Running a background check on someone without their permission is legal in some situations and illegal in others, and the deciding factor is almost always how the check is done. If you look up public records yourself — court filings, property records, someone’s public social media — no consent is needed. If you pay a screening company to compile a report on someone for employment or tenant screening, federal law requires their written permission first. The Fair Credit Reporting Act draws that line, and the penalties for crossing it include lawsuits, statutory damages, and in some cases criminal charges.
The Line That Decides Everything: DIY Search vs. Screening Company
The FCRA regulates consumer reporting agencies (CRAs) — companies that regularly assemble personal information about people and sell it to third parties.1Legal Information Institute (LII). Definition: Consumer Reporting Agency From 15 USC 1681a(f) Background screening services, credit bureaus, and tenant screening companies all qualify. When a CRA is involved, the whole federal framework kicks in: disclosure, written consent, permissible purpose, accuracy standards, and penalties.
Search on your own and the FCRA does not apply. Court records, property deeds, bankruptcy filings, voter registrations, and many other government documents are public by design. Anyone can look them up. Reading news articles, Googling a name, or scrolling through someone’s public social media profile does not trigger the law either. The FCRA only reaches you when you either pay a company to compile a consumer report or you are the company doing the compiling.
Most people asking whether they can run a background check without permission fall into one of two situations. The first is casual research on a person — an old acquaintance, a date, a new neighbor. That is generally legal as long as you stick to public information and do not hire a CRA to package it for you. The second is using a screening service to make a decision about hiring, renting, or extending credit. That is heavily regulated, and the rest of this article is about that side.
When Written Consent Is Required
The FCRA requires written consent before a consumer report can be pulled for employment purposes. The employer must give a clear, standalone written notice explaining that a background check may be requested, and the applicant or employee must authorize it in writing. That notice cannot be buried inside a job application; it has to be its own document.2Federal Trade Commission. Using Consumer Reports: What Employers Need to Know The consent requirement applies not just to hiring but also to promotions, reassignments, and terminations based on a report.
Landlords face the same core rule. Tenant screening reports are consumer reports under the FCRA, and a landlord who wants to order a credit report or rental history through a screening service needs written permission first.3Federal Trade Commission. Fair Credit Reporting Act
A stricter layer applies to investigative consumer reports, which are based on personal interviews about your character, reputation, or lifestyle rather than database pulls. Before requesting one, the employer must give an additional written notice explaining that this type of report may be ordered and that you can request a summary of its scope and substance.2Federal Trade Commission. Using Consumer Reports: What Employers Need to Know
Consent Is Not Enough on Its Own: Permissible Purpose
Written consent handles one requirement. The FCRA imposes a second: the person requesting the report must have a permissible purpose. Even if you sign an authorization, a CRA cannot legally hand your report over to someone who lacks a qualifying reason. The statute lists the situations where a report may be furnished:4Office of the Law Revision Counsel. 15 US Code 1681b – Permissible Purposes of Consumer Reports
- Credit transactions, including extending credit, reviewing an existing account, or collecting on a debt.
- Employment decisions, with the written consent described above.
- Insurance underwriting.
- Tenant screening, under the “legitimate business need” provision for a transaction the consumer initiated.
- Determining eligibility for a government license or benefit where financial responsibility matters.
- A court order from a court with jurisdiction.
- Child support enforcement by a state or local agency.
- The consumer’s own request.
If someone pulls a consumer report outside these categories, they have violated federal law even if the subject consented. A curious neighbor who pays a screening company to see your credit history has no permissible purpose, and the neighbor and the company are both exposed.
When a Background Check Can Happen Without Your Permission
Several situations allow a background check to go forward without the subject’s explicit consent — either because the information is public or because a specific law overrides the consent rule.
Public Records
Court filings, property records, bankruptcy filings, marriage and divorce records, and many other government documents are open to anyone. You do not need permission to check whether someone has been sued, owns real estate, or has a criminal case on file. These records exist to be accessed. The FCRA does not regulate your access to them; it regulates what a CRA does when it aggregates them into a report and sells it.
Law Enforcement and National Security
Law enforcement agencies can run background checks during criminal investigations without notifying the subject. Federal agencies may access certain records for national security purposes. Government background investigations for security clearances follow their own framework separate from the FCRA, and the person being investigated generally consents as a condition of employment or clearance access.
