Regulatory anchor · Verified 17 June 2026

FCRA Compliance for Background Checks: The Federal Baseline Every US Buyer Inherits

The federal Fair Credit Reporting Act applies to every employment background check and tenant screening report obtained from a consumer reporting agency. Disclosure must be standalone, authorisation must be written, and the adverse-action workflow has a hard pre-action waiting period. State law adds more obligations on top.

Direct answer

What does FCRA require for a background check?

Standalone written disclosure that a consumer report will be obtained, written authorisation from the candidate, and a two-step adverse-action workflow if the report leads to a hiring or rental decline (pre-adverse notice with a copy of the report and a waiting period, then a final adverse-action notice). State and city law adds more on top.

The five required steps

1. Standalone written disclosure. The disclosure must be a separate document, not buried in an employment application. It must clearly state that a consumer report will be obtained for employment purposes.
2. Written authorisation from the candidate. Electronic signature counts. The candidate's permission must be on file before the report is ordered.
3. Certification to the vendor. The employer or landlord certifies to the screening vendor that the disclosure and authorisation steps have been completed.
4. Pre-adverse-action notice. If the report would lead to a decline, the employer must send the candidate a pre-adverse-action notice with a copy of the report and a copy of the FTC Summary of Your Rights. The standard waiting period is 5 business days (longer in some states) so the candidate can dispute inaccurate information.
5. Final adverse-action notice. If the decline stands after the waiting period, send a final notice identifying the consumer reporting agency, the candidate's right to dispute, and the right to a free copy of the report.

The standalone-disclosure trap

The single most common FCRA mistake is folding the disclosure into the employment application or rental application. The federal courts have consistently held that the disclosure must be a standalone document; embedding it in another document with extraneous content violates the statute. Both Checkr and GoodHire provide compliant templates and ship the disclosure as a separate page in the candidate workflow.

State law adds obligations

Roughly 35 US states and 150 cities have additional background-check restrictions on top of federal FCRA:

Ban-the-box laws. Restrict when criminal history can be inquired about (usually after a conditional offer). Examples: California, New York City, Chicago, Massachusetts.
Salary history bans. Several states prohibit asking about prior salary, which intersects with credit-history considerations.
State-specific disclosure requirements. California, New York, Washington, Minnesota, Oklahoma all add state-specific disclosure language.
Restricted criminal-history use. California limits how arrest records (without conviction) can affect hiring decisions; several states echo this.
Application-fee restrictions for rentals. California, New York, Washington restrict the amount a landlord can charge for application fees and require receipts.

The screening vendors are not your compliance officer; they provide tooling and templates but the employer or landlord remains responsible for state-specific compliance. Consider a state-specific legal review for any multi-state hiring program.

EEOC consideration of arrest and conviction records

Federal EEOC guidance limits how arrest and conviction records can be used in employment decisions. Key principles:

An arrest without conviction generally cannot be used as a hire/no-hire reason on its own.
A conviction must be weighed against the nature of the offence, the time elapsed, and the nature of the job (the "Green factors").
Blanket exclusions of all candidates with any criminal record are likely to constitute disparate-impact discrimination.
Individualised assessment is the EEOC's recommended approach: case-by-case evaluation rather than blanket policy.

See EEOC guidance on consideration of arrest and conviction records for the full text.

Source documents

Adverse-action workflow tooling

Both Checkr and GoodHire ship FCRA-compliant adverse-action workflow tooling: pre-adverse notice template, waiting-period timer, dispute capture, final-action notice template. The enterprise vendors (Sterling, HireRight, Accurate, First Advantage) ship the same tooling at deeper compliance specificity for federal contractors and regulated industries.

Tooling reduces compliance risk but does not eliminate it. Employers still bear ultimate responsibility for the adverse-action process, including documenting the individualised assessment.

Penalty exposure

FCRA willful non-compliance carries actual damages, statutory damages of $100 to $1,000 per violation, punitive damages, and attorneys' fees. Class-action exposure is real; large-employer FCRA settlements for disclosure-form violations have run into the millions of dollars. Source: FTC enforcement actions and federal class-action settlements (public court records).