Before any employer can run a background check on a job applicant or current employee using a third-party Consumer Reporting Agency (CRA), federal law requires a specific, documented process of disclosure and written authorization. This process is not a formality. It is a legal prerequisite, and failure to follow it correctly is one of the most common and costly sources of employment litigation in the United States.
Over 8,000 lawsuits are filed annually under the Fair Credit Reporting Act (FCRA), many of which are class actions arising from nothing more than a technically deficient disclosure form. Settlements in these cases routinely reach into the millions of dollars. At the same time, a growing number of states have layered their own consent and disclosure requirements on top of the federal baseline, creating a complex patchwork that employers operating in multiple states must navigate carefully.
This guide explains every step of the consent and authorization process, covers many individual state laws that impose their own rules, and provides sample disclosure and authorization documents that employers can adapt with the assistance of legal counsel.
The Federal Framework: The Fair Credit Reporting Act (FCRA)
What Is the FCRA?
The Fair Credit Reporting Act (15 U.S.C. § 1681 et seq.) was enacted by Congress in 1970 and has been amended multiple times since. It is enforced jointly by the Federal Trade Commission (FTC) and the Consumer Financial Protection Bureau (CFPB). The FCRA governs how Consumer Reporting Agencies collect, maintain, and distribute consumer information, and how employers, as users of that information, must treat applicants and employees throughout the process.
The FCRA applies to any employer that obtains a consumer report (background check) through a third-party CRA. It does not apply to employers who conduct background checks entirely in-house without using a third party. The scope of “consumer report” under the FCRA is broad and includes criminal records, credit history, driving records, employment verifications, education verifications, reference checks, and drug test results when obtained through a CRA.
The FCRA’s employment provisions apply not just to traditional full-time or part-time employees, but also to independent contractors, temporary workers, volunteers, and others when a background check is used to inform a decision about their engagement.
The Disclosure Requirement
Before a background check is ordered, the employer must provide the applicant or employee with a clear and conspicuous written disclosure informing them that a consumer report may be obtained for employment purposes. The FCRA imposes several strict requirements on the form of this disclosure:
- Standalone document: The disclosure must consist solely of the disclosure. It cannot be embedded in a job application, employment agreement, onboarding packet, or any other document. This is one of the most frequently litigated requirements. Many employers have faced class-action suits simply because their disclosure appeared as part of their standard application form.
- Clear and conspicuous: The language must be straightforward and easy for an ordinary person to understand. Legalese or overly technical language undermines clarity.
- Written form: The disclosure must be in writing, though electronic disclosures are permissible provided they comply with the Electronic Signatures in Global and National Commerce Act (E-SIGN Act).
- No extraneous information: The disclosure form cannot include liability waivers, employment contract terms, job requirements, or any other content beyond the disclosure itself. Even a small amount of additional language can render the form non-compliant. Courts have found violations where forms included a simple sentence about the employer’s right to make employment decisions.
- CRA identification: If the employer has identified the specific CRA that will conduct the check, best practice is to include the CRA’s name and contact information, though the FCRA does not strictly require this in the initial disclosure.
Note: The Supreme Court has held in TransUnion LLC v. Ramirez (2021) that plaintiffs must show a concrete injury to bring FCRA claims in federal court. However, this has not eliminated FCRA litigation — state courts remain a venue, and many states have their own consumer protection statutes that may be enforced more broadly.
The Authorization Requirement
Separately from the disclosure, the employer must obtain the applicant’s or employee’s written authorization before procuring the consumer report. The FCRA permits the disclosure and authorization to be combined in a single document, provided the document contains only those elements. Many compliance experts recommend keeping them as separate documents to minimize the risk that additional content in the authorization contaminates the standalone disclosure.
The authorization form should:
- Clearly state that the individual is authorizing the employer to obtain a consumer report for employment purposes
- Identify the types of information that may be gathered (criminal records, employment history, education, credit, driving, etc.)
- Be signed and dated by the individual before the report is ordered
- Not include any waiver of the individual’s rights under the FCRA or applicable state law. Such waivers are unenforceable and render the form non-compliant
Electronic signatures are permissible and widely used, provided they comply with E-SIGN requirements including the consumer’s affirmative consent to electronic delivery.
