How Do Employers Do a Background Check: Disclosure and Notices

Employers do a background check by giving you a standalone written disclosure, collecting your signed authorization, sending your identifying information to a consumer reporting agency that compiles records from courts and other sources, and reviewing the finished report before making a hiring decision. If anything in the report might cost you the job, federal law requires the employer to pause and send you a pre-adverse action notice with a copy of the report before finalizing the rejection. The Fair Credit Reporting Act governs almost every step, and skipping any of them creates real liability for the employer.

The Disclosure and Authorization Come First

Nothing gets pulled until you’ve been told, in writing, that a check is coming. The employer has to hand you a standalone document stating that a background check may be run for employment purposes. That document cannot share a page with liability waivers, arbitration clauses, or job application language. It stands alone.¹

You then sign the form, on paper or electronically, authorizing the employer to request the report. Without that signature, the employer has no legal right to proceed. Most companies fold this into a digital onboarding portal where you review and sign during the application. Bury the disclosure inside other paperwork or skip the signature step and the employer has committed a willful FCRA violation, exposing itself to statutory damages of $100 to $1,000 per violation, punitive damages at the court’s discretion, and attorney’s fees.²

What the Report Actually Contains

The scope depends on the role, the industry, and what the employer is willing to pay for. Most checks touch several categories:

Criminal history, pulled from county courthouses, state repositories, and federal databases. This is the piece most employers prioritize.
Employment history, verified by contacting previous employers to confirm job titles, dates, and sometimes reasons for leaving.
Education, verified through registrar offices at colleges and universities.
Credit history, for roles that involve handling money or sensitive financial data. About a dozen states restrict when employers can use credit checks.
Driving records, for positions that involve operating company vehicles.
Professional licenses, for regulated occupations like nursing or accounting, checked against the relevant board.

Some employers also pay third-party vendors to compile social media activity into a formal report. When a company hires an outside service to do that, the resulting report qualifies as a consumer report under the FCRA, so the same disclosure, authorization, and accuracy rules apply.³

How the Screening Agency Compiles the Report

Employers almost never run these checks themselves. They hire consumer reporting agencies that specialize in pulling records from many sources and assembling a single report. Once you sign the authorization, the employer uploads your name, Social Security number, date of birth, and address history to the agency’s secure portal.

The agency searches digital databases and, where records haven’t been digitized, sends people to local courthouses. Court systems vary enormously across jurisdictions; some counties still keep paper files that only exist onsite. The agency consolidates the findings, flags any discrepancies against what you put on your application, and delivers the report to the employer. A narrow criminal-only check can come back in hours. A full report that includes employment and education verifications usually takes one to four business days.

How Far Back the Report Can Reach

The FCRA generally bars screening agencies from reporting adverse information older than seven years. That cutoff covers civil judgments, paid tax liens, accounts in collection, and most other negative items.⁴

Criminal convictions are the big exception. Under federal law, a screening agency can report a conviction no matter how old it is.⁴ Non-conviction records like dismissed charges and acquittals do fall under the seven-year limit.⁵ Bankruptcies follow a separate rule and can be reported for up to ten years.

There’s also a salary-based exemption. If the job pays $75,000 or more per year, the seven-year limit on adverse items does not apply, and the agency can include older negative information that would otherwise be excluded.⁴ Some states impose stricter reporting limits, including on how far back convictions themselves can be reported, so federal rules act as a floor rather than a ceiling.

How Criminal Records Are Handled

Criminal history is the part of the process where the rules have shifted most in the past decade. Two extra layers sit on top of the basic FCRA framework.

Ban-the-Box and Fair Chance Laws

More than 37 states, the District of Columbia, and over 150 cities and counties have adopted fair chance hiring laws, commonly called “ban the box.” The specifics vary, but the general rule is that employers cannot ask about convictions on the initial application and must wait until later in the process, often until after a conditional offer. At the federal level, the Fair Chance to Compete for Jobs Act prohibits federal agencies from asking about criminal history before extending a conditional offer, with exceptions for positions involving national security, classified information, or law enforcement.⁶

Arrests Versus Convictions

The Equal Employment Opportunity Commission treats arrests and convictions very differently. An arrest by itself does not prove someone committed a crime, and the EEOC’s enforcement guidance states that arrest records alone are not reliable evidence of criminal conduct. Convictions are considered reliable evidence that the underlying conduct occurred.⁷

Even for convictions, the EEOC expects an individualized assessment rather than blanket disqualification. That means weighing the nature of the offense, how long ago it happened, and whether it relates to the specific job. It also means giving you a chance to explain the circumstances, including rehabilitation, later work history, and character references.⁸

Credit, Drug, and Medical Checks Follow Different Rules

Employer credit checks follow the same FCRA disclosure and authorization rules as any other consumer report, but they are more restricted in practice. Roughly a dozen states limit or ban the use of credit history in employment decisions unless the role involves financial responsibilities, access to sensitive financial data, or a legal requirement. Even in states without those restrictions, written consent is still required before a credit report can be pulled.

