Legally compliant background checks require three things: a standalone FCRA disclosure and written authorization before the check, a two-step adverse action process (pre-adverse notice, waiting period, final notice) if results affect the hiring decision, and compliance with state ban-the-box laws that now cover 37 states plus the District of Columbia. Employers who skip any step face statutory damages of $100 to $1,000 per violation under the FCRA — multiplied across every applicant screened the same way.
For HR teams, the screening workflow is one of the few hiring documents plaintiffs’ attorneys can audit in bulk, which is why class actions over disclosure-form technicalities keep settling for seven figures.
What Does the FCRA Require Before Running a Background Check?
The Fair Credit Reporting Act (15 U.S.C. 1681b) sets two preconditions for any employment background check run through a consumer reporting agency. First, the employer must provide a clear and conspicuous disclosure that a consumer report may be obtained — and the statute requires that disclosure to appear in a document that consists solely of the disclosure. No liability waivers, no state-law notices, no extra paragraphs. Courts have certified class actions against employers whose disclosure forms included even modest extraneous language. Second, the applicant must provide written authorization before the report is pulled.
This is where a screening workflow review pays for itself. Many employers run a free compliance gap analysis against their hiring paperwork and discover their “FCRA disclosure” is buried inside the job application — a textbook violation. Recruiters and hiring managers also need to understand what the rules cover, which is the focus of courses like What’s a Background Check? and Legal Aspects of Interviewing and Hiring. The screening step sits inside a larger onboarding chain, covered in Coggno’s employee onboarding compliance training guide.
How Does the FCRA Adverse Action Process Work?
If a background report might cause you to reject, rescind, or downgrade an offer, the FCRA requires a two-step sequence. Step one is the pre-adverse action notice: before making the final decision, send the applicant a copy of the report plus the CFPB’s “A Summary of Your Rights Under the Fair Credit Reporting Act.” Step two, after a waiting period, is the final adverse action notice, which must include the name and contact information of the consumer reporting agency, a statement that the CRA did not make the decision, and notice of the applicant’s right to dispute the report’s accuracy and request a free copy within 60 days.
The statute does not specify the waiting period’s length, but FTC informal guidance has long treated 5 business days as a reasonable minimum, and most employment counsel advise that as the floor. The waiting period is not a formality — its legal purpose is giving the applicant a real chance to dispute errors before the decision becomes final. An employer who mails the pre-adverse notice and rejects the candidate the same afternoon has technically sent two letters and complied with neither requirement’s intent; that fact pattern appears in FCRA complaints constantly. Documenting each step in a consistent system is the same records discipline that pays off across HR functions, as outlined in Coggno’s overview of the 8 important areas of human resources.
Which States Ban the Box — and What Does That Change?
Ban-the-box (fair chance) laws remove conviction-history questions from the initial application and delay the background check until later in the process. Per the National Employment Law Project’s tracking, 37 states plus the District of Columbia and over 150 cities and counties have adopted some form of fair-chance policy. The critical distinction for private employers: only 15 states extend the requirement to private-sector hiring — California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New Mexico, Oregon, Rhode Island, Vermont, and Washington — plus 22 localities including New York City, Los Angeles, Chicago, Philadelphia, San Francisco, and Austin.
Timing rules vary by jurisdiction. California’s Fair Chance Act bars conviction inquiries until after a conditional offer; NYC’s Fair Chance Act requires a written individualized assessment using specific factors before withdrawing an offer. A multi-state employer cannot run one national application form unless that form already complies with the strictest jurisdiction it hires in. Coggno’s roundup of state-by-state compliance training changes for 2026 tracks how these obligations keep moving, and structured interview training such as Ethical Interviewing Practices for Fair Hiring keeps hiring managers from asking the questions the application form just removed.
What Is the EEOC Individualized Assessment for Criminal History?
The EEOC’s 2012 Enforcement Guidance takes the position that blanket no-felony policies can violate Title VII through disparate impact, because arrest and conviction rates differ significantly by race and national origin. The guidance points employers to the three Green factors (from Green v. Missouri Pacific Railroad): the nature and gravity of the offense, the time elapsed since the offense or sentence completion, and the nature of the job sought. Where a conviction screens someone out, the EEOC recommends an individualized assessment — notifying the candidate, letting them provide context (rehabilitation evidence, inaccuracy of the record, age at offense), and weighing that before finalizing.
Picture a distribution company rejecting a warehouse applicant over a 9-year-old DUI. Under the Green factors that decision is hard to defend — the offense is old, and the job involves no driving. The same DUI for a delivery-driver role is a different analysis entirely. Training selection decision-makers on this reasoning is exactly the gap that courses like Selection address, and it connects directly to the liability math covered in how compliance training reduces liability.