Regulated Industries
Some industries require background checks by statute, and those checks proceed under specific legal authority rather than through the FCRA consent process. Healthcare facilities screening employees who work with vulnerable populations, financial institutions checking employees in positions of trust, and childcare providers subject to state licensing all fall into this category. Here the check is often a legal prerequisite to holding the job at all.
A Boundary Worth Naming: Ban-the-Box
Ban-the-box laws in many states remove criminal history questions from initial job applications and postpone the background check until later in the hiring process, typically after an interview or conditional offer. They do not eliminate background checks or add a new consent requirement beyond the FCRA. They change the timing, not the underlying legality.
What It Costs to Run an Unauthorized Check
Someone who pulls a consumer report on you without meeting the FCRA’s requirements faces civil liability in two tiers, plus potential criminal exposure at the top end.
Willful Violations
A person or company that knowingly violates the FCRA owes the affected consumer actual damages or statutory damages between $100 and $1,000 per violation (the consumer’s choice), plus punitive damages at the court’s discretion and reasonable attorney’s fees.5Office of the Law Revision Counsel. 15 US Code 1681n – Civil Liability for Willful Noncompliance In a class action covering thousands of affected people, those per-person figures produce the large settlements that make FCRA compliance a live concern for employers and screening companies.
Negligent Violations
When the violation is careless rather than intentional, the consumer can recover actual damages and attorney’s fees, but not statutory or punitive damages.6Office of the Law Revision Counsel. 15 USC 1681o – Civil Liability for Negligent Noncompliance The practical consequence is that you must show real, measurable harm to recover on a negligence theory, whereas a willful violation entitles you to statutory damages even if you cannot quantify a loss.
Criminal Penalties
Obtaining a consumer report under false pretenses, or knowingly without a permissible purpose, is a federal crime. Convictions can carry fines and imprisonment. These provisions exist specifically to deter people from using screening companies to snoop on others without a legitimate reason.
The Standing Requirement
Not every technical FCRA violation supports a lawsuit in federal court. In Spokeo, Inc. v. Robins (2016), the Supreme Court held that a bare procedural violation is not enough to sue — the plaintiff must show a concrete injury, not just that a rule was broken.7Justia US Supreme Court. Spokeo, Inc. v. Robins, 578 US (2016) A screening company’s technical error with zero real-world impact on you may be dismissed for lack of standing.
Deadline to Sue
A lawsuit must be filed within two years of discovering the violation, or five years after the violation occurred, whichever comes first.8Office of the Law Revision Counsel. 15 US Code 1681p – Jurisdiction of Courts; Limitation of Actions Because unauthorized checks often surface long after the fact, the discovery rule gives some breathing room, but the five-year outer limit is absolute.
What to Do If Someone Ran a Check on You Improperly
If you believe a consumer report was pulled without your consent or without a permissible purpose, or if a report contains wrong information that is affecting your job or housing prospects, you have several channels.
File a dispute directly with the CRA that produced the report. The agency then has 30 days to investigate, verify the information with its source, and give you updated results. If the investigation confirms an error, the CRA must correct or delete the item and notify anyone who recently received a report containing it. If you are not satisfied with the outcome, you can ask that a brief statement of your dispute be added to your file so future reports carry your side.
Beyond the dispute channel, you can complain to the Federal Trade Commission or the Consumer Financial Protection Bureau. The FTC has historically been the primary FCRA enforcer, investigating complaints, filing lawsuits, and imposing fines on screening companies and employers.3Federal Trade Commission. Fair Credit Reporting Act The Dodd-Frank Act moved most FCRA rulemaking authority to the CFPB while leaving FTC enforcement in place, and both agencies now bring cases, sometimes jointly.9Federal Register. Fair Credit Reporting; Background Screening State attorneys general also enforce background check rules, particularly in states with consumer protection statutes that go beyond the federal floor.
The FCRA gives you a private right of action as well. Because the statute provides for attorney’s fees in successful cases, plaintiffs’ lawyers actively take on FCRA claims where the facts support them. If you have documentation that a report was pulled without permission or a permissible purpose, or that an inaccurate report caused you to lose a job or an apartment, talking to a consumer protection attorney is worth doing before the two-year clock runs out.