Fair Credit Reporting Act: Your Essential Legal Guide

Employment background checks can help employers make informed hiring decisions, but they also carry significant legal responsibilities. The Fair Credit Reporting Act regulates how consumer reports are obtained, reviewed, and used in employment-related decisions.

Failure to follow the Fair Credit Reporting Act may expose employers to litigation, statutory damages, and reputational harm. Clear disclosures, valid authorization, and a compliant adverse action process are essential components of a lawful screening practice.

Why the Fair Credit Reporting Act Matters in Employment Screening

The Fair Credit Reporting Act governs how employers use consumer reports, including many third-party background checks, when making employment decisions. It promotes accuracy, transparency, and fair treatment when reports contain information that may affect an applicant’s job prospects.

Employment screening reports can include criminal history, credit information, employment verification, education records, and other data compiled by a background screening company. Inaccurate, incomplete, or outdated information can improperly influence hiring, promotion, reassignment, or retention decisions.

The law requires employers to follow specific procedures before relying on a consumer report for an adverse employment action. These safeguards give applicants and employees an opportunity to review the report and challenge information they believe is incorrect or incomplete.

Compliance also helps employers reduce legal exposure and protect applicant privacy. A well-managed screening process supports informed hiring decisions while respecting the rights of individuals whose personal information is being evaluated.

When the Fair Credit Reporting Act Applies to Employers

The Fair Credit Reporting Act applies when an employer uses a third-party background screening company to obtain a consumer report for employment purposes. Employment purposes include hiring, promotion, reassignment, retention, or other personnel decisions.

A consumer report may contain information about an applicant’s criminal history, credit history, employment verification, education, driving record, or references. The law can apply even when the report does not involve credit information.

Covered employers include private businesses, nonprofits, and many public-sector employers that obtain reports through an outside provider. Screening companies that regularly assemble or furnish such reports are generally consumer reporting agencies under federal law.

The Fair Credit Reporting Act generally does not govern an employer’s direct review of records it obtains independently, rather than through a consumer reporting agency. State and local laws may still impose separate screening and privacy obligations.

Consumer Reports Used for Hiring Decisions

A consumer report is information prepared by a consumer reporting agency that an employer uses to evaluate a person for hiring, promotion, reassignment, retention, or other employment purposes.

In employment screening, consumer reports may include criminal history, employment verification, education verification, credit information, driving records, or professional license checks. The report may also contain information gathered through personal interviews, known as an investigative consumer report.

The Fair Credit Reporting Act applies when an employer obtains this information from a third-party screening provider, rather than conducting the inquiry entirely in-house. The law regulates both the employer’s use of the report and the screening company’s reporting duties.

Employers Covered by the Law

The Fair Credit Reporting Act applies to employers that obtain consumer reports from third parties for employment purposes. Covered employers include private businesses, nonprofit organizations, government agencies, and staffing firms, regardless of size.

The law applies when an employer uses a consumer report to evaluate an applicant or employee for hiring, promotion, reassignment, retention, or similar employment decisions. A report may include criminal-history, credit, driving-record, or employment-verification information.

An employer remains responsible for compliance even when it delegates screening tasks to a background-check provider or recruiter. The Fair Credit Reporting Act generally does not govern an employer’s review of records it creates or obtains directly without using a consumer reporting agency.

Background Screening Companies as Consumer Reporting Agencies

A background screening company may be a consumer reporting agency under the Fair Credit Reporting Act when it regularly assembles or evaluates consumer information for employment reports and provides those reports to employers for a fee.

These companies commonly compile criminal history, employment and education verification, credit information, driving records, and other public-record data. The report may be a consumer report even when it does not include credit information.

As consumer reporting agencies, screening providers must follow accuracy, privacy, and reporting requirements. They must use reasonable procedures to ensure maximum possible accuracy and provide reports only for permissible purposes, including employment screening with proper authorization.

