FCRA Checklist for Hiring Managers — Compliance Guide

The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk

If you manage hiring, one misstep in the background‑check process can cost time, money, and legal exposure. The Fair Credit Reporting Act (FCRA) governs how employers use consumer reports for employment decisions. This checklist gives hiring managers the exact items and steps to follow so screening adds value instead of risk. Print it, tape it to your desk, and make it part of every hire.

• Disclosure and written authorization
  • Provide a clear, stand‑alone disclosure that a consumer report may be obtained for employment purposes.
  • Get a separate, signed authorization — not buried inside an application or combined with other documents.
• Confirm permissible purpose
  • Ensure the screening request is for an employment purpose covered by the FCRA.
• Define the scope of the report
  • Decide which consumer reports are needed (criminal records, credit for certain roles, motor vehicle records, education verification) and limit requests to job‑relevant checks.
• Select a CRA and certify
  • Use a reputable consumer reporting agency (CRA). Before ordering, certify to the CRA that you:
    • Obtained the applicant’s written authorization,
    • Will comply with FCRA requirements,
    • Will provide adverse action notices if necessary.
• Review report accuracy
  • Read the consumer report carefully. If something looks off, request clarification from the CRA rather than making an immediate decision.
• Pre‑adverse action steps
  • If the report may lead to denying an offer or other adverse action, send a pre‑adverse action notice that includes:
    • A copy of the consumer report used,
    • A copy of the CRA’s summary of rights under the FCRA.
  • Allow the applicant reasonable time to review and dispute inaccuracies (commonly 3–5 business days).
• Adverse action notice
  • If you move forward with an adverse decision, send an adverse action notice that includes:
    • A statement that an adverse action was taken based in whole or in part on the consumer report,
    • The CRA’s name, contact information, and phone number,
    • A statement that the CRA did not make the adverse decision and cannot explain the employer’s reasoning,
    • A notice of the applicant’s right to dispute the accuracy or completeness of the report and to obtain a free reissue from the CRA within 60 days.
• Job‑relatedness and business necessity
  • For conviction or arrest information, ensure any adverse decision is job‑related and consistent with business necessity; document the relevance of the record to the role.
• State and local legal checks
  • Verify whether state or local laws restrict use of certain records (e.g., limits on criminal‑history questions, credit‑check bans, Ban‑the‑Box rules) and comply accordingly.
• Protect sensitive and medical information
  • Do not collect medical information via consumer reports; use separate processes for disability and medical inquiries that comply with ADA and privacy rules.
• Confidentiality and limited access
  • Keep reports and notes confidential; restrict access to personnel involved in the hiring decision.
• Documentation and recordkeeping
  • Save copies of disclosures, authorizations, the consumer report, pre‑adverse and adverse notices, and any dispute correspondence.
• Train hiring staff
  • Ensure recruiters and hiring managers understand the FCRA workflow, who may see reports, and how to handle disputes.
• Audit and vendor oversight
  • Periodically audit screening practices and confirm vendors remain compliant, licensed, and up to date with state laws.

How to use the checklist — a practical hiring workflow

Making compliance routine requires embedding the checklist into your hiring process. Use this simple workflow for every requisition.

Before you order a report

• Determine what screens are job‑relevant. Limit scope to what you need.
• Confirm permissible purpose (employment).
• Prepare the stand‑alone disclosure and consent form tailored to the screening you’ll run.
• Check state/local restrictions for the candidate’s work location.

Ordering and receiving the report

• Certify to your CRA that you have authorization and a permissible purpose.
• Review the report immediately upon receipt. Look for identity mismatches, incomplete records, or errors.
• If you suspect an identity or data error, contact the CRA for clarification before making a decision.

If the report raises concerns

• Use the pre‑adverse action notice to give the candidate a copy of the report and the CRA summary of rights.
• Allow a short, documented window for the candidate to respond or correct errors.
• Evaluate responses in a consistent, nondiscriminatory way and document your risk‑based rationale.

After an adverse decision

• Send the complete adverse action notice with required items from the FCRA.
• Keep documentation of all notices and any follow‑up communications.
• If the candidate disputes the accuracy, work with the CRA to resolve per their investigation procedures.

Common FCRA mistakes (and how to avoid them)

• Combining disclosure and consent with other forms
  Fix: Use a stand‑alone disclosure and a separate, clearly labeled authorization.
• Skipping the pre‑adverse action step
  Fix: Always provide the report copy and CRA summary of rights before you take adverse action.
• Sending vague or incomplete adverse action notices
  Fix: Include the CRA’s name, contact details, a statement the CRA didn’t make the decision, and dispute rights.
• Using arrest records without context
  Fix: Consider whether arrest information is relevant and document the job relationship for any adverse decision.
• Ignoring state/local limitations
  Fix: Maintain a current list of jurisdictional restrictions and apply the most protective rule when in doubt.
• Relying solely on a vendor and not validating their processes
  Fix: Require vendor certifications, review sample forms and notices, and audit performance.

Practical takeaways for HR leaders and hiring managers

• Standardize the process: Implement a single, compliant template for disclosures, authorizations, and notices across your organization.
• Train consistently: Short, role‑specific training prevents mistakes and keeps hiring teams aligned.
• Limit scope to relevance: Only request reports and data that are necessary for the role.
• Document every step: If a decision is challenged, your records are your defense. Save disclosures, authorizations, report copies, notices, and notes.
• Apply fairness and consistency: Use the same criteria for similar roles and document the business necessity for any exclusionary practices.
• Partner wisely: When outsourcing, choose vendors that certify FCRA compliance and can support required notices and dispute workflows.
• Build remediation steps into process: Allow candidates to correct or explain records before final action.

A quick printable summary (copy this block for your desk)

• Stand‑alone disclosure? Yes. Written authorization? Yes.
• Is the report job‑relevant and within permissible purpose? Yes/No
• CRA certified? Yes (we provided authorization)
• Review report for accuracy and identity matches
• Pre‑adverse action: Send report + CRA summary; wait reasonable time
• Adverse action: Send required notice with CRA name/contact and dispute rights
• Check state/local rules before taking action
• Document everything and limit access to reports

Why this matters beyond compliance

Following the FCRA checklist reduces legal risk, improves candidate experience, and protects your employer brand. It also gives hiring teams a defensible, consistent way to balance safety, trust, and fairness. When screening is aligned with clear policies and job‑relevant criteria, it becomes an asset — not a liability.

Need help?

If you want a ready‑to‑print checklist, standardized disclosure and adverse action templates, or an audit of your current background‑screening workflow, Rapid Hire Solutions helps HR teams implement compliant, defensible processes and vendor integrations. Reach out to learn how to make FCRA compliance automatic rather than an afterthought.

FAQ