The Fair Credit Reporting Act governs far more than just the process employers follow when using background checks. It also imposes specific obligations on the content, accuracy, and structure of the reports themselves, along with requirements for how consumer reporting agencies compile and deliver that information. Employers relying on third-party background checks need to understand what a compliant report actually looks like, not just to evaluate their screening vendor, but because gaps in report content and accuracy can create shared liability exposure when something goes wrong.
Understanding the Report as a Regulated Document
A background check used for employment purposes is legally classified as a consumer report under the FCRA, and this classification triggers specific obligations for the consumer reporting agency that compiles it. These obligations exist because background check reports directly affect people’s livelihoods, and inaccurate or incomplete information can result in someone unfairly losing a job opportunity.
This is a critical piece of FCRA compliance guidance for employers to internalize: the employer’s compliance obligations do not stop at properly using the report. Employers also bear responsibility for working with vendors, referred to as consumer reporting agencies under the law, that themselves meet the FCRA’s requirements for accuracy, completeness, and proper procedure. An employer using a noncompliant vendor can find itself exposed to liability even when its own internal hiring process is otherwise sound.
Core Elements Every Compliant Report Should Include
While the specific content of a background check varies depending on the type of search conducted and the role being filled, FCRA-compliant reports share certain structural and procedural characteristics.
Clear identification of the consumer reporting agency. The report must clearly identify the agency that compiled it, including contact information, since this information is required for the adverse action notice process and for the applicant’s ability to dispute inaccuracies.
Accurate identity matching. The report must reflect diligent efforts to confirm that the information reported actually belongs to the applicant in question, not another individual with a similar name or other overlapping identifying information. This is one of the most significant sources of reporting errors, particularly in criminal history searches involving common names.
Currency of information. Reports should reflect the most current available information, since outdated records, such as a conviction that has since been expunged or a case that has since been dismissed, should not appear as an active negative record if that information is available at the time the report is generated.
Compliance with reporting time limits. The FCRA restricts how far back certain types of negative information can be reported for employment purposes, and compliant reports must reflect these restrictions.
Source documentation. Reports should reflect the actual source of the information, such as the specific county court records reviewed, since this transparency supports both accuracy and the applicant’s ability to investigate and dispute any inaccuracies.
Specific Content Requirements by Report Type
Different types of background checks carry different specific requirements and common accuracy pitfalls.
Criminal history reports should include:
- The specific jurisdiction and court where any record was found
- The nature of the charge and its disposition, including whether it resulted in a conviction, dismissal, or other outcome
- The date of the offense and the date of disposition
- Clear differentiation between arrests and convictions, since the FCRA and various state laws impose different restrictions on reporting each
Employment verification reports should include:
- Confirmed dates of employment
- Job title held, to the extent the previous employer is willing to confirm this information
- Clear indication of what could not be verified, rather than omitting unverifiable information without explanation
Education verification reports should include:
- Confirmation of degree or credential earned, including institution and dates attended
- Clear indication when an institution cannot confirm claimed credentials
Credit reports used for employment purposes should include:
- Only information relevant to employment purposes, with sensitivity to state and local restrictions on using credit history in employment decisions
- Compliance with any state-specific limitations on which positions may be subject to credit history review
Driving record reports should include:
- Current license status and any restrictions
- Relevant violation history within the applicable reporting period
The Seven-Year Rule and Reporting Time Limits
One of the most misunderstood aspects of FCRA-compliant reporting involves time limits on how far back certain negative information can be reported. The FCRA generally restricts consumer reporting agencies from reporting civil suits, civil judgments, and arrest records that are more than seven years old, calculated from the date of entry or release, whichever is later.
However, this rule carries important nuances that employers need to understand.
- Conviction records are generally not subject to the same seven-year limit under federal law and can typically be reported regardless of how long ago they occurred, though many states impose their own, often shorter, lookback restrictions specific to convictions
- The seven-year rule applies to information reported by the consumer reporting agency, but does not override separate state laws that may impose stricter or different limitations
- Salary history, in states or localities where reporting has separately restricted its use in employment decisions, is a distinct issue from FCRA time limits and should not be confused with them
- Employers operating in multiple states need to apply the most restrictive applicable standard when state law imposes shorter lookback periods than federal law allows
Given this complexity, employers should work with screening vendors and legal counsel who can confirm exactly which lookback periods apply to specific report types in specific jurisdictions, rather than assuming a uniform seven-year rule covers all scenarios.
Accuracy Obligations and the Reasonable Procedures Standard
The FCRA requires consumer reporting agencies to follow reasonable procedures to assure maximum possible accuracy of the information they report. This is a meaningful legal standard, not just an aspirational goal, and agencies that fail to meet it can face liability directly, separate from any liability the employer using the report might face.
