=
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk
Estimated reading time: 6 min
Key takeaways
- Use a standalone disclosure and written authorization before ordering any consumer report to satisfy core FCRA requirements.
- Follow a documented workflow — identity verification, human review, pre-adverse/adverse notices, and retention — to reduce legal risk.
- Respect state and local rules (Ban-the-Box, credit-check limits, timing restrictions) and integrate them into your screening flow.
- Keep evidence audit-ready: disclosures, authorizations, reports, notices, disputes, and CRA communications.
Table of contents
- The FCRA checklist every hiring manager should print and tape to their desk
- How to use the checklist inside your hiring workflow
- Common FCRA pitfalls and how to avoid them
- Practical takeaways for HR and hiring managers
- When to involve legal or compliance
- Final checklist reminder
- FAQ
The FCRA checklist every hiring manager should print and tape to their desk
Use this checklist as your quick-reference during the hiring workflow. Each numbered item is a discrete action that aligns with FCRA requirements and best practices.
- Confirm permissible purpose
Ensure the hire-related consumer report is requested for a permissible employment purpose under the FCRA. Do not request a consumer report for non-employment reasons.
- Provide a standalone written disclosure
Give the candidate a clear, standalone written disclosure that a consumer report may be obtained for employment purposes. Don’t bury this language in an application or combine it with other consents.
- Obtain written authorization
Secure the candidate’s written authorization before ordering the report. Electronic signatures are acceptable if properly documented.
- Choose the right type of report
Decide whether you need a consumer report, investigative consumer report, criminal search, motor vehicle record (MVR), credit report, or employment/education verification. Different types have different notice requirements.
- Consider job relevance and state/local law
Confirm the check is job-related and consistent with business necessity. Verify state and local restrictions (credit checks, Ban-the-Box, timing of criminal inquiries).
- Use a certified consumer reporting agency (CRA)
If you obtain reports via a CRA, your vendor must be FCRA-compliant and able to certify permissible purpose and accuracy.
- Run identity verification
Match the report to the correct individual using name, DOB, SSN (last 4), or other identifiers to avoid mistaken identity.
- Review results for accuracy and context
Have a trained reviewer evaluate records for criminal record relevance, dates, and jurisdiction. Avoid automated “reject if X” rules without human review.
- Provide pre-adverse action notice (if considering negative action)
Before taking adverse action, give the candidate: a copy of the consumer report, the CRA’s Summary of Rights under the FCRA, and a clear statement that you may take action based on the report.
- Allow time to respond and document communications
Allow a reasonable opportunity (commonly 3–5 business days) for the candidate to review and dispute inaccuracies. Document all outreach and responses.
- Provide final adverse action notice (if you proceed)
If you deny or change terms, send an adverse action notice that includes: the CRA’s name, address, phone, statement that the CRA didn’t make the decision and can’t provide specific reasons, and notice of the candidate’s rights under the FCRA.
- Reinvestigate if candidate disputes
If the candidate disputes the report, ensure the CRA conducts reinvestigation per FCRA timelines (typically 30 days) and update your decision based on new information.
- Keep records and retention logs
Retain disclosures, authorizations, reports, adverse action notices, and documentation of disputes for a reasonable period and per state law. Track retention for audits.
- Train hiring teams
Ensure hiring managers and recruiters understand FCRA steps, state-specific rules, and who to contact for questions.
- Use posture checks for batch or recurring checks
For periodic screenings (e.g., annual checks), repeat disclosure/authorization where required and confirm continued permissible purpose.
Read this, print it, and keep it where hiring decisions are made.
How to use the checklist inside your hiring workflow
The checklist is most useful when embedded into hiring stages. Below is a short workflow that aligns the checklist items with common hiring touchpoints.
- Pre-screen / Application stage
Confirm job-related checks and state rules (check item 5). Do not obtain a consumer report yet unless you have the disclosure and authorization (items 2–3).
- Offer/Conditional offer stage (recommended)
Provide disclosure and get authorization immediately after a conditional offer where state law or policy requires post-offer checks. Order reports only after written authorization and identity confirmation (items 2–4, 7).
- Report review and decision stage
Human review for relevance; document context and reasoning (item 8). If considering adverse action, issue pre-adverse action package and allow response time (items 9–10).
