Background Checks for Employment: Federal Rules

This article is provided for educational and informational purposes only. It does not constitute legal, financial, or tax advice, and no attorney-client relationship is formed by reading it. Laws, regulations, official guidance, and related information vary by jurisdiction, change frequently, and may have changed or become outdated since the publication date. Always verify current information with authoritative sources and consult a qualified professional about your specific circumstances. The author and publisher assume no liability for actions taken based on this information.

Contents

When an employment background check becomes a consumer report
Federal notice and authorization come before the report
A report is not the same as an employment decision
Accuracy disputes go to the reporting company
Criminal records require careful legal distinctions
Federal law limits some older information, but not all of it alike
Anti-discrimination rules apply regardless of the information source
Why state and local law still matters
Sources

Key Facts

Federal level: When an employer buys a background report from a consumer reporting agency, the Fair Credit Reporting Act generally requires a stand-alone written disclosure and written authorization before the report is obtained.
Federal level: Before taking adverse employment action based in whole or in part on that report, the employer generally must provide a copy of the report and the federal summary of rights.
Federal level: Federal anti-discrimination laws apply to the use of background information even when an employer gathers the information without a screening company.
Federal and state: State and local laws may restrict when employers may ask about criminal history or how they may use credit and other background information.

A background check is not one standard government search. In employment, the phrase can describe verification of identity, work or education history, criminal-record research, driving records, or a review of credit-related information. The source of the information matters because federal consumer-reporting rules apply when an employer obtains a report from a company that assembles information about consumers.

When an employment background check becomes a consumer report

The Fair Credit Reporting Act, or FCRA, defines a consumer report broadly enough to cover many third-party employment screening reports. A report can concern creditworthiness, character, general reputation, personal characteristics, or mode of living when it is used or expected to be used for an authorized purpose.

The FCRA treats employment as a permissible purpose for a consumer report, but it attaches conditions to that use. By contrast, an employer’s direct conversation with a former supervisor is not automatically governed by the same third-party-report provisions merely because it is part of a background review.

Readers looking for the larger consumer-reporting framework can also review this explanation of the Fair Credit Reporting Act.

Federal notice and authorization come before the report

For the ordinary employment-screening process, the employer must provide a clear and conspicuous written disclosure that a consumer report may be obtained for employment purposes. The disclosure generally must appear in a document consisting solely of that disclosure, and the individual must authorize the report in writing.

The employer also certifies to the reporting company that it followed the disclosure and authorization rules, will follow the adverse-action rules if they become relevant, and will not use the report in violation of applicable equal-employment law. These obligations concern reports obtained from consumer reporting agencies; they do not turn every informal reference check into an FCRA consumer report.

A report is not the same as an employment decision

A screening company supplies information, but the employer makes the employment decision. If an employer is considering a negative decision based in whole or in part on a consumer report, the FCRA generally requires a pre-adverse-action step: the individual receives a copy of the report and a written summary of FCRA rights before the decision is made.

That advance notice creates an opportunity to identify a mixed file, an outdated disposition, or another possible error. After the employer takes the adverse action, federal law requires a further notice that identifies the reporting company, explains that the company did not make the employment decision, and describes the right to dispute inaccurate or incomplete information and obtain another free report within the statutory period.

Accuracy disputes go to the reporting company

The FCRA provides a process for disputing information in a consumer reporting agency’s file. Once the agency receives a qualifying dispute, it generally must conduct a reasonable reinvestigation, usually within 30 days, and review relevant information supplied by the consumer.

If information is inaccurate, incomplete, or cannot be verified, the agency generally must delete or modify it. This dispute process addresses the contents of the report; it does not make the screening company the decision-maker for the job.

Criminal records require careful legal distinctions

An arrest records an accusation, not a conviction. The EEOC’s federal guidance therefore distinguishes an arrest from proof that the underlying conduct occurred, while recognizing that an employer may evaluate conduct relevant to a particular position when supported by the facts.

A facially neutral criminal-record policy can also raise Title VII concerns if it disproportionately excludes a protected group and is not job related and consistent with business necessity. The EEOC identifies the nature and gravity of the conduct, the time that has passed, and the nature of the job as relevant considerations in evaluating targeted screening practices.

For context on the records themselves, see the separate overview of how people may find criminal records. Public availability does not by itself establish that every record may be used for every employment purpose.

Federal law limits some older information, but not all of it alike

The FCRA generally bars consumer reporting agencies from reporting civil suits, civil judgments, and arrest records older than seven years, subject to statutory exceptions. Most other adverse information also has a seven-year limit, while criminal convictions are excluded from that general seven-year category under the federal statute.

The statute contains an exception to several age limits for employment expected to pay at least $75,000 annually. State law may impose different or more protective rules, so the federal time limits are not a complete nationwide answer.

Anti-discrimination rules apply regardless of the information source

Federal employment-discrimination law reaches the use of background information whether it came from a commercial report, a public record, or another source. Employers may not apply different screening standards because of race, color, national origin, sex, religion, disability, genetic information, or age protected by federal law.

Medical and genetic information receive additional protection. Federal guidance states that employers generally may not ask disability-related questions or require medical examinations before a conditional job offer, and the Genetic Information Nondiscrimination Act restricts acquiring and using genetic information, including family medical history.

Why state and local law still matters

The FCRA creates a federal floor for covered consumer reports, not a single nationwide code for every hiring question. States and cities may regulate criminal-history timing, credit checks, notices, individualized assessments, or particular records, and those rules can be more protective than federal law.

That federal-state boundary explains why two employers following the same federal process may face different additional requirements in different locations. It also explains why a background check should be understood as a sequence—collection, disclosure, authorization, evaluation, and possible adverse action—rather than as a single pass-or-fail document.