FCRA compliance for employers
FCRA compliance for employers: US federal rules as of 30 Oct 2026. Not legal advice; state and city rules may add requirements.
The Fair Credit Reporting Act (FCRA) applies when an employer uses a background report from a consumer reporting agency. You must give a standalone disclosure, get written authorisation, certify to the agency, and send pre-adverse and final adverse action notices if the report may cost someone a job. The FTC and CFPB enforce it; people can also sue.
At a glance
| Duty | When | Source |
|---|---|---|
| Standalone disclosure | Before the report is obtained | 15 U.S.C. 1681b(b)(2) |
| Written authorisation | Before the report is obtained | 1681b(b)(2) |
| Certification to the agency | When ordering | 1681b(b)(1) |
| Pre-adverse notice + report + Summary of Rights | Before the decision | 1681b(b)(3) |
| Final adverse notice | After the decision | 1681m(a) |
| Secure disposal | When no longer needed | FTC Disposal Rule, 16 CFR 682.3 |
Does the FCRA apply to me?
Yes if you use a third party (a "consumer reporting agency") to prepare reports used for employment decisions, including hiring, retention, promotion or reassignment. Employers of any size are covered.
What must the disclosure look like?
A document that contains only the disclosure that a report may be obtained for employment purposes, clear and conspicuous, separate from the application. Do not add release-of-liability language; courts have found that violates the standalone requirement (for example Syed v. M-I, LLC, 9th Cir. 2017; check the reporter citation before quoting, as secondary sources list both 846 F.3d 1034 and 853 F.3d 492).
What about the seven-year rule?
The FCRA limits reporting of most adverse items other than convictions to seven years, with an exception for jobs with an annual salary of $75,000 or more, or reasonably expected to reach it (15 U.S.C. 1681c(a), (b)(3); checked 2026-10-30). State laws may also limit conviction look-back.
What is the individual review step?
The EEOC (Title VII) expects you to look at the offence, time passed and job relevance rather than reject everyone with a record. Cite: EEOC Enforcement Guidance No. 915.002.
What do fair-chance (ban-the-box) laws add?
They restrict when you may ask about or check criminal history and require a process before rejecting. They vary: some states (for example California) and cities (for example New York City) require a written assessment and notice; the federal Fair Chance to Compete for Jobs Act covers federal agencies and contractors. Check where the worker will be based.
Compliance checklist
- [ ] Written policy of which checks per role
- [ ] Standalone disclosure form, nothing extra
- [ ] Written authorisation signed before ordering
- [ ] Certification given to the provider
- [ ] Conditional offer before criminal history check where law requires
- [ ] Individual review, documented
- [ ] Pre-adverse notice with report and Summary of Rights
- [ ] Waiting period observed
- [ ] Final adverse notice with required contents
- [ ] State and local add-ons checked
- [ ] Reports stored securely and disposed of properly
Templates: conditional offer, adverse action notices.
FAQ
What are the penalties? Actual or statutory damages and attorneys' fees in private suits, and federal agency enforcement; for a willful violation the statute allows actual damages or $100 to $1,000 per consumer, plus punitive damages and attorneys' fees (15 U.S.C. 1681n, checked 2026-10-30); negligent violations allow actual damages and fees (1681o).
Does a provider like Checkr handle compliance for me? It supplies forms and certifies its own duties. The employer's duties (disclosure use, adverse action, individual review) stay with you.
Are social-media or credit checks covered? If a third party prepares them for employment decisions, yes.
Does it apply to volunteers or contractors? Possibly; seek advice.
Next step: order a check in LiveRec with Checkr's consent flow, and keep your notice letters ready.
Sources
- FTC: https://www.ftc.gov/business-guidance/resources/using-consumer-reports-what-employers-need-know (accessed 30 Oct 2026)
- 15 U.S.C. 1681b, 1681c, 1681m, 1681n: https://www.law.cornell.edu/uscode/text/15/1681b
- FTC Disposal Rule, 16 CFR 682.3: https://www.law.cornell.edu/cfr/text/16/682.3
- CFPB: https://www.consumerfinance.gov/
- EEOC: https://www.eeoc.gov/laws/guidance/enforcement-guidance-consideration-arrest-and-conviction-records-employment-decisions
This is general information, not legal, tax or immigration advice. Rules change and your situation may differ. Consult a licensed attorney or qualified adviser.