Table of Contents
- Step 1: Build a Written Screening Policy That Matches the Job
- Step 2: Get a Valid Employment Background Check Authorization Form
- Step 3: Follow FCRA Background Check Compliance for Employers
- Step 4: Send Pre-Adverse Action and Adverse Action Notices Correctly
- Step 5: Prevent Negligent Hiring Without Crossing Discrimination Lines
- Step 6: Apply Screening Criteria Consistently and Document Every Decision
- Step 7: Check State and Local Laws Before Every Hire
- Conclusion
- Frequently Asked Questions
Last Updated: October 19, 2026
Step 1: Build a Written Screening Policy That Matches the Job
Avoiding legal liability in pre-employment screening starts with one document: a written policy that ties every check to a specific job requirement. At MacData, we tell clients the same thing on day one. If you cannot explain why a check exists, you cannot defend it later.
A solid policy covers four things:
- Which checks you run for each role
- Who approves the decision to screen
- How long you keep records
- Who reviews results before any action is taken
Pre-employment screening is the process of checking an applicant’s background, identity, work history, and qualifications before making a hiring offer. The policy is the paper trail that proves you screened for job-related reasons, not personal ones.
Write it down. Have counsel review it. Then follow it every single time.
Most small employers skip the policy and jump straight to ordering checks. That is backwards. Build the policy first, and every later step gets easier to defend.
Step 2: Get a Valid Employment Background Check Authorization Form
An employment background check authorization form must be a standalone document. It cannot hide inside the job application, and it cannot include a liability waiver.
Under the Fair Credit Reporting Act, you need written permission from the applicant before a consumer reporting agency runs a report. The disclosure must be clear and separate.
Three rules we see broken constantly:
- Separate document. No fine print buried in page six of the application.
- Plain language. State that you may obtain a consumer report for employment purposes.
- Signed and dated. Keep the original.
If you skip this, nothing downstream holds up. A clean report built on a bad authorization form is still a liability.
Step 3: Follow FCRA Background Check Compliance for Employers
FCRA background check compliance for employers comes down to process, not paperwork. The law sets out what you must disclose, when you must notify, and what applicants can dispute.
Here is the short version of your obligations:
- Give written notice before you pull a report
- Get written authorization
- Certify to the screening vendor that you will follow adverse action rules
- Give the applicant a copy of the report and a summary of rights before you decide
The Consumer Financial Protection Bureau publishes a summary of rights you must provide. Hand it over before any adverse decision, not after.
One insider note: the vendor’s compliance badge is not your compliance. You are the employer. The duties land on you.
Step 4: Send Pre-Adverse Action and Adverse Action Notices Correctly
Pre-adverse action and adverse action notices are where most employers get sued. The sequence is strict, and skipping a step is the fastest way to lose a case. This is also the stage where the content gap in most guides is widest: they name the two notices but never explain what goes inside them, how to run a dispute, or how to document timing so the file survives a challenge.
The order looks like this:
- Pre-adverse action notice. Send it when you are considering rejection based in whole or in part on the report.
- Include the report and rights summary. The applicant must see what you saw, along with the summary of rights published by the Consumer Financial Protection Bureau.
- Wait a reasonable time. Give the applicant a real chance to dispute.
- Adverse action notice. Send it only after the waiting period, if you still decide to reject.
What the pre-adverse notice must contain
A defensible pre-adverse notice is short but specific. Include:
- The name, address, and phone number of the screening vendor that furnished the report
- A statement that the vendor did not make the decision and cannot explain it
- A copy of the report and the summary of rights
- A clear statement that the applicant has a right to dispute the accuracy or completeness of the report directly with the vendor
- A deadline or expected timeframe for the applicant to respond
What the final adverse action notice must contain
If you still reject after the waiting period, the final notice should include:
- The same vendor contact information
- A statement that the vendor did not make the decision
- A statement that the applicant has the right to dispute the report and to obtain an additional free copy from the vendor within 60 days
- The specific reason for the decision, tied to the job-related criteria in your written policy
Running the dispute window
What counts as reasonable? There is no fixed number in the statute. Five business days is a common practice, but document your reasoning. If the applicant disputes, pause the decision and re-review the corrected report before sending anything final. Keep a dated log of when each notice went out, how it was delivered, and when the waiting period closed.
Sending the adverse action notice on the same day as the pre-adverse notice defeats the purpose. Applicants get no chance to correct errors, and that is exactly the fact pattern that triggers FCRA claims. The same risk applies when the pre-adverse notice omits the vendor contact information, because the applicant has no practical way to dispute.
A dispute-handling workflow
When an applicant disputes, follow the same sequence every time:
- Acknowledge the dispute in writing and note the date.
- Ask the vendor to reinvestigate and provide the corrected report.
- Re-apply the same job-related criteria to the corrected information.
- Document the outcome and the date the decision was finalized.
This workflow is the part competitors treat briefly. Building it into your written policy turns a high-risk stage into a repeatable process, and it gives you a dated record if the decision is ever challenged.
Step 5: Prevent Negligent Hiring Without Crossing Discrimination Lines
Negligent hiring prevention means screening enough to avoid foreseeable risk, without screening in a way that treats protected groups unfairly. Those two goals pull in opposite directions, and the balance is where liability lives.
Negligent hiring claims usually follow a workplace incident. The plaintiff argues you knew, or should have known, that the applicant was a risk. Your defense is a documented, job-related process.
