FCRA Compliance
Everything You Need To Know
Are you using our background checks for employment purposes?
If so, then you are legally required to follow the requirements of the Fair Credit Reporting Act (FCRA). This federal law protects the privacy and rights of the subjects of consumer reports. Background checks used for employment purposes qualify as consumer reportsunder the law. As such, they are subject to the FCRA. The FCRA applies to employers and consumer reporting agencies, or CRAs. FCRA compliance is critical for businesses.
Note that “employment purposes” include more than just part-time or full-time employees. The FCRA also applies when selecting contractors, temporary workers, volunteers, and others. Whenever you use a background check to vet someone for these positions, the FCRA applies. Read on for a guide to the major FCRA requirements you must know and follow.
The Fair Credit Reporting Act, or FCRA, became law in 1971. The goal: ensure that consumer reporting agencies acted with greater fairness. The FCRA aimed to create greater impartiality and respect for the consumer’s right to privacy. The FCRA protects the subject of a check by limiting what a CRA can report.
Despite its name, the law goes beyond credit reports. Today, the law replies to any kind of consumer report that includes the following:
Information about someone’s character
Someone’s reputation
Mode of living
Criminal records, and so on.
The FCRA applies whenever this information determines credit, insurance, or job eligibility. Background check agencies fall under the law because they provide reports for employment purposes.
Within FCRA regulations, there are several rules about what agencies can report. For instance, bankruptcy cases can be no older than ten years. Other adverse information, such as civil judgments, can last seven years. The only exceptions are criminal conviction records. Unless expunged, criminal convictions can appear on a background check report indefinitely. No medical information should appear on consumer reports unless the report is for insurance.
The FCRA also requires employers to disclose when they plan to use consumer reports. Businesses must always get an individual’s consent to such a check. In this way, the FCRA protects consumers before, during, and after screening.
Let’s look more closely at those stages.
You should understand the relationship of the FCRA to background check processes. Because this law governs so much of the hiring process, you can’t afford to overlook it. The Consumer Financial Protection Bureau has many helpful tools in this area. Before conducting a background check, you should read the CFPB’s “Notice to Users of Consumer Reports.” This document helps support FCRA-compliant background check procedures. Here’s what else you should know.
The first steps of the FCRA background screening process are straightforward. Both the employer and job applicants have some steps to take.
First, as the employer, you must give the applicant a disclosure form. The informs the applicant that you will check their record for employment purposes. This disclosure must be separate from any other documents. For instance, you cannot bundle the disclosure with your employment application. Likewise, you can’t hide it alongside a release of liability. The courts are clear on this subject. The disclosure must be truly “standalone.”
Second, the applicant must sign an electronic or written authorization form. This authorizes the employer to run a background check. Similar to the disclosure form, the consent form should be distinct from other application documents.
The FCRA permits the combination of the disclosure form and the authorization form. You can choose to present them separately if desired. If you do decide to combine the two documents, you cannot add any more information. The combined form should only contain the disclosure and authorization.
One test for whether the form is FCRA compliant is to check whether each sentence can begin with either “We hereby disclose to you that ...” or “You hereby authorize us to ...”. If not, you may have too much extra information. This might threaten its FCRA compliance. Always consult with legal counsel to prepare forms that align with the letter of the law.
These disclosure and consent forms serve to make a background check FCRA-compliant. These forms also give the background screening company permission to perform the check. They may also serve as verification to former employers or schools that they may share background information.
To better understand why FCRA compliance matters, read this article about enforcement actions in 2023. The Federal Trade Commission found two California companies violated the law. The FTC uncovered “willful” violations of the FCRA and fined the businesses millions of dollars. As we can see, noncompliance can prove costly.
These rules don’t just apply to criminal history checks. In any situation where backgroundchecks.com obtains information based on an interview, you must provide additional disclosures. For example, what you must disclose to conduct reference or employment checks.
You must inform the subject that you’re obtaining a consumer report about them. This report may contain information about their character, personal characteristics, or mode of living.
You must inform the subject that they have a right to request a description of the nature and scope of the investigation. If the subject requests that description, you must provide it within five days.
