Employment Credit Checks: Employer Rules, Adverse Action, and Remedies

Under the federal employment credit check rules in the Fair Credit Reporting Act, an employer can pull a modified version of your credit report only after giving you a standalone written disclosure, getting your signed authorization, and, if the report leads to a rejection, walking through a two-step adverse action process that lets you see the report first. Skip any of those steps and the employer is exposed to a federal lawsuit with statutory damages between $100 and $1,000 per violation. Some states and cities add a further layer by banning credit checks for most jobs outright.

What the Employer Must Do Before Pulling Your Report

Federal law requires two separate things before any credit report is requested: a written disclosure telling you a report may be pulled, and your written authorization allowing it.¹ The disclosure has to stand alone. It cannot be buried in a job application, slipped into an employee handbook, or stapled to the back of a benefits packet. Your authorization can appear on the same page as the disclosure, but nothing else can share that page.

The authorization form will ask for your full legal name, Social Security number, date of birth, and your current and previous addresses. That information lets the consumer reporting agency match the right file to the right person. If the employer wants the option to run checks later during your employment, the disclosure has to say so up front.² A one-time hiring authorization doesn’t cover future checks unless the language explicitly says so.

The employer also has to certify to the credit reporting agency that it followed these steps, that it will follow the adverse action process, and that the information won’t be used in a way that violates equal employment opportunity law.¹ Any shortcut on these front-end requirements becomes evidence in a later lawsuit.

What the Employer Actually Sees

An employment credit report is not the same report a mortgage lender gets. The biggest practical difference is that it contains no credit score. No FICO number, no VantageScore. The employer sees the underlying history, not a three-digit summary.

The report typically includes your payment history, open accounts and balances, collections, and any credit inquiries from the past two years. Bankruptcies are the one public record type that still appears, and they can stay on the report for up to ten years from the filing date.³ Most other negative information drops off after seven years.

One point worth clearing up: tax liens and civil judgments no longer appear on reports from the three nationwide bureaus. They were removed between 2017 and 2018 as part of a settlement with more than 30 state attorneys general.⁴ If you’ve been bracing for an old judgment to tank an application, that’s one worry you can put down.

When State or City Law Bans the Check

Federal law permits credit checks for any job. Roughly a dozen states and several major cities have passed their own laws restricting the practice, generally prohibiting employers from using credit history in hiring decisions for most positions. The exemptions commonly cover jobs at banks and credit unions, positions with regular access to large sums of money, law enforcement and roles requiring security clearances, and senior management jobs with signatory authority over company assets.

If an employer runs a check for a position that doesn’t fit one of those exceptions, you may have a claim under state law. These rules change often and vary widely, so a call to your state labor department is the practical first step before assuming a check in your situation was illegal.

What Has to Happen if the Report Costs You the Job

When an employer decides not to hire you based partly or entirely on your credit report, federal law forces a two-step process. This is where most employers trip, and it’s also where your rights have the most teeth.

Pre-Adverse Action Notice

Before finalizing the decision, the employer has to send you a pre-adverse action notice that includes a copy of your credit report and a document called “A Summary of Your Rights Under the Fair Credit Reporting Act.”¹ The point is to give you a chance to review the report for errors before the rejection becomes final. An employer who jumps straight to rejection without this notice has violated the FCRA.

The law then requires a “reasonable” waiting period. The statute doesn’t name a specific number of days, but five business days is the widely accepted standard.² That window is yours to use.

Final Adverse Action Notice

If you don’t dispute anything, or your dispute doesn’t change the outcome, the employer has to send a final adverse action notice containing the name, address, and phone number of the consumer reporting agency that supplied the report; a statement that the agency did not make the hiring decision and cannot explain it; notice that you can request a free copy of your report from that agency within 60 days; and notice that you can dispute inaccurate or incomplete information with the agency.⁵

That 60-day free report is a separate right from your regular annual free disclosure. If adverse action was taken against you, you’re entitled to this additional copy from the specific agency that furnished the report.⁶

Fixing Errors During the Waiting Window

If the pre-adverse action notice reveals something wrong on your report, you can dispute it directly with the consumer reporting agency. The agency has to investigate within 30 days of receiving the dispute. That window extends to 45 days in certain situations, including when you submit additional supporting documentation during the investigation or when the dispute follows your free annual report request.⁷ After the investigation closes, the agency has five business days to tell you the results.

