=
The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk
Estimated reading time: 6 min read
Key takeaways
- Always obtain a clear, standalone disclosure and written authorization before ordering a consumer report.
- Follow pre-adverse and adverse action steps to give candidates a chance to respond and to reduce legal risk.
- Perform individualized assessments for criminal records and document job relevance to avoid disparate impact claims.
- Check state and local rules (Ban-the-Box, timing, sealed records) before screening.
- Keep and secure records of disclosures, consents, reports, notices, and assessment rationale.
Table of contents
- The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk
- Checklist: Step-by-step actions
- Why each step matters
- Common mistakes hiring teams make
- Practical workflow integrations
- Quick templates to keep handy
- Practical takeaways for employers
- When to involve legal or compliance
- Conclusion
- FAQ
Checklist: Step-by-step actions
1. Confirm permissible purpose
Action: Before ordering a consumer report, confirm the screening is for a permissible purpose under the FCRA (pre-employment screening is permitted). Document the job opening and the business reason for the report.
2. Provide a clear, standalone disclosure
Action: Give the candidate a written disclosure that a consumer report may be obtained for employment purposes. The disclosure must be clear and conspicuous and consist solely of that disclosure (do not combine with the application or other notices).
3. Obtain written authorization
Action: Secure the applicant’s written consent after the standalone disclosure. Electronic signatures are acceptable if compliant with e-signature laws. Keep the signed authorization on file.
4. Use a reputable consumer reporting agency (CRA)
Action: Work with CRAs that follow FCRA procedures, provide accurate data sources, and handle reinvestigations and disputes. Confirm the CRA will provide the candidate’s copy of the report and the FCRA summary when needed.
5. Assess state and local rules before ordering
Action: Check for state/local restrictions (Ban-the-Box, conviction-report timing, salary-history bans, sealed/expunged record rules). Adjust your screening scope and timing accordingly.
6. Review the report for job relevance
Action: Evaluate any adverse information against the job’s duties. For criminal records, perform an individualized assessment considering: nature and gravity of the offense, time passed, and evidence of rehabilitation (consistent with EEOC guidance).
7. If adverse action is possible, start the pre-adverse step
Action: Before denying employment because of the report, send a pre-adverse action notice that includes:
- A copy of the consumer report
- The CRA’s “A Summary of Your Rights Under the FCRA”
Allow a reasonable period for the candidate to respond (many employers use five business days).
8. Consider candidate response and document findings
Action: If the candidate disputes the report or provides context, document any follow-up steps (reinvestigation requests to the CRA, notes from candidate conversations).
9. Send a final adverse action notice if you decide against hiring
Action: The adverse action notice must include:
- Statement of adverse action taken
- The CRA’s name, address, and phone number
- Statement that the CRA did not make the decision and cannot explain why
- Notice of the candidate’s right to dispute the accuracy/completeness of the report and to obtain a free copy from the CRA within 60 days
10. Maintain records and protect data
Action: Keep copies of disclosures, consents, reports, pre-adverse and adverse notices, and documentation of any individualized assessments. Securely store these records and limit access to those with a need to know.
Why each step matters (short explanations)
- Standalone disclosure and consent: These are the backbone of FCRA compliance. If you skip this, you risk statutory damages or inability to use the report defensibly.
- Pre-adverse and adverse notices: These steps give candidates a chance to correct errors and protect employers from claims that the report was inaccurate or misused.
- Individualized assessment: Federal guidance emphasizes that blanket exclusions based on criminal history can lead to disparate impact claims. A job-related, consistent review reduces legal exposure.
- State/local compliance: Many jurisdictions impose additional timing or content rules that can’t be overridden by federal law — compliance requires both levels.
Common mistakes hiring teams make
- Combining the disclosure with the application or other onboarding documents.
- Failing to document the business reason for ordering a report.
- Skipping the pre-adverse step or not providing the report and FCRA summary to the candidate.
- Ignoring local “ban-the-box” timing rules and asking about criminal history too early.
- Not keeping copies of the signed consent, report, and adverse action notices.
- Treating factual verifications (employment, education) the same as consumer reports without understanding when FCRA applies.
Practical workflow integrations (how to make compliance routine)
- Build standardized templates: Create company-approved templates for the standalone disclosure, consent form, pre-adverse notice, and adverse action notice. Store them in your ATS for easy use.
- Checklist at the applicant record: Require HR or the hiring manager to initial/confirm the checklist items before a background report is ordered.
- Training and quick reference: Run a brief onboarding session for hiring managers and provide the print-and-tape checklist at interview rooms and desks.
- Automate where possible: Use screening vendors that integrate with your ATS and support automated pre-adverse/adverse notices to ensure consistency.
- Escalation path: Define who makes the individualized assessment decision (HR + hiring manager + legal when necessary) and document the rationale.
Quick templates to keep handy
Standalone disclosure (short): “We may obtain a consumer report and/or investigative consumer report for employment purposes. We will use the information to evaluate your suitability for employment. By signing below, you authorize the employer to obtain this report.”
Pre-adverse notice checklist: copy of report + FCRA summary + statement inviting explanation + deadline for response.
Adverse action notice checklist: decision statement + CRA contact info + statement CRA didn’t make decision + notice of dispute rights.
Work with your legal counsel to finalize wording appropriate for your organization and jurisdiction.
Practical takeaways for employers
- Treat the FCRA process as a two-part obligation: procedural (disclosures, notices, consents) and substantive (job-related decision-making and documentation).
- Make the standalone disclosure and signed consent non-negotiable: no report without it.
- Use pre-adverse notices to reduce risk and to catch inaccuracies that may change hiring outcomes.
- Document everything. A well-organized paper trail is your best defense if a dispute arises.
- Stay current on state and municipal laws that affect when and how you can ask about criminal history or salary.
When to involve legal or compliance
- If your role involves public safety, financial responsibilities, or sensitive data, consult legal counsel to define job-related disqualifiers.
- If you plan to use automated decisioning based on consumer reports, get compliance input to address disparate impact concerns.
- For multi-state recruiting campaigns, obtain counsel to harmonize your screening notice timing and content across jurisdictions.
Conclusion
Following this FCRA checklist gives hiring managers a straightforward, defensible path for ordering and acting on consumer reports. It reduces legal risk, helps ensure fair treatment of candidates, and makes your background screening process auditable. Keep the checklist visible, train teams to use it, and build simple templates into your workflow.
If you’d like a customized checklist, disclosure and adverse-action templates, or help integrating compliant screening into your ATS, Rapid Hire Solutions can help you design processes that balance speed, accuracy, and legal safety.
FAQ
Do I always need a standalone disclosure and written consent?
Yes. Under the FCRA, a clear, standalone disclosure and subsequent written authorization are required before obtaining a consumer report for employment purposes. Combining the disclosure with an application or other documents is a common compliance pitfall.
What should a pre-adverse notice include and how long should I wait?
A pre-adverse notice should include a copy of the consumer report and the CRA’s “A Summary of Your Rights Under the FCRA.” Allow a reasonable period for response; many employers use five business days, but tailor timing to your process and applicable law.
How do state and local laws affect FCRA compliance?
State and municipal rules can impose additional timing, content, or substance restrictions (e.g., Ban-the-Box, sealed records). You must comply with both federal and local laws; when in doubt, consult counsel or compliance resources for the jurisdictions where you recruit.
What documentation should I retain and for how long?
Retain disclosures, consents, copies of reports, pre-adverse and adverse notices, and documentation of individualized assessments. Retention periods vary by company policy and jurisdiction; keep records secure and accessible to defend decisions if challenged.