Privacy Guide

Employer Background Checks: Your Rights Under the FCRA

What an employer must tell you before and after a background report is used against you.

Updated October 24, 2026
TL;DR

Under the Fair Credit Reporting Act, an employer who wants a background report from a reporting company must tell you in writing, in a document that contains only that notice, and get your written permission. If it plans to reject you or take another adverse action based on the report, it must first give you a copy of the report and a summary of your rights. You can get a free additional copy from the reporting company if you ask within 60 days, dispute inaccuracies and report problems to the FTC.

Your email is the key to most of your accounts. Has it already leaked?

Free · About 30 seconds · No sign-up · Email not stored

Many employers check a job candidate’s history. The law sets rules for how they do it. This guide follows the FTC’s consumer guidance on background checks.

What the law requires before a check

When an employer asks a consumer reporting company for a background report, the Fair Credit Reporting Act applies. According to the FTC:

  • the employer must tell you in writing that it may use the report to make an employment decision, in a stand-alone document with no other information in it;
  • the employer must get your written permission to run the report;
  • the company that provides the report must have a permissible purpose and certify to its own obligations.

If you refuse to give permission, an employer may decide not to hire you, so think about what you want to do before you sign.

What happens before an adverse decision

If the employer plans to take an adverse action, such as not hiring, not promoting, or firing you, based on the report, it must first:

  • give you a copy of the report;
  • give you a copy of the “Summary of Your Rights Under the Fair Credit Reporting Act”.

This gives you a chance to explain or correct the information before a final decision. After a final adverse decision, the employer must say so and tell you how to contact the reporting company.

Quick check before you read on: is your email in a known data breach? Free, about 30 seconds.

Free · About 30 seconds · No sign-up · Email not stored

Your rights with the reporting company

  • A free extra copy. If you ask within 60 days of the adverse action, the reporting company must give you a free copy of the report.
  • Dispute errors. You can dispute inaccurate or incomplete information with the reporting company, which must investigate.
  • Report problems. The FTC asks you to report violations at ReportFraud.ftc.gov.

How errors get into reports

Reports can contain mistakes: records matched to the wrong person, old entries that should have been removed, or duplicates. Common names make matches more likely to go wrong. Request your report early if you expect a check, read every line and compare it with your own records.

Check what employers can see

Beyond formal reports, employers often search the open web. Search for your own name and see what appears; our guides on searching Google for your personal information and checking your online presence before a job application explain how.

Records you may want to check yourself

Beware of fake job offers

Scammers pose as employers and ask for personal details for a “background check”. Never send identity documents or financial details before you have verified the employer. See fake job offer red flags.

Steps to take

  1. Read the disclosure carefully before you sign the permission form.
  2. Ask which company will run the report.
  3. Request your own report from that company if you are concerned.
  4. If you get an adverse notice, ask for the report and the summary of rights, then dispute errors in writing.
  5. Keep records of what you were sent and when.
  6. Report violations to the FTC.

For rental applications, similar rules apply; see tenant screening reports.

Key point. Employers need a stand-alone written notice and your written permission, and they must give you a copy of the report before an adverse decision. Dispute errors early.

Sources

Frequently asked questions

Do employers need my permission for a background check?

Yes. Under the FCRA, they must tell you in writing in a stand-alone document and get your written permission.

What must an employer do before rejecting me because of the report?

Give you a copy of the report and a summary of your rights before taking the adverse action.

Can I get a free copy of the report?

Yes, if you ask the reporting company within 60 days of the adverse action.

How do I fix an error?

Dispute it with the reporting company, which must investigate.

Where do I report violations?

At ReportFraud.ftc.gov.

Step 1 · Free

See if your email has already leaked

  • Checks your email against known data breaches
  • Shows which sites leaked it, when, and what leaked
  • We do not store the email you check
Check my email free →
Step 2 · Remove your listings

Compare data removal services

See which services work in your country, what they cost, and the free do-it-yourself route.

Compare removal services →

Prefer a one-time report first? Scan My Shadow, our sister service, $9.99.

Digital Footprint Scan creates practical privacy guides designed to help people understand and reduce unnecessary online exposure. Information can vary by website and jurisdiction, so check the current policies of the service or site involved before taking action.