If the bad information is the result of identity theft, you can request a block rather than a dispute. You’ll need proof of your identity, a copy of an identity theft report, identification of the specific fraudulent items, and a statement that you didn’t authorize those transactions.⁸ The agency has four business days to block the information after it receives a complete request. The block can later be lifted only if the agency reasonably determines the request involved a material misrepresentation or was submitted in error.

What You Can Recover if the Employer Broke the Rules

The FCRA creates two tracks of liability depending on how badly the employer missed.

Willful Violations

If the employer knowingly ignored the FCRA’s requirements, a court can award you actual damages or statutory damages between $100 and $1,000 per violation, whichever is greater, plus punitive damages in whatever amount the court considers appropriate.⁹ The employer also pays your attorney’s fees and court costs. Willful violations usually involve employers who skipped the disclosure and authorization steps entirely, or who never sent either adverse action notice.

Negligent Violations

An employer that tried to comply but fell short can still be held liable. Negligent noncompliance entitles you to actual damages plus attorney’s fees and court costs, with no statutory damages and no punitive damages.¹⁰ You have to prove the actual financial harm you suffered. A common negligent violation is bundling the credit check disclosure with other hiring paperwork instead of keeping it on its own page.

Class action lawsuits against large employers who use a flawed disclosure form across thousands of applicants have become increasingly common. Even modest per-person damages add up quickly at that scale.

Credit Checks After You’re Hired

Credit checks aren’t limited to hiring. An employer can also pull your report during employment for promotions, reassignments, or retention decisions. The same federal rules apply: standalone disclosure, written authorization, and the full adverse action process if a negative decision follows.¹

One wrinkle to know about: if the employer’s original disclosure said it could obtain reports throughout your employment, a new disclosure isn’t needed for each later check. If the original form only covered the hiring decision, fresh authorization is required before any later report.² If you signed authorization years ago and are now being screened for an internal transfer, pull out what you originally signed and read it.

When a Credit-Based Rejection Looks Like Discrimination

The FCRA isn’t the only law in play. The EEOC has recognized that rejecting applicants based on poor credit history can disproportionately exclude minority groups, raising disparate impact concerns under Title VII of the Civil Rights Act.¹¹ If an applicant shows the practice disproportionately screens out a protected class, courts have required the employer to show the credit criterion is job-related and consistent with business necessity.

If you believe a credit-based rejection targeted a position where your credit history had no real connection to the job duties, that’s worth raising with the EEOC or an employment attorney alongside any FCRA claim.

1
Office of the Law Revision Counsel. 15 USC 1681b – Permissible Purposes of Consumer Reports
2
Federal Trade Commission. Using Consumer Reports: What Employers Need to Know
3
Office of the Law Revision Counsel. 15 USC 1681c – Requirements Relating to Information Contained in Consumer Reports
4
Consumer Financial Protection Bureau. A New Retrospective on the Removal of Public Records
5
Office of the Law Revision Counsel. 15 USC 1681m – Requirements on Users of Consumer Reports
6
Office of the Law Revision Counsel. 15 USC 1681j – Charges for Certain Disclosures
7
Consumer Financial Protection Bureau. How Long Does It Take to Repair an Error on a Credit Report?
8
Federal Trade Commission. FCRA 605B – Block of Information Resulting From Identity Theft
9
Office of the Law Revision Counsel. 15 USC 1681n – Civil Liability for Willful Noncompliance
10
Office of the Law Revision Counsel. 15 USC 1681o – Civil Liability for Negligent Noncompliance
11
U.S. Equal Employment Opportunity Commission. EEOC Informal Discussion Letter