PSBI

Blog · Compliance

The FCRA Compliance Guide for Employers

The Fair Credit Reporting Act governs how employers request and use background checks. Most compliance trouble comes not from bad intent but from small process gaps. This guide walks the steps in order, from disclosure to adverse action.

Informational, not legal advice. Consult counsel for your specific situation.

FCRA flowEmployer steps
Applicant · ScreeningCompliant sequence
Step by step
①
DisclosureClear + standalone
Required
②
AuthorizationWritten consent
Required
③
Permissible purposeEmployment
Required
④
Adverse actionPre + final notice
If needed
PBSA Accredited
Independently accredited screeningPBSA-accredited · FCRA-compliant
BBB Accredited Business, A+ RatingBBB Accredited · A+ Rating
1,000+Organizations served
Amber MangerinoReid TholKathy MontesReal people, real support

Start here

What the FCRA requires, in plain terms.

When you use a third party to run a background check for employment, that report is a consumer report and you're subject to the FCRA. In practice this means four things: you must clearly disclose that you'll obtain a report, get the candidate's written authorization, have a permissible purpose, and follow a specific two-step process if you decide not to hire based on what the report shows. State and local laws often add requirements on top. Getting the federal core right is the foundation everything else builds on.

The most common mistake. Bundling extra language, a liability waiver, or state notices into the disclosure. The FCRA disclosure must stand alone, in a document that consists solely of the disclosure. Extra content is the single biggest source of class-action exposure.

The steps

The FCRA sequence, in order.

Follow these steps every time, and build them into your workflow so they can't be skipped.

①

Provide a standalone disclosure

Before you obtain a report, give the candidate a clear, conspicuous disclosure in a document that contains only the disclosure. No waivers, no extra notices.

②

Get written authorization

Obtain the candidate's written permission to procure the report. This can appear with the disclosure but must be affirmatively agreed to.

③

Certify permissible purpose

You certify to the screening company that you have a permissible purpose (employment), that you disclosed and got consent, and that you'll comply with adverse-action rules.

④

Send a pre-adverse notice

If the report may lead you to not hire, first send a pre-adverse notice with a copy of the report and the Summary of Rights.

⑤

Wait a reasonable period

Give the candidate time (commonly around five business days) to review and dispute the report before you decide.

⑥

Send the final adverse-action notice

If you proceed, send a final notice with the screening company's contact info and a statement of the candidate's dispute rights.

Beyond the federal core

Where state and local law adds more.

The FCRA is the floor, not the ceiling. Common overlays to check for every jurisdiction you hire in.

▣

Ban-the-box timing

Many states and cities restrict when you can ask about or consider criminal history in the hiring process.

▦

Reporting limits

Some states limit how far back non-conviction or certain records can be reported, and clean-slate laws seal eligible records automatically.

◆

Individualized assessment

EEOC guidance favors weighing the nature of the offense, time passed, and job relevance rather than blanket exclusions.

◈

State-specific notices

Certain states require their own disclosures or summaries. Keep these separate from the federal standalone disclosure.

Checklist

Your FCRA compliance checklist.

Get started

Want a second set of eyes on your process?

Our compliance team helps employers build FCRA-compliant screening that's also fast and candidate-friendly. Reach a real person who does this every day.

★★★★★PBSA-accreditedFCRA-compliant30+ years in business