Background Checks and Hiring Law: FCRA Rules and Anti-Discrimination Limits

Federal and state law impose layered obligations on employers who use background checks in the hiring process. The Fair Credit Reporting Act (FCRA) governs how consumer reports — including criminal history, credit, and employment verification — are obtained and used, while Title VII of the Civil Rights Act and related statutes restrict how findings may factor into hiring decisions. Violations expose employers to both regulatory penalties and private litigation. This page details the operative rules, procedural requirements, and decision-making limits that structure background screening in U.S. employment.

Definition and scope

A background check, in the employment context, is a formal inquiry into an applicant's history conducted through a consumer reporting agency (CRA) — or, in some cases, directly by the employer. The FCRA (15 U.S.C. § 1681 et seq.) defines a "consumer report" broadly to include criminal records, credit history, driving records, prior employment verification, educational credentials, and professional license checks when assembled by a third-party CRA.

The FCRA's employment provisions apply to any employer — regardless of size — that uses a CRA to obtain reports on applicants or employees. Employers who conduct background checks entirely in-house, without a CRA, are not subject to FCRA procedural requirements but remain subject to anti-discrimination law and applicable state statutes.

Background screening intersects with several domains of federal employment law, including workplace discrimination law, ADA disability rights, and age discrimination rules. Employers in sectors such as healthcare, financial services, and transportation face additional federal screening mandates beyond FCRA, imposed by agencies including the Department of Transportation and the Centers for Medicare & Medicaid Services.

How it works

FCRA-governed background checks follow a mandatory procedural sequence:

1. Disclosure: Before obtaining a consumer report, the employer must provide a clear, standalone written disclosure informing the applicant that a background check will be conducted. This disclosure cannot be buried in an employment application.
2. Authorization: The applicant must provide written authorization before the report is requested.
3. Pre-adverse action notice: If the employer intends to take adverse action (e.g., withdraw an offer) based wholly or partly on report contents, it must provide the applicant with a copy of the report and the FTC's Summary of Your Rights Under the FCRA before finalizing the decision.
4. Waiting period: The applicant must receive a reasonable opportunity — typically interpreted as at least five business days — to dispute inaccurate information.
5. Adverse action notice: If the employer proceeds with denial or withdrawal, a final adverse action notice must be delivered, identifying the CRA and explaining dispute rights.

Penalties for FCRA violations reach $1,000 per violation for negligent noncompliance and up to $1,000 per willful violation under 15 U.S.C. § 1681n, with punitive damages and attorney's fees available for willful violations. Class actions under FCRA have resulted in settlements exceeding $10 million against large employers who systematically omitted required disclosures.

The Equal Employment Opportunity Commission (EEOC) separately governs how criminal history findings are used. Under the EEOC's 2012 Enforcement Guidance on the Consideration of Arrest and Conviction Records, blanket exclusion policies for applicants with criminal records can constitute disparate impact discrimination under Title VII if they disproportionately screen out protected racial or ethnic groups without business justification. The guidance directs employers to conduct individualized assessments weighing the nature of the offense, time elapsed, and job relevance.

Common scenarios

Criminal record exclusions: An employer categorically rejecting all applicants with felony convictions may face Title VII liability if that policy produces statistically disparate exclusion rates along racial lines. The EEOC's individualized assessment framework requires employers to evaluate offense type, recency, and nexus to the position rather than apply automatic disqualification.

Credit history screening: Using credit reports in hiring decisions triggers both FCRA procedural requirements and, in states including California, Colorado, and Hawaii, statutory restrictions that limit credit checks to positions with financial responsibilities or access to sensitive assets (California Labor Code § 1024.5).

"Ban the Box" laws: Over 35 states and 150 municipalities have enacted laws restricting when employers may inquire about criminal history (National Employment Law Project). Most prohibit criminal history questions on initial applications, deferring inquiry to later stages. Some jurisdictions — including New York City under the Fair Chance Act — require a conditional offer before any background check is initiated.

Arrest records: Under EEOC guidance, arrest records alone (without conviction) generally cannot serve as a basis for exclusion, as arrests do not establish that prohibited conduct occurred.

Decision boundaries

Background check findings do not automatically authorize adverse employment action. The decision boundary framework involves two distinct legal filters:

• FCRA compliance filter: Was the procedural sequence (disclosure, authorization, pre-adverse action, waiting period, adverse action) followed precisely?
• Anti-discrimination filter: Does the exclusion produce disparate impact, or does it target a characteristic protected under Title VII, the ADA, or age discrimination statutes?

Under the ADA, employers cannot inquire about or use medical history or disability-related information surfaced in a background report unless a conditional offer has already been extended — a rule that intersects directly with workplace privacy rights doctrine.

Employers that receive findings related to past workers' compensation claims must handle that information with particular caution; using such history as a basis for adverse action may constitute retaliation under state workers' compensation statutes (see workers' compensation law).

State law can impose stricter requirements than federal FCRA minimums. Employers operating across multiple jurisdictions must map their screening policies against the most restrictive applicable state standard rather than defaulting to federal floors. The National Employment Law Authority index provides a cross-reference framework for navigating these overlapping obligations.

References

• Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681 et seq. — Federal Trade Commission
• EEOC Enforcement Guidance on Consideration of Arrest and Conviction Records (2012)
• California Labor Code § 1024.5 — Credit Check Restrictions
• National Employment Law Project — Ban the Box: Fair Chance Hiring State and Local Guide
• U.S. Equal Employment Opportunity Commission — Background Checks: What Employers Need to Know
• Consumer Financial Protection Bureau — Fair Credit Reporting Act Resources