Summary of Rights
In addition to the disclosure and authorization, the employer must provide the applicant with a copy of the CFPB’s “A Summary of Your Rights Under the Fair Credit Reporting Act” at the time the disclosure is provided. This document is maintained and periodically updated by the CFPB and is available at consumerfinance.gov. Employers must always use the current version of this summary.
Investigative Consumer Reports: Additional Requirements
If the employer is seeking an investigative consumer report, which includes information about the individual’s character, general reputation, personal characteristics, or mode of living obtained through personal interviews, additional FCRA obligations apply:
- A separate, specific disclosure must be made to the applicant informing them that an investigative consumer report may be obtained
- This disclosure must be made within three days of the request
- The disclosure must explain the nature and scope of the investigation
- The applicant must be informed of their right to request a complete and accurate disclosure of the nature and scope of the investigation
- If the applicant requests such disclosure, it must be provided within five days
Note: Investigative consumer reports are less common in standard pre-employment screening but are used for executive background checks and certain security-sensitive roles.
Timing: When Disclosure and Authorization Must Occur
The FCRA requires that disclosure and authorization occur before the background check is ordered. There is no grace period. In practice, this means these documents must be presented to and executed by the applicant at or before the point in the hiring process when the employer intends to initiate the check. Many employers provide the disclosure and authorization form at the time of application or interview, or immediately upon extending a conditional offer of employment.
A number of state laws further regulate the timing of background checks relative to the hiring process through ban-the-box and fair chance laws, which are covered in Section 4 below.
Record keeping
Employers should retain all disclosure and authorization forms for a minimum of five years, or longer if required by applicable state law. These records are essential evidence in the event of an FCRA challenge and should be stored in a secure, organized manner separate from the personnel file to protect applicant privacy.
Penalties for Non-Compliance
The consequences of FCRA violations can be severe:
- Negligent violations: Actual damages plus attorneys’ fees and costs
- Willful violations: Statutory damages of $100 to $1,000 per violation, or actual damages (whichever is greater), plus punitive damages and attorneys’ fees
- Class action exposure: Because disclosure forms are typically sent to every applicant, a single non-compliant form can result in a class action lawsuit with potentially thousands of statutory violations, creating exposure in the millions of dollars
- FTC/CFPB enforcement actions: Regulatory fines and mandatory corrective action programs
The Step-by-Step Employer Compliance Process
The following steps represent the complete federal compliance workflow for pre-employment background checks. State-specific additional steps are covered in Section 4.
1. Determine permissible purpose
Confirm that the background check is being obtained for a legitimate employment purpose: hiring, promotion, reassignment, or retention. Document this determination.
2. Prepare a standalone written disclosure
Draft or review your disclosure document to ensure it contains only the disclosure, no extraneous information, waivers, or application content. Have it reviewed by legal counsel.
3. Include all required state-specific notices
If the applicant resides or will work in a state with additional disclosure requirements (see Section 4), attach or incorporate those state-specific notices as required by that state’s law.
4. Attach the CFPB Summary of Rights
Always attach the current version of the CFPB’s “A Summary of Your Rights Under the Fair Credit Reporting Act.”
5. Present documents and obtain signed authorization
Deliver the disclosure, state notices, Summary of Rights, and authorization form to the applicant. Obtain their wet or electronic signature before ordering the report.
6. Certify compliance to the CRA
Before the CRA can run the report, the employer must certify to the CRA that it has complied with all FCRA disclosure and authorization requirements, has a permissible purpose for the report, and will not use the information in a discriminatory manner or for any purpose not permitted by the FCRA.
7. Receive and review the report in compliance with applicable law
Review the report through the lens of applicable federal (EEOC guidance), state, and local laws governing the use of criminal records, credit history, and other information.
8. Follow the adverse action process if taking a negative employment action
If the report will factor into a negative hiring decision, the employer must: (a) send a pre-adverse action notice with a copy of the report and the Summary of Rights; (b) provide a reasonable waiting period (typically five business days, longer in some states); and (c) issue a final adverse action notice if the decision stands.
