=
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk
Estimated reading time: 6 minutes
Key takeaways
- Always use a stand-alone disclosure and obtain written authorization before ordering any consumer report.
- Follow pre‑adverse and adverse action steps to reduce legal exposure and allow candidates to respond.
- Document job‑related rationale and retain records for audits, disputes, and regulatory reviews.
- Account for state and local law variations and integrate jurisdiction rules into your ATS or vendor controls.
Table of contents
- Why the FCRA matters for hiring managers
- The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk
- Common pitfalls hiring teams run into — and how to avoid them
- Practical workflow: integrating FCRA steps into your hiring process
- Practical takeaways for employers
- When you should consult legal counsel or compliance experts
- Conclusion: stick this FCRA checklist on your desk and follow it every time
- FAQ
Why the FCRA matters for hiring managers
The Fair Credit Reporting Act (FCRA) governs how employers use consumer reports — for example, criminal history checks, credit checks, and employment verifications — when making hiring decisions. It protects candidates’ rights and prescribes the steps employers must follow when relying on a consumer reporting agency (CRA). Noncompliance can trigger statutory damages, class actions, regulatory scrutiny, and practical hiring delays.
From a practical standpoint, following the FCRA:
- Preserves your ability to make informed, defensible hiring decisions.
- Minimizes disputes and the administrative burden of correcting reports.
- Protects the company from potential litigation and fines.
- Keeps candidate experience professional, transparent, and consistent.
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk
Keep this printable checklist within reach. It covers the essential FCRA steps you must complete when ordering and using consumer reports in hiring.
- Confirm a permissible purpose
Before ordering any consumer report, ensure the job‑related permissible purpose exists (employment screening is one). Don’t run reports for vague reasons.
- Use a qualified CRA
Order reports only from an FCRA‑compliant consumer reporting agency. Get the CRA’s business name and contact information on file.
- Provide a clear, stand‑alone disclosure
Give the candidate a written disclosure that a consumer report may be obtained for employment purposes. The disclosure must be stand‑alone (not buried in an application or combined with other language).
- Obtain written authorization
Secure the candidate’s written authorization after the disclosure and before pulling the report. Keep the signed authorization on file.
- Certify to the CRA
When ordering, certify to the CRA that you provided disclosure and obtained authorization, and that you will comply with FCRA requirements (e.g., adverse action procedures).
- Review report carefully and verify identity
Confirm the information applies to the correct candidate (name, DOB, SSN when available). Resolve identity mismatches before taking action.
- If considering adverse action: give pre‑adverse action notice
Share the report (or relevant portions) and a copy of the CRA’s Summary of Rights. Give the candidate a reasonable period (commonly 5 business days) to respond or dispute.
- Make a reasoned decision; document the basis
Document job‑related rationale showing how the report impacts the candidate’s suitability for the role.
- If taking adverse action: send adverse action notice
Provide an adverse action notice that includes:
- Statement of adverse action taken
- The CRA’s contact details
- A notice that the CRA did not make the adverse decision
- Right to dispute accuracy and to obtain free report within 60 days
- Maintain records
Retain disclosure, authorization, report, pre‑adverse/adverse notices, and decision documentation for at least the period required by law (and your company policy).
- Respond to disputes and reinvestigation requests promptly
If a candidate disputes, notify the CRA and provide any relevant employer records; CRA must reinvestigate within 30 days.
- Consider state and local law constraints
Check for state restrictions (credit checks, conviction reporting, salary inquiries, ban‑the‑box) and adjust process accordingly.
Common pitfalls hiring teams run into — and how to avoid them
Knowing the checklist is one thing. Avoiding common mistakes is what reduces risk.
- Burying the disclosure: Many applications include language about background checks, but the FCRA requires a stand‑alone disclosure that is not mixed with other authorization language. Use a clear, single‑purpose disclosure form.
- Skipping the written authorization: Verbal permission or implied consent isn’t enough. Get a signed authorization or an e‑signature that meets your state’s standards.
- Rushing the process after a negative result: Adverse action isn’t immediate. Provide the pre‑adverse notice and allow time for the candidate to dispute or explain. This reduces both legal exposure and the chance of losing a good hire who simply needs to correct an error.
- Failing to verify identity: Errors in criminal records and credit reports happen. Match multiple identifiers and ask the CRA for more information if something looks off.
