Quick Answer
The Fair Credit Reporting Act (FCRA) is a federal law enacted in 1970 that regulates how consumer information — including background check data — is collected, shared, and used. For employers, the FCRA establishes strict rules around obtaining consent, ensuring accuracy, and following adverse action procedures when background check findings influence hiring decisions.
Enacted
1970 (amended multiple times)
Enforced By
FTC and CFPB
Statutory Damages
$100–$1,000 per violation
Key Requirement
Written consent before screening
Adverse Action Wait
5+ business days (recommended)
Applies To
Any employer using a third-party CRA
The FCRA was designed to promote accuracy, fairness, and privacy in the handling of consumer information by Consumer Reporting Agencies (CRAs). In the employment context, it ensures that job candidates are treated fairly when their background information is used in hiring decisions. The law balances employers' legitimate need for screening information with individuals' rights to privacy and due process.
Employers who use third-party background checks must follow several steps: provide a clear, standalone written disclosure to the candidate that a background check will be conducted; obtain the candidate's written authorization before ordering the report; certify to the CRA that the employer will comply with all FCRA obligations; and follow the adverse action process if the report influences a negative employment decision. These requirements apply whether the employer is hiring, promoting, or reassigning an employee.
When an employer intends to take adverse action (such as not hiring a candidate) based on background check results, the FCRA mandates a specific three-step process. First, the employer must send a pre-adverse action notice along with a copy of the report and a summary of the candidate's FCRA rights. Second, the employer must wait a reasonable period — typically five business days — to allow the candidate to review the report and dispute any inaccuracies. Third, if the employer proceeds with the adverse decision, a final adverse action notice must be sent explaining the decision and the candidate's right to dispute.
Non-compliance with the FCRA carries significant consequences. Statutory damages range from $100 to $1,000 per violation for willful non-compliance. Actual damages may be awarded for negligent violations. Punitive damages are available in cases of willful disregard. Class action lawsuits have produced settlements exceeding $10 million. Attorney's fees and litigation costs are also recoverable by the plaintiff, making even small procedural errors expensive.
Many states have enacted their own consumer reporting laws that supplement the FCRA with additional protections. For example, some states limit the lookback period for criminal records to seven years, restrict the use of credit checks in employment, or impose stricter adverse action timelines. Employers must comply with both federal and state requirements, applying whichever standard offers greater protection to the candidate. VerifAI's platform automatically applies jurisdiction-specific rules to keep employers compliant.
As AI-powered screening platforms become more common, the FCRA's principles remain fully applicable. AI systems that generate reports used in employment decisions must meet the same accuracy, dispute resolution, and adverse action standards as traditional methods. VerifAI is designed with FCRA compliance at its core — automated workflows guide employers through every required step, and complete audit trails document compliance for every screening.