Reasonable procedures typically include:
- Verifying identifying information through multiple data points, rather than relying solely on name matching, which is particularly prone to error
- Maintaining updated data sources rather than relying on outdated database snapshots that may not reflect case dismissals, expungements, or other recent changes
- Providing applicants with a clear, accessible process to dispute inaccurate information
- Conducting reasonable reinvestigation when a dispute is raised, typically within a statutorily defined timeframe
Employers should ask prospective and current screening vendors directly about their specific procedures for ensuring accuracy, since vague assurances of general compliance are less useful than concrete descriptions of matching methodology, data source currency, and dispute handling procedures.
What Happens When a Report Contains Errors
Background check errors are not rare, and employers need a clear understanding of what should happen when an applicant disputes the accuracy of a report. Handling this process correctly matters both for legal compliance and for basic fairness to the applicant.
When an applicant disputes information in a report, the following should generally occur:
- The applicant should be able to contact the consumer reporting agency directly to dispute the disputed information
- The agency is required to conduct a reasonable reinvestigation, generally within thirty days, to determine whether the disputed information is accurate
- If the reinvestigation confirms the information was inaccurate or cannot be verified, the agency must delete or correct it and notify the employer if the corrected report is requested
- The employer should have a documented process for pausing or reconsidering an adverse action decision if a dispute is raised during the pre-adverse action waiting period
Employers should never treat a disputed report as automatically resolved in favor of the original negative finding, nor should they proceed with an adverse decision while a legitimate, timely dispute is actively being investigated during the required waiting period.
Evaluating Whether a Vendor’s Reports Meet FCRA Standards
Employers selecting or reviewing a background check vendor should ask specific questions to confirm the vendor’s reports meet FCRA requirements, rather than assuming compliance based on general reputation or marketing claims.
Useful evaluation questions include:
- What specific methodology does the vendor use to confirm identity matching, particularly for criminal history searches
- How does the vendor handle jurisdictions with shorter lookback periods than the federal seven-year standard
- What is the vendor’s documented process for handling consumer disputes, and what is the typical reinvestigation timeline
- How does the vendor ensure reported information reflects current case status, including dismissals, expungements, and sealed records
- Does the vendor provide adverse action support, including properly formatted pre-adverse and final adverse action notice templates
- What data sources does the vendor use for specific search types, and how frequently are those sources updated
Vendors who can answer these questions with specific, concrete detail are generally more reliable partners than those offering only general compliance assurances.
The Employer’s Ongoing Responsibility
Even when working with a fully compliant vendor, employers retain ongoing responsibilities related to report content and use. This includes properly certifying permissible purpose when ordering reports, using report information only for the purposes disclosed to the applicant, and ensuring that internal hiring managers understand the limitations and proper interpretation of the information contained in reports they receive.
Employers should also periodically request documentation from their vendor confirming continued compliance with FCRA requirements, particularly as reporting laws and best practices evolve, and should not assume that a vendor relationship established years ago continues to reflect current best practices without periodic reconfirmation.
Frequently Asked Questions
What is the difference between an arrest record and a conviction record on a background check?
An arrest record reflects that someone was taken into custody but does not confirm guilt, while a conviction record reflects an adjudicated finding of guilt. The FCRA and many state laws treat these differently, with arrest records generally subject to stricter reporting limitations.
Does the seven-year rule apply to criminal convictions?
Generally not under federal law, though many states impose their own, often shorter, lookback restrictions specifically for convictions, so employers must consider both federal and applicable state requirements.
What should an employer do if an applicant disputes a background check finding?
The employer should direct the applicant to the consumer reporting agency to formally dispute the information, and should not finalize an adverse action decision while a timely, legitimate dispute is being investigated during the applicable waiting period.
Are consumer reporting agencies liable for reporting inaccurate information?
Yes, the FCRA requires agencies to follow reasonable procedures to ensure maximum possible accuracy, and agencies that fail to meet this standard can face liability independent of the employer’s own compliance.
Can an employer be held liable for a vendor’s inaccurate report?
Employers can face exposure related to how they used an inaccurate report, particularly if proper adverse action procedures were not followed, even if the underlying inaccuracy originated with the vendor rather than the employer itself.
How often should employers reassess whether their screening vendor’s reports meet current standards?
Given the evolving nature of background check laws and best practices, periodic review, at least annually, along with reassessment following any known compliance issues, is a reasonable practice for most employers.
Getting the Details Right Protects Everyone Involved
FCRA-compliant background check reports are not just a technical requirement buried in vendor contracts. They directly affect whether hiring decisions are based on accurate, fair, and legally appropriate information. Employers who take the time to understand what a compliant report should include, and who hold their screening vendors accountable to that standard, protect themselves from significant legal exposure while also ensuring that applicants are evaluated fairly, based on information that genuinely reflects their background rather than errors, outdated records, or mismatched identities.