- Treating all reports the same across states: Many states limit the use of credit reports, the look‑back period for convictions, or ban certain questions entirely. Maintain a jurisdictional compliance table and integrate it into your ATS or screening vendor rules.
- Relying on templates without updating them: FCRA guidance and state laws change. Review disclosure, authorization, and adverse action templates annually with HR counsel.
Practical workflow: integrating FCRA steps into your hiring process
Make compliance a routine step rather than an afterthought. Here’s a streamlined process that works with applicant tracking systems and recruitment teams.
Pre‑screen stage
- Decide which roles require which consumer reports and why. Document job‑related rationale.
- Configure ATS triggers so that reports are ordered only after candidate reaches pre‑defined stage (e.g., contingent offer).
Ordering stage
- Present the stand‑alone disclosure and authorization within the ATS or on paper.
- Ensure the candidate signs before the screening request is sent to the CRA.
- Certify to the CRA at the time of order (many vendor portals handle this).
Review and decision stage
- Train hiring managers to read reports with a focus on accuracy and relevance. Provide red‑flag examples tied to job functions (e.g., driving offenses for fleet drivers).
- Use a standard form to document decision rationale and approvals.
Adverse action stage (if applicable)
- Deliver pre‑adverse action package: copy of report, Summary of Rights, and a short letter explaining the concern. Log delivery date.
- After wait period, if decision is to rescind or change offer, send the required adverse action notice and retain proof of delivery.
Post‑hire stage
- Keep records in a secured location. Know retention timelines for audits or litigation.
- If you run ongoing monitoring, notify employees and obtain separate consent if required by law.
Practical takeaways for employers
- Make the disclosure and authorization separate and explicit; don’t hide them in long application forms.
- Build job‑related justifications for each type of report and keep them on record.
- Train hiring managers to follow the pre‑adverse/adverse steps—mistakes often occur at the decision point, not in ordering.
- Use vendor controls and ATS integrations to prevent unauthorized runs and to add jurisdictional logic.
- Maintain a standard documentation habit: one folder per candidate that includes disclosure, authorization, report, decision memo, and copies of all notices.
When you should consult legal counsel or compliance experts
The FCRA is federal, but state and local laws often layer additional restrictions. Consult counsel when:
- You design or change a company‑wide screening policy.
- You plan to use credit reports, arrest records, or expansive criminal background checks.
- You receive a candidate dispute that suggests systemic reporting errors.
- You have high‑risk roles (financial, healthcare, childcare) that trigger specialty screening or regulatory requirements.
Conclusion: stick this FCRA checklist on your desk and follow it every time
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk is a practical tool, not just paperwork. Consistently following these steps protects candidates and your organization, speeds hires, and reduces legal risk. Start by making the stand‑alone disclosure and written authorization non‑negotiable; then enforce pre‑adverse/adverse timing and thorough documentation.
If you want a printable checklist template, process mapping for your ATS, or help aligning vendor workflows with FCRA and state law nuances, Rapid Hire Solutions can help you implement compliant screening that fits your hiring model. Reach out to discuss how to operationalize this checklist across your teams.
FAQ
What is the FCRA and why does it apply to hiring?
The Fair Credit Reporting Act (FCRA) is a federal law that regulates how consumer reporting agencies and users of consumer reports (including employers) collect, use, and share consumer information. It applies to hiring when employers rely on consumer reports — such as criminal history or credit reports — to make hiring decisions.
Do I need written authorization to run a background check?
Yes. The FCRA requires a clear, stand‑alone disclosure and written authorization before ordering a consumer report for employment purposes.
What is a pre‑adverse action notice and when must I use it?
A pre‑adverse action notice is provided when you are considering taking adverse action (e.g., rescinding an offer) based in whole or in part on a consumer report. It should include a copy of the report and the CRA’s Summary of Rights and give the candidate a reasonable period to respond (commonly 5 business days).
How long should we keep FCRA records?
Retain disclosure, authorization, reports, pre‑adverse/adverse notices, and decision documentation for at least the period required by law and per your company policy. Consult counsel for jurisdiction‑specific retention requirements.
When should we consult legal counsel?
Consult counsel when designing or changing company screening policies, planning to use sensitive reports (credit, arrest records), responding to systemic disputes, or managing screening for high‑risk regulated roles.