The FCRA adverse action process runs in two stages built around one requirement: give the candidate a real chance to respond before a background check decision becomes final. In practice that means sending a pre-adverse action notice with a copy of the report and a summary of rights, waiting a reasonable amount of time for a response, and only then sending a final adverse action notice if the employer proceeds. Skipping either notice, or moving too fast between them, is one of the most common triggers for Fair Credit Reporting Act class action claims against employers.
This article is general information for employers and is not legal advice. Screening programs should be reviewed with qualified counsel before rollout.
What Counts as Adverse Action in Background Screening
Under the FTC’s employer guidance, adverse action covers any employment decision made in whole or in part because of information in a consumer report, including denying a job application, reassigning or terminating an employee, or denying a promotion. The trigger is not the background check itself. It is the decision that follows it. An employer who orders a report but hires the candidate anyway has not taken adverse action and owes no adverse action notice. An employer who rejects, demotes, or terminates based even partly on the report has, and the FCRA’s notice requirements apply.
Step One: The Pre-Adverse Action Notice
Before finalizing any adverse decision, 15 U.S.C. 1681b(b)(3)(A) requires the employer to provide the individual with a copy of the consumer report and a written description of the individual’s rights under the FCRA. This is the pre-adverse action step, and its purpose is to let the candidate see exactly what the employer saw before a final decision is made. The statute’s language is direct: the employer intending to take adverse action “shall provide to the consumer to whom the report relates a copy of the report and a description in writing of the rights of the consumer” under the law.
What Must Accompany the Notice
Two documents have to go out with the pre-adverse notice, not after it:
- A copy of the consumer report the employer relied on, exactly as the reporting agency produced it.
- A copy of the CFPB’s “A Summary of Your Rights Under the Fair Credit Reporting Act,” the standard model disclosure that explains, among other things, that the individual has the right to know what is in the file, to dispute incomplete or inaccurate information with the reporting agency, and to have unverifiable information removed or corrected.
There is a narrow statutory exception in 15 U.S.C. 1681b(b)(3)(B) for certain remote hiring situations tied to positions regulated by the Secretary of Transportation, where the employer can instead notify the individual within three business days after taking adverse action. That carve out is limited to specific transportation related roles and remote application processes; it does not give general employers a shortcut around the pre-adverse step. Employers hiring for regulated driving positions should treat this exception carefully rather than assume it applies broadly. Our overview of transportation background check requirements walks through how DOT-regulated hiring differs from standard employment screening, and our guide to FMCSA Clearinghouse queries covers the additional pre-employment and annual checks that apply on top of the standard FCRA notice sequence for commercial drivers.
Step Two: Giving the Candidate a Reasonable Chance to Respond
Between the pre-adverse notice and any final decision, the FCRA requires a reasonable opportunity for the candidate to review the report and respond, but neither the statute nor the FTC’s guidance sets an exact number of days for that window. Many employers adopt five business days as their internal default so the opportunity to respond is real and documented, while noting that some states layer on their own separate waiting periods. Whatever internal standard an employer sets, it should be applied consistently and documented, because inconsistent timing across candidates is itself a pattern plaintiffs’ attorneys look for in disparate treatment claims.
During this window the candidate may contact the reporting agency to dispute inaccurate or incomplete information, as described in the CFPB’s summary of rights, which states that a consumer who identifies incomplete or inaccurate information and reports it “must” have the reporting agency investigate unless the dispute is frivolous. If a dispute comes back with a correction, the employer needs to reassess the decision against the corrected report rather than the original one. This is also the point where report content specific to an industry can matter. Healthcare and pharmacy employers, for example, often need to confirm whether a candidate appears on exclusion or debarment lists; our explainer on FACIS levels covers how those searches are structured and why the level selected affects what shows up for review.
Step Three: The Final Adverse Action Notice
If, after the waiting period, the employer proceeds with the adverse decision, a second notice is required: the final adverse action notice. Per the FTC’s guidance, this notice must include:
- The name, address, and phone number of the consumer reporting agency that supplied the report.
- A statement that the reporting agency did not make the adverse decision and cannot explain the specific reasons for it.
- Notice of the individual’s right to dispute the accuracy or completeness of the report with the reporting agency.
- Notice of the individual’s right to an additional free report from that agency if requested within sixty days.
The final notice closes the loop that the pre-adverse notice opened. It confirms the decision, redirects any further dispute to the reporting agency rather than the employer, and preserves the candidate’s remaining rights under the FCRA, including the right to a follow-up free report described in the CFPB’s summary of rights.
Common Employer Violations That Lead to Class Actions
Most FCRA class actions against employers trace back to the same handful of process failures rather than deliberate misconduct. A well documented example is the 2016 settlement in which a rideshare company agreed to pay 7.5 million dollars to resolve claims that it obtained background reports on driver applicants without proper notice or consent, and took adverse action, including rejecting applications and deactivating accounts, without first providing a copy of the report or a summary of rights that would have let drivers dispute inaccuracies before the decision was final. The case illustrates the pattern regulators and plaintiffs’ firms watch for:
- Skipping the pre-adverse notice entirely and moving straight to a final decision.
- Sending the pre-adverse notice without the report or the summary of rights attached, rather than as part of the same disclosure.
- Not building in a real waiting period, so the “opportunity to respond” exists on paper but not in practice.
- Combining the adverse action notice with other required disclosures in a way that adds extra language the FTC’s guidance says these standalone notices should not contain.
- Treating a background check vendor’s output as final without a documented human review step before the employer’s own decision.
None of these are exotic failures. They are gaps in a checklist, which is exactly why a written, repeatable process matters more than good intentions.
Compliance Checklist for Employers
- Confirm the decision is actually adverse action under the FTC’s definition before triggering any notice.
- Send the pre-adverse notice with a full copy of the consumer report attached.
- Include the current CFPB model Summary of Your Rights Under the FCRA with that same notice.
- Set a documented, consistent waiting period before finalizing the decision, and apply it the same way to every candidate.
- Log any dispute the candidate raises with the reporting agency and re-run the decision against corrected information if a correction comes back.
- If proceeding with adverse action, send the final notice with the reporting agency’s contact information, the required statements about who made the decision, and the free-report right.
- Keep the pre-adverse and final notices as standalone documents rather than folding them into unrelated employment paperwork.
- Review screening volume and reporting agency selection periodically; details on plan options are on our pricing page.
Frequently asked questions
What is the first step in the FCRA adverse action process?
The first step is the pre-adverse action notice, sent before any final decision, which must include a copy of the consumer report and a copy of the CFPB’s Summary of Your Rights Under the Fair Credit Reporting Act, as required by 15 U.S.C. 1681b(b)(3).
How long does an employer have to wait between the pre-adverse and final adverse action notice?
The FCRA itself does not set an exact number of days; it requires a reasonable opportunity for the candidate to respond. Five business days is a common internal default among employers, and employers should also check state specific waiting period rules that may apply on top of federal law.
What must the final adverse action notice include?
Per FTC guidance, the final notice must name the reporting agency that supplied the report along with its address and phone number, state that the agency did not make the decision and cannot explain the reasons for it, and inform the individual of the right to dispute the report and to request an additional free report within sixty days.
What is the most common mistake that leads to FCRA class action claims?
Skipping or shortcutting the pre-adverse action step is the recurring pattern in employer litigation, including cases where a company took adverse action against applicants without first providing a copy of the report or the summary of rights, such as the 7.5 million dollar settlement tied to driver background checks.
