When using background checks as part of your hiring process, HR professionals must follow strict guidelines under the Fair Credit Reporting Act (FCRA). One of the most critical parts of this regulation is the adverse action process. Understanding how to handle background check adverse action properly protects your organization from FCRA lawsuits—which are among the fastest-growing categories of employment class actions—while maintaining a respectful and legally defensible candidate experience. FCRA statutory damages can reach $1,000 per plaintiff per violation, and class actions involving thousands of applicants who received defective adverse-action notices have resulted in settlements exceeding $10 million. The procedural steps are straightforward; the errors that create liability are almost always preventable.

What Is the FCRA Adverse Action Process?

The FCRA adverse action process is the two-step notice procedure employers must follow whenever information from a consumer report—most commonly a background check ordered through a Consumer Reporting Agency (CRA)—plays any part in an adverse employment decision. "Adverse employment decision" under the FCRA is broader than most HR professionals assume: it includes not only outright rejection of a candidate but also withdrawal of a conditional offer, failure to promote, reassignment to a less desirable position, and termination of an existing employee. If background check information was a factor in any of those outcomes, the FCRA adverse action process applies.

The process has two legally distinct phases: the pre-adverse action notice (sent before the final decision is made) and the final adverse action notice (sent after the waiting period has elapsed and the decision is confirmed). Skipping the pre-adverse action step, conflating the two notices into one document, or failing to allow a meaningful opportunity to respond are the three most common errors that generate FCRA class actions.

Before ordering any background check from a CRA, the employer must provide the candidate with a clear and conspicuous written disclosure that a consumer report may be obtained for employment purposes. This disclosure must be provided in a document that consists solely of the disclosure—you cannot embed it within a job application, offer letter, or employee handbook. The candidate must then provide written authorization.

Common violations at this stage include including a liability waiver, an at-will employment statement, or any other content in the same document as the FCRA disclosure. Courts have held that even a short boilerplate release embedded in a disclosure form can render the entire disclosure defective, exposing the employer to per-applicant statutory damages for every background check run using that flawed form. Treegarden’s hiring workflows can deliver a standalone FCRA disclosure form and capture the candidate’s electronic authorization prior to any background check being initiated.

Step 2: Receive and Evaluate the Background Check Report

Once the background check is complete and the CRA delivers the consumer report, HR must evaluate the findings through two lenses. First, are the findings accurate? CRA reports contain errors at a rate that independent studies estimate at 25–40%, including information belonging to another individual with a similar name, outdated criminal records that were expunged or dismissed, and incorrect employment dates. Before taking any adverse action, HR should assess whether the finding is confirmed and accurate.

Second, is the adverse finding relevant to the specific job? The EEOC’s 2012 guidance on criminal history requires employers to conduct an individualized assessment that considers: the nature and gravity of the offense, the time elapsed since the offense or completion of sentence, and the nature of the job. A blanket policy that automatically disqualifies any applicant with any criminal record—regardless of the offense type or how long ago it occurred—violates Title VII in the EEOC’s view and is also potentially unlawful under "ban-the-box" laws now in effect in more than 35 states and 150 cities and counties.

Individualized Assessment Is Not Optional

If your organization has a blanket criminal record disqualification policy—rejecting anyone with any conviction—you are likely in violation of EEOC guidance and potentially Title VII. Replace blanket policies with a documented job-relevance analysis for each adverse finding. This does not mean you must hire candidates with serious relevant criminal history; it means you must evaluate each case on its specific facts before making the final decision.

Step 3: Issue the Pre-Adverse Action Notice

Before making any final adverse employment decision based on the background check, the employer must send a pre-adverse action notice to the applicant. This notice must include three required enclosures: (1) a copy of the consumer report that was used in the decision, (2) a copy of the FTC’s "A Summary of Your Rights Under the Fair Credit Reporting Act" document (the FTC publishes the current version on its website), and (3) any written description of the employer’s consideration criteria if applicable.

The pre-adverse action notice itself should state clearly that the employer is considering an adverse employment decision based in part on the information in the attached background check report, and that the applicant has the right to dispute the accuracy of the report with the CRA. It should include the CRA’s name, address, and phone number, and should specify the waiting period before the final decision will be made.