- Post-decision and recordkeeping
Send final adverse action notice if required (item 11). Maintain records and respond to disputes in coordination with your CRA (items 12–13).
Pro tip: Use a standardized packet (disclosure, authorization, Summary of Rights copy) so every candidate receives consistent information. That reduces errors and shows defensible, repeatable policies.
Common FCRA pitfalls and how to avoid them
Awareness of frequent missteps makes the checklist work better. These are the mistakes most likely to trigger complaints, lawsuits, or regulatory attention — and how to prevent them.
- Pitfall: Disclosure embedded in other documents
Fix: Always use a standalone disclosure that clearly states a consumer report may be obtained for employment purposes.
- Pitfall: Acting on a report without authorization or after expiration
Fix: Verify written authorization is current and tied to the specific report. Reauthorize for re-checks when required.
- Pitfall: Not providing pre-adverse action materials
Fix: Send a copy of the report and the CRA’s Summary of Rights before finalizing adverse action, and document delivery.
- Pitfall: Misidentifying a candidate because of common names
Fix: Use multiple identifiers (DOB, SSN last 4) and confirm with candidate if records appear ambiguous.
- Pitfall: Ignoring state and local rules
Fix: Maintain a crosswalk of state/local restrictions (credit checks, arrest record limits, Ban-the-Box) and apply them automatically in your screening workflow.
- Pitfall: Automated, opaque “black box” decisions
Fix: Require a human reviewer to contextualize criminal history and ensure relevance to the job.
- Pitfall: Failing to document disputes and reinvestigation
Fix: Track disputes, confirmations from the CRA, and any resulting changes to your decision.
Practical takeaways for HR and hiring managers
- Use a standardized script and packet for disclosure + authorization to eliminate variability.
- Adopt a conditional-offer policy for sensitive checks (credit, certain criminal searches) where state or local guidance recommends post-offer timing.
- Train hiring teams quarterly on FCRA steps and common state-specific restrictions.
- Require human review for adverse decisions — document relevance to the job, duration since the offense, and any mitigating factors.
- Work with a reputable CRA that provides timely, FCRA-compliant reinvestigation and audit-ready documentation.
- Keep an accessible audit folder for each hire: disclosure, authorization, report, pre-adverse/adverse notices, and dispute correspondence.
When to involve legal or compliance
Some situations merit early involvement from legal or your compliance team:
- You plan to use credit reports, medical-related checks, or broad criminal history screens.
- You operate in multiple states with varying background check restrictions.
- You develop automated decisioning or scoring that could disproportionately impact protected classes.
- A candidate alleges discrimination or receives a consumer dispute that could change hiring decisions.
Document the escalation path and decision rationale so responses are consistent and defensible.
Final checklist reminder
The FCRA checklist every hiring manager should print and tape to their desk is not just about avoiding fines — it’s about building a fair, consistent, and defensible hiring process. Consistency protects your organization and enhances candidate trust.
Practical immediate steps:
- Print the checklist and insert it into your hiring packet.
- Run a 15-minute team briefing to align recruiters and hiring managers.
- Schedule a quarterly audit of your vendors and sample files for FCRA compliance.
Rapid Hire Solutions helps employers implement compliant screening workflows, generate audit-ready documentation, and train hiring teams on the practical application of FCRA requirements. If you’d like a compliance checklist tailored to your hiring practices or a review of your current screening vendor setup, reach out — we can help you operationalize the FCRA checklist and reduce hiring risk.
FAQ
Do I need a separate disclosure for every candidate?
Answer: Yes. Provide a standalone written disclosure to each candidate before ordering a consumer report. Do not embed the disclosure in other application materials.
How long should I wait after pre-adverse notice before making a final decision?
Answer: Allow a reasonable opportunity for the candidate to respond — commonly 3–5 business days. Document all communications and any candidate disputes.
What should an adverse action notice include?
Answer: The adverse action notice should include the CRA’s name, address, phone number, a statement that the CRA did not make the decision and cannot provide specific reasons, and notice of the candidate’s rights under the FCRA.
When must I involve legal or compliance?
Answer: Involve legal or compliance when using sensitive checks (credit, medical), operating across multiple states, creating automated decisioning, or when a candidate alleges discrimination or files a dispute that may change hiring decisions.