If a background check returns no red flags, the employer may choose to move forward with hiring the subject of that report. In these situations, the employer has no more remaining obligations under the FCRA.
However, what if the employer rescinds a job offer or disqualifies a candidate? If they base the decision on background check findings, additional FCRA requirements apply. In the parlance of the FCRA, this decision is “adverse action.” Employers considering adverse action based on a background check face more FCRA obligations. You must complete these obligations before dismissing an applicant.
The FCRA requires you to send the candidate a “pre-adverse-action notice” before you finalize your decision. The pre-adverse action notice must include a copy of the background report you used. It must also have the Consumer Financial Protection Bureau’s summary of rights.
You must send this pre-adverse notice a “reasonable time” before making the final decision. The FTC states that five business days is a reasonable time to give notice by mail. If that time elapses without a response, you may proceed with the adverse decision.
If the subject disputes the background report, you must halt the hiring process. Under the FCRA, you cannot take final adverse action until after the background check company resolves the dispute.
If the subject does not respond, you can officially take action and move forward with the hiring process. Similarly, a dispute may be resolved in your favor. The background check company may rule that the information in the report is accurate. If so, you can formally take the candidate out of employment consideration.
When you take action based on a background check, some other steps are necessary to comply. These steps include the following:
Notify the subject of the decision.
Provide the background check company’s business name, address, and contact info.
Notify the subject that the background check company did not make the decision.
Notify the subject that they can request another free copy of their background report. They must request the report from the background check provider within the next 62 days.
Notify the subject that they can dispute any inaccurate or incomplete information in the report. To do so, they must contact the background screening agency.
Many states also have extra requirements concerning using a background check company’s services. States such as California require additional notices and steps. Always review the law in your local area before using background checks.
backgroundchecks.com provides forms online and assists you with compliance
At backgroundchecks.com, our customers can access a dedicated compliance area in our web-based order system. The following FCRA compliance support is available through that system:
Sample pre-adverse action notices
Sample adverse action notices
An overview of the Driver’s Privacy Protection Act of 1994, which impacts the use of motor vehicle reports in consumer investigation.
backgroundchecks.com can help with electronic pre-adverse and adverse action services
If you want us to handle this process, you will only have to provide the applicant’s email address during the order process. The video will give you a quick overview of the process.
FCRA compliance refers to steps businesses take to use consumer reports legally. Employers must follow the Fair Credit Reporting Act (FCRA) to the letter. This law includes specific requirements regarding how employers use background checks. Specific sections of the FCRA cover nuanced guidelines for background check disclosure and authorization. This includes what employers must do if they wish to disqualify someone based on their record. Employers should establish written background screening policies that incorporate FCRA requirements.
FCRA stands for “Fair Credit Reporting Act.” Background check rules and credit reporting rules come from this law. It is a federal statute enacted in 1971 that regulates the consumer reporting agency industry and protects consumer privacy. All credit reporting bureaus are subject to the FCRA, including all background check companies.
All employers that wish to use background checks should review the FCRA in detail. Seek guidance on FCRA compliance from an attorney familiar with employment law.
FCRA violations occur when an employer fails to meet the requirements of the law. Most often, this relates to proper disclosure or consent. Ordering a background check without consent would be a violation. Deciding without using the adverse action process is a violation, too.
The FCRA regulates reporting agencies so that they conduct their business in fair, impartial, and respectful ways. The goal is to protect consumer privacy. As a job seeker, the FCRA protects you throughout the background check process. No employer can launch an investigation of your background without first disclosing their intention to do so. They must also obtain your express written consent. Employers in FCRA compliance cannot disqualify you from job consideration without first notifying you and giving you a chance to dispute your background check.
Criminal History Providers in Indiana
The Indiana legislature recently passed House Bill 1392 which amended laws about criminal history providers and criminal law and procedure. The background to this bill is that a much more restrictive bill passed at the end of the 2012 legislative session, but had a delayed effective date of July 1, 2013. In the meantime, the legislature appointed a study committee to review the bill and it recommended amendments. This compliance update examines the law after all of the changes.