State-by-State Consent & Disclosure Requirements
The following table summarizes many of the key additional consent, disclosure, and authorization requirements imposed by individual states beyond the federal FCRA baseline. States not listed below generally follow federal FCRA requirements without additional specific consent or disclosure obligations, though all employers should verify current law and consult legal counsel. This section does not cover ban-the-box timing rules comprehensively, only consent and disclosure-specific provisions. This should not be considered legal advice.
| State | Key Consent / Disclosure Requirements |
| California | Requires separate disclosure under the Investigative Consumer Reporting Agencies Act (ICRAA) in addition to the FCRA disclosure. Under the California Information Privacy Act (CIPA), employers must: (1) provide a clear written notice before any background check; (2) provide a checkbox allowing applicants to opt in to receive a copy of the report; and (3) obtain written consent. The Consumer Credit Reporting Agencies Act (CCRAA) imposes additional requirements for credit checks. Employers may not charge applicants for reports. Notice must be job-specific. Credit history checks are restricted except for certain positions (supervisory, access to financial accounts, peace officers). California has a look-back period of 7 years for convictions. Arrest records that did not lead to conviction, sealed records, expunged records, and diversion program records may not be inquired about. Cal. Labor Code § 1024.5; ICRAA; CCRAA; CIPA. |
| Colorado | Employers may not inquire about or consider arrest records that did not result in a conviction. Credit checks are restricted to positions where credit history is directly related to job duties (C.R.S. § 8-2-126). Clean slate law provides for automatic sealing of civil infractions after 4 years, misdemeanors after 7 years, and eligible felonies after 10 years, sealed records may not be used in employment decisions. Employers must comply with Colorado Privacy Act requirements for handling applicant data. |
| Connecticut | Credit history checks are prohibited except for positions with unsupervised access to cash or financial accounts or where required by law (Conn. Gen. Stat. § 31-51tt). Employers may not inquire about erased criminal records. Ban-the-box applies to state employers. |
| Hawaii | Credit history checks are prohibited for most employment purposes (Haw. Rev. Stat. § 378-2.5). Employers may not inquire about arrests that did not result in a conviction. Expunged records may not be inquired about or used. Hawaii has a look-back period of 7 years for convictions. Employers must conduct an individualized assessment before using criminal history. |
| Idaho | Under Idaho Code § 67-3008, employers must obtain applicants’ signed consent before requesting criminal records from government agencies — this is a state-specific consent requirement beyond the FCRA. Employers must consider the nature and severity of the offense, time elapsed, and relationship to job duties before using criminal history. |
| Illinois | The Illinois Human Rights Act (775 ILCS 5/2-103.1) requires that conviction records substantially relate to the job before they can be used. The Employee Background Fairness Act further restricts use of convictions. Employers with 15+ employees must comply with the Job Opportunities for Qualified Applicants Act (ban-the-box). Credit checks are prohibited for most positions under 820 ILCS 70 (Illinois Employee Credit Privacy Act). Social media passwords cannot be requested (2013 HB 3782). Employers cannot charge applicants for background checks (820 ILCS 175/30). Expunged, sealed, erased, or pardoned records cannot be considered. Pre-adverse action: employer must provide notice identifying disqualifying convictions and give 5 business days to respond; final adverse action notice must include disqualifying convictions and right to appeal. |
| Maryland | Credit history checks are restricted; employers may only use credit information for specific positions where it is substantially job-related or required by law (Md. Code Ann., Lab. & Empl. § 3-711). Maryland has a look-back period of 7 years for convictions. Employers may not inquire about expunged records. |
| Massachusetts | Massachusetts has its own consumer reporting statute (M.G.L. ch. 93, § 52 et seq.) that imposes additional requirements on CRAs and employers. Employers must provide a Massachusetts-specific disclosure to applicants. The state limits look-back periods: misdemeanor convictions more than 3-5 years old are generally not reportable depending on the sentence; convictions generally have a 7-year look-back (exceptions for high-salary positions). Employers are prohibited from asking about sealed or expunged records. First-offense misdemeanor convictions for certain crimes cannot be considered. Employers must conduct an individualized assessment before using criminal history to deny employment. Credit checks are restricted to specific positions under M.G.L. ch. 149, § 19B. Waiting period before adverse action is 10 business days. |
