The Fair Credit Reporting Act (FCRA) governs how consumer reporting agencies (CRAs) collect, share, and use consumer information, including criminal history data. This article explains when the FCRA applies to criminal background checks, who must comply, and practical steps for employers and users of background checks in the United States. It also covers permissible purposes, adverse action requirements, and key state considerations that influence compliance.
What The FCRA Covers In Background Checks
The FCRA applies when a consumer reporting agency compiles information about an individual for a third party, such as an employer. This includes criminal history data, also known as “public record” or “investigative” information, provided by CRAs. The Act requires a permissible purpose, accuracy standards, and clear disclosures. It does not govern the integrity of the underlying court records themselves, but it governs how those records are obtained, used, and shared by CRAs and users.
Who Must Comply With The FCRA For Criminal Background Checks
Several parties are implicated in FCRA compliance for criminal background checks:
- Consumer Reporting Agencies (CRAs) that compile and furnish background reports, including criminal histories, to employers or other users.
- Users of background reports, typically employers, recruiters, landlords, or lenders, who obtain reports for a permissible purpose.
- Adverse Action Respondents who must follow the adverse action process if they decide not to hire or to terminate based on information in the report.
Individuals have rights under the FCRA, including access to their reports, dispute rights, and notification if information is inaccurate. Not all criminal checks are subject to the FCRA; some exemptions exist for certain government decisions, but most private sector employment checks fall under the FCRA when a CRA is used.
Permissible Purposes For A Criminal Background Check
A CRA background report may be used for criminal history only if there is a permissible purpose. Common permissible purposes include:
- Employment screening for prospective or current employees.
- Tenant screening for rental housing.
- Creditworthiness or risk assessment in certain lending or contractual arrangements.
If a firm uses a background check for purposes outside these categories, it may violate the FCRA. In practice, employers typically obtain written authorization from the applicant or employee and provide a clear disclosure stating that a background check will be conducted.
Adverse Action Process: What Employers Must Do
When a background check reveals information that negatively affects a hiring decision, the FCRA requires a specific process:
- Provide a clear, standalone written notice that a decision was based on information in the report.
- Include the name and contact information of the CRA that supplied the report and a statement that the CRA did not make the decision.
- Offer a copy of the report and a summary of the consumer’s rights under the FCRA, and provide an opportunity to dispute accuracy.
Documentation and timely communication are critical. The adverse action notice must be issued before finalizing a decision to ensure due process and accuracy.
State And Local Laws That Interact With FCRA
Many states regulate criminal background checks beyond FCRA requirements. Some key considerations include:
- <strong Ban-the-Box laws that limit inquiries about criminal history on initial applications.
- <strong Fair Housing and Employment laws that may restrict how criminal history is used in housing or employment decisions.
- State-level consumer reporting laws that impose additional requirements for disclosures, privacy, or dispute handling.
When evaluating employment decisions, businesses should assess both FCRA compliance and applicable state or local restrictions to avoid unlawful discrimination or improper processing.
Best Practices For FCRA-Compliant Criminal Background Checks
To align with FCRA requirements and minimize risk, organizations should adopt:
- <strongClear Authorization: Obtain written consent before ordering a background report and provide a standalone disclosure that a report will be obtained.
- <strongVerify Relevance: Use job-related criteria and document the correlation between findings and the position’s responsibilities.
- <strongRecord-Keeping: Maintain clear records of disclosures, authorizations, and adverse action communications.
- <strongAccuracy Safeguards: Implement procedures to correct errors promptly if a report contains inaccuracies.
- <strongAdverse Action Protocols: Follow the mandated steps precisely, including providing the CRA’s information and an opportunity to dispute.
- <strongPeriodic Review: Audit background screening practices for compliance with evolving laws and industry standards.
Engaging legal counsel or a compliance specialist can help tailor processes to organizational needs and jurisdictional nuances.
Frequently Asked Questions
Does the FCRA apply to all criminal background checks? Not all checks fall under the FCRA. Checks conducted by public bodies for certain purposes or non-CRAs may be exempt. Generally, private sector employment checks using a CRA do fall under the FCRA.
Can a background check reveal sealed or expunged records? The FCRA does not require disclosure of sealed or expunged records, but inaccuracies should be corrected if they appear in a report. State laws may have additional protections.
What about the EEOC guidelines on race or criminal history? Employers should avoid policies that create disparate impact based on criminal history. The FCRA governs report handling, while EEOC guidance addresses discrimination risks in policy design and use of records.
Key Takeaways For Compliance
- The FCRA governs how CRAs obtain and share criminal history information.
- Always secure a permissible purpose and written authorization before ordering a report.
- Follow the adverse action process if the report influences a hiring decision.
- Be aware of state and local laws that add layers of compliance requirements.
- Maintain documentation, accuracy, and avenues for dispute resolution to minimize risk.