Indiana Code Section 24-4-18 was created and deals with criminal history providers. It defines a “criminal history provider” as a person or an organization that compiles a criminal history report and either uses the report or provides the report to a person or an organization other than a criminal justice agency, a law enforcement agency, or another criminal history provider.” The term does not include the following:
A criminal justice agency;
A law enforcement agency;
Any person connected with or employed by a media outlet including newspapers or other periodical issued at regular intervals and having a general circulation, or a recognized press association or wire service, and radio or television stations as an owner, official, editorial or reportorial employee who receives income from legitimate gathering, writing, editing, broadcasting and interpretation of news.
Any person who gathers, records, compiles or disseminates criminal history information or criminal history reports solely for journalistic, academic, governmental, or legal research purposes.
The clerk of a circuit, superior, city, or town court.
The new statute defines “criminal history report” as “criminal history information that has been compiled primarily for the purposes of evaluating a particular person’s eligibility for (1) employment in Indiana; (2) housing in Indiana; (3) a license, permit, or occupational certification issued under state law; or (4) insurance, credit, or another financial service, if the insurance, credit, or financial service is to be provided to a person residing in Indiana.” It does not include information compiled primarily for the purpose of journalistic, academic, governmental, or legal research.
Criminal history information is information concerning a criminal conviction in Indiana and available in records kept by a clerk of a circuit, superior, city, or town court with jurisdiction in Indiana. It includes identifiable descriptions and notations of arrests, indictments, information, or other formal criminal charges. It also includes dispositions of cases, fingerprint information, and photographs of sex or violent offenders.
Section 24-4-18-6 outlines restrictions placed on criminal history providers. According to this section, a provider may not knowingly provide a criminal history report containing a record that:
Has been expunged by marking the record ‘expunged’ or by removing it from public access;
Is restricted by a court or court rules, and is marked restricted from public disclosure;
Is reported as a Class D felony if it was entered as or converted to a Class A ; or
The criminal history provider knows is inaccurate. However, a criminal history provider may provide such information if the person requesting the report is required by state or federal law to obtain it or it will be used solely in connection with the issuance of a public bond.
Section 24-4-18-7 deals with criminal history information updates. Under this section, a provider may not knowingly include criminal history information in a report does not reflect material changes occurring sixty days or more before the report is delivered. There is no violation of the Act if the material criminal history information is not contained in the official record at least sixty days before the report is delivered.
Section 24-4-18-8 stipulates that a violation of sections 24-4-18-6 or 7 is a deceptive act that is actionable under the State’s Deception Consumer Sales statutes. An individual may seek remedy by bringing an action on its own behalf under the Federal Fair Credit Reporting Act.
House Enrolled Act No. 1392 is available here: http://www.in.gov/legislative/bills/2013/PDF/HE/HE1392.1.pdf
Missouri Modifies the Employment Disqualification List for Home Care Employees
Missouri Senate Bill 127 was recently signed by the Governor. The legislation amends several sections of the existing law that pertain to public medical assistance, the state’s HealthNet eligibility, and other public health services. This update looks at the amendments affecting home health agencies as defined in Missouri Revised Statutes 197-400. The definition includes public agencies and private organizations.
An employer may deny or terminate employment because of information obtained through the state-mandated background screening and employment eligibility determination process if the employee:
Has been found guilty, pled guilty, or pled nolo contendere in Missouri or been found guilty of a crime in any state which if committed in Missouri would be a class A or B felony violation of certain specified crimes such as offenses against the persons, sexual offenses, and robbery or burglary offenses;
Was placed on the employee disqualification list maintained by the Department of Health and Senior Services, after the date of hire;
Was placed on the employee disqualification list maintained by the Department of Mental Health, after the date of hire;
Is listed on any of the background check lists in the Family Care Safety Registry; or
Has a disqualifying finding or was denied a good cause waiver under the employee disqualification list maintained by the Department of Health and Senior Services. The bill also stipulates that an employer will not be charged with unemployment insurance benefits if it terminates employment for the stated reasons.
A copy of the new law is available here: http://legiscan.com/MO/text/SB127/id/850673/Missouri-2013-SB127-Enrolled.pdf
Resources
Background Checks