FCRA Checklist Hiring Managers Should Tape to Their Desk

Why the FCRA matters for hiring

The Fair Credit Reporting Act (FCRA) protects job applicants and employees by requiring transparency, consent, and opportunities to dispute inaccurate information. For employers, it creates a specific sequence of obligations centered on disclosure/authorization and pre-adverse/adverse action communications. Compliance reduces legal exposure and supports fair, defensible hiring decisions.

Key employer responsibilities under the FCRA:

• Obtain a consumer report only for a permissible purpose (employment decisions are a permissible purpose).
• Provide a clear, stand-alone disclosure and obtain written authorization before ordering a report.
• Provide a pre-adverse action package if you may take negative action based on the report.
• Send a final adverse action notice if you actually take the adverse action.
• Maintain documentation showing compliance.

The FCRA checklist (printable, desk-ready)

Use this step-by-step checklist each time you plan to run a consumer report. Follow the order exactly—skipping steps is the most common source of violations.

1. Confirm permissible purpose

• Ensure the report is for an employment purpose (hiring, promotion, reassignment, retention).
• Verify any state/local limits on the type of report you plan to run (credit, criminal history, driving records).

2. Prepare the stand-alone disclosure

• Provide a clear and conspicuous written disclosure that a consumer report may be obtained.
• The disclosure must be in a document that consists solely of the disclosure (it cannot be part of an application or other combined form).
• For electronic consent, follow electronic signature rules and ensure the applicant receives the disclosure in a readable format.

3. Obtain written authorization

• Get the candidate’s written permission (signature or compliant electronic consent) before ordering the report.
• Keep a dated copy of the authorization with the hire file.

4. Verify your vendor (consumer reporting agency, CRA)

• Use a CRA that follows FCRA requirements and provides legally required documentation.
• Ensure the CRA can supply a full report copy and a Summary of Rights when needed.
• Confirm the CRA accepts employer certifications of compliance and provides timely reports.

5. Order the report only after disclosure + authorization

Do not review or consider any consumer report until you have both the stand-alone disclosure and express authorization.

6. If the report could lead to a negative hiring decision: issue a pre-adverse action notice

• Provide the candidate a copy of the consumer report and a current Summary of Rights under the FCRA before taking adverse action.
• Give the applicant a reasonable period to review and dispute inaccurate or incomplete information (commonly 3–7 business days, but follow company policy and any applicable state/local rules).
• Keep documentation of the date the pre-adverse packet was sent and any response.

7. If you proceed with an adverse action: send the adverse action notice

Include the required elements:

• Statement that adverse action was taken based on information in the consumer report.
• Name, address, and phone number of the CRA that supplied the report.
• A statement that the CRA did not make the adverse decision and cannot provide the reason.
• Notice of the consumer’s right to dispute the accuracy or completeness of the report and to obtain a free copy within 60 days.

Retain a copy of the adverse action notice and proof of delivery.

8. Document and retain records

• Keep copies of disclosures, authorizations, the consumer report, pre-adverse/adverse notices, and the CRA’s contact details.
• Retain records for a reasonable period to defend against claims (establish and follow a company retention policy consistent with legal counsel guidance).

9. Consider job-relatedness and individualized assessment for criminal records

• Evaluate the relevance of convictions and arrests to the specific job duties.
• Consider factors such as nature and gravity of the offense, time since the conviction, and the individual’s rehabilitation.
• Document the analysis to support the decision if challenged.

10. Check state and local rules

Confirm whether local laws add requirements or prohibitions (e.g., “ban-the-box,” limitations on consumer credit checks, time limits on reporting convictions). Adjust forms and processes to comply with more protective state/local standards.

Common FCRA pitfalls and how to avoid them

• Pitfall: Including the disclosure inside an application form.
  Fix: Use a separate, stand-alone disclosure document for consumer reports.
• Pitfall: Ordering reports before getting written authorization.
  Fix: Build a strict workflow that blocks ordering until authorization is recorded.
• Pitfall: Failing to provide a pre-adverse notice and a copy of the report.
  Fix: Automate pre-adverse delivery through your screening platform and track delivery receipts.
• Pitfall: Assuming employment verifications done internally aren’t covered.
  Fix: If you obtain a consumer report through a third party, FCRA rules apply. Clarify responsibilities with vendors.
• Pitfall: Relying on a vendor that does not support FCRA-required notices or certifications.
  Fix: Vet CRAs for compliance capabilities and require contract language ensuring FCRA support.

Practical takeaways for HR teams and hiring managers

• Train hiring staff: Anyone who orders or reviews consumer reports needs fast access to the checklist and training on the pre-adverse/adverse sequence.
• Standardize forms and workflows: Use templates for disclosures, authorizations, and notices. Automate delivery and recordkeeping where possible.
• Set internal timelines: Decide how long you will give candidates to respond to pre-adverse notices (commonly 3–7 business days) and document that policy.
• Update for local law: Maintain a simple jurisdictional matrix that flags states or cities with additional restrictions.
• Keep careful records: Document the entire process for each report. Good documentation is your best defense if a candidate asserts an FCRA violation.
• Pair compliance with fairness: Use an individualized assessment for criminal records to avoid discriminatory effects and to build defensible hiring decisions.

Sample desk card — concise wording you can print

Stick this card next to your keyboard so nothing is missed:

• Before ordering: Did you get a stand-alone disclosure? Yes / No
• Did you get written authorization? Yes / No (attach copy)
• Is the vendor an FCRA-compliant CRA? Yes / No
• If adverse possible: Did you send pre-adverse packet (report + Summary of Rights)? Date sent: __
• If adverse decision taken: Did you send adverse action notice with CRA contact info? Date sent: __
• Retain copies of: disclosure, authorization, report, pre-adverse/adverse notices

When to involve legal or compliance

Contact legal or compliance when:

• You’re developing or revising background-check policies.
• You plan to use credit reports, consumer credit-based data, or drug testing tied to disability-related inquiries.
• You have candidates with complicated criminal histories where individualized assessments may be required.
• You’re expanding hiring into new states or cities with unfamiliar consumer-reporting rules.

Legal counsel or your compliance team can help tailor policies and retention schedules to reduce risk while keeping hiring efficient.

Conclusion

The FCRA checklist every hiring manager should print and tape to their desk boils down to a short sequence: disclosure, authorization, vendor verification, pre-adverse notice if applicable, and final adverse action notice with full documentation. Following this process protects candidates’ rights and shields your organization from avoidable legal and regulatory exposure.

If you want help converting this checklist into ready-to-use disclosure and notice templates or to vet screening vendors for FCRA compliance, Rapid Hire Solutions can support your HR and compliance teams with practical tools and operational guidance to keep hiring safe, fair, and defensible.