How to Legally Reject Candidates Based on Background Checks

Introduction

The Fair Credit Reporting Act (FCRA) and its state-level counterparts establish strict legal requirements for employers who use background checks in their hiring decisions. These laws govern how organizations can legally reject candidates based on information discovered during background screenings, ensuring fair treatment while protecting employers’ legitimate business interests.

This regulation applies to virtually all employers who use third-party background check services, regardless of company size or industry. The law covers everything from criminal history and credit reports to employment verification and education checks.

Compliance with background check rejection procedures is critical for several reasons. Non-compliance can result in lawsuits, regulatory penalties ranging from hundreds to thousands of dollars per violation, and significant reputational damage. Moreover, proper compliance helps create a fair hiring process that gives candidates appropriate opportunities to address potentially disqualifying information.

Legal Overview

Key Provisions Explained

The FCRA establishes a two-step adverse action process that employers must follow before rejecting a candidate based on background check results. This process includes:

Pre-Adverse Action Requirements:

Providing the candidate with a copy of their background check report
Including a copy of “A Summary of Your Rights Under the Fair Credit Reporting Act”
Allowing reasonable time for the candidate to review and respond

Adverse Action Requirements:

Sending formal notice that adverse action has been taken
Providing specific information about the decision
Including consumer reporting agency contact details

Rights and Obligations

Candidate Rights:

Receive advance notice before rejection
Review their background check report
Dispute inaccurate information
Understand the specific reasons for rejection
Access information about their rights under the FCRA

Employer Obligations:

Follow proper disclosure and authorization procedures
Use background check information only for permissible purposes
Provide required notices at appropriate times
Maintain documentation of compliance
Ensure decisions are job-related and consistent with business necessity

Enforcement and Penalties

The Federal Trade Commission (FTC) and Consumer Financial Protection Bureau (CFPB) enforce FCRA compliance at the federal level. Penalties include:

Civil penalties up to $3,756 per violation
Actual damages to affected individuals
Punitive damages for willful violations
Attorney’s fees and court costs

Additionally, candidates can file private lawsuits for FCRA violations, potentially resulting in significant financial liability for non-compliant employers.

Who Must Comply

Covered Entities

FCRA background check requirements apply to:

Private sector employers of all sizes
Federal, state, and local government agencies
Staffing agencies and recruiters
Non-profit organizations
Educational institutions conducting employment screening

Exemptions

Limited exemptions exist for:

Positions with annual salaries exceeding $75,000 (for certain notice requirements)
Trucking industry (specific DOT regulations may supersede)
Certain government positions requiring security clearances
Investigations conducted entirely in-house without third-party involvement

Determining Applicability

To determine if FCRA requirements apply, consider:
1. Are you using a third-party to conduct the Background Check?
2. Is the information being used for employment purposes?
3. Does the position fall under any specific exemptions?

If you answer “yes” to the first two questions and “no” to the third, FCRA compliance is required.

Requirements Breakdown

Specific Obligations

Initial Disclosure and Authorization:

Provide clear, conspicuous written disclosure
Obtain written authorization before conducting screening
Keep disclosure document separate from other application materials

Pre-California Background:
1. Provide copy of background report
2. Include FCRA rights summary
3. Allow reasonable time (typically 5-10 business days) for response
4. Consider any additional information provided

adverse action notice:
Must include:

Statement that decision was based wholly or partly on the background report
Contact information for the screening company
Statement about the candidate’s right to dispute
Right to obtain additional free copy of report within 60 days

Required Procedures

Organizations must establish procedures for:

Tracking adverse action timelines
Documenting all communications
Maintaining records for at least two years
Training staff on proper procedures
Ensuring consistent application across all candidates

Documentation Needs

Maintain records of:

Signed disclosure and authorization forms
Copies of all notices sent
Dates of each step in the process
Any candidate responses or disputes
Final hiring decisions and rationales

Compliance Steps

How to Comply

Step 1: Establish Clear Policies

Define what background check findings may disqualify candidates
Ensure criteria are job-related and consistent with business necessity
Document decision-making guidelines

Step 2: Create Compliant Forms

Develop standalone disclosure documents
Prepare template pre-adverse action letters
Create adverse action notice templates

Step 3: Train Personnel

Educate HR staff on FCRA requirements
Establish clear roles and responsibilities
Implement quality control measures

Implementation Checklist

[ ] Review and update background check policies
[ ] Create compliant disclosure and authorization forms
[ ] Develop adverse action letter templates
[ ] Establish timeline tracking systems
[ ] Train all personnel involved in hiring
[ ] Implement documentation retention procedures
[ ] Set up periodic compliance audits
[ ] Designate compliance oversight responsibility

Best Practices

1. Individualized Assessment: Consider the nature of the offense, time elapsed, and relevance to the position
2. Consistency: Apply standards uniformly across all candidates
3. Documentation: Maintain detailed records of all decisions
4. Timing: Allow adequate time for candidate responses
5. Communication: Use clear, professional language in all notices

Common Violations

Mistakes to Avoid

1. Combining Disclosure with Application Materials
Many employers incorrectly include FCRA disclosure language within employment applications, violating the standalone document requirement.