The FCRA does not specify a minimum number of days that must elapse between the pre-adverse notice and the final adverse action; it requires only that a "reasonable time" be allowed for the candidate to respond. The FTC and most employment attorneys recommend at least five business days as the minimum safe harbor, and many organizations use seven calendar days or longer. Some state laws impose longer minimums: California requires a minimum of five business days, and the waiting period under the New York City Fair Chance Act is ten business days.

Step 4: Allow the Candidate a Genuine Opportunity to Respond

The waiting period is not a formality. Its purpose is to give the candidate a real opportunity to identify errors in the report and to provide context about their background. If the candidate contacts the employer during this window to explain that a criminal record belongs to someone else with the same name, or that a conviction was expunged, the employer must genuinely consider that information before finalizing the decision. Sending the final adverse action notice on the same day as the pre-adverse notice—or the following day, before any reasonable opportunity for a response—is a FCRA violation regardless of whether the waiting period language was in the notice.

Employers are not required to hire the candidate based on their response. The individualized assessment must be genuine, but the outcome remains within the employer’s discretion as long as the decision is job-related and consistent with business necessity. Document every candidate response received, what was considered, and how it was weighed.

Step 5: Issue the Final Adverse Action Notice

After the waiting period has elapsed and the employer has reviewed any candidate response, the final adverse action notice can be issued. The final notice must include: the CRA’s name, address, and phone number; a statement that the CRA did not make the adverse decision and cannot explain why the decision was made; a statement of the applicant’s right to obtain a free copy of the consumer report from the CRA within 60 days; and a statement of the applicant’s right to dispute the accuracy of the information with the CRA.

The final adverse action notice does not need to identify which specific items in the report influenced the decision—the FCRA does not require that level of disclosure in the notice itself (though this information may be required under state law in some jurisdictions, and should be documented internally regardless). Use clear, professional language. Avoid language that speculates about criminal history beyond what is necessary, and never include language that could be construed as an additional disclosure about specific offenses that could itself create defamation exposure.

State Law May Require More

California, New York City, Philadelphia, Seattle, and several other jurisdictions impose requirements that go beyond the FCRA baseline—including longer waiting periods, specific additional disclosures, and in some cases a formal written explanation of the specific conviction or finding that led to the adverse decision. Multi-state employers should maintain jurisdiction-specific adverse action notice templates to ensure local compliance at every hiring location.

Recordkeeping, Auditing, and ATS Support

Automate the Adverse Action Workflow with Treegarden

Treegarden integrates with background check providers and can automate each stage of the FCRA adverse action workflow—triggering the pre-adverse notice, enforcing the minimum waiting period before the final notice is available, and storing every document in a time-stamped, audit-ready candidate file. This eliminates the manual tracking errors that generate most FCRA class actions and gives HR teams a defensible paper trail for every background-check-related decision.

Regardless of the tools used, employers should retain the following documentation for each background-check-related adverse action for a minimum of five years: the signed FCRA disclosure and authorization form, the consumer report itself, the pre-adverse action notice with delivery confirmation, any candidate response received during the waiting period, the individualized assessment document, and the final adverse action notice with delivery confirmation. In the event of a complaint or lawsuit, this documentation is your primary defense. Without it, the presumption runs against the employer.

Related Reading Helpful Calculators

Frequently Asked Questions

What is the FCRA adverse action process?

The FCRA adverse action process is the legal procedure employers must follow when rejecting a candidate based on background check results. It includes pre-adverse and adverse action notices to ensure compliance with the Fair Credit Reporting Act.

How long must an employer wait before issuing an adverse action?

The candidate must be given at least five business days to respond to the pre-adverse action notice before an employer can issue a final adverse action decision.

What should be included in an adverse action notice?

An adverse action notice should include the background check agency’s contact information, a summary of the report, and information about the candidate’s right to dispute the report.

Can an employer reject a candidate without following the FCRA process?

No. Failing to follow the FCRA adverse action process can result in legal consequences, including lawsuits and fines from regulatory agencies.

How can an ATS like Treegarden help with adverse action compliance?

An ATS like Treegarden can automate notifications, track candidate responses, and ensure all FCRA-compliant steps are completed accurately and on time.