If your company hires regularly, FCRA compliance is not optional. The Fair Credit Reporting Act governs every step of the background check process, from the moment you ask an applicant for permission to screen them, to what happens if the results affect your hiring decision. Violations can cost thousands of dollars per incident. This checklist gives high-turnover employers a clear, actionable framework to stay compliant in 2026.
What Is the FCRA and Who Does It Apply To?
The Fair Credit Reporting Act is a federal law enforced by the Federal Trade Commission (FTC) and the Consumer Financial Protection Bureau (CFPB). It applies to any employer that uses a third-party background screening company, also called a Consumer Reporting Agency (CRA), to obtain information about job applicants or employees.
If you use a service like SaffHire to run criminal background checks, employment verification, drug screening, or motor vehicle records, the FCRA applies to you. There is no minimum company size or employee count that exempts you from compliance.
The FCRA Compliance Checklist for Employers
Use this checklist before, during, and after every background check you order. Each step is required by federal law.
Provide a Standalone Disclosure
Before ordering a background check, give the applicant a written disclosure that a background check will be conducted. This document must stand alone. It cannot be buried in an employment application or combined with other forms. It must clearly state that a consumer report may be obtained for employment purposes.
Obtain Written Authorization
Get the applicant's written consent before ordering the report. This can be on the same document as the disclosure or a separate form. Electronic signatures are acceptable. Without this authorization, ordering the report is a violation.
Certify Permissible Purpose to the CRA
When you order a background check from SaffHire or any CRA, you must certify that you have a permissible purpose under the FCRA (employment is one), that you have obtained the applicant's authorization, and that you will comply with the adverse action requirements if the report affects your decision.
Review the Report Fairly
When you receive the report, review it in the context of the specific job. The EEOC requires employers to conduct an individualized assessment when criminal history is involved. Consider the nature of the offense, how long ago it occurred, and whether it is directly relevant to the position.
Send a Pre-Adverse Action Notice
If you are considering not hiring someone based on the report, you must first send a Pre-Adverse Action Notice. This notice must include a copy of the background report and a copy of the FCRA Summary of Rights. Give the applicant a reasonable time (typically five business days) to review the report and dispute any errors before you make a final decision.
Wait Before Taking Final Action
Do not make your final hiring decision immediately after sending the Pre-Adverse Action Notice. The applicant has the right to dispute the report. If they do, you must pause the process and allow the CRA to investigate. Courts have found that even a few days is not sufficient waiting time in some cases.
Send the Final Adverse Action Notice
If you proceed with the decision to not hire, you must send a Final Adverse Action Notice. This must include the CRA's name, address, and phone number; a statement that the CRA did not make the decision; and information about the applicant's right to obtain a free copy of the report within 60 days and to dispute its accuracy.
Retain Records
Keep all background check authorizations, disclosures, reports, and adverse action notices. The FCRA does not specify a retention period, but employment law generally recommends keeping hiring records for at least three years. Some states require longer retention periods.
High-Turnover Employers: Volume Does Not Reduce Risk
If you are hiring 50 or 100 people per month, the risk of an FCRA violation multiplies with every hire. A single missed disclosure or skipped adverse action notice can result in a class action lawsuit. Automating the compliance workflow with a platform like SaffHire eliminates the risk of human error at scale.
2026 Updates to Watch
The FCRA landscape continues to evolve. In 2026, employers should be aware of several developments that may affect their screening programs.
- Proposed CFPB rulemaking on medical debt reporting may affect what CRAs can include in consumer reports.
- Several states have introduced or expanded pay transparency and fair chance hiring laws that interact with background check timing.
- The FTC continues to bring enforcement actions against employers and CRAs for standalone disclosure violations.
- Ban-the-Box laws now cover more than 150 jurisdictions, restricting when criminal history questions may be asked.
- State-level data privacy laws in California, Colorado, and Virginia impose additional obligations on how background data is collected and used.
Common FCRA Mistakes High-Turnover Employers Make
The most common FCRA violations are procedural, not intentional. They happen when compliance steps are skipped under the pressure of high-volume hiring.
- Embedding the disclosure in the employment application instead of using a standalone form.
- Ordering the background check before receiving written authorization.
- Skipping the Pre-Adverse Action Notice when a candidate is simply not selected.
- Not providing a copy of the background report with the Pre-Adverse Action Notice.
- Making the final hiring decision the same day as the Pre-Adverse Action Notice.
- Failing to update adverse action templates when state laws change.
Bottom Line
FCRA compliance is not complicated, but it requires consistency. For high-turnover employers, the only reliable way to stay compliant at scale is to automate the process. SaffHire handles every required step so you can focus on hiring the right people, not managing paperwork. If you have questions about your current screening process or want to see how SaffHire can close your compliance gaps, contact our team for a free consultation.
Disclaimer: This article is provided for informational purposes only and does not constitute legal advice. Employers should consult qualified employment counsel for guidance specific to their circumstances, industry, and jurisdiction.