They also have duties when an applicant disputes information, such as conducting a reasonable reinvestigation of disputed data. Employers cannot transfer their own Fair Credit Reporting Act responsibilities to the screening company simply by using an outside provider.

Employer Disclosure and Authorization Requirements

Before obtaining a consumer report for employment purposes, an employer must provide the applicant or employee with a clear, conspicuous written disclosure. The disclosure must state that a background report may be obtained.

Under the Fair Credit Reporting Act, this disclosure must be in a standalone document. It may not be combined with an employment application, liability waiver, or other extraneous information, except for the authorization itself.

The employer must also obtain the individual’s written authorization before requesting the report from a consumer reporting agency. Electronic authorization may be valid when it complies with applicable federal and state electronic-signature requirements.

Disclosure and authorization obligations generally apply before each report is procured, including reports obtained for promotion, reassignment, or retention decisions. Employers should use carefully reviewed forms because state and local laws may impose separate notice or consent obligations.

Pre-Adverse Action Requirements Under the Fair Credit Reporting Act

Before taking adverse employment action based partly or entirely on a consumer report, an employer must give the applicant or employee a meaningful opportunity to review the information and respond.

The pre-adverse action notice should include:

• A copy of the consumer report relied upon;
• A copy of the Consumer Financial Protection Bureau’s Summary of Your Rights Under the Fair Credit Reporting Act; and
• Notice that the employer may take adverse action based on the report.

The employer must allow a reasonable period for the individual to identify inaccuracies and dispute information with the background screening company. The Fair Credit Reporting Act does not establish a fixed waiting period, so employers should use a process that allows a genuine opportunity for review.

An employer should not issue a final rejection, termination, or other adverse decision until this review period has passed and any relevant dispute has been considered. A rushed or predetermined decision may undermine compliance with the Fair Credit Reporting Act.

Providing a Copy of the Consumer Report

Before taking adverse employment action based wholly or partly on a consumer report, an employer must provide the applicant or employee with a copy of that report. This step is part of the Fair Credit Reporting Act pre-adverse action process.

The report should include the information obtained from the background screening company, such as criminal history, employment verification, education verification, or other screened records. Providing the complete report allows the individual to see the information influencing the proposed decision.

Employers should send the report before making a final decision, not after rejecting an applicant or taking other adverse action. The copy may be delivered electronically when the individual can access and retain it, or through another reliable method.

A report may contain inaccurate, incomplete, or mismatched information. Providing it in advance gives the individual an opportunity to identify errors, explain relevant circumstances, and dispute inaccurate information with the consumer reporting agency.

Issuing the Summary of Rights

Before taking adverse action based in whole or in part on a consumer report, an employer must provide the applicant or employee with the Summary of Your Rights Under the Fair Credit Reporting Act.

This federally prescribed document explains key protections, including the right to know when report information contributed to an adverse decision and the right to dispute inaccurate or incomplete information with the consumer reporting agency.

The summary should be delivered with the pre-adverse action materials, typically alongside:

• A copy of the consumer report relied upon;
• Any other required disclosures applicable to the report; and
• A clear opportunity for the individual to review the information.

Employers should use the current model summary issued by the Consumer Financial Protection Bureau. Providing an outdated, altered, incomplete, or omitted summary may create compliance risk under the Fair Credit Reporting Act.

Allowing Time to Review and Dispute Information

Before taking adverse action, an employer should give the applicant or employee a meaningful opportunity to review the consumer report and challenge inaccurate or incomplete information. This step follows delivery of the pre-adverse action notice, report, and Summary of Rights.

The Fair Credit Reporting Act does not establish a fixed number of days employers must wait. However, the waiting period must be reasonable under the circumstances and allow time for the individual to identify errors, contact the screening company, and begin a dispute.

Employers should avoid treating the pre-adverse action notice as a final decision. A person may dispute records that belong to someone else, contain outdated information, or inaccurately describe a criminal case, employment history, or other reported matter.

If a dispute may affect the hiring decision, the employer should consider the corrected or updated information before issuing a final adverse action notice. Screening providers must generally investigate qualifying disputes and report the results as required by law.