The discrimination side is just as real. Under EEOC guidance on background checks, blanket bans on applicants with criminal records can create disparate impact.
So what works? Individualized assessment. Look at:
- The nature of the offense and how recent it is
- How it relates to the specific job duties
- Evidence of rehabilitation
- Time elapsed since the conviction
Same policy for every applicant in the same role. Different outcomes are fine when they come from the same documented criteria.
Step 6: Apply Screening Criteria Consistently and Document Every Decision
Consistency is the cheapest legal protection you will ever buy. Two applicants for the same job should face the same checks and the same standards.
Build a simple matrix and use it every time:
| Decision Point | What to Document | Why It Matters |
|---|---|---|
| Check selection | Job-related reason for each check | Shows business necessity |
| Authorization | Signed and dated form | FCRA proof |
| Report review | Reviewer name and date | Chain of custody |
| Adverse action | Notices sent and dates | Procedural defense |
| Final decision | Criteria applied | Consistency proof |
Keep records for the period your counsel recommends, and never longer than needed. Store reports separately from general personnel files.
If you cannot produce a dated record of a screening decision, assume a court will treat it as if it never happened.
Step 7: Check State and Local Laws Before Every Hire
State and local laws change faster than federal rules, and one applicant can bring three jurisdictions into play. Most guides stop at “check your state law.” That advice is not actionable. This section gives you a jurisdiction-checking method and a matrix of the rule categories that vary most, so the check becomes a repeatable step rather than a guess.
The four-jurisdiction check
Run this per applicant, not per job posting:
- Where does the applicant live? That state’s rules may apply to the screening process.
- Where is the job located? Local ordinances can add requirements on top of state law.
- Where will they work? Remote roles can trigger multiple states, and the applicant’s location often controls.
- What does the role involve? Some checks are restricted by job type, such as credit checks for roles with fiduciary responsibility.
Jurisdiction matrix: rule categories that vary most
| Rule category | What typically varies | What to verify before ordering |
|---|---|---|
| Ban-the-box | When criminal history may be asked about; private-employer coverage | Whether the state or city covers private employers and at what stage of hiring |
| Criminal record limits | Lookback periods; restrictions on credit or arrest records | The maximum lookback and any outright prohibitions for the role |
| Salary history bans | Whether employers may ask about or rely on prior pay | Whether the ban applies to the applicant’s location or the job’s location |
| Credit check restrictions | Which roles may be screened for credit | Whether the position falls within a statutory exception |
| Drug testing rules | Marijuana testing limits; notice and rehabilitation requirements | Whether the state requires notice, a split sample, or restricts testing for off-duty use |
| Notice and consent format | State-specific disclosure language or timing | Whether a separate state form or additional notice is required |
How to verify current requirements
Rules change, and a matrix is only a starting point. Before each hire:
- Check the state labor or workforce agency website for the applicant’s and job’s locations.
- Check the city or county ordinance page for local add-ons.
- Confirm with your screening vendor that its forms and notices reflect current state language.
- Note the date you checked and the source you relied on in the applicant file.
A multi-state pool needs a multi-state review, and that is where a screening partner earns its keep. MacData handles checks across state lines through one system, so the compliance questions get answered before the report is ordered.
A jurisdiction matrix does not replace legal review, but it turns a vague instruction into a documented step. If you cannot show when and how you checked the applicant’s jurisdiction, you cannot show you screened consistently.
Conclusion
The hardest part of screening is not the report. It is keeping seven steps straight while hiring at speed. One missed notice or one inconsistent decision can undo years of careful work.
MacData offers FCRA-compliant screening with rapid turnaround, one secure system for all your checks, and a locally owned team with over a decade of experience. Customers tell us the process is quick and clearly explained, and that is the standard we hold.
Book an appointment with MacData and build a screening process you can defend.
Frequently Asked Questions
What can make you fail a pre-employment background check?
A pre-employment screening can return a criminal record, a discrepancy in employment or education history, a failed drug test, or an identity verification mismatch. Under the Fair Credit Reporting Act, the employer must give you a copy of the report and a summary of your rights before taking adverse action. You then have a chance to dispute inaccurate information with the consumer reporting agency. Many background check failures come from false positives or outdated records, so reviewing the report carefully matters.
Can an employer reject an applicant based on a background check?
Yes, but only after following the FCRA adverse action process. The employer must send a pre-adverse action notice that includes a copy of the background report and a summary of rights, wait a reasonable time (often five business days) for the applicant to dispute, and then send a final adverse action notice. The decision must also be based on job-related criteria and applied consistently. State and local ban-the-box laws may add steps, such as delaying the check until after a conditional offer.
How can employers reduce the risk of negligent hiring claims?
Negligent hiring prevention starts with a documented screening policy that covers all positions, consistent application of that policy, and thorough checks for roles that involve safety or fiduciary duties. Run criminal history, employment verification, reference checks, and license verification where relevant. Keep records showing what you checked and why. Using a reputable consumer reporting agency and following FCRA background check compliance for employers further reduces exposure to both negligent hiring and discrimination claims.
What steps must employers take before using a background check to make a hiring decision?
First, obtain written authorization from the applicant using a standalone employment background check authorization form that is separate from the application. Provide a clear disclosure that a consumer report may be obtained. If you plan to take adverse action based on the report, send a pre-adverse action notice with the report and summary of rights, allow time to dispute, then send a final adverse action notice. Also confirm that your screening criteria are job-related and consistent with business necessity.