| Michigan | Criminal records background checks require the applicant’s signed consent to access birth dates on criminal court records for identity matching (Michigan Supreme Court rule). Arrest records that did not result in a conviction generally may not be used. |
| Minnesota | Minnesota Statutes Chapter 13C requires specific written disclosure and authorization before obtaining a consumer report. Employers must inform applicants of their right to request a copy of the report within 24 hours of the employer receiving it. The state has a ban-the-box law (Minn. Stat. § 364.021) requiring criminal history inquiries to be delayed until the applicant is selected for an interview or receives a conditional offer. Credit checks are restricted for most employment positions. Minneapolis has additional Fair Chance Ordinance requirements (effective August 1, 2025) requiring individualized assessment. Sealed and expunged records (clean slate law, effective January 1, 2025) may not be used. |
| Nevada | Credit checks are prohibited except for specific exempt positions (Nev. Rev. Stat. § 613.570). Use of sex offender registry information for employment is restricted. Restrictions on marijuana-related past convictions in background checks. |
| New Hampshire | 7-year look-back restriction on criminal records (with some exceptions based on salary). Employers must generally limit consideration to convictions relevant to job duties. |
| New Jersey | The Opportunity to Compete Act (N.J.S.A. 34:6B-14 et seq.) bans criminal history questions on initial applications for employers with 15+ employees. Specific disclosure is required at the time of a conditional offer. Credit history checks are prohibited for most positions under the New Jersey Opportunity to Compete Act and the New Jersey Law Against Discrimination. Additional state-specific disclosure language required. Employers must provide applicants with a copy of the New Jersey-specific summary of rights. |
| New Mexico | Employers must provide state-specific disclosure language in addition to the FCRA disclosure. Ban-the-box applies to public employers. 7-year look-back period on criminal records (with some salary exceptions). Arrest records not resulting in a conviction may not be used. Employers may not inquire about expunged records. |
| New York | New York Correction Law Article 23-A requires employers to conduct an individualized assessment before denying employment based on criminal history, considering: (1) the nature of the crime; (2) time elapsed; (3) age at time of offense; (4) seriousness of the job; (5) information produced by the individual. The New York Clean Slate Act (effective November 16, 2024) automatically seals misdemeanors after 3 years and eligible felonies after 8 years, sealed records cannot appear in employment background checks. Employers with 4+ employees must provide specific written reasons if declining to hire based on criminal history under Article 23-A. Additional state-specific disclosure language required. Philadelphia, New York City, and other localities have additional requirements. 7-year look-back (with some exceptions). Credit checks restricted for most employment under N.Y. Lab. Law § 201-d. |
| North Dakota | Background check reports must be provided to the subject upon request within 5 days of the employer receiving them (N.D. Cent. Code § 12-60-16.6). State-specific notice required. |
| Oklahoma | Oklahoma’s Clean Slate Law (enacted 2022, implementation began 2025) provides for automatic expungement of eligible non-conviction records, misdemeanors, and reclassified felonies. Expunged records may not appear in background checks or be used in employment decisions. State-specific disclosure notice required. |
| Oregon | Credit history checks are restricted; employers may only use credit reports for positions directly related to the credit information or required by law (Or. Rev. Stat. § 659A.320). Ban-the-box applies to all Oregon employers with 6+ employees. Expunged records may not be used. Portland has additional fair chance hiring requirements. |
| Pennsylvania | Pennsylvania’s Clean Slate Law (effective 2019, expanding 2026) automatically seals certain nonviolent misdemeanor and summary convictions. Sealed records may not be used in employment decisions. Philadelphia’s Fair Criminal Records Screening Standards Ordinance (effective January 6, 2026) restricts review of misdemeanors older than 4 years and requires a 10-business-day waiting period after pre-adverse action notice. |
| Texas | Texas enacted its first statewide ban-the-box law (House Bill 2466) effective September 1, 2025, applicable to employers with 15+ employees, criminal history inquiries must be delayed until after the applicant is deemed otherwise qualified and offered an interview or conditional offer. 7-year look-back applies to certain criminal records (with salary exceptions). State-specific disclosure notice required. |
| Vermont | Credit history checks are prohibited except for specific positions (Vt. Stat. Ann. tit. 21, § 495g). Ban-the-box applies to all employers — criminal history cannot be inquired about until after a conditional offer. Expunged records may not be used. |