Final Adverse Action Notices for Employment Decisions

After considering any dispute or explanation from the applicant or employee, an employer that decides to take adverse action must provide a final adverse action notice. Adverse action may include denying employment, rescinding an offer, terminating employment, or making another unfavorable decision based partly or wholly on a consumer report.

The notice must identify the consumer reporting agency that supplied the report, including its name, address, and telephone number. It must also state that the agency did not make the employment decision and cannot explain the employer’s reasons for it.

Under the Fair Credit Reporting Act, the final notice must inform the individual of the right to obtain a free copy of the report from the consumer reporting agency within 60 days. It must also explain the right to dispute the accuracy or completeness of information in the report.

Employers should send the final notice only after providing the pre-adverse action materials and allowing a reasonable opportunity for review. Maintaining records of the notices and delivery method can help demonstrate compliance if the decision is later challenged.

Applicant and Employee Rights Under the Fair Credit Reporting Act

Applicants and employees have defined protections when an employer obtains a consumer report, including a criminal background check, credit report, or employment verification report, from a third-party screening company.

They are entitled to receive clear disclosure that a report may be obtained for employment purposes and must provide written authorization before the employer requests it, subject to limited statutory exceptions.

Their rights also include the ability to:

• Receive a copy of the consumer report before adverse action is taken;
• Receive the federal Summary of Rights under the Fair Credit Reporting Act;
• Review the information and dispute incomplete or inaccurate data with the screening company; and
• Obtain notice if the employer makes a final adverse decision based wholly or partly on the report.

When a dispute is submitted, the consumer reporting agency generally must conduct a reasonable reinvestigation. Applicants and employees may also request a copy of their file and identify inaccuracies that could affect hiring, promotion, retention, or other employment decisions.

Common Fair Credit Reporting Act Violations by Employers

Employers often violate the Fair Credit Reporting Act by obtaining a background report without providing a clear, standalone disclosure or obtaining valid written authorization. Disclosure forms that include liability waivers, broad releases, or unrelated information may not satisfy federal requirements.

Another frequent violation occurs when an employer takes adverse action based on a report without first providing the applicant or employee with a copy of the report and the required Summary of Your Rights Under the Fair Credit Reporting Act.

Employers may also act too quickly after sending pre-adverse action materials. Individuals must receive a meaningful opportunity to review the report and dispute inaccurate or incomplete information with the screening company before a final employment decision is made.

Failing to send a final adverse action notice is also common. That notice must identify the consumer reporting agency, explain that it did not make the decision, and inform the individual of rights to dispute information and request a free report.

Employer Compliance Practices for Background Checks

Employers should maintain written background-check policies that identify when reports are obtained, which positions require screening, and how results are evaluated. Disclosure and authorization forms should be reviewed regularly to ensure they remain clear, standalone, and consistent with the Fair Credit Reporting Act.

Human resources personnel and hiring managers should receive training on permissible report use, individualized review procedures, and adverse action requirements. They should understand that inaccurate, outdated, or irrelevant information should not be relied upon without allowing the applicant to respond.

When considering adverse action, employers should document each step, including delivery of the pre-adverse action notice, consumer report, Summary of Rights, and final notice. Records should show that the applicant received a meaningful opportunity to dispute information with the screening company.

Employers should also monitor background screening vendors for compliance and maintain safeguards for sensitive applicant data. Periodic audits can help identify outdated forms, inconsistent practices, or process failures before they create Fair Credit Reporting Act liability.

Reviewing Screening Policies and Forms

Employers should periodically examine their background-check policies to confirm that screening is job-related, consistently applied, and compliant with the Fair Credit Reporting Act. Policies should identify when reports are obtained, who reviews them, and how potentially disqualifying information is evaluated.

