HomeResourcesWhat Is FCRA Compliance?

What Is FCRA Compliance?

Quick Answer

FCRA compliance refers to following the requirements of the Fair Credit Reporting Act — the federal law that governs how background checks are conducted, reported, and used in employment decisions. Employers must obtain written consent, use accurate information, follow adverse action procedures, and work with compliant Consumer Reporting Agencies.

Law

Fair Credit Reporting Act (15 U.S.C. § 1681)

Enforced By

FTC and CFPB

Penalties

$100-$1,000+ per violation

Key Requirement

Written consent before screening

Adverse Action Wait

5+ business days (recommended)

Avg. Class Action Settlement

$2M+ (2025)

Key FCRA Requirements for Employers

The FCRA imposes several requirements on employers who use background checks: (1) Provide clear disclosure that a background check will be conducted, (2) Obtain written authorization from the candidate on a standalone document, (3) Certify to the CRA that you will comply with FCRA requirements, (4) Follow the adverse action process if you decide not to hire based on results, (5) Provide the candidate with a copy of the report and their rights, (6) Allow reasonable time for the candidate to dispute inaccuracies.

The Adverse Action Process

If you decide not to hire someone based on background check results, you must follow a three-step process: First, send a pre-adverse action notice with a copy of the report and a summary of FCRA rights. Second, wait a reasonable period (typically 5 business days) for the candidate to review and dispute the findings. Third, if you proceed with the decision, send a final adverse action notice explaining the decision and the candidate's rights.

FCRA Penalties for Non-Compliance

FCRA violations can result in significant penalties. Statutory damages range from $100 to $1,000 per violation for willful non-compliance. Actual damages can be much higher. Punitive damages are available for willful violations. Attorney's fees and court costs are recoverable. Class action lawsuits have resulted in multi-million dollar settlements. In 2025, the average FCRA class action settlement exceeded $2 million.

Common FCRA Violations

The most common FCRA violations include: failing to provide standalone disclosure (burying it in the job application), not obtaining proper authorization, failing to follow the adverse action process, using outdated or inaccurate information, not providing candidates with copies of their reports, and applying blanket policies that automatically disqualify candidates with criminal records without individualized assessment.

How VerifAI Ensures FCRA Compliance

VerifAI's platform is designed with FCRA compliance built in. Our system automatically generates compliant disclosure and authorization forms, guides employers through the adverse action process with automated timelines and letter generation, ensures report accuracy through AI-powered verification, maintains complete audit trails for every screening, and provides real-time compliance alerts when state-specific requirements apply.

Frequently Asked Questions

Does FCRA apply to all employers?
The FCRA applies to any employer that uses a third-party Consumer Reporting Agency to conduct background checks. If you conduct background checks entirely in-house without using a CRA, the FCRA's employer provisions don't apply — but state laws still may.
What is a standalone disclosure?
A standalone disclosure is a document that informs the candidate a background check will be conducted. Under the FCRA, this disclosure must be on its own page — not buried within the job application or combined with other documents. It can include the authorization on the same page.
How long do I need to keep background check records?
The FCRA doesn't specify a retention period, but the EEOC recommends keeping employment records for at least one year. Many attorneys recommend keeping background check records for 5-7 years to protect against potential lawsuits.
Can I use a background check for current employees?
Yes, but you must obtain new authorization if the original authorization didn't cover ongoing checks. Many employers include language in their initial authorization that covers periodic re-screening during employment.

Experience AI-Powered Background Screening

See how VerifAI transforms background screening with AI analysis, faster results, and smarter recommendations.