=
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk
Estimated reading time: 6 minutes
Key takeaways
- Follow the FCRA steps: disclosure, written authorization, pre-adverse action, and final adverse action.
- Document everything: retain disclosures, authorizations, reports, and notices in the candidate file.
- Be job-related and consistent: apply uniform criteria and layer state/local rules over FCRA basics.
- Train and audit: ensure hiring managers know the workflow and review screening regularly.
Table of contents
FCRA fundamentals hiring teams must understand
Before you dive into the checklist, keep these foundational points front of mind:
- The FCRA applies when a consumer reporting agency (CRA) provides a “consumer report” used for employment purposes. Criminal record checks, credit reports, and many verification products fall under this definition when sourced from a CRA.
- Permissible purpose: Employment screening is a permissible purpose, but it does not remove other FCRA obligations.
- Two-step adverse action process: Pre-adverse action (copy of report + summary of rights) and final adverse action notice if you decide not to hire.
- State and local rules matter: Local laws (ban-the-box, credit-check limits, expungement rules) can add or tighten requirements — always layer local compliance on top of FCRA basics.
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk
Use the checklist below verbatim or adapt the language to your applicant workflow. Print one copy and keep it where screening decisions are made.
Pre-screening
- Confirm permissible purpose: Are you obtaining a consumer report for hiring, promotion, retention, or a job-related reason? If not, stop.
- Choose a compliant CRA: Use a vendor that understands employment FCRA requirements and provides the FTC “Summary of Rights” with each report.
- Check state/local law: Verify any limits (credit checks, arrest records, salary history bans, timing rules) for the candidate’s work location.
Disclosure & Authorization (must be before obtaining the report)
- Provide a standalone written disclosure: Use clear language that a consumer report may be obtained for employment purposes. Do not combine this disclosure with the job application or any other document.
- Obtain written authorization: Get the candidate’s signed consent (electronic signature is acceptable if compliant with e-sign laws).
- Retain proof: Keep proof of disclosure and authorization in the candidate file.
Identity verification and scope
- Verify candidate identity: Match name, date of birth, and other identifiers before ordering the report.
- Order only what you need: Limit checks (criminal, credit, driving records) to job-related items and consistent with policy.
Review and decision workflow
- Review for accuracy and relevance: Check for identity mismatches, outdated records, or seals/expungements that could affect validity.
- Apply consistent, job-related criteria: Use documented, role-specific criteria to evaluate findings and avoid disparate impact claims.
- If adverse action is possible: initiate the pre-adverse process (see next section).
Pre-adverse action (required before final negative decision)
- Provide the candidate:
- A copy of the consumer report, and
- The CRA’s “A Summary of Your Rights Under the FCRA” (or equivalent summary).
- Allow a reasonable response window: Give the candidate time to review and dispute inaccuracies (common practice: 5 business days but check counsel/state requirements).
- Document pre-adverse communication: Record the date and content of pre-adverse communication.
Final adverse action (if you proceed)
- Issue a compliant adverse action notice that includes:
- Statement that adverse action was taken,
- Name, address, and phone number of the CRA that supplied the report,
- Statement that the CRA did not make the decision and cannot provide specific reasons, and
- Notice of the candidate’s right to obtain a free copy of the report and dispute inaccuracies.
- Keep records: Maintain records of the adverse decision and supporting rationale.
Records and retention
- Save copies: Retain disclosures, authorizations, consumer reports, pre-adverse and adverse notices, and decision documentation.
- Establish retention schedule: Work with legal counsel and HR to define retention timing (recommended: retain records long enough to defend potential claims and meet local/state retention rules).
Training and monitoring
- Train hiring managers: Ensure anyone involved in hiring understands the FCRA workflow and who handles which step.
- Audit regularly: Periodically review your background-screening program for accuracy, timeliness, and legal changes.
How to handle disclosure, consent, and adverse actions the right way
Disclosure must be explicit and separate. A lawful disclosure is a short standalone statement — for example: “We may obtain a consumer report for employment purposes. By signing below you authorize [Company] to obtain consumer reports about you.” Avoid tucking that sentence into a long application or mixing it with other authorizations.
