FCRA Checklist for Hiring Managers to Keep at Their Desk

Why this matters right now

The Fair Credit Reporting Act (FCRA) governs how employers obtain and use consumer reports in hiring. Noncompliance is common, often because teams mix disclosures into other documents, skip pre‑adverse steps, or treat reports casually. The result can be statutory damages, private suits, regulatory scrutiny, and damaged candidate trust.

Consistency, documentation, and attention to timing are your primary defenses against common FCRA mistakes.

FCRA checklist (steps 1–10)

1) Confirm permissible purpose before ordering a report

Verify there is a lawful, employment-related reason before obtaining any consumer report. Permissible purposes include evaluation for employment, promotion, reassignment, or retention. Confirm the job role and hiring stage align with company policy and any state/local timing rules (for example, ban-the-box laws that delay criminal-history inquiries until a conditional offer).

2) Provide a standalone disclosure and get written authorization

Give the candidate a clear, standalone written disclosure stating that a consumer report will be obtained for employment purposes. Do not embed this disclosure in an offer letter, application, or multi-purpose document. Obtain the candidate’s written authorization (signed or electronic) and retain it in your hiring records.

3) Certify to the consumer reporting agency (CRA) before requesting the report

When ordering the report, you must certify to the CRA that you have a permissible purpose, will provide required notices, and will not misuse the report. Ensure your HR or applicant-tracking system includes a certification step that captures this attestation.

4) Review the report carefully and document decision factors

Designate who on the hiring team will review reports and who will document findings. Record objective, job-related criteria used to evaluate items (e.g., whether convictions relate to job duties, recency, and pattern). Well-documented criteria help defend against claims of disparate impact.

5) Follow the pre-adverse-action process if the report may lead to denial/change of offer

Before taking any adverse action, send a pre-adverse action notice that includes:

• A copy of the consumer report used; and
• A copy of the FCRA Summary of Consumer Rights (often provided by CRAs).

Allow a reasonable period for the candidate to review and dispute errors — best practice is at least five business days.

6) If you proceed with adverse action, send a compliant adverse action notice

The adverse action notice must include:

• That the adverse action was based in whole or in part on information in a consumer report;
• The name, address, and phone number of the CRA that supplied the report;
• A statement that the CRA did not make the adverse decision and cannot provide the specific reasons; and
• A statement of the candidate’s right to obtain a free copy of the report from the CRA within 60 days and to dispute inaccurate information.

Keep a copy of the notice in your hiring file.

7) Handle disputes promptly and transparently

If a candidate disputes report content, notify the CRA and allow it to investigate. Document any updates to the hiring decision if the dispute resolves in the candidate’s favor.

8) Securely store and limit access to consumer reports

Limit access to those with a need to know and store reports in secure HR systems. Treat consumer report data as confidential and follow your data-retention and destruction policies.

9) Maintain consistent screening policies and job-relatedness

Adopt written policies specifying which positions are subject to background checks, what types of checks are performed, and how information is evaluated. Ensure criteria are job-related and uniformly applied to reduce disparate impact risk.

10) Account for state and local variations

Incorporate jurisdictional requirements — language, timing, content of notices, or restrictions on criminal-history use — into your process. Review and update policies as laws change.

Common FCRA Pitfalls and How to Avoid Them

• Pitfall: Combining disclosure with other forms. Avoid embedding the disclosure within an application or offer; use a standalone document.
• Pitfall: Skipping the pre-adverse step. Do not reject without providing the report and Summary of Rights and allowing time to respond.
• Pitfall: Informal “verbal” consent. Keep documented written (or properly authenticated electronic) authorizations — verbal consent is insufficient.
• Pitfall: Inconsistent application of policy. Decisions should be based on documented, job-related standards — not ad hoc judgments.
• Pitfall: Ignoring local rules. Ban-the-box and related reforms vary — a timing mistake in one jurisdiction can cause noncompliance.

State and local nuances to watch (quick guide)

• Timing rules: Some jurisdictions delay criminal-history inquiries until after a conditional offer; adjust your process accordingly.
• Content requirements: Several states require specific disclosure language or bilingual notices — update templates.
• Record-sealing and expungement: Employers must avoid relying on sealed/expunged records; many states require exclusion of such records.
• Credit checks: Many states prohibit or limit employment-related credit checks — confirm permissibility for the role.

Best practices that reduce hiring risk (and improve fairness)

• Standardize decision criteria. Create a matrix linking offenses to disqualifying criteria only when job-related, factoring recency and severity.
• Train hiring managers and recruiters. Regular training on FCRA steps, EEOC anti-discrimination rules, and local law is essential.
• Use conditional offers appropriately. Where allowed, use conditional offers to lawfully obtain consumer reports at the correct time.
• Log every step. Keep an audit trail of disclosures, authorizations, pre-adverse/adverse notices, and rationale for decisions.
• Partner with a knowledgeable screening provider. A compliant partner supplies the Summary of Rights, helps with letters, and tracks state/local changes.

Quick printable checklist (one-page actions)

Before ordering:

• Confirm permissible purpose for the report
• Confirm timing aligns with state/local rules (ban-the-box, conditional offer)
• Ensure job-related screening policy applies

At authorization:

• Provide standalone disclosure
• Obtain written authorization (signed or verified e-sign)
• Certify permissible purpose to the CRA when ordering

After receiving report:

• Document reviewer and findings
• Check for sealed/expunged records
• Apply pre-defined, job-related decision criteria

If adverse action is possible:

• Send pre-adverse notice + copy of report + Summary of Rights
• Allow candidate reasonable time to dispute (best practice: ≥5 business days)
• If adverse action proceeds, send adverse action letter with CRA contact info and rights explanation

Ongoing:

• Securely store reports and notices
• Document the final decision and retention period
• Review screening policy annually and update for legal changes

Practical takeaways for HR leaders and hiring managers

• Treat consumer reports as legal documents: follow the steps every time and document compliance.
• Keep templates current: disclosure, pre-adverse, and adverse action templates must reflect federal and local requirements.
• Make decisions defensible: use clear, consistent, job-related standards and preserve records showing application of those standards.
• Train the team: a well-briefed recruiter or hiring manager is the best defense against inadvertent noncompliance.
• Build a relationship with a trusted screening partner: providers who understand FCRA mechanics and local nuances reduce burden and risk.

Conclusion

Keeping a printed, actionable FCRA checklist at your desk simplifies compliance and makes fair, defensible hiring decisions routine rather than risky. Consistency, documentation, and attention to timing — especially where state or local rules apply — are the core defenses against common FCRA errors.

If you’d like a ready-to-print checklist tailored to your hiring footprint or guidance on aligning your screening policy with local laws, Rapid Hire Solutions can help you operationalize these steps and keep templates current.