=
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk
Estimated reading time: 6 minutes
Key takeaways
- Always use a clear, standalone FCRA disclosure and documented authorization before ordering any consumer report.
- Follow pre-adverse and adverse action steps — provide the report, summary of rights, and a final notice when needed.
- Document individualized assessments and retain records to reduce legal risk and demonstrate compliance.
- Check state and local rules each hiring cycle; many jurisdictions impose stricter limits than the FCRA.
Table of contents
- Quick FCRA primer for hiring managers
- The FCRA checklist: steps every hiring manager should follow
- Printable quick-reference checklist (tape to your desk)
- Common FCRA pitfalls to avoid
- Practical tips to reduce risk and hiring friction
- Special considerations: criminal records, credit checks, and MVRs
- Practical takeaways for employers
- FAQ
Quick FCRA primer for hiring managers
The Fair Credit Reporting Act (FCRA) applies whenever an employer uses a third party—a consumer reporting agency (CRA)—to gather information about a candidate for employment, promotion, or retention. Typical reports include criminal history checks, employment and education verifications, credit reports (where permissible), and driving records.
Key obligations under the FCRA:
- Disclosure & authorization: Provide a clear, standalone written disclosure and obtain written authorization before obtaining a consumer report.
- Permissible purpose: Use consumer reports only for employment-related permissible purposes.
- Pre-adverse action: If the report may lead to a negative decision, provide the candidate a copy of the report and the CRA’s summary of rights.
- Adverse action notice: If you proceed with denial or other adverse action based in whole or in part on the report, send a compliant final adverse action notice.
- Recordkeeping: Maintain copies of disclosures, authorizations, reports, dispute communications, and adverse action notices.
Note: States and localities may impose stricter rules (ban-the-box, limits on using criminal records, special timing or language requirements). Always confirm local rules before proceeding.
The FCRA checklist: steps every hiring manager should follow
Print this checklist and keep it with your hiring binder or applicant tracking process. Treat it as mandatory for every background screen. Below are step-by-step actions to follow for every candidate you screen.
1. Confirm permissible purpose
Action: Verify the position justifies the consumer report (hiring, promotion, retention, reassignment). If ordering a credit report or motor vehicle record, confirm the role’s duties justify that specific check under federal and state rules.
2. Use an FCRA-compliant consumer reporting agency (CRA)
- Work with a CRA that provides required disclosures and dispute-handling processes.
- Ensure the CRA supports state-specific compliance and provides adverse action templates.
3. Provide a clear, standalone disclosure (before you order the report)
Give a separate written disclosure that a consumer report may be obtained for employment purposes—do not bury it in an application or handbook. Use plain language; avoid conditional or bundled consent. Electronic signatures are acceptable with proper notice.
4. Obtain candidate authorization (documented)
Secure a signed authorization form (electronic is acceptable) specific to the consumer report type. Retain this authorization in the candidate file for recordkeeping and audit readiness.
5. Verify identity and minimize scope
- Confirm candidate identity before ordering searches (name, date of birth, SSN when necessary, address history).
- Limit searches to records relevant to the position and permissible under law.
6. Run the report and review carefully
Evaluate the report for accuracy, relevance, and completeness. Consider timeframes (how old is the record?) and severity of findings relative to job duties.
7. If considering adverse action: provide pre-adverse action materials
Before denying employment, give the candidate:
- A copy of the consumer report the CRA provided.
- A copy of the CRA’s “A Summary of Your Rights Under the FCRA” (or equivalent).
Allow a reasonable time for the candidate to review and dispute inaccuracies (commonly a few business days, adjust per company policy and local law).
8. Make an individualized assessment
For criminal records, weigh arrest vs. conviction, age of the offense, relevance to job duties, and evidence of rehabilitation. Document the rationale for any decision to deny or limit employment based on report findings.
9. Send a final adverse action notice if you proceed with denial or negative action
The adverse action notice must include:
- A statement that adverse action was taken based on the consumer report.
- The CRA’s name, contact information, and statement that the CRA did not make the adverse decision.
- A statement of the candidate’s right to dispute the report’s accuracy or completeness with the CRA.
- A statement of the candidate’s right to obtain a free copy of the report within 60 days (where applicable).
Keep a dated copy of the notice and proof of delivery.
10. Maintain records
Store copies of disclosures, authorizations, reports, dispute communications, and adverse action notices for the period required by law and company policy (commonly several years). Track who accessed reports and when for audit readiness.