Forms used during the screening process should be reviewed for the following requirements:

• A clear, standalone disclosure that a consumer report may be obtained for employment purposes
• Written authorization from the applicant or employee before obtaining the report
• Separate documents for state-specific notices or authorizations when applicable

The disclosure should not contain unnecessary liability waivers, broad releases, or unrelated employment terms. Courts and regulators have scrutinized disclosures that include extraneous information because the Fair Credit Reporting Act requires a clear and conspicuous standalone notice.

Employers should also verify that forms support the required adverse action process, including providing the report and Summary of Rights before a final decision. Using updated vendor forms does not eliminate the employer’s responsibility to ensure its procedures and documents comply with applicable law.

Training Human Resources Personnel

Human resources personnel should receive documented training before handling employment background checks. Training should explain when the Fair Credit Reporting Act applies, which decisions trigger notice requirements, and when legal or compliance staff should be consulted.

Instruction should cover the proper sequence for obtaining and using consumer reports, including:

• Providing a stand-alone disclosure and obtaining written authorization;
• Protecting report confidentiality and limiting access to authorized personnel;
• Avoiding reliance on inaccurate, incomplete, or irrelevant information.

Staff involved in hiring decisions should understand pre-adverse action procedures. They must provide the applicant or employee with the consumer report and the required Summary of Rights before making a final negative employment decision.

Training should also address final adverse action notices, dispute periods, and recordkeeping practices. Consistent instruction helps human resources teams apply screening policies uniformly and reduce Fair Credit Reporting Act compliance errors.

Documenting the Adverse Action Process

Employers should maintain clear, dated records showing how each employment decision involving a consumer report was handled. Documentation helps demonstrate compliance with the Fair Credit Reporting Act and supports consistent treatment of applicants and employees.

Records may include:

• The standalone disclosure and signed authorization;
• The consumer report relied upon;
• The pre-adverse action notice and Summary of Rights;
• The date materials were sent and the delivery method;
• Any dispute, explanation, or corrected report received.

Employers should also record the reasonable period provided for the individual to review the report and respond before a final decision was made. Internal notes should identify the job-related reason for the decision without adding unnecessary personal information.

When adverse action is finalized, retain a copy of the final notice and relevant communications from the consumer reporting agency. Records should be stored securely, with access limited to personnel who need them for employment, compliance, or legal purposes.

Legal Consequences of Fair Credit Reporting Act Noncompliance

Employers that violate the Fair Credit Reporting Act may face civil lawsuits from applicants or employees harmed by improper background-check practices. Liability can arise from defective disclosures, missing authorization, or failing to follow required adverse action procedures.

For negligent noncompliance, a consumer may recover actual damages and reasonable attorney’s fees. Willful violations can result in actual damages or statutory damages generally ranging from $100 to $1,000 per violation, plus punitive damages and attorney’s fees.

Class actions may create substantial exposure when an employer uses noncompliant forms or procedures for many applicants. Courts have addressed claims involving disclosure forms that contain extraneous information or fail to satisfy the law’s standalone disclosure requirement.

The Federal Trade Commission and Consumer Financial Protection Bureau also have enforcement authority in certain circumstances. Employers may face investigations, injunctions, and monetary penalties, particularly where screening practices reflect systemic noncompliance.

Building a Lawful Employment Screening Process Under the Fair Credit Reporting Act

A lawful screening process begins by defining which positions require background checks and limiting reports to information relevant to the job. Employers should apply consistent standards, comply with applicable state and local restrictions, and use reputable consumer reporting agencies.

Before obtaining a consumer report, employers must provide a clear, standalone disclosure and obtain written authorization. The disclosure should not contain unrelated liability waivers or distracting information that could undermine its clarity.

When a report may affect an employment decision, employers should follow the Fair Credit Reporting Act adverse action process. This includes providing the report, the required Summary of Rights, and a meaningful opportunity for the individual to dispute inaccurate or incomplete information.

Human resources staff should maintain written procedures, track notices and response periods, and document decisions. Periodic reviews of forms, vendor practices, and legal requirements help employers identify compliance gaps before they result in disputes or liability.