Drug tests and medical exams operate under a different statute entirely: the Americans with Disabilities Act. Before a conditional offer, an employer cannot require a medical exam or ask disability-related questions, even if the exam relates to the job. After a conditional offer, the employer may require a medical exam so long as everyone entering that same job category is subject to the same requirement, and the results must be kept in a separate, confidential file rather than mixed with regular personnel records.⁹

Drug testing sits in a different box. Most courts do not treat a standard drug panel as a “medical examination” under the ADA, which is why pre-offer drug screens are common. If the testing goes further and probes for medical conditions or disabilities, the ADA’s restrictions kick in fully.

The Two-Step Notice Process Before a Rejection Can Stick

If something in your report makes the employer reconsider hiring you, federal law requires a two-step notification before the rejection is final. This is where the FCRA has the most teeth from your side.

The Pre-Adverse Action Notice

Before making a final decision against you, the employer must send a pre-adverse action notice that includes a copy of the background check report and a written summary of your FCRA rights.¹ The summary is a standardized document published by the Consumer Financial Protection Bureau that lays out your right to dispute inaccurate information, get a free copy of your file, and seek damages for violations.¹⁰

The point of this step is to give you time to review the report and challenge anything wrong before the employer acts. The FCRA doesn’t specify an exact waiting period. It requires a “reasonable” one, which most employers treat as roughly five to seven business days. If you find an error, you file the dispute directly with the screening agency, which must investigate.

The Final Adverse Action Notice

If the employer still decides to reject you, either because you didn’t dispute anything or the dispute didn’t resolve the issue, they must send a final adverse action notice. That notice has to include the screening agency’s name, address, and phone number; a statement that the agency did not make the hiring decision and cannot explain the reasons for it; notice of your right to a free copy of the report from the agency within 60 days; and notice of your right to dispute the accuracy or completeness of any information in it.

The notice can be delivered in writing, orally, or electronically.¹¹ The split between agency and employer matters: the agency compiled the data, but the employer made the call. If you think the report contained errors that cost you the job, your dispute goes to the agency, not the employer.

What Happens When an Employer Breaks the Rules

The FCRA creates two tiers of liability depending on whether the violation was willful or negligent. Willful violations, such as running a check without consent, burying the disclosure inside a job application, or skipping the adverse action steps, carry statutory damages of $100 to $1,000 per violation even if you can’t prove actual financial harm. Courts can add punitive damages and attorney’s fees on top.²

If you think your rights were violated, whether you were never sent a pre-adverse action notice or the disclosure form was bundled with other paperwork, you can file a complaint with the Consumer Financial Protection Bureau or the Federal Trade Commission, or consult an employment attorney about a private lawsuit.¹²

1
Office of the Law Revision Counsel. 15 USC 1681b Permissible Purposes of Consumer Reports
2
Office of the Law Revision Counsel. 15 USC 1681n Civil Liability for Willful Noncompliance
3
Federal Trade Commission. The Fair Credit Reporting Act and Social Media What Businesses Should Know
4
Office of the Law Revision Counsel. 15 USC 1681c Requirements Relating to Information Contained in Consumer Reports
5
Federal Register. Fair Credit Reporting Background Screening
6
U.S. Department of Health and Human Services Office of Inspector General. The Fair Chance to Compete for Jobs Act
7
U.S. Equal Employment Opportunity Commission. Questions and Answers About the EEOCs Enforcement Guidance on the Consideration of Arrest and Conviction Records
8
U.S. Equal Employment Opportunity Commission. Enforcement Guidance on the Consideration of Arrest and Conviction Records in Employment Decisions Under Title VII of the Civil Rights Act
9
Office of the Law Revision Counsel. 42 USC 12112 Discrimination
10
Consumer Financial Protection Bureau. A Summary of Your Rights Under the Fair Credit Reporting Act
11
Office of the Law Revision Counsel. 15 USC 1681m Requirements on Users of Consumer Reports
12
Federal Trade Commission. Using Consumer Reports What Employers Need to Know