are essential and permitted by law.
- Certify the order to your CRA (consumer reporting agency)
When submitting an order, include required employer certifications to the CRA (permissible purpose, compliance with FCRA requirements, and accuracy of the job information). Ensure your screening partner knows your intended use.
- Review reports for identity matches and relevance
Confirm the report matches the candidate (name, DOB, location). Evaluate whether reported items are job-related and within any applicable look-back windows required by state/local rules.
- If there is adverse information, start pre-adverse action
Before taking an adverse employment action: provide the candidate with a copy of the consumer report and a copy of the FCRA “Summary of Rights.” Give the candidate reasonable time to review and respond to the report (commonly 5 business days, but follow your policy and counsel’s guidance).
- Consider an individualized assessment for criminal records
If using criminal history to make a decision, document a job-related assessment that considers offense nature, time passed, and evidence of rehabilitation. This step helps defend against disparate-impact or discrimination claims.
- If moving forward with adverse action, send a final adverse action notice
The adverse action notice must include: (a) a statement that an adverse action was taken; (b) the CRA’s name, address, and phone number; (c) a statement that the CRA did not make the hiring decision and cannot provide specific reasons; and (d) notice of the candidate’s right to obtain a free copy of the report and dispute inaccurate information.
- Maintain records and documentation
Keep copies of disclosures, authorizations, reports relied upon, pre-adverse/adverse notices, and any candidate responses. Store documentation in a secure, retrievable system and follow applicable retention guidelines.
- Respond promptly to disputes and reinvestigation requests
If a candidate disputes information, coordinate with your CRA. The CRA must investigate disputes, but employers should pause adverse action if the dispute raises material questions about the report’s accuracy.
- Train hiring teams and audit the process regularly
Train anyone who orders or acts on reports. Audit orders, notices, and decisions periodically to ensure consistent application and to detect process drift.
What to include in the pre-adverse action packet
When you deliver pre-adverse materials to a candidate, include all of the following:
- A copy of the consumer report used
- The FCRA Summary of Rights
- A clear explanation of what in the report triggered concern (if practical)
- A statement of the timeframe they have to respond and how to submit disputes or additional information
Providing clear, actionable information at this stage reduces confusion and often resolves issues without formal disputes.
Common mistakes hiring managers make
- Embedding the FCRA disclosure inside an application instead of using a standalone form
- Ordering reports without written consent or before confirming permissible purpose
- Failing to check state/local restrictions before ordering credit or criminal checks
- Skipping the pre-adverse step and sending only a final adverse action notice
- Applying different screening standards across similar roles or candidates (creates discrimination risk)
- Not documenting individualized assessments when adverse decisions are based on criminal history
- Keeping paper trails in insecure locations or deleting records prematurely
Avoid these mistakes by codifying the checklist into your applicant tracking system (ATS) workflows and by training hiring managers to follow it without exceptions.
Quick printable desk checklist (compact)
- Permissible purpose & job-related need confirmed
- Standalone disclosure provided
- Written authorization obtained
- Candidate identity verified
- State/local restrictions checked
- Appropriate searches selected
- CRA certified and order placed
- Report matched and reviewed for relevance
- Pre-adverse action packet sent (if needed) — allow reasonable review time
- Individualized assessment documented (if criminal history used)
- Final adverse action notice sent (if applicable)
- All documents retained and dispute requests tracked
- Process audited & staff trained
Tape this short list where you’ll actually use it.
Practical takeaways for HR leaders and hiring managers
- Standardize your screening workflow and require adherence: one inconsistent step can be legally risky.
- Keep a current matrix of state and local screening restrictions; update it before running cross-state checks.
- Use a reputable CRA that understands employer certification and provides the report formats and dispute support you’ll need.
- Document decision rationales, especially for adverse actions tied to criminal history, and apply a consistent, job-related assessment.
- Train hiring managers on the desk checklist and test the process with periodic audits.
Final reminders about the FCRA checklist
The FCRA sets clear procedural requirements; compliance is a combination of correct paperwork, consistent practices, timely notices, and good documentation. This checklist gives hiring managers a practical, defensible routine to follow every time a consumer report is ordered.
If you want a compliant template of the disclosure/authorization language, a map of state/local restrictions, or an audit of your current screening workflow, Rapid Hire Solutions can help review and align your processes with FCRA requirements. We partner with employers to build compliant, efficient screening programs that reduce hiring risk and support fair hiring decisions.
FAQ
What is a permissible purpose for ordering a consumer report?
Under the FCRA, employers may obtain consumer reports for employment purposes — i.e., to evaluate a candidate or employee for hiring, promotion, retention, or other employment decisions. Always confirm the purpose is documented and job-related before ordering.
Does the disclosure have to be a separate document?
Yes. The FCRA requires a clear, standalone disclosure that a consumer report may be obtained. Do not bury the disclosure in another document or hide it behind other language.
How long should I give a candidate to respond to a pre-adverse packet?
Common practice is to allow ~5 business days for review, but your policy and legal counsel may recommend a different timeframe. Document whatever period you use and apply it consistently.
When is an individualized assessment required?
If adverse employment decisions are based on criminal history, especially where there may be disparate impact concerns, document a job-related individualized assessment considering the nature of the offense, time elapsed, and evidence of rehabilitation.
What records should I retain?
Retain copies of disclosures, authorizations, consumer reports relied upon, pre-adverse and adverse notices, any candidate responses, and documentation of individualized assessments. Store these securely and follow your retention policy and applicable legal requirements.