FCRA Checklist for Hiring Managers — Quick Desk Guide

=

The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk

Estimated reading time: 6 minutes

Introduction

If you run background checks, the Fair Credit Reporting Act (FCRA) governs how you collect, review, and act on consumer reports. Missteps can lead to costly litigation, hiring delays, and damaged reputation — and yet the basic FCRA requirements are straightforward when you keep a concise checklist at hand. Below is a practical, printable checklist with short explanations, common pitfalls, and quick sample language you can adapt.

Quick FCRA checklist to keep on your desk

Print this checklist and use it every time you order or rely on a consumer report (criminal history, credit report, driving record, education verification, employment verification that uses a third-party CRA).

1. Confirm permissible purpose
   • Why: You must have a permissible purpose under the FCRA before obtaining a consumer report for employment.
   • Quick action: Verify the request is for hiring, promotion, reassignment, retention, or other employment decision.
2. Use a qualified CRA / vendor
   • Why: Many obligations (e.g., reinvestigation) flow through the consumer reporting agency (CRA).
   • Quick action: Work with a vendor that understands FCRA employment requirements and provides required disclosures, summaries, and dispute handling.
3. Provide a clear, standalone disclosure
   • Why: The disclosure must be a clear written statement that a consumer report may be obtained; it cannot be buried in an employment application or combined with other authorizations.
   • Quick action: Use a one-page disclosure titled plainly (e.g., “Disclosure Regarding Background Check”).
4. Obtain written authorization
   • Why: You must get written consent from the applicant before pulling the report.
   • Quick action: Have the applicant sign or electronically acknowledge a separate authorization form; retain the signed copy.
5. If the report is investigative, provide extra notice
   • Why: Investigative consumer reports (e.g., interviews of references) require additional disclosures.
   • Quick action: Include the specific notice required for investigative reports and secure applicant authorization.
6. Review results fairly and document decision rationale
   • Why: Inconsistent or undocumented decision-making increases risk of discrimination claims.
   • Quick action: Record the job-relatedness of any adverse information and how it affects the hiring decision.
7. Send a pre-adverse action package when results may affect hiring
   • Why: Before taking adverse action based on a CRA report, you must give the applicant a copy of the report and a copy of the “Summary of Rights” and allow a reasonable time to respond.
   • Quick action: Send the candidate the report and the Summary of Consumer Rights; give a reasonable window (commonly 3–5 business days) to respond.
8. If proceeding with adverse action, send a final adverse action notice
   • Why: If you decline to hire (or take other adverse action) because of the report, you must provide a written adverse action notice that identifies the CRA and explains rights.
   • Quick action: Include the name, address, phone number of the CRA that supplied the report, a statement the CRA did not make the decision and cannot give specific reasons, and a notice of the applicant’s rights to obtain a free copy and dispute accuracy.
9. Handle disputes promptly
   • Why: If an applicant disputes information, the CRA and employer must ensure accuracy — the CRA must reinvestigate, usually within 30 days.
   • Quick action: Forward dispute communications to your CRA immediately; do not take further adverse action until the dispute is resolved.
10. Retain records
    • Why: Documentation supports lawful, consistent hiring practices and defends against claims.
    • Quick action: Keep copies of disclosures, authorizations, reports, pre-adverse and adverse notices, and decision rationale. Retention periods vary by state — preserve records for at least two years unless local law requires longer.
11. Check state and local law
    • Why: Many states and municipalities impose additional limits (ban-the-box timing, limits on credit reports, sealed or expunged records rules).
    • Quick action: Consult legal counsel or your compliance team for local restrictions before using reports.
12. Train hiring staff and track metrics
    • Why: Human error (bundling consent, failing to send notices) is the most common cause of FCRA violations.
    • Quick action: Provide routine training, use standardized forms, and log background-check steps for auditing.

