The FCRA Background Check Process for Employers: A Practical Overview

Important disclaimer

The Fair Credit Reporting Act is a federal consumer-reporting law. It can apply when an employer obtains a consumer report from a consumer reporting agency for an employment purpose. Other federal, state, and local requirements may also apply to the information requested, the timing of the inquiry, the criteria used, and the notices provided.

Start with a permissible employment purpose

Before requesting a report, an employer should identify the employment purpose and the role-related reason for the selected searches. The FCRA framework is not permission to collect any information that might be interesting; the request should be tied to an authorized employment use and the employer’s documented screening program.

The employer typically certifies to the consumer reporting agency that it has provided the required disclosure, obtained authorization, will follow the FCRA’s requirements, and will not use the information in violation of applicable equal-employment laws. A screening provider can support the ordering workflow, but the employer remains responsible for its decisions and procedures.

Provide disclosure and obtain authorization

FTC guidance explains that, before obtaining a background report from a reporting company, an employer generally must tell the applicant or employee in writing that the information may be used for employment decisions. The disclosure should be clear and conspicuous and presented in a stand-alone format rather than buried in an employment application.

The employer also generally obtains written permission. If an employer plans to request reports during employment, the authorization language and process should be evaluated for that continuing use. Investigative consumer reports can involve additional disclosures.

Order through a consumer reporting agency

A company that assembles or evaluates consumer information for employment decisions may be a consumer reporting agency under the FCRA. The agency has its own duties, including procedures designed to support accuracy and processes for consumer disputes.

The employer should provide accurate candidate information, order only the searches appropriate to the approved package, protect access to reports, and avoid sharing report information with people who are not authorized to receive it. The reporting agency is not the employer’s legal adviser and does not make the hiring decision.

Review the report carefully and consistently

A report may contain a possible record, an identifier that needs review, an unavailable source, or information that differs from what the candidate supplied. Employers should use documented criteria, check job relevance, and avoid automatic assumptions based on a single label or incomplete match.

EEOC guidance emphasizes equal treatment and cautions against policies that disproportionately exclude protected groups without being job related and consistent with business necessity. For criminal-history information, relevance can include the nature and seriousness of the conduct, the time that has passed, and the nature of the job.

Follow the pre-adverse-action process

If an employer is considering an adverse employment decision based in whole or in part on information in a consumer report, the FCRA generally requires a step before the decision becomes final. The employer provides the individual with a copy of the report and the applicable Summary of Your Rights under the FCRA.

The purpose is to give the person a meaningful opportunity to review the report and raise a dispute or provide context before the employer makes the final decision. The law does not set one universal waiting period for every circumstance in the official guidance cited here; employers should establish a reasonable, reviewed process and consider other applicable requirements.

Allow an opportunity to review or dispute

A candidate may identify information that belongs to another person, outdated source data, an incorrect case disposition, or another issue. A dispute is handled with the consumer reporting agency, which may need to contact the source and update or confirm the report.

The employer should avoid treating the contemplated decision as final while the required pre-adverse process is underway. Its internal procedure should identify who monitors disputes, how updated reports are evaluated, and how communications are documented.

Provide a final adverse-action notice when applicable

If the employer makes a final adverse decision based in whole or in part on the consumer report, it generally provides an adverse-action notice. FTC and CFPB materials describe information that belongs in this notice, including contact information for the consumer reporting agency and statements explaining that the agency did not make the employment decision and cannot provide the reasons for it.

The notice also addresses the individual’s rights to dispute report accuracy or completeness and to obtain an additional copy within the applicable period. Employers should use a reviewed notice process rather than relying on informal email wording.

Account for state and local requirements

State and local laws can affect when an employer may ask about criminal history, which records may be considered, how individualized review works, whether credit information is permitted, and which notices or waiting periods apply. Requirements can differ across the locations where an employer recruits or where a candidate will work.

A multi-location employer should not assume that one federal-only workflow answers every local question. Coordinate the screening program with qualified legal counsel, keep location-aware procedures current, and train authorized users on the process that applies to them.

A practical employer workflow

1. 1

   Define role-related criteria

   Select relevant searches and document the employment purpose.

2. 2

   Use reviewed disclosure and authorization materials

   Complete the pre-report steps before ordering through the consumer reporting agency.

3. 3

   Protect candidate data

   Limit report access and use secure collection and delivery processes.

4. 4

   Review consistently

   Apply documented, job-related criteria and consider equal-employment obligations.

5. 5

   Use pre-adverse procedures

   Provide the report and rights summary before a contemplated adverse decision becomes final.

6. 6

   Handle disputes and updates

   Allow the individual to review information and follow the reporting agency’s dispute process.

7. 7

   Send final notice when required

   Complete the adverse-action process using reviewed materials and applicable timing.

8. 8

   Audit the program

   Revisit forms, packages, local rules, access controls, and training with qualified counsel.

For an operational view of screening components, see employment background checks for employers. To discuss services—not legal advice—request a quote.