Printable FCRA Checklist for Hiring Managers’ Desks

Quick FCRA primer for hiring managers

Core concepts:

• Consumer report: any written, oral, or other communication that includes credit history, criminal record, driving record, employment history, or other information used to make employment decisions.
• Permissible purpose: Employers may request consumer reports only for employment purposes — hiring, promotion, retention.
• Consumer Reporting Agency (CRA): Background-screening companies that prepare and deliver reports. When you rely on a CRA, the FCRA’s adverse action and notification rules apply.
• Pre-adverse and adverse action: If a report may lead to a negative employment decision, federal law requires specific notice steps before and after the decision.
• Reinvestigation: Candidates can dispute inaccurate information; CRAs must reinvestigate and correct errors.
• State/local laws: Municipal or state rules (ban-the-box, timing limits, conviction-severity restrictions) may be stricter — always check jurisdictional requirements.

The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk

Use this step-by-step checklist whenever you order or act on a consumer report.

1) Confirm permissible purpose

• Ensure the report is requested only for an employment decision (hiring, promotion, termination).
• Document the business reason in the applicant’s file.

2) Provide the required disclosure and get written authorization

• Give the candidate a clear, standalone disclosure that a consumer report may be obtained for employment purposes. Best practice: separate disclosure form — not buried in an application.
• Obtain written authorization from the candidate (electronic consent is acceptable if compliant).
• Save copies of both disclosure and authorization.

3) Order the report from a reputable CRA

• Verify the CRA’s compliance practices and turnaround timelines.
• Provide accurate candidate identifiers (full name, DOB, SSN or partial SSN) to minimize mismatches.
• Use identity verification processes to reduce false positives.

4) Review the report fairly and consistently

• Use a documented, role-based policy that explains which findings disqualify candidates and why.
• Avoid ad hoc or subjective interpretations — apply the same standard to similarly situated candidates.
• When criminal records are involved, evaluate the nature of the offense, time elapsed, and relevance to the job.

5) If the report may cause an adverse decision: send a pre-adverse action package

Before you take an adverse action, deliver:

• A copy of the consumer report.
• A copy of the CRA’s “A Summary of Your Rights Under the FCRA” (or the CRA-provided summary).
• A written pre-adverse action notice explaining that adverse action may follow and how the candidate can dispute inaccuracies.

Allow a reasonable period for the candidate to review and respond — best practice: at least 5 business days.

6) Make the final decision

• If the candidate responds with a dispute, document how you evaluated the response and any changes.
• If you still intend to take adverse action, proceed to the final notice.

7) Send the adverse action notice

Required elements:

• A statement that adverse action was taken based on information from a CRA.
• The CRA’s name, address, and phone number.
• A statement that the CRA did not make the adverse decision and cannot explain the employer’s reasons.
• A notice of the candidate’s right to obtain a free copy of the consumer report from the CRA and to dispute its accuracy.

Retain proof of delivery (email logs, certified mail receipt, or other verifiable record).

8) Track disputes and reinvestigations

• If the candidate files a dispute, log it immediately and notify the CRA.
• Keep records of CRA reinvestigation outcomes and any corrected reports used in decision-making.

9) Keep compliant records

File and retain:

• Disclosure/authorization forms
• Consumer report copies used in decision-making
• Pre-adverse and adverse action notices
• Documentation of candidate responses and dispute outcomes
• Certifications from the CRA

Best practice: retain background-check records for at least five years or follow applicable state retention rules and counsel guidance.

Practical components every template should include

Standardize these templates so hiring managers have all required language ready:

• Standalone disclosure: clear, simple wording that a consumer report may be obtained.
• Authorization consent: explicit candidate signature or compliant electronic consent.
• Pre-adverse action notice: report copy + summary of rights + clear next steps.
• Adverse action notice: required CRA info and consumer rights language.
• Documented decision rationale: how report findings relate to job duties.

Common pitfalls and how to avoid them

• Combining disclosure with other forms: If the disclosure is buried in a multi-topic form, litigation risk increases. Use a standalone disclosure or make it conspicuous and separated.
• Skipping the pre-adverse step: Not sending the candidate a copy of the report and the summary of rights before finalizing an adverse decision is a common violation.
• Relying on identity traces without verification: Name-only or SSN-trace matches can produce false positives. Use identity-verification steps and confirm records before adverse action.
• Ignoring state law: Municipal ban-the-box rules, conviction-severity limits, and timing restrictions vary. Maintain a jurisdictional checklist before ordering reports.
• Inconsistent decision-making: Apply the same policy across candidates and document exceptions to defend against discrimination claims.

How to operationalize the checklist

• Train your hiring team: Run short, focused sessions on FCRA steps, templates, and common errors.
• Centralize ordering and decisions: Funnel background checks through a single HR owner or team that verifies disclosures, authorizations, and template use.
• Use checklists and system flags: Configure your ATS or HRIS to alert when pre-adverse and adverse notices must be sent.
• Audit regularly: Quarterly spot checks of recent background-check files will surface errors before they escalate.
• Designate a CRA partner: Work with a screening provider that understands FCRA obligations and provides the required summary-of-rights and dispute-handling support.

Practical takeaways for HR teams

• Always start with the permissible purpose and a clear, standalone disclosure.
• Obtain written authorization before ordering any consumer report.
• Provide a copy of the report and the summary of rights before taking adverse action; allow reasonable time to respond.
• Keep consistent, job-related policies for evaluating screening results and document every step.
• Maintain records and proof of delivery for all notices; audit your process at least annually.
• Verify identity and be mindful of state/local restrictions that may add or change requirements.

Conclusion: The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk

Tape this checklist to your desk and incorporate it into each hiring workflow. Small, consistent steps — clear disclosure, documented consent, fair review, and correct notice timing — dramatically reduce legal and hiring risk while protecting candidates’ rights.

“Small, consistent steps — clear disclosure, documented consent, fair review, and correct notice timing — dramatically reduce legal and hiring risk.”

If you’d like help operationalizing these steps, Rapid Hire Solutions works with HR teams to build compliant screening workflows, customizable templates, and audit-ready reporting so your hiring stays efficient and defensible. Contact us to discuss how to implement the checklist across your hiring process.

FAQ

Do I always need a standalone disclosure?

How long should I wait after sending a pre-adverse notice?

What should an adverse action notice include?

How long should I retain background-check records?

What if state/local law conflicts with the FCRA?