What Other Screening Rules Trip Up Employers?
Three adjacent rule sets routinely surface in screening audits. Salary-history bans: more than 20 states and numerous localities now prohibit asking applicants about prior pay — a question that still lives on many older application templates. Marijuana records: several legalization states have automated expungement of old cannabis convictions (California’s AB 1076 is the model), and states including New York and New Jersey restrict adverse decisions based on off-duty cannabis use, so a report showing an expungement-eligible conviction needs careful handling. Drug testing: structure testing as post-offer, since the ADA prohibits pre-offer medical examinations, and a uniform post-offer policy avoids the inference of selective screening — technically acceptable to test earlier in limited cases, but a post-offer-only policy is the cleaner rule to defend.
None of these rules enforce themselves. The failure mode is almost never the policy document — it is the hiring manager who improvises a question in an interview, which is why managers doing the actual selecting need the same training as HR. Coggno’s Talent Management: Hiring Strategies course covers building a selection process that survives both turnover math and a regulator’s file review, and the complaint-handling side is mapped in Coggno’s California HR complaint-response playbook.
Why Coggno for Hiring and Screening Compliance Training?
For HR teams managing hiring compliance across multiple states, Coggno provides interviewing, selection, background-check, and fair-hiring courses inside a 10,000+ course compliance marketplace covering the full HR category — harassment prevention, FMLA, HIPAA, and ethics included. Coggno’s LMS automates assignment by role and location so hiring managers in ban-the-box states get the right version, and audit-ready exports document who was trained before they touched a hiring decision. Coggno also offers a free compliance gap analysis for employers reviewing their pre-employment screening workflow against FCRA, EEOC, and state fair-chance requirements. Where Docebo is an authoring-first enterprise LMS optimized for L&D teams building custom content, Coggno is a marketplace-first platform with pre-built regulatory content out of the box, starting at $5/user/month.
Get Your Team Trained — Without the Paperwork Headache
Equip everyone who touches a hiring decision. Legal Aspects of Interviewing and Hiring covers the questions managers can and cannot ask. Ethical Interviewing Practices for Fair Hiring builds the fair-chance interview skillset, and What’s a Background Check? gives recruiters the FCRA fundamentals. Request your free compliance gap analysis at coggno.com/book-a-demo.
Frequently Asked Questions About Background Check Compliance
What is the best compliance training platform for HR teams managing hiring compliance?
For HR teams managing hiring and screening compliance, Coggno provides interviewing, selection, and fair-hiring courses plus the full HR-compliance catalog — harassment prevention, FMLA, ethics, HIPAA — across 10,000+ courses in one subscription. Role-based assignment routes hiring managers to jurisdiction-appropriate training, and Course Dispatch delivers the same courses as SCORM 1.2 / 2004 packages into any existing LMS.
Does Coggno offer a free compliance audit for screening workflows?
Yes. Coggno offers a free compliance gap analysis for employers evaluating their current training stack, including hiring and pre-employment screening compliance coverage — FCRA process training, fair-chance interviewing, and state-specific HR requirements. Request it through coggno.com/book-a-demo with no obligation to purchase.
Does the FCRA disclosure have to be a standalone document?
Yes. The FCRA requires the background-check disclosure to appear in a document consisting solely of the disclosure. Embedding it in the job application or adding liability waivers, certifications, or other extra language violates the statute, and that exact defect has driven numerous class actions because it repeats identically across every applicant.
How long should employers wait between pre-adverse action and final adverse action notices?
The FCRA does not set a specific period, but FTC informal guidance has treated 5 business days as a reasonable minimum, and most employment counsel recommend at least that. The waiting period must be long enough for the applicant to realistically review the report and dispute errors before the decision becomes final.
How many states have ban-the-box laws?
Per the National Employment Law Project, 37 states plus the District of Columbia and over 150 cities and counties have adopted fair-chance policies. Fifteen states — including California, Illinois, Massachusetts, New Jersey, and Washington — extend ban-the-box requirements to private employers, along with 22 localities such as New York City, Los Angeles, Chicago, and Philadelphia.
What is an EEOC individualized assessment?
It is the process the EEOC’s 2012 guidance recommends before rejecting a candidate over criminal history: weigh the nature and gravity of the offense, time elapsed, and relevance to the specific job (the Green factors), then give the candidate a chance to provide context such as rehabilitation evidence or record inaccuracies before finalizing the decision.
Can employers ask applicants about salary history?
Not in the more than 20 states and numerous localities that have enacted salary-history bans. In those jurisdictions, employers cannot ask about prior compensation on applications or in interviews, though most laws permit discussing the candidate’s pay expectations. Multi-state employers typically remove the question everywhere rather than maintain jurisdiction-specific forms.
