=
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk
Estimated reading time: 6 minutes
Key takeaways
- Follow a repeatable, documented process for disclosures, authorizations, and adverse actions to reduce legal risk.
- Provide candidates a pre-adverse packet (report + FCRA summary) and allow time to respond before taking adverse action.
- Order only job-relevant searches and apply screening consistently across similarly situated applicants.
- Maintain an auditable file: disclosure, authorization, report copy, notices, and vendor certifications.
Why a compact FCRA checklist matters
FCRA compliance is more than a legal checkbox — it protects your organization and candidates. A compact, desk-ready checklist helps with:
- Reducing hiring risk by ensuring accuracy and fairness
- Preserving a consistent process that limits discrimination exposure
- Maintaining an auditable record for internal and vendor reviews
- Improving candidate experience and minimizing surprises that cause withdrawals
Tip: Keep a printed checklist near your workstation so everyone follows a single, repeatable process.
The FCRA checklist (print this and tape it to your desk)
Follow these items in order. Treat them as mandatory steps before you take any adverse action based on a consumer report.
1. Standalone written disclosure
Provide a clear, standalone disclosure that a consumer report may be obtained for employment purposes. Do not bury this language in an application or combine it with other authorizations.
2. Written authorization from the applicant
Obtain the applicant’s written authorization (electronic signature acceptable). Keep the authorization with the file. Authorization should specifically reference consumer reports for employment.
3. Confirm permissible purpose and job-relatedness
Verify the purpose is a permissible FCRA purpose (employment screening) and that the information sought is job-related. Apply the same scope to all individuals in the same job category.
4. Vendor verification and certification
Use a Consumer Reporting Agency (CRA) or vendor that can certify compliance. When ordering, the hiring manager or purchaser must certify to the CRA that you have permissible purpose and will follow FCRA procedures.
5. Order only relevant searches
Limit searches to what the position requires (e.g., criminal, education, employment, driving record). Overbroad searches can raise accuracy and discrimination concerns.
6. Review report for accuracy and relevance
Check for identity matches and obvious errors. If discrepancies exist, pause before making any decision until you can verify accuracy with the CRA or candidate.
7. Pre-adverse action: notify and provide a copy
If the report may lead to adverse action, send the candidate a pre-adverse action package that includes:
- A copy of the consumer report
- A summary of rights under the FCRA (commonly the “A Summary of Your Rights Under the Fair Credit Reporting Act”)
Allow a reasonable period for the candidate to review and respond (best practice: at least 5 business days).
8. Consider candidate response
If the candidate disputes or provides documentation, evaluate it and, if appropriate, allow the CRA time to reinvestigate before proceeding.
9. Final adverse action notice (if you proceed)
If you use the report to take adverse action, provide a final adverse action notice that contains:
- A statement the adverse action was based in whole or in part on the consumer report
- Name, address, and phone number of the CRA that supplied the report
- A statement that the CRA did not make the adverse decision and cannot give specific reasons
- A notice of the candidate’s right to dispute the accuracy or completeness of the report
- Any additional information required under state law
10. Document retention and audit trail
Save documentation for all steps: disclosure, authorization, report copies, pre‑adverse and adverse notices, candidate communications, and vendor certifications. Maintain a consistent retention policy (many employers use five years as a practical baseline).
11. Reinvestigation and dispute handling
If a candidate disputes information, work with the CRA to trigger a reinvestigation and withhold adverse action until the process completes or evidence supports the decision.
12. Train hiring staff and keep procedures current
Ensure anyone who orders or acts on reports understands FCRA steps and state/local restrictions. Update training whenever laws or vendor processes change.
13. Check state and local law restrictions
Some states and cities restrict criminal background use, salary-history questions, or require additional notices. Apply the most protective law that covers the candidate.
14. Consistency to avoid disparate treatment
Apply screening policies uniformly across similarly situated applicants to reduce discrimination claims. Document job-related reasons for any exceptions.
Pre-adverse and adverse action: what to say and when
Pre-adverse action gives candidates a chance to respond; the adverse action letter finalizes your decision. Use the checklist below for each communication.