Consent can be electronic if your platform captures a clear affirmative action and stores evidence. The company should retain a dated copy of the signed authorization.
If you learn information that could lead to rejecting a candidate, follow this sequence:
- Pre-adverse action: Send a copy of the report plus the CRA summary and note how long the candidate has to respond.
- Wait a reasonable period: Allow time for disputes or explanations.
- Final adverse action: If you still intend to deny employment, send the adverse action notice with the CRA’s contact details and the prescribed rights language.
These steps aren’t optional — skipping them is a frequent cause of FCRA claims.
Common FCRA pitfalls and how to avoid them
- Combining disclosure with the application: Fix by creating a separate disclosure form and signature line.
- Skipping the pre-adverse step: Always provide the report and summary before finalizing a negative decision.
- Using stale or inaccurate reports: Verify identity and ordering dates; if a report is old, re-run it.
- Inconsistent job-related standards: Document and apply uniform criteria for each role to minimize disparate impact exposure.
- Ignoring state/local law: Maintain a library of jurisdictional rules and update screening policies when laws change.
Practical implementation tips for HR teams
- Build templates: Create pre-adverse and adverse action templates that include required FCRA language and spaces for CRA contact info.
- Automate evidence capture: Use your ATS or screening vendor to store disclosure copies, timestamps, and signed authorizations.
- Centralize decision records: Keep a single file for each candidate that contains the report, notes, and the business reason for adverse actions.
- Standardize job-related criteria: Draft a short rubric per role that lists disqualifying items and mitigation factors (age of conviction, job relevance, rehabilitation evidence).
- Coordinate with legal: Run any policy changes by counsel and confirm retention timing for your state.
Sample pre-adverse checklist for recruiters (quick reference)
- Attach copy of the consumer report
- Attach the CRA summary of rights
- Note the date/time sent and method (email/portal)
- Give a response deadline (e.g., 5 business days)
- Log candidate reply and any documentation provided
Practical takeaways for employers
- Treat every consumer report as a regulated interaction: follow the FCRA process from disclosure through adverse action or hire.
- Keep documentation: Clear records of disclosures, authorizations, and notices protect your organization if a dispute arises.
- Be consistent and job-focused: Use objective criteria tied to the role to reduce legal and reputational risk.
- Layer state and local rules: Local limits and timing rules can be stricter than federal law; apply both.
- Train and audit: Regular training plus periodic audits of your screening program reduce gaps and keep your team aligned.
Conclusion: Why you should tape this FCRA checklist to your desk
The FCRA checklist every hiring manager should print and tape to their desk is not a box-checking exercise — it’s a practical framework that protects candidates and your organization. Follow the steps for disclosures, authorization, pre-adverse and adverse actions, and record retention, and you’ll significantly reduce screening-related risk while making faster, fairer hiring decisions.
If you’d like a customizable FCRA checklist or a compliance review of your background-screening workflow, Rapid Hire Solutions can help you standardize forms, automate recordkeeping, and align screening practices with federal and local rules. Contact our team to get started.
FAQ
Q: What triggers the FCRA in hiring?
A: The FCRA is triggered when you obtain a consumer report from a consumer reporting agency (CRA) and use it for employment decisions. This includes many criminal background checks, credit reports, and some verification services when sourced from a CRA.
Q: Can I include the disclosure on the job application?
A: No. The FCRA requires a standalone written disclosure. Do not combine the disclosure with the application or other authorizations. The disclosure should be clear and separate, with a dedicated signature or affirmative consent action.
Q: How long must I wait after pre-adverse action?
A: The FCRA does not specify an exact timeframe, but best practice and common counsel guidance is to allow a reasonable window (commonly 5 business days) for the candidate to review and dispute inaccuracies. Always confirm timing with legal counsel and check for state-specific rules.
Q: What must an adverse action notice include?
A: A compliant adverse action notice must state that adverse action was taken, provide the name, address, and phone number of the CRA, state that the CRA did not make the decision and cannot provide specific reasons, and notify the candidate of their right to obtain a free copy of the report and dispute inaccuracies.