11. Stay current with state and local rules
Before each hiring wave, confirm local restrictions (ban-the-box timing, limits on criminal history use, additional notice content). Update forms and processes when laws change.
Printable quick-reference checklist (tape to your desk)
- [ ] Confirm permissible purpose for report
- [ ] Select approved CRA that handles state requirements
- [ ] Provide standalone FCRA disclosure (signed/dated)
- [ ] Obtain candidate authorization (signed/dated)
- [ ] Verify candidate identity before ordering
- [ ] Order only relevant searches
- [ ] Review report for accuracy and relevance
- [ ] If issues found: provide pre-adverse action packet (report + summary of rights)
- [ ] Allow candidate time to dispute/explain
- [ ] Make and document individualized assessment
- [ ] Send final adverse action notice if denying/harming employment
- [ ] File and retain all documentation per policy
- [ ] Check state/local rules for additional steps
Print this list, staple it to your hiring folder, or add it as a required stage in your applicant tracking system.
Common FCRA pitfalls to avoid
- Bundling the disclosure: Hiding the FCRA disclosure in other documents risks noncompliance.
- Skipping pre-adverse steps: Not giving candidates a chance to review reports increases litigation exposure.
- Relying on unsupported CRAs: Not all CRAs provide compliant notices or dispute handling—verify processes.
- Using outdated forms: State law changes frequently; use updated disclosure and adverse action templates.
- Failing to document analysis: Courts expect an individualized, documented decision-making process when denying based on criminal records.
Practical tips for hiring managers to reduce risk and hiring friction
- Templates & automation: Integrate standardized disclosure, authorization, and adverse action templates into your ATS to reduce human error.
- Training: Provide regular FCRA and unconscious-bias training for hiring managers who touch background check decisions.
- Narrow scope: Order only the reports necessary for the role—this reduces privacy concerns and legal exposure.
- Timing strategy: Consider conducting background checks after a conditional offer to avoid unnecessary delays or premature rejections.
- Centralize decisions: Let a trained HR/compliance professional review adverse findings to ensure consistency.
- Offer remediation pathways: Allow candidates to explain or provide evidence of rehabilitation where appropriate.
Special considerations: criminal records, credit checks, and motor vehicle records
- Criminal records: Use an individualized assessment—consider nature, gravity, time elapsed, and job relevance. Some jurisdictions limit certain uses or require specific assessment steps.
- Credit reports: Require permissible purpose; many states restrict or prohibit employment credit checks unless financial responsibilities are central to the role.
- Motor vehicle records (MVRs): Often required for driving positions; ensure consent and that limits are job-related.
Practical takeaways for employers
- Treat the FCRA checklist as mandatory for every consumer report.
- Use written, standalone disclosures and documented authorizations every time.
- Provide pre-adverse materials and follow up with a compliant adverse action notice if the report influences your decision.
- Keep thorough records and centralize compliance oversight.
- Update forms and processes to reflect state and local law changes.
Final note: Consistent process plus careful documentation is the best defense. A standardized, repeatable workflow reduces legal risk, improves candidate experience, and shortens time-to-hire.
If you’d like a downloadable, employer-ready FCRA checklist and sample disclosure/authorization templates tailored to your state requirements, Rapid Hire Solutions can help you implement compliant screening workflows and train your hiring teams to follow them reliably.
FAQ
What is the FCRA and when does it apply?
Answer: The Fair Credit Reporting Act regulates consumer reports used for employment, promotion, or retention when obtained from a third-party CRA. It applies any time a CRA is used to gather candidate information such as criminal history, credit reports, employment or education verifications, or driving records.
Do I always need a standalone disclosure and authorization?
Answer: Yes. The FCRA requires a clear, standalone written disclosure and a documented authorization before obtaining a consumer report. Do not bundle the disclosure with an application or handbook.
What must I provide if I’m considering an adverse action?
Answer: Provide the candidate with a copy of the consumer report and the CRA’s summary of rights as a pre-adverse action packet, allow reasonable time to dispute inaccuracies, and if you proceed, send a final adverse action notice with the required CRA contact information and dispute rights.
How long should I retain background check records?
Answer: Retention periods vary by law and company policy, but commonly several years. Keep disclosures, authorizations, reports, dispute communications, adverse action notices, and proof of delivery for the legally required period and for audit readiness.
Are credit checks allowed for all positions?
Answer: Not necessarily. Federal law requires a permissible purpose, and many states restrict or prohibit employment credit checks unless the job has significant financial responsibilities. Check local rules before ordering credit reports.