Overview
Class action suits under the Fair Credit Reporting Act (FCRA) commonly involve employer use of consumer reports for hiring, promotion, or retention decisions. These claims often arise from procedural missteps—such as missing disclosures, absent written permission, improper certification to a consumer reporting agency (CRA), or incomplete adverse action notices—rather than disputes about the underlying facts in a report.
This guide explains the basic obligations employers and other users of consumer reports should follow and suggests practical next steps for minimizing risk in hiring and employment-screening practices.
Key takeaways
- FCRA compliance focuses on procedure: written disclosure, written authorization, and correct adverse-action notices.
- Small technical errors can lead to costly class claims, so consistent, documented processes matter.
- Communicating clearly with applicants about their rights reduces disputes and provides an opportunity to resolve inaccuracies.
How it works
Before obtaining a consumer report, the employer must provide a clear, standalone written disclosure that a report may be used for employment purposes and must obtain the applicant's written authorization. The employer must also certify to the CRA that it has a permissible purpose for the report and that it will comply with applicable laws.
If an employer views information in a report and intends to take adverse action—such as denying employment or rescinding an offer—it must give the applicant a pre-adverse action notice that includes a copy of the report and a copy of the applicant’s rights under the FCRA. After taking the adverse action, the employer must provide a final adverse action notice with specific elements including CRA contact information and a statement about the applicant’s rights to obtain and dispute the report.
What it may cover (and what it may not)
Consumer reports used for employment can include credit reports, background checks, criminal records, and other public-record or investigative reports obtained from a CRA. The FCRA’s procedural requirements apply to these reports when used to make employment decisions.
The FCRA does not guarantee the accuracy of third-party data; it provides a framework for notice, disclosure, and dispute resolution. Substantive claims about the correctness of information are handled through the CRA dispute process, but employers should allow time for disputes to be raised and resolved before finalizing adverse actions.
Common mistakes to avoid
Common compliance errors include bundling the disclosure with other application materials (rather than presenting it separately), failing to obtain explicit written permission, using reports without certifying permissible purpose to the CRA, and skipping or miswording pre-adverse and adverse action notices.
Another frequent problem is inconsistent recordkeeping: not saving signed authorizations, copies of notices, or the exact report provided to an applicant. Consistent templates and a tracked workflow reduce exposure to class claims.
Questions to ask an agent
When reviewing risk-management options, ask about policies that align with your hiring practices and recordkeeping requirements, and whether coverage considerations differ for staffing arrangements such as PEO/Employee Leasing/Temp Employment Insurance.
Also ask whether your existing policies address investigation-related liabilities or gaps that could arise from background-check procedures, and whether specialized coverages—such as pollution or premises-related policies—affect overall risk management, for example in situations involving property hazards like Lead Paint Contamination Insurance concerns when relevant to facilities where applicants work.
Next steps
Start by auditing your screening process: confirm you use a standalone disclosure, collect written authorizations, and maintain templates for pre-adverse and adverse action notices. Train hiring managers on the timeline for disputing reports and for giving applicants a chance to respond.
If you want assistance implementing compliant procedures or evaluating insurance gaps, review your options and consider a meeting to discuss specific exposures—ask your agent to help create a compliant hiring workflow or to recommend policy adjustments by choosing to talk to an agent.
Frequently Asked Questions
What triggers the FCRA’s notice and consent requirements for employers?
The requirements apply when an employer obtains a consumer report from a consumer reporting agency for employment purposes; this includes hiring, promotion, reassignment, or retention decisions.
Does an employer always need a signed written authorization?
Yes. Employers must obtain a clear, written authorization from the applicant before requesting a consumer report for employment purposes.
What must a pre-adverse action notice include?
It should include a copy of the consumer report used, a copy of the statutory summary of rights, and a statement giving the applicant a chance to review and dispute the report before action is taken.
How long should an employer keep records of disclosures and authorizations?
Keep signed disclosures, authorizations, and copies of reports and notices for a reasonable period consistent with record-retention policies and potential claim timelines; consult your compliance advisor for specific retention schedules.