FCRA Checklist Every Hiring Manager Should Use

Why the FCRA matters for hiring managers

The Fair Credit Reporting Act (FCRA) governs consumer reporting agencies and employers that use consumer reports — including criminal, credit, driving, and other third‑party reports — for employment decisions. Noncompliance can lead to statutory damages, legal fees, administrative liability, and reputational harm, and it undermines fair hiring practices.

For hiring teams, compliance isn’t only legal protection. It creates a reliable, defensible process for evaluating candidates and handling disputes, reduces bias risk when criminal records are involved, and protects candidate privacy.

The FCRA checklist every hiring manager should follow

Read once, print, and keep it handy. Follow these steps every time you order or act on a consumer report. Use templates and logging tools to ensure consistency.

1. Confirm permissible purpose and internal approval

• Verify the role’s permissible purpose for a consumer report (employment screening).
• Confirm any additional approvals needed (e.g., HR compliance or legal for credit checks or sensitive positions).
• Determine whether the specific report type is allowed under applicable state or local law (credit checks and certain criminal‑history searches are restricted in many jurisdictions).

2. Provide a stand‑alone written disclosure and obtain authorization

• Give the applicant a clear, stand‑alone disclosure that a consumer report may be obtained for employment purposes. It must not be buried in an application or combined with other consent language.
• Obtain the applicant’s written authorization (electronic signatures are acceptable if consistent with E‑SIGN requirements).
• Keep copies of the signed disclosure and authorization in the candidate record.

3. Certify to the consumer reporting agency (CRA) before ordering

• When you submit an order, certify to the CRA that you have complied with the FCRA, have permissible purpose, and will not use the information in violation of any federal or state equal employment or anti‑discrimination law.
• Confirm the CRA understands any special requirements (e.g., state‑specific reporting restrictions).

4. Review the report carefully and document your assessment

• Confirm the report belongs to the correct individual (name variations, DOB, SSN last four).
• Assess the accuracy and relevance of any adverse information to the job duties.
• For criminal records, perform an individualized assessment considering the nature of the offense, time elapsed, and role‑related risk; document the rationale for any adverse decision.

5. If considering adverse action, send a pre‑adverse action packet

• Before taking adverse action based in whole or in part on the consumer report, provide the candidate:
  • A copy of the consumer report you relied on.
  • A copy of “A Summary of Your Rights Under the Fair Credit Reporting Act.”
• Allow a reasonable opportunity to review and respond. Best practice: give the candidate at least 5 business days to submit clarifying information or documentation.
• Document the date the packet was sent and any candidate response.

6. Make the decision and issue the adverse action notice if applicable

• If you proceed with the adverse decision, send an adverse action notice that includes:
  • A clear statement that an adverse action was taken based on information in the consumer report.
  • The name, address, and phone number of the CRA that supplied the report.
  • A statement that the CRA did not make the adverse decision and cannot provide the specific reasons for it.
  • A statement of the candidate’s right to dispute the accuracy or completeness of the report with the CRA.
  • Notice that the candidate can obtain a free copy of their consumer report from the CRA within 60 days.
• Keep a copy of the notice and proof of delivery in your records.

7. Handle disputes and reinvestigation promptly

• If a candidate disputes the report, forward the dispute to the CRA immediately and provide supporting details you may have.
• The CRA must investigate; generally, reinvestigations occur within 30 days. Track progress and avoid taking further adverse action based on the same information until the dispute is resolved when possible.
• If the report is corrected, document how you changed or rescinded any adverse decision.

8. Maintain an audit trail and retention practices

• Preserve the signed disclosure, authorization, the consumer report copy, pre‑adverse and adverse notices, and documentation of any individualized assessments or dispute handling.
• Maintain clear retention and destruction policies for candidate records, and ensure secure storage to protect candidate privacy.

9. Check state and local laws, and “ban‑the‑box” rules

• Before ordering certain checks (credit, juvenile records, arrests vs. convictions) confirm state and local restrictions. Some jurisdictions impose limits on when and how criminal history or credit information can be used, or mandate specific notice language.
• Be mindful of “ban‑the‑box” timing and other fair‑chance hiring laws that restrict when employers can inquire about or consider criminal histories.

10. Train hiring teams and standardize the process

• Provide routine training for hiring managers and recruiters on the FCRA steps, report interpretation, and how to complete individualized assessments.
• Use standardized forms and centralized workflows to reduce human error and disparate treatment.
• Establish escalation procedures so sensitive or ambiguous reports are reviewed by trained HR or compliance staff.

Common FCRA pitfalls to avoid

• Embedding consent in the general application form instead of using a stand‑alone disclosure.
• Failing to provide a copy of the report and the FCRA summary before taking adverse action.
• Relying solely on arrest records without assessing convictions and job relevance.
• Using stale or incorrectly matched reports without verifying identity.
• Forgetting state or local restrictions that invalidate permissible purpose or require extra notices.

Practical takeaways for employers

• Create and enforce a written FCRA screening policy that maps these checklist steps to your ATS and hiring workflow.
• Use templates for disclosures, pre‑adverse packets, and adverse action notices to ensure required language is always included.
• Train everyone who views or acts on background reports; one misstep by a hiring manager can create organizational liability.
• Centralize ordering and recordkeeping when possible so certifications and notices are consistently logged.
• When in doubt about state or local nuances, consult legal or compliance counsel before ordering or acting on problematic records.

Handling criminal records responsibly (a quick guide)

Always conduct an individualized assessment when an applicant’s criminal record could affect hiring. Consider:

• Whether the offense is directly related to the job duties.
• The time elapsed since the offense.
• Evidence of rehabilitation.

Document the factors considered and the rationale for the decision to create a defensible record demonstrating neutral, job‑related decision‑making.

Conclusion

Printing the FCRA checklist and following it every time you screen a candidate turns a complex regulation into a repeatable hiring practice: confirm permissible purpose, get a stand‑alone disclosure and authorization, certify to the CRA, provide pre‑adverse materials, issue proper adverse notices, and document everything. That rigor protects your organization, preserves candidate rights, and creates consistent, fair hiring outcomes.

Read once, print, and keep it handy.

If you’d like help operationalizing this checklist—templates, workflow integration, or managed screening services—Rapid Hire Solutions partners with employers to build compliant, efficient background screening programs tailored to federal and state rules. Contact our team to discuss how we can reduce your hiring risk and simplify FCRA compliance.