The FCRA Adverse Action Process: A Step-by-Step Employer Guide

What Counts as Adverse Action Under the FCRA

Under the FCRA, adverse action is any employment decision made even partly because of information in a consumer report (a background check) that works against the applicant or employee — not hiring them, rescinding an offer, denying a promotion, reassigning them, or terminating them. The FTC's guidance for employers is explicit that this obligation applies whenever the report played *any* role in the decision, not just when it was the sole reason.

The rule applies to employees, applicants, contractors, and — per 15 U.S.C. § 1681b(b)(3) — anyone for whom a consumer report was used to make an employment decision. It does not matter whether the report came back with a conviction, a bad reference, an unverifiable employment history, or a low credit-related score; if the report factors into a negative decision, the two-notice adverse action process applies.

Step 1: Send the Pre-Adverse Action Notice

Before you take any final action, 15 U.S.C. § 1681b(b)(3)(A) requires you to give the candidate advance notice that you're considering adverse action, along with the chance to review and respond. This is the pre-adverse action notice, and it must include two things:

• A complete copy of the consumer report the decision is based on
• A copy of "A Summary of Your Rights Under the Fair Credit Reporting Act" (the CFPB-published summary document)

Most employers also include a brief cover letter identifying the specific report findings under consideration, the background check company's contact information, and instructions for how the candidate can dispute inaccurate information directly with the consumer reporting agency (CRA). None of this is optional boilerplate — the FTC and multiple background screening compliance guides (e.g. GoodHire, DISA) treat the report copy and rights summary as the two mandatory elements of this step.

Why This Step Exists

The pre-adverse notice exists so the candidate can catch and correct errors in the report before an irreversible decision is made. Background checks are compiled from third-party records and are not immune to mismatched identities, outdated case statuses, or clerical mistakes. Giving candidates a real opportunity to review the report — and to add context about what it shows — is the entire point of the waiting period that follows.

Step 2: Observe the Waiting Period

After sending the pre-adverse notice, you cannot immediately proceed to a final decision. The FTC recommends waiting at least five business days before taking further action, to give the candidate a reasonable opportunity to respond. This isn't a fixed number written into the federal statute itself — the FCRA requires a "reasonable period of time," and five business days has become the widely accepted industry standard based on FTC guidance and case law, as reflected across compliance resources like DISA and SHRM.

State and local law can extend this window, and you must follow whichever timeline is longer. California requires employers to wait at least five business days after the candidate is presumed to have received the report. Some fair-chance ordinances (several cities and, per industry trackers, Washington State's newer requirements for larger employers) impose their own separate waiting or review periods on top of the federal baseline. Always check your state and city requirements before finalizing a timeline.

Handling a Candidate Dispute

If the candidate believes something in the report is inaccurate or incomplete, they can file a dispute directly with the consumer reporting agency that produced it. Under 15 U.S.C. § 1681i (FCRA Section 611), the CRA must conduct a free reinvestigation and determine whether the disputed item is accurate — generally within 30 days of receiving the dispute. That window can extend by up to 15 additional days if the consumer provides new relevant information during the original 30-day period, but the extension does not apply once the CRA has already determined the information is inaccurate, incomplete, or unverifiable.

As the employer, your role during a dispute is straightforward: pause the adverse action process until the CRA completes its reinvestigation. Don't proceed to a final decision while a legitimate dispute is open — doing so defeats the purpose of the notice requirement and creates real legal exposure. If the reinvestigation confirms the original information, you may proceed with the final notice once the waiting period (and any dispute resolution) has run its course. If the CRA corrects or deletes the disputed item, you'll receive an updated report and should evaluate the decision based on the corrected information.

Letting Candidates Add Context

Separate from a formal accuracy dispute, many employers — and several background check platforms — allow candidates to submit context or an explanation about an accurate finding (for example, circumstances around an old conviction). This isn't required by the FCRA itself, but it supports a more defensible, individualized assessment of the finding rather than a blanket policy, which is a theme emphasized in EEOC guidance on the use of criminal history in employment decisions. Documenting that you considered any context the candidate provided strengthens your position if the decision is ever challenged.

Step 3: Send the Final Adverse Action Notice

Once the waiting period has passed (and any dispute has been resolved) and you've decided to proceed with the adverse action, you must send the final adverse action notice. Under 15 U.S.C. § 1681m(a), this notice must include:

• Notice that adverse action was taken based, in whole or part, on the consumer report
• The name, address, and phone number of the CRA that furnished the report
• A statement that the CRA did not make the hiring decision and cannot explain the specific reasons for it
• Notice of the candidate's right to obtain a free copy of their report from the CRA within 60 days
• Notice of the candidate's right to dispute the accuracy or completeness of the report with the CRA

This final notice can be delivered orally, in writing, or electronically, but written or electronic delivery is strongly preferred for documentation purposes. Keep a copy of every notice sent, along with delivery confirmation, as part of your compliance file — these records are your primary defense if a candidate later brings an FCRA claim.

Sample Notice Checklist

Use this checklist before sending either notice to confirm you have every required element in place.

• Confirm delivery method and date, and log it in the candidate's file
• Verify no internal decision or communication contradicts the "still under consideration" status during the waiting period
• Check state and local adverse action or fair-chance laws for any additional required language or timing
• Retain copies of both notices and proof of delivery for your compliance records

Common Timing Mistakes Employers Make

Most adverse action FCRA violations aren't about bad intentions — they're about process gaps. The most frequent mistakes reported across employer compliance guides include:

• Skipping the pre-adverse notice entirely and going straight to a rejection or termination based on the report
• Not waiting long enough between the pre-adverse and final notices — treating five business days as a suggestion rather than a floor
• Making the decision internally before the waiting period ends, then treating the final notice as a formality rather than a genuine review opportunity
• Failing to pause during an active dispute and sending the final notice while the CRA's reinvestigation is still open
• Ignoring state and local extensions to the waiting period, such as California's rules or various city fair-chance ordinances
• Sending an incomplete notice — for example, forgetting the CRA's contact information or the free-report-within-60-days disclosure on the final notice
• Assuming the background check vendor sends the notices automatically when in fact the employer is responsible for initiating and sending them unless the platform explicitly handles it

Any one of these gaps can turn a routine hiring decision into an FCRA claim. Class-action litigation over adverse action and disclosure defects has become common enough that SHRM flags standalone disclosure and adverse action missteps as leading sources of employer liability in background screening.