FCRA Checklist for Hiring Managers — Essential Steps

Why the FCRA matters to hiring managers

The Fair Credit Reporting Act (FCRA) governs how employers may use consumer reports — including criminal background checks and, where permissible, credit reports — in employment decisions. A missed step or incomplete disclosure can trigger investigations, litigation, and overturned decisions.

• The FCRA imposes specific obligations on employers ordering or relying on reports from consumer reporting agencies (CRAs): disclosure, authorization, pre-adverse action, adverse action, and recordkeeping.
• Noncompliance can lead to statutory damages, class actions, state enforcement, and harm to candidate trust and hiring quality.

The FCRA checklist every hiring manager should follow

1. Confirm permissible purpose before ordering a report

Action: Verify the screening is a permissible purpose under the FCRA and applicable state law. Document why the report is necessary for the role (e.g., driving records for commercial drivers; criminal records for roles with sensitive clientele).

2. Provide a standalone written disclosure and get written authorization

• Use a clear, standalone disclosure that a consumer report will be obtained for employment purposes — do not bury it in an application.
• Obtain the candidate’s written authorization (e-signatures acceptable where permitted) and retain it in the applicant file.
• If you run periodic or continuous monitoring, disclose that separately and obtain consent covering ongoing checks.

3. Use a compliant consumer reporting agency and certify your requests

Order reports through a reputable CRA experienced with employment screening and state compliance. When placing orders, certify to the CRA that you have a permissible purpose, the candidate’s authorization, and will comply with FCRA requirements — this certification is required.

4. Evaluate criminal history and other adverse information thoughtfully

• Assess whether report information is job-related and consistent with business necessity. Use role-specific criteria rather than blanket exclusions.
• Account for state and local laws limiting the use of arrest/conviction information, imposing time limits, or requiring individualized assessments (e.g., “ban-the-box” rules).
• If you intend to take adverse action, follow the pre-adverse and adverse action procedures below.

5. Follow the pre-adverse action process precisely

Before taking adverse action, provide the candidate with:

• A clear pre-adverse action notice stating you are considering action based on a consumer report.
• A free copy of the consumer report used.
• A copy of the FCRA Summary of Rights (the CRA can provide this).

Allow a reasonable period (commonly 3–5 business days) for the candidate to review and dispute inaccuracies.

6. If you proceed, deliver a compliant adverse action notice

• Provide an adverse action notice that includes the reason (or that the decision was based in whole or part on the report), the CRA’s name and contact information, and a statement that the CRA did not make the adverse decision.
• Include a statement of the candidate’s right to obtain a free copy of the report and to dispute inaccuracies.
• Keep dated copies of pre-adverse and adverse notices in the applicant record.

7. Respond promptly to disputes and reinvestigation requests

If a candidate disputes information, notify the CRA immediately and cooperate in the reinvestigation. CRAs have statutory timeframes (typically 30 days) to investigate. If a report is corrected, reassess and, if necessary, reverse adverse action and notify the candidate.

8. Maintain secure records and follow recordkeeping requirements

• Retain signed authorizations, disclosures, copies of reports, and adverse action documentation per federal and state retention rules — keep records long enough to defend decisions.
• Secure reports and related documents with role-based access and strong data protection controls; dispose of reports securely when retention periods expire.

9. Train hiring teams and standardize procedures

• Train recruiters and hiring managers on FCRA steps and on interpreting reports without bias.
• Use templates for disclosures, pre-adverse/adverse notices, and consents for consistency.
• Integrate screening steps into your ATS so actions and dates are auditable.

10. Audit and update your program regularly

Conduct periodic compliance audits to verify that disclosures, authorizations, notices, and recordkeeping are completed and retained. Track changes in federal, state, and local laws and update templates and training promptly.