FCRA Checklist for Hiring Managers — Compliance Desk Guide

Why this FCRA checklist matters now

The Fair Credit Reporting Act (FCRA) governs the use of consumer reports in employment decisions. A single misstep — a missing disclosure, an improperly timed adverse action, or failure to provide required notices — can result in claims and regulatory scrutiny. The FCRA is process-focused: disclosure and authorization, permissible purpose, pre-adverse and adverse notices, and specific information the consumer reporting agency (CRA) must provide. This checklist is a practical, compliance-forward tool to reduce risk, protect candidates’ rights, and keep hiring moving.

The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk

Use this as your quick-reference workflow every time you order or act on a consumer report.

• Standalone disclosure: Provide a clear, written, standalone disclosure that a consumer report may be obtained for employment purposes. Do not bury this in an application or general employee handbook.
• Obtain written authorization: Secure the candidate’s written authorization. The authorization can be on the same form as the disclosure but must be distinct and signed.
• Confirm permissible purpose: Verify the report is for a permissible employment purpose (hiring, promotion, termination, reassignment) before ordering.
• Identify report type: Note whether it’s a consumer report, investigative consumer report (references/backstory), or credit report — different rules can apply.
• Use a certified CRA: Order reports only from a Consumer Reporting Agency you can and do certify complies with FCRA requirements.
• Pre-adverse action: If you may take adverse action based on the report, provide a pre-adverse action packet that includes a copy of the report and a Summary of Rights under the FCRA. Allow time for the candidate to respond (commonly 5 business days).
• Final adverse action notice: If you move forward with adverse action, send a final adverse action notice that includes the CRA’s name, contact info, and a statement that the CRA did not make the adverse decision and cannot provide reasons for it.
• Job relevance and individualized assessment: For criminal records, document how the conviction relates to the job and apply an individualized assessment when required by law or guidance.
• State and local rule check: Confirm any additional state or local rules (ban-the-box timing, conviction lookback limits, credit-check restrictions) before acting.
• Document and retain: Save signed disclosure/authorization, copies of the report, pre-adverse/adverse notices, and decision rationale. Keep records for the recommended period (commonly five years) or as required by state law.
• Train and centralize: Ensure hiring managers follow the same process and consult HR or legal for exceptions.

Before you order a report: four mandatory checks

1. Signed disclosure and authorization: Do you have the candidate’s signed disclosure and authorization? If not, pause. No report without it.
2. Permissible purpose documented: Is there a documented permissible purpose and a job-related reason for the check? Confirm and record.
3. State/local law check: Has your team checked applicable state and local laws for extra requirements or restrictions? Examples include timing of inquiries, bans on asking about salary or arrest records, and special forms for certain locales.
4. CRA certification: Is the CRA certified and able to supply the “Summary of Rights” and required contact information for adverse action notices? If not, switch providers.

What to include in your pre-adverse and adverse action steps

Pre-adverse action (when you intend to consider negative information)

• A copy of the consumer report used.
• A copy of the Summary of Rights under the FCRA (often provided by the CRA).
• A clear statement that adverse action may be taken and instructions for the candidate to dispute the report or explain circumstances.
• A reasonable waiting period for response (best practice: 5 business days, unless legal counsel or state law advises otherwise).

Final adverse action (when you decide not to hire or to terminate)

• A final adverse action notice that includes:
  • The name, address, and phone number of the CRA that furnished the report.
  • A statement that the CRA did not make the adverse decision and cannot provide the reasons for it.
  • A notice of the candidate’s right to dispute the accuracy or completeness of the report.
  • Notice of the right to obtain a free copy of the report from the CRA within 60 days (if adverse action was taken based on the report).

Criminal history and individualized assessments

Federal guidance directs employers to avoid blanket exclusions based on arrest or conviction alone. When criminal records factor into hiring decisions:

• Evaluate whether the conviction is job-related and consistent with business necessity.
• Consider time since the offense, nature and severity, and evidence of rehabilitation.
• Document the individualized assessment and how it informed your decision.
• Offer the candidate a chance to explain or contest the record during the pre-adverse period.

Why document the individualized assessment? It reduces disparate impact risk and strengthens defensibility.

State and local rules — don’t assume uniformity

Many jurisdictions add layers to FCRA baseline requirements:

• Ban-the-box ordinances: May restrict when you can ask about criminal history (often after conditional offer).
• Credit report limits: Some states limit use of credit reports for employment or require specific disclosures.
• Local adverse action forms: Cities and states may require their own adverse action forms or provide unique timing rules.

Make it standard practice: screen for local rules before ordering any report.

Practical process design tips for HR leaders

• Centralize ordering and decision-making: Let trained HR specialists manage background checks and adverse action notices rather than individual hiring managers.
• Maintain templates: pre-adverse packet, adverse action notice, disclosure/authorization, and individualized assessment forms.
• Automate retention: Use applicant tracking and background-check platforms to archive signed disclosures, copies of reports, and correspondence automatically.
• Train hiring managers quarterly: Short, role-based training reduces errors.
• Build a triage path for disputes: If a candidate disputes a report, pause adverse action, send documentation to the CRA, and await CRA reinvestigation results when appropriate.

Common mistakes that create the most risk

• Embedding the disclosure in an application or handbook rather than presenting a standalone disclosure.
• Failing to provide the report and Summary of Rights before adverse action.
• Using blanket exclusion policies about criminal records without job-related justification.
• Ignoring state/local restrictions on timing, bans, or notice requirements.
• Poor recordkeeping: no copy of signed authorization, missing pre-adverse notices, or no audit trail.

Avoid these pitfalls by making the checklist a non-negotiable step in your hiring workflow.

Quick printable checklist (condensed — tape to your desk)

• Standalone disclosure given? [ ]   Signed authorization obtained? [ ]
• Confirm permissible purpose? [ ]   Log the reason/job title and date [ ]
• Identify report type (consumer / investigative / credit) [ ]
• CRA certified and will provide Summary of Rights? [ ]
• Pre-adverse packet ready (report + Summary of Rights)? [ ]   Sent on: ______
• Waited reasonable response time? [ ] (suggest 5 business days) ______
• Final adverse notice contains CRA contact + statement + dispute rights? [ ]
• Document individualized assessment (if criminal history) [ ]
• State/local law checklist completed? [ ] (note jurisdiction) ______
• Archive all documents in applicant file (disclosures, reports, notices) [ ]

Practical takeaways for employers

• Build the checklist into your applicant tracking system and hiring SOPs so it’s always followed.
• Train hiring managers to stop and consult HR before ordering or acting on reports.
• Use certified CRAs and confirm they will supply the Summary of Rights automatically.
• Standardize individualized assessments for criminal records and document each step.
• Review state and municipal requirements monthly for jurisdictions where you hire.

Closing: Make the checklist a habit

The FCRA Checklist Every Hiring Manager Should Print and Tape to Their Desk isn’t paperwork for the sake of paperwork — it’s a practical risk-management tool that protects candidates and your organization. Turn it into a procedural checkpoint: centralized ordering, documented decisions, and consistent notices will reduce legal exposure and help hiring move forward with confidence.

If you’d like a compliance-ready version of this checklist or help building standardized forms and automated workflows, Rapid Hire Solutions can help create a background screening process aligned with FCRA requirements and state/local rules. Contact our team to discuss a tailored program for your hiring needs.