FCRA Checklist Every Hiring Manager Should Keep at Their Desk

Quick FCRA primer for hiring teams

The Fair Credit Reporting Act (FCRA) governs how consumer reporting agencies (CRAs) and users of consumer reports—like employers—collect, share, and act on information. For employment use, the FCRA emphasizes how you obtain, disclose, and act on a consumer report rather than strictly limiting what you can check. Common compliance pitfalls relate to the timing and content of notices, obtaining proper authorization, and following correct adverse-action procedures.

The FCRA checklist every hiring manager should print and tape to their desk

Below are the required steps (and the practical details you need) for lawful use of consumer reports during hiring.

1. 1. Confirm permissible purpose and role-based need

   Verify the report is requested for a permissible purpose—employment screening—and document the job title and business reason before ordering. Limit the scope to job-relevant checks (for example, motor vehicle records for driving roles).

2. 2. Provide a clear, stand-alone disclosure

   Give the applicant a written disclosure that consists solely of the disclosure statement required by the FCRA. It must be clear and conspicuous. Do not bury the disclosure inside an application or combine it with other consent language unless state law allows.

3. 3. Obtain written authorization

   Get the candidate’s written authorization to obtain the consumer report. Electronic consent is acceptable if it meets E-SIGN requirements and applicable state rules. Retain the signed authorization in the candidate file.

4. 4. Certify to the consumer reporting agency before ordering

   When placing the order, certify to the CRA that you:

   • Have a permissible purpose (employment),
   • Will provide required notices if an adverse action is possible,
   • Will not use the report in violation of federal/state EEO laws, and
   • Will not provide the report to third parties unless permitted.

   Ensure the CRA has accurate identity data (full name, all SSNs, DOB, address history) to minimize mismatches.

5. 5. Send a pre-adverse action package if the report may negatively affect the candidate

   Before taking adverse action based on a consumer report, provide:

   • a copy of the consumer report,
   • a copy of the CRA’s “A Summary of Your Rights Under the FCRA” (the summary of rights), and
   • a clear notice that an adverse action may follow and instructions on how to dispute errors.

   Allow a reasonable time to respond—many employers use a 5-business-day window as a practical standard—and document your policy.

6. 6. Make a reasoned, job-related decision and document it

   Apply consistent criteria and job-related standards. If criminal history is considered, use written policies reflecting job relevance and federal guidance on individualized assessments. Document the decision rationale and tie it to the report and your criteria.

7. 7. Send a final adverse action notice when you move forward with rejection

   If you take adverse action, send a notice that includes:

   • a statement that an adverse action was taken and the reason was a consumer report,
   • the CRA’s name, address, and telephone number,
   • a statement that the CRA did not make the adverse decision and cannot provide specific reasons, and
   • a notice of the candidate’s right to dispute the accuracy/completeness of the report and to obtain a free report within 60 days.

   Keep copies of the notice and the report.

8. 8. Pause and coordinate when a candidate disputes

   If the candidate disputes information, instruct the CRA to reinvestigate and consider pausing adverse action until reinvestigation is complete. Request documentation from the candidate if they supply identity or correction evidence.

9. 9. Respect state and local restrictions

   Confirm state/local restrictions such as “ban-the-box” rules, time limits on considering records, and required state-specific disclosures or authorization language. When state law is stricter than the FCRA, follow the state requirements.

10. 10. Maintain records and retention policies

    Keep copies of disclosures, authorizations, consumer reports used, pre-adverse and adverse notices, and decision rationale. Establish a retention policy consistent with legal counsel and applicable state rules.

11. 11. Verify identity and match accuracy

    Use SSN trace, alias matching, DOB and address history to ensure you are evaluating the correct person. Have procedures to resolve potential mismatches before relying on the report.

12. 12. Manage vendor compliance

    Use reputable CRAs that understand employment FCRA requirements and provide the required summary of rights and reporting details. Audit vendors periodically for accuracy, timeliness, and handling of disputes.

Printable one-page checklist (condensed for your desk)

• Have permissible purpose and job title documented
• Provide stand-alone FCRA disclosure
• Obtain written/electronic authorization
• Certify permissible use to CRA before ordering
• Provide pre-adverse action package (report + summary of rights)
• Allow reasonable time to dispute (documented policy)
• Send complete adverse action notice if rejecting
• Pause and coordinate if candidate disputes
• Check state/local laws first
• Retain copies and document decision rationale
• Verify identity and matching info
• Review vendor compliance annually

Stick this list on your monitor, in your ATS workflow, or on the hiring manager’s desk to reduce missed steps.

Best practices that reduce hiring risk (beyond the checklist)

• Narrow scope to job-related checks: the narrower the check, the less likely you’ll receive irrelevant or discriminatory data.
• Train hiring teams: ensure hiring managers and interviewers understand FCRA steps and adverse-action procedures.
• Standardize evaluation templates: document how criminal records affect hiring decisions and apply consistently.
• Keep templates ready: pre-adverse and adverse notices should be counsel-reviewed and available to reduce delays.
• Centralize ordering: route all checks through HR or a screening coordinator to avoid missed disclosures or certifications.
• Vendor due diligence: review compliance processes, dispute timelines, and data security practices.

Common pitfalls and how to avoid them

• Combining the disclosure with other forms: this can fail the “stand-alone” requirement. Fix: use a single-document disclosure separate from applications.
• Failing to provide the report before adverse action: Fix: adopt a pre-adverse package policy and log delivery.
• Ignoring state/local screening laws: Fix: add a state-law checklist to every screening workflow.
• Not documenting the business reason: Fix: require hiring managers to record purpose and job title in the ATS before ordering.
• Relying on mismatched reports: Fix: require SSN trace and identity verification before decisions.

Practical takeaways for hiring teams

• Treat the FCRA like a procedural checklist—the how matters as much as the what.
• Standardize: use templates and a single process owner for all consumer-report requests.
• Train everyone who orders or relies on reports on pre-adverse and adverse steps.
• Audit regularly: schedule reviews of vendor performance and internal compliance logs.
• Document everything: disclosures, authorizations, report copies, notices, decision rationales, and candidate responses.

Final thought

The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk is less about paperwork than about predictable, fair decision-making. Following the steps above reduces legal risk, protects candidates’ rights, and accelerates hiring by avoiding last-minute compliance fixes.

If you’d like a ready-to-print one-page checklist or a quick compliance review of your background screening workflow, Rapid Hire Solutions can help audit your process and provide compliant templates tailored to your state requirements and hiring needs.