| Virginia | Virginia’s Clean Slate Law (enacted 2021, effective July 1, 2026) provides for automatic sealing of certain misdemeanors after 7 years and eligible felonies after 10 years. Sealed records may not appear in background checks or be used in employment decisions. Employers should work with their CRA to ensure sealed records are excluded from reports as implementation takes effect. |
| Washington State | Washington’s Fair Chance Act (amended April 10, 2025, effective July 1, 2026) imposes significant fair chance hiring requirements. Employers must delay criminal history inquiry until after initial qualification determination. If a disqualifying criminal record is found, employers must conduct an individualized assessment of the relationship between the conviction and job duties. Washington State has a look-back period of 7 years for convictions. Specific written notice is required if an adverse employment action is being considered based on criminal history. Penalties substantially increased: $1,500 for first violation, $3,000 for second, $15,000 for each subsequent violation. Seattle has additional requirements. State-specific disclosure notice required. |
| Washington, D.C. | The Fair Criminal Record Screening Act and the Second Chance Amendment Act apply. D.C. began automatically expunging marijuana possession and other decriminalized offenses in January 2026. Employers with 11+ employees cannot inquire about criminal history until after a conditional offer of employment. Credit checks are restricted. Employers must conduct an individualized assessment and provide a written adverse action explanation. |
| Wisconsin | Under Section 111.335 of the Wisconsin Employment Peace Act, employers may not deny employment based solely on a conviction unless it substantially relates to the specific job or poses a safety danger. Arrest records not resulting in a conviction may not be used. Employers must consider rehabilitation evidence. |
Note: This table reflects laws as of April 2026. Background check and fair chance laws change frequently. Employers should monitor updates from their CRA, legal counsel, and relevant state agencies. Several states not listed above have local ordinances (cities and counties) that impose additional requirements.
State Restrictions on Credit History Checks
In addition to criminal record provisions, a significant number of states restrict or prohibit employers from using applicants’ credit histories in employment decisions. The following states limit credit checks for most employment purposes: California, Colorado, Connecticut, Hawaii, Illinois, Maryland, Massachusetts, Nevada, New Jersey, New York, Oregon, Vermont, and Washington State.
Where credit checks are permitted, they are generally limited to positions where credit history is substantially related to the job duties, such as positions with access to financial accounts, executive roles with fiduciary responsibilities, or positions specifically required by law to be subject to credit checks. Employers considering using credit history should carefully review the specific exemptions in each applicable state and document the job-relatedness of the credit check.
Ban-the-Box and Fair Chance Laws: Impact on Consent Timing
As of 2026, more than 37 states, Washington D.C., and over 150 cities and counties have enacted some form of ban-the-box or fair chance hiring policy. These laws directly affect when in the hiring process an employer may request consent to conduct a background check, because they delay when criminal history inquiries may be made.
The general principle is that an employer may not inquire about, obtain, or consider an applicant’s criminal history until a specific point in the hiring process. Common timing requirements include:
- After the applicant has been selected for an interview (Minnesota, many cities)
- After a conditional offer of employment has been extended (New Jersey, Vermont, Hawaii, D.C., Washington State, effective July 2026, Texas, effective September 2025)
- After the initial qualification has been established (California for public employers and many regulated private employers)
In practical terms, this means the disclosure and authorization forms, while required before ordering the check, must be presented at the appropriate stage in the hiring process, not necessarily at the initial application stage. Employers must design their hiring workflows to collect consent at the right moment for each jurisdiction in which they operate.
Sample Forms
The following sample forms are provided for illustrative and educational purposes only. They represent a starting point and must be reviewed and customized by qualified legal counsel before use. They do not constitute legal advice and may not reflect all requirements applicable to your specific jurisdiction, industry, or position type.
| SAMPLE A: Disclosure Regarding Background Investigation |
| DISCLOSURE REGARDING BACKGROUND INVESTIGATION[COMPANY NAME] (“Company”) intends to obtain consumer reports and/or investigative consumer reports (“background reports”) about you in connection with your application for employment, and, if you are hired, in connection with your continued employment. Background reports may be obtained at any time during the hiring process or during your employment to the extent permitted by law.