2. Skipping Pre-Adverse Action
Some organizations move directly to rejection without providing the required pre-adverse action notice and waiting period.

3. Inadequate Adverse Action Notices
Failing to include all required information or using vague language that doesn’t clearly explain the decision.

4. Blanket Policies
Automatically disqualifying candidates with any criminal record without individualized assessment.

Case Examples

Case 1: A retail chain paid $3 million in settlements for failing to provide pre-adverse action notices before rejecting applicants with criminal records.

Case 2: A transportation company faced lawsuits for using unclear disclosure forms that combined FCRA notices with liability waivers.

Case 3: A healthcare facility was penalized for maintaining a policy that automatically rejected all candidates with any felony conviction, regardless of nature or timing.

How to Fix Issues

If violations are discovered:
1. Immediately cease non-compliant practices
2. Consult with legal counsel
3. Notify affected candidates if required
4. Implement corrective measures
5. Document remediation efforts
6. Conduct staff retraining

State Variations

Notable State Differences

California: Requires additional disclosures and has specific rules about criminal history use, including “ban the box” requirements for many employers.

New York: Implements strict requirements through the Fair Chance Act, requiring detailed analysis before criminal history-based rejections.

Massachusetts: Prohibits asking about criminal history on initial applications and has specific requirements for criminal record use.

Washington: Limits use of criminal records and requires individualized assessments considering specific factors.

Stricter Requirements

Several states impose requirements beyond federal FCRA:

Extended waiting periods for adverse action
Additional notice requirements
Restrictions on types of records that can be considered
Specific forms or formats for notices
Enhanced dispute resolution procedures

Multi-State Considerations

For employers operating across state lines:

Apply the strictest applicable standard
Track varying state requirements
Consider implementing nationwide policies based on most restrictive rules
Monitor legislative changes in all operational states
Ensure consistent training across locations

FAQ

Q: How long should I wait between pre-adverse action and final adverse action notices?
A: While the FCRA doesn’t specify an exact timeframe, courts have generally found 5-10 business days reasonable. Some states require specific minimum periods. Allow enough time for candidates to meaningfully review and respond to the information.

Q: Can I reject a candidate based solely on a criminal record?
A: It depends on the position and jurisdiction. Federal law requires that criminal history decisions be job-related and consistent with business necessity. Many states have additional restrictions. Always conduct an individualized assessment considering the nature of the crime, time elapsed, and relevance to the position.

Q: Do I need to follow FCRA procedures if I conduct background checks internally?
A: FCRA requirements only apply when using third-party consumer reporting agencies. However, other federal, state, and local laws may still govern how you can use criminal history or other background information in hiring decisions.

Q: What if a candidate disputes information after receiving a pre-adverse action notice?
A: You should review any additional information or documentation the candidate provides. If they formally dispute information with the background check company, you may need to wait for the investigation to conclude before making a final decision, unless you have other sufficient reasons for the adverse action.

Q: Are there any positions where I can skip the adverse action process?
A: No. If you’re using a third-party background check for employment purposes, the adverse action process is required regardless of the position. Some positions may have additional requirements but none that eliminate the basic FCRA obligations.

Conclusion

Legally rejecting candidates based on background checks requires careful attention to federal and state requirements. By following proper procedures, maintaining good documentation, and ensuring decisions are job-related and consistent with business necessity, employers can protect themselves while treating candidates fairly.

Remember that compliance is an ongoing process requiring regular review and updates as laws evolve. Investing in proper procedures and training now can prevent costly violations and legal challenges in the future.

Ready to ensure your background checks are fast, affordable, and fully FCRA-compliant? BackgroundChecker.com makes it easy with our streamlined online process, clear and comprehensive reports, and dedicated support team. Whether you’re an individual, landlord, small business, or enterprise HR team, we provide the tools and expertise you need to make informed hiring decisions while maintaining complete legal compliance. Start screening with confidence today at BackgroundChecker.com.