FCRA Checklist Every Hiring Manager Should Keep

At-a-glance FCRA checklist (printable)

Use this as a quick reference or a one-sheet to keep at every recruiter’s desk. Follow each step in sequence for every candidate when ordering a consumer report from a consumer reporting agency (CRA).

• Verify a permissible purpose exists for the consumer report (employment is a permissible purpose).
• Provide a clear, standalone written disclosure that a consumer report may be obtained.
• Obtain the applicant’s written authorization (signed or electronic) for the consumer report.
• Certify to the CRA you have a permissible purpose and will comply with FCRA requirements.
• If the report contains adverse information you may use to deny or change an employment offer:
  • Deliver a pre-adverse action notice.
  • Provide a copy of the consumer report and a copy of “A Summary of Your Rights Under the Fair Credit Reporting Act.”
  • Give the candidate a reasonable period to review and dispute (commonly 5 business days).
• If you proceed with an adverse decision:
  • Send an adverse action notice with the CRA’s contact info, a statement that the CRA did not make the decision, and notice of dispute rights.
• Retain copies of the disclosure, authorization, pre-adverse/adverse notices, final decision, and any dispute correspondence.
• Confirm state and local requirements (ban-the-box, reporting time limits, additional notices) and follow the stricter rule where applicable.

Step 1 — Disclosure and authorization: get this right first

The FCRA requires a clear, conspicuous disclosure that a consumer report may be obtained, and it must be in writing and standalone. Do not bury this language inside an employment application or mix it with other authorizations. The simplest approach: a one-sentence disclosure that a consumer report will be obtained for employment purposes, on its own page or section, followed immediately by a signature line or electronic authorization checkbox.

Step 2 — Certification to the CRA and permissible purpose

Before a CRA will fulfill a request, they expect the employer to certify:

• You have a permissible purpose (employment).
• You will comply with adverse action procedures if you take adverse employment action based on the report.
• You will not misuse the information.

Confirm with your screening partner what data they need to process requests (employer name, address, contact person, purpose, and candidate identifiers). Keep the certification record; it’s evidence you followed proper procedure.

Step 3 — Pre-adverse action: give the candidate a fair shot

If the consumer report contains information that may lead you to rescind an offer, change the offer, or otherwise take adverse action, FCRA requires a two-step notice process.

Pre-adverse action notice must include:

• A copy of the consumer report you used.
• A copy of “A Summary of Your Rights Under the Fair Credit Reporting Act” (the FCRA summary).

Give the candidate a reasonable opportunity to review and dispute inaccuracies before finalizing your decision. FCRA doesn’t set an exact time; most employers allow at least 5 business days. Document the date you delivered the pre-adverse notice and how it was delivered (email, certified mail, portal notification).

Step 4 — Adverse action: what your final notice must contain

If you move forward with an adverse decision after the pre-adverse period, your adverse action notice must include:

• A statement that the consumer report played a role in the decision.
• The name, address, and phone number of the CRA that supplied the report.
• A statement that the CRA did not make the adverse decision and cannot explain the reasons for it.
• Notice of the candidate’s right to obtain a free copy of the report from the CRA within 60 days and to dispute its accuracy or completeness.

Keep a dated copy of this notice. If you used multiple sources or combined a background report with other information, document the specific grounds that led to the adverse action — this helps demonstrate a lawful, non-discriminatory decision if questioned.

Step 5 — Handling disputes and accuracy obligations

Under the FCRA, CRAs must have reasonable procedures to ensure maximum possible accuracy. When a candidate disputes report contents, the CRA conducts an investigation. Employers should:

• Pause adverse decisions when a dispute could affect the outcome, if required by law or policy.
• Accept corrected or updated reports from the CRA and reassess the decision.
• Document communications and keep copies of corrected reports.

If the dispute reveals a reporting error, update internal records and notify your recruiting team to prevent similar mistakes.

Know the overlays — state and local rules, and EEOC guidance

FCRA sets federal baseline requirements, but states and municipalities frequently impose stricter limits:

• “Ban-the-box” rules may limit when you can ask about criminal history.
• Several jurisdictions restrict the reporting or use of certain types of records after a set number of years.
• Some states require additional disclosure language or permit only specific methods of notice.

Additionally, EEOC guidance and enforcement trends emphasize individualized assessments when using criminal history — consider the nature of the offense, job duties, time elapsed, and evidence of rehabilitation. Incorporate a consistent, documented assessment process when criminal records could bar employment.

Common pitfalls that get employers sued

• Combining the disclosure inside an application or mixing it with other authorizations.
• Failing to send the candidate a copy of the report before taking adverse action.
• Skipping the FCRA summary with the pre-adverse notice.
• Ignoring state/local restrictions or using one-size-fits-all policies across jurisdictions.
• Relying on an outdated report or failing to document delivery and receipt of notices.
• Conducting discriminatory screening (e.g., blanket exclusion based on arrest records without individualized assessment).

Practical process to build into your hiring workflow

Embed these steps into your ATS and hiring SOPs so the right act happens at the right time:

• ATS integration: Ensure your applicant tracking system separates the disclosure and logs signed authorizations automatically.
• Standard templates: Maintain pre-adverse and adverse notice templates that include the CRA contact fields and the FCRA summary attachment.
• Training: Teach recruiters and hiring managers the timing rules — don’t send offer letters contingent on background checks without following the disclosure and pre-adverse steps.
• Audit trail: Keep a central file for each candidate that includes disclosure, authorization, report copies, dispute correspondence, and final decision notes.
• Local checklist: Maintain a quick-reference of state/local rules for the jurisdictions where you hire.

Practical takeaways for employers

• Treat FCRA steps as non-negotiable gating items in your hiring workflow: disclosure → authorization → certification → pre-adverse → adverse.
• Use standalone disclosure language and capture demonstrable consent every time.
• Always provide the report and the FCRA summary before taking adverse action; wait a reasonable period for challenges.
• Document every communication and keep records to defend decisions — aim to retain background screening files for at least several years, aligned with your legal counsel’s guidance.
• Layer federal FCRA obligations with state/local rules and EEOC guidance; where rules conflict, follow the stricter provision.
• Train hiring teams to apply individualized assessments when criminal records factor into employment decisions.

Conclusion

Summary: The FCRA checklist is not paperwork for its own sake — it’s a roadmap that reduces legal risk, protects candidates’ rights, and preserves the integrity of your hiring process. Keep a single-sheet checklist at every recruiter’s desk and embed the steps into your ATS and training materials so the right act happens at the right time, every time.

If you’d like help turning this checklist into ATS-ready templates, compliant disclosure and notice language, or a jurisdiction-specific compliance matrix, Rapid Hire Solutions can assist with practical implementation and ongoing audits to keep your hiring program defensible and efficient.