Common FCRA traps and how to avoid them

• Bundled consent: Don’t combine your FCRA disclosure with unrelated waivers or other agreement language. Use a separate, stand-alone disclosure and a separate authorization.
• Failure to send a copy of the report: Before adverse action, give the applicant a copy of the actual consumer report and the Summary of Rights. Sending only summary findings is not enough.
• Assuming “verbal” permission is sufficient: Written consent (including compliant electronic signatures) is required.
• Ignoring local restrictions: Some jurisdictions prohibit employer access to certain records (e.g., credit history) or require timing limits. Presume state/local law may be stricter than federal law.
• Inconsistent application: Treat similarly situated candidates the same way to avoid disparate impact or discrimination claims. Use job-relatedness criteria and document it.

“Treat reports fairly, document decisions, and always follow the notice procedures — these are the basics that prevent most FCRA claims.”

Sample language — short and practical

Below are sample snippets you can adapt. They’re for general guidance and should be reviewed by counsel before use.

• Stand-alone disclosure (short)
  “We may obtain a consumer report (background check) for employment purposes. By signing below, you authorize [Company] to obtain such reports from a consumer reporting agency.”
• Authorization (short)
  “I authorize [Company] and its consumer reporting agency to obtain consumer reports and investigative consumer reports for employment purposes. I understand that I may request a copy of any report obtained.”
• Pre-adverse action checklist (internal)
  • Attach full consumer report
  • Attach Summary of Consumer Rights
  • Include deadline and contact for candidate response (commonly 3–5 business days)
  • Note who reviewed response and decision rationale
• Final adverse action bullet points (must include)
  • Statement that adverse action was taken based in whole or in part on information from a CRA
  • Name, address, phone of the CRA
  • Statement that the CRA did not make the decision and cannot provide reasons for it
  • Notice of the right to obtain a free report from the CRA within 60 days and to dispute accuracy

Practical steps to implement the checklist today

• Standardize forms: Create stand-alone disclosure and authorization templates and require their use for every hire. Store them in your ATS and make electronic signature workflows the default.
• Centralize ordering: Route all background-check orders through a single point (HR or a designated recruiter) to ensure compliance and consistent vendor use.
• Automate pre-adverse and adverse notices: Use your screening vendor’s tools or your ATS templates to automatically generate the required packages when a report triggers concern.
• Maintain a single file per candidate: Keep disclosures, authorizations, reports, correspondence, and hiring decisions together for easy retrieval.
• Schedule regular training: Run short, annual refreshers for hiring managers on FCRA basics and local rules. Emphasize the “no shortcuts” areas (consent, pre-adverse, documentation).
• Ask your vendor for help: A compliant CRA will provide the Summary of Rights, templates, and dispute-management support. Confirm in writing that the vendor supplies these items.

When to involve legal or compliance

• If you plan to use criminal history, credit, or other sensitive information as a hiring screen, consult legal counsel to document job-relatedness and business necessity.
• When a candidate raises complex disputes (identity errors, sealed records, or mixed-person identity issues), legal review can help avoid improper adverse action.
• If you operate in multiple states or cities, get a jurisdiction-by-jurisdiction compliance map maintained by counsel or compliance staff.

Practical takeaways for hiring managers

• Never order a consumer report without the signed stand-alone disclosure and written authorization.
• Always send the report and Summary of Rights before taking adverse action; give the candidate a reasonable chance to respond.
• Keep consistent, job-related criteria for adverse decisions and document how background findings relate to the role.
• Train your teams and centralize ordering to avoid common human-errors that cause most FCRA violations.
• Build a relationship with a knowledgeable CRA and use their compliance tools — it reduces risk and administrative burden.

Conclusion

Conclusion: The FCRA checklist every hiring manager should print and tape to their desk is simple: get permission, use the right forms, treat reports fairly, document decisions, and follow required notice periods. Following these steps protects candidates’ rights, reduces legal exposure, and keeps your hiring process efficient and defensible.

Contact

If you’d like a printable checklist template, sample disclosure and adverse-action language, or a compliance review of your current screening workflow, Rapid Hire Solutions can help. Contact our team for a practical compliance check and customizable forms tailored to your hiring process.

FAQ