Pre-adverse action packet should include
- Short cover note: “We are considering an employment decision based on a consumer report. Attached is a copy…”
- Copy of the consumer report
- FCRA summary of rights
- Instructions on how to dispute/report inaccuracies
- A clear deadline for response (recommendation: five business days)
Final adverse action notice should include
- Reason: “We are declining to move forward based in whole or part on information in a consumer report.”
- CRA contact info (name, address, phone)
- Statement that CRA did not make the decision
- Statement of right to dispute accuracy and request free report within 60 days
- Employer contact info for questions
Keep both notices in the candidate’s record.
Common pitfalls hiring managers make (and how to avoid them)
- Combining disclosure with other documents: Use a separate disclosure form. Avoid bundling with an application or offer letter.
- Skipping the copy of the report: Always provide the report with your pre-adverse notice—this is a frequent FCRA violation.
- Acting before reinvestigation completes: Pause adverse action until reinvestigation results or corroborating evidence exists.
- Inconsistent application: Treat all candidates in the same job category the same way.
- Ignoring state/local rules: Run a simple check for state or municipal restrictions before ordering certain checks.
Vendor management checklist
Your screening vendor is an extension of your compliance program. Confirm the following before relying on their reports:
- They are a legitimate CRA and willing to certify permissible purpose.
- They provide the FCRA summary and report copy promptly for pre-adverse action.
- Documented procedures for reinvestigation and dispute handling.
- SLAs for turnaround times and error-resolution are clearly defined.
- Data security safeguards (access controls, encryption, breach notification).
- A written agreement that spells out roles, responsibilities, and liability allocation.
Practical takeaways for employers
- Standardize: Use a single, documented process for ordering and acting on consumer reports.
- Templates: Maintain ready-to-use disclosure, authorization, pre-adverse, and adverse action templates.
- Time buffer: Build at least a short waiting period into hiring workflows to allow pre-adverse review and candidate response.
- Train: Regularly train recruiters, hiring managers, and HR on FCRA steps and state law nuances.
- Centralize records: Keep all screening documentation in a central, auditable file.
- Partner wisely: Work with a vendor that understands FCRA intricacies and supports your compliance needs.
Quick desk-sized summary (copy and tape)
- Provide standalone disclosure → get written authorization
- Verify permissible purpose & certify to CRA
- Order only job-relevant searches
- Review report for identity and accuracy
- Pre-adverse: send report + FCRA summary, allow response time (≥5 business days)
- Consider candidate response / trigger reinvestigation if disputed
- Final adverse action: send required notice with CRA contact
- Document everything + check state/local law
- Apply policy consistently to all similarly situated candidates
Conclusion
The FCRA checklist every hiring manager should print and tape to their desk isn’t a substitute for legal counsel, but it is the practical guide that prevents common compliance failures. Consistent disclosures, careful report handling, clear candidate communication, and strong vendor controls are the pillars of a defensible screening program that reduces hiring risk and preserves candidate trust.
If you’d like a printer-ready checklist, template language for disclosures and adverse action notices, or a review of your screening workflow, Rapid Hire Solutions can help you align processes with FCRA requirements and state laws—without adding complexity to your hiring.
FAQ
What is a standalone disclosure and why is it required?
Answer: A standalone disclosure is a document that explicitly notifies the applicant that a consumer report may be obtained for employment purposes. It must not be combined with other authorizations or acknowledgments. The purpose is to ensure the candidate is clearly informed and has given specific consent under the FCRA.
How long should I wait after sending a pre-adverse packet?
Answer: Best practice is to allow at least five business days for the candidate to review and respond. This gives time for disputes and potential reinvestigation; some employers may allow more time depending on the complexity of issues.
What must be included in a final adverse action notice?
Answer: The notice must state the adverse action was based on a consumer report (in whole or in part), include the CRA’s name, address, and phone number, state that the CRA did not make the decision, notify the candidate of their right to dispute the report, and include any additional state-required information.
What should I do if a candidate disputes report information?
Answer: Trigger the CRA’s reinvestigation process, evaluate any documentation submitted by the candidate, and withhold adverse action until reinvestigation completes or you have objective corroboration supporting the decision.
How do state and local laws affect FCRA processes?
Answer: State and local laws may impose additional restrictions (e.g., limiting criminal-history inquiries, banning salary-history questions, or requiring extra notices). Always apply the most protective law that covers the candidate and update processes accordingly.