Background reports may include information about your character, general reputation, personal characteristics, and mode of living, as well as information from public records. Such information may include, but is not limited to:
These reports will be prepared by: [CRA NAME] [CRA ADDRESS] [CRA PHONE / WEBSITE] You have the right to request disclosure of the nature and scope of any investigative consumer report and to request a complete and accurate copy of such report from the consumer reporting agency free of charge. ___________________________________________________________ Applicant Acknowledgment: I acknowledge receipt of this Disclosure Regarding Background Investigation and the attached Summary of Your Rights Under the Fair Credit Reporting Act. Applicant Full Name (Print): Signature: Date: |
| SAMPLE B: State-Specific Disclosure Addendum (Multi-State) |
| STATE-SPECIFIC BACKGROUND CHECK DISCLOSURE ADDENDUM
This Addendum supplements the federal disclosure. Please review the section(s) applicable to your state of residence or the state in which you will be employed. CALIFORNIA APPLICANTS: Under the California Investigative Consumer Reporting Agencies Act (ICRAA) and California Information Privacy Act (CIPA), you have the right to know the name, address, and telephone number of the investigative consumer reporting agency conducting the investigation. You may inspect the files of the agency upon identification of yourself. You may submit a written request within a reasonable time for a copy of any report. You may request that the agency correct any inaccurate information. CHECK THE BOX BELOW if you wish to receive a copy of any consumer report that is prepared about you: [ ] YES, I request a copy of any consumer report prepared about me. MINNESOTA APPLICANTS: Under Minnesota law, upon request, you are entitled to receive a complete and accurate disclosure of the nature and scope of the background investigation and to receive a copy of the consumer report. You may request a copy of the report within 24 hours of the Company receiving it by contacting [HR CONTACT NAME / EMAIL]. NEW YORK APPLICANTS: Upon request, you are entitled to know whether a consumer report was requested, and if so, the name and address of the consumer reporting agency that furnished it. You have the right to inspect and receive a copy of any consumer report by contacting [HR CONTACT NAME / EMAIL]. Article 23-A of the New York Correction Law restricts the use of criminal conviction records in employment decisions. If employment is denied in whole or in part because of a conviction record, you will be provided the reasons in writing. MASSACHUSETTS APPLICANTS: You will receive a copy of any consumer report if adverse action is taken based on it. You have the right to dispute the accuracy of any information in the report. Under Massachusetts General Laws Chapter 93, Sections 52-68, you are entitled to free copies of your consumer report and have the right to dispute inaccurate information. WASHINGTON STATE APPLICANTS: Under Washington’s Fair Chance Act, you will be notified in writing if a criminal background check result may be used to make an adverse hiring decision. You will be provided an opportunity to present information and documentation regarding the accuracy of the record and evidence of rehabilitation before a final determination is made. NEW JERSEY APPLICANTS: Under the New Jersey Opportunity to Compete Act, criminal history has not been inquired about prior to this conditional offer stage. You are entitled to request a copy of any consumer report. [Add additional state sections as required for your applicant population] |
| SAMPLE C: Authorization to Obtain Consumer Report |
| AUTHORIZATION TO OBTAIN CONSUMER REPORT
(Employment Purposes) I, the undersigned, authorize [COMPANY NAME] (“Company”) and its designated Consumer Reporting Agency (CRA) to obtain consumer reports and investigative consumer reports about me for employment purposes, including for evaluation of my application for employment and, if hired, during the course of my employment to the extent permitted by applicable law. I understand that these reports may contain information obtained from public record sources and other references, and may include criminal history, employment history, education history, professional licenses, motor vehicle records, credit history (where permitted by law and related to the position), sex offender registry information, and reference check information. I understand that:
Applicant Signature: Date:__________________ |
| SAMPLE D: Employer Certification to CRA |
| EMPLOYER CERTIFICATION TO CONSUMER REPORTING AGENCY
