The Complete Guide to FCRA Compliance for Employers

The Fair Credit Reporting Act (FCRA) is a federal law that governs how consumer reporting agencies collect, disseminate, and use consumer information, including background check reports used for employment purposes. For employers who conduct background checks as part of their hiring process, understanding and complying with FCRA requirements is not optional—it's essential.

Non-compliance can result in costly lawsuits, regulatory fines, and significant reputational damage. In recent years, class action lawsuits against employers for FCRA violations have resulted in settlements ranging from hundreds of thousands to tens of millions of dollars.

What is the FCRA?

Enacted in 1970 and amended several times since, the FCRA regulates the collection and use of consumer credit information. While originally focused on credit reports, the law applies to any "consumer report" used for employment purposes, including criminal background checks, employment verifications, and other screening reports.

The FCRA doesn't prevent employers from conducting background checks or using the information to make hiring decisions. Instead, it establishes procedures that employers must follow to protect the rights of job applicants and employees.

Key FCRA Requirements for Employers

1. Disclosure and Authorization

Before obtaining a consumer report for employment purposes, employers must:

• Provide clear written disclosure that a consumer report may be obtained. This disclosure must be in a standalone document—not buried in an employment application.
• Obtain written authorization from the applicant or employee before procuring the report.
• Ensure the disclosure is "clear and conspicuous," meaning it must be easy to understand and not cluttered with extraneous information.

"The disclosure must consist solely of the disclosure that a consumer report may be obtained for employment purposes." — Fair Credit Reporting Act, 15 U.S.C. § 1681b(b)(2)(A)

2. Certification to Consumer Reporting Agency

Employers must certify to the background screening company that they:

• Have provided the required disclosure and obtained authorization
• Will comply with adverse action requirements
• Will not use the information in violation of federal or state equal employment opportunity laws

3. Pre-Adverse Action Process

If you're considering not hiring someone (or taking other negative action) based wholly or partly on information in a background check, you must follow the pre-adverse action process:

1. Provide the applicant with a copy of the consumer report used in making the decision
2. Provide a copy of "A Summary of Your Rights Under the Fair Credit Reporting Act" (a document prescribed by the Consumer Financial Protection Bureau)
3. Give the applicant reasonable time to review the report and dispute any inaccuracies before making a final decision

4. Adverse Action Notice

If you decide to take adverse action after the pre-adverse action waiting period, you must provide the applicant with:

• Notice that adverse action has been taken based on information in the report
• The name, address, and phone number of the consumer reporting agency that supplied the report
• A statement that the CRA did not make the adverse decision and cannot explain why it was made
• Notice of the applicant's right to obtain a free copy of the report within 60 days
• Notice of the right to dispute the accuracy or completeness of the information

Common FCRA Compliance Mistakes

Even well-intentioned employers can make mistakes that expose them to liability. Here are the most common FCRA violations:

Including Waivers in the Disclosure Form

The standalone disclosure requirement means you cannot include liability waivers, releases, or other language in the disclosure document. Many employers have faced class action lawsuits for including such language.

Bundling Disclosure with Job Application

The disclosure must be a separate document. Including it as part of the employment application—even on a separate page—can violate the FCRA's standalone requirement.

Skipping the Pre-Adverse Action Step

Some employers move directly from receiving a concerning background check result to rejecting the candidate. The pre-adverse action step is mandatory and gives applicants the opportunity to dispute inaccuracies before a final decision is made.

Not Allowing Sufficient Time to Respond

While the FCRA doesn't specify an exact timeframe, courts have generally found that five business days is a reasonable minimum waiting period between pre-adverse action notice and final adverse action.

State Law Considerations

The FCRA sets a federal baseline, but many states have enacted additional requirements that may be more restrictive. For example:

• California: Requires specific adverse action notice language and has additional disclosure requirements
• New York: Article 23-A requires individualized assessment of criminal history
• Illinois: Has specific requirements for employee consent and record retention

Employers operating in multiple states must ensure compliance with both federal FCRA requirements and applicable state laws.

Ban-the-Box and Fair Chance Laws

In addition to the FCRA, many jurisdictions have enacted "ban-the-box" or fair chance hiring laws that restrict when and how employers can inquire about criminal history. These laws typically require employers to wait until after a conditional offer before conducting criminal background checks.

While not part of the FCRA itself, these laws work alongside FCRA requirements and must be considered as part of a comprehensive compliance program.

Best Practices for FCRA Compliance

1. Use standalone disclosure forms reviewed by legal counsel
2. Work with a reputable background screening provider that understands FCRA requirements
3. Train HR staff on proper adverse action procedures
4. Document your process and maintain records of disclosures, authorizations, and adverse action notices
5. Stay current on federal and state law changes
6. Conduct regular compliance audits of your background screening program

How Clear Facts Solutions Helps

At Clear Facts Solutions, FCRA compliance is built into every step of our background screening process. We provide:

• Compliant disclosure and authorization forms
• Automated pre-adverse and adverse action letter generation
• Guidance on state-specific requirements
• Ongoing compliance support and training

Our goal is to make background screening as simple as possible while ensuring you remain fully compliant with all applicable laws.