If your company hires regularly, FCRA compliance is not optional. The Fair Credit Reporting Act governs every step of the background check process, from the moment you ask an applicant for permission to screen them, to what happens if the results affect your hiring decision. Violations can cost thousands of dollars per incident. This checklist gives high-turnover employers a clear, actionable framework to stay compliant in 2026.
What Is the FCRA and Who Does It Apply To?
The Fair Credit Reporting Act is a federal law enforced by the Federal Trade Commission (FTC) and the Consumer Financial Protection Bureau (CFPB). It applies to any employer that uses a third-party background screening company, also called a Consumer Reporting Agency (CRA), to obtain information about job applicants or employees.
If you use a service like SaffHire to run criminal background checks, employment verification, drug screening, or motor vehicle records, the FCRA applies to you. There is no minimum company size or employee count that exempts you from compliance.
The FCRA Compliance Checklist for Employers
Use this checklist before, during, and after every background check you order. Each step is required by federal law.
- Provide a clear, standalone disclosure that you will obtain a background check
- Obtain written authorization from the candidate before ordering the check
- If criminal history will be considered, provide additional FCRA-specific disclosures
- Order the background check through a third-party Consumer Reporting Agency (CRA)
- Wait for the report to arrive before making any hiring decision
- Keep all disclosures and authorizations for at least 3 years
The Most Common FCRA Violations
Most FCRA violations fall into one of five categories. If you can avoid these, you are already ahead of 80% of employers.
No Standalone Disclosure
The disclosure that you will obtain a background check must be in a separate document. Burying it in an employment application or employee handbook is not sufficient. The FTC considers this a violation.
No Written Authorization
You must obtain written authorization from the candidate before ordering the check. Verbal permission or a checkbox on an application is not enough. The authorization must be clear and affirmative.
No Documentation
The FTC assumes that if you cannot produce documentation, the violation occurred. Keep all disclosures, authorizations and reports for at least 3 years.
Recommended Process Flow
Here is the exact sequence of steps that will keep you compliant:
| Step | Action | Timing |
|---|---|---|
| 1 | Provide standalone disclosure | During initial application |
| 2 | Obtain written authorization | Before ordering background check |
| 3 | Order background check | After authorization received |
| 4 | Receive background report | Typically 3-5 business days |
| 5 | Review findings | Upon receipt |
| 6 | Make final decision | Under your written policy |
| 7 | Document and file | Maintain for 3+ years |
Red Flags: When You Need Legal Review
If any of the following apply to your hiring process, consult with employment counsel before proceeding:
- You use credit checks for non-financial roles
- You have a policy of rejecting all candidates with any criminal history
- You ask about criminal history on your initial application
- You do not maintain records of disclosures and authorizations
- You operate in California, New York, Illinois, or Colorado without state-specific compliance measures
FCRA Compliance Is a Hiring Advantage
Employers who treat FCRA compliance as a core part of their hiring process hire faster and face fewer legal challenges. Candidates appreciate transparency. Hiring teams appreciate clear processes. And your legal team appreciates the documentation. FCRA compliance is not a burden. It is a competitive advantage.
Use this checklist for every hire. Print it, laminate it, and keep it next to your hiring process documentation. Every background check should follow this sequence. No exceptions.
Disclaimer: This article is provided for informational purposes only and does not constitute legal advice. Employers should consult qualified employment counsel before making hiring decisions based on background check results.