By ordering a consumer report, [COMPANY NAME] (“Employer”) hereby certifies and represents to [CRA NAME] that: 1. The Employer has a permissible purpose under the Fair Credit Reporting Act (15 U.S.C. § 1681b) to obtain a consumer report about the subject, specifically for employment purposes, including evaluating the subject’s application for employment or continued employment. 2. The Employer has provided the subject with a clear and conspicuous written disclosure, in a document consisting solely of the disclosure, stating that a consumer report may be obtained for employment purposes. 3. The Employer has obtained the subject’s written authorization to obtain a consumer report. 4. The Employer has provided the subject with a copy of the CFPB’s “A Summary of Your Rights Under the Fair Credit Reporting Act.” 5. All applicable state-specific disclosures and notices required by law have been provided to the subject. 6. The Employer will comply with all requirements of the FCRA and applicable state laws in connection with the consumer report, including the adverse action requirements of 15 U.S.C. § 1681b(b)(3) if the Employer takes an adverse employment action based in whole or in part on the consumer report. 7. The Employer will not use the consumer report in violation of any applicable equal employment opportunity law or regulation. 8. The Employer will not use the consumer report for any purpose not permitted by the FCRA or applicable law. Authorized Company Representative Name: Title: Signature: Company Name: Contact Phone: |
Best Practices for Employers
1. Work With an FCRA-Compliant CRA
Partnering with a reputable, FCRA-compliant Consumer Reporting Agency like iprospectcheck is one of the most important steps an employer can take. A quality CRA will provide up-to-date, jurisdiction-specific disclosure forms, ensure reports only include reportable information, maintain accuracy through primary source verification, and alert you to emerging compliance changes.
2. Annual Compliance Review
Background check laws change constantly. New clean slate laws, ban-the-box expansions, credit check restrictions, and state-specific consent requirements emerge every year. Conduct an annual review of all disclosure, authorization, and adverse action forms with qualified legal counsel. Subscribe to updates from your CRA and relevant legal resources.
3. Train HR and Hiring Managers
Every person involved in hiring decisions must understand the FCRA requirements and applicable state laws. Training should cover when and how to present disclosure and authorization forms, how to handle refusals to sign, how to recognize sealed and expunged records, and how to conduct individualized assessments where required.
4. Maintain Separate Records
Store signed disclosure and authorization forms in a secure location separate from personnel files. Retain records for a minimum of five years. Maintain an audit trail of when documents were presented and signed, particularly for electronic consent systems.
5. Never Combine Disclosures With Other Documents
No matter how tempting it is to include the disclosure in your application or offer letter for efficiency, do not do it. The FCRA’s standalone document requirement is absolute, and violations, even technical ones, are regularly litigated.
6. Use Consistent Processes
Apply background check requirements consistently across all similarly situated applicants for the same position. Inconsistent application of screening requirements can give rise to discrimination claims under Title VII and applicable state civil rights laws.
7. Watch for Specific Industry Requirements
Certain industries, including healthcare, financial services, transportation, education, and childcare, face additional federal and state requirements beyond the FCRA. These may include fingerprint-based FBI checks, state licensing board requirements, or mandatory exclusion checks (such as the OIG exclusion database for healthcare employers).
Let Us Help You Stay Compliant
The consent and authorization process for employment background checks is one of the most consequential compliance obligations in human resources. A technically deficient disclosure form, even one that otherwise accomplishes the goal of informing the applicant, can expose an employer to millions of dollars in class-action liability. The proliferation of state-specific consent, disclosure, and fair chance laws has made this landscape significantly more complex in recent years, with new laws taking effect in 2025 and 2026 in Texas, Washington State, Philadelphia, Virginia, and Washington D.C., among others.
The path to compliance is straightforward in principle: use standalone, clear disclosure documents; obtain written authorization before ordering any report; provide required state addenda; give applicants the Summary of Rights; retain records; and follow the adverse action process precisely. In practice, the complexity of multi-state operations requires ongoing attention, expert CRA partners, and regular legal review.
iprospectcheck is committed to helping employers navigate this landscape with accurate, compliant, and timely background checks. Our dedicated service team, FCRA-compliant processes, and jurisdiction-specific form support help employers focus on finding great people while we handle the compliance complexity.
DISCLAIMER: This guide is for informational purposes only and does not constitute legal advice. Employers should consult qualified legal counsel to ensure their specific disclosure and authorization documents comply with all applicable federal, state, and local laws.
