New York Background Check Laws: Criminal, Credit, and Consent Rules

If you hire in New York, background check compliance runs on three tracks at once: Article 23-A of the Correction Law covers every employer in the state, the NYC Fair Chance Act adds strict timing and process rules for employers with four or more employees in the city, and the federal Fair Credit Reporting Act (FCRA) applies whenever you use a third-party screening company. New York background check laws for employers are layered rather than unified, and the most common compliance failures come from treating one framework as if it satisfied the others.

Which Framework Applies to You

Sort your obligations by location, headcount, and how you gather the information.

Article 23-A of the Correction Law applies statewide to every public agency and private employer that considers criminal history in hiring or licensing. There is no minimum employee count.
The NYC Fair Chance Act applies to employers with four or more employees in New York City and layers additional restrictions on the timing and process of criminal history inquiries.¹
The FCRA applies nationwide to any employer that uses a third-party consumer reporting agency to run a background check. Doing your own research in-house doesn’t trigger it; hiring a screening vendor does.²

Most New York City employers with four or more employees are subject to all three at the same time. Employers elsewhere in the state deal primarily with Article 23-A and the FCRA.

When You Can Ask About Criminal History

Under the NYC Fair Chance Act, criminal history is off-limits until after a conditional job offer. Job postings cannot say “no felonies,” “background check required,” or “clean record.” Applications cannot ask about arrests or convictions. Interviewers cannot raise the topic, and if an applicant volunteers it, the employer cannot use it. Authorization for a background check also has to wait until the conditional offer is made.¹

Once the conditional offer is on the table, an NYC employer can run the check and ask about the record.

Outside New York City, there’s no equivalent statewide ban-the-box timing rule for private employers under Article 23-A. What Article 23-A does control is the decision itself. Any employer in the state considering a denial based on a conviction must weigh eight factors:³

New York’s public policy encouraging the employment of people with criminal records
The specific duties of the job
Whether the conviction bears on the person’s ability to do the job
How long ago the offense occurred
The applicant’s age when the conduct happened
The seriousness of the offense
Any rehabilitation evidence the applicant offers, such as training, employment, or community involvement
The employer’s legitimate interest in protecting property or the safety of specific people or the public

A certificate of relief from disabilities or a certificate of good conduct creates a presumption of rehabilitation for the offenses it covers.⁴ After weighing the factors, denial is permitted only when there’s a direct relationship between the conviction and the job, or when hiring the person would create an unreasonable risk. If an applicant asks in writing, the employer has 30 days to give a written statement of reasons.⁵

Blanket policies that automatically disqualify anyone with a record are the fastest way to a lawsuit under both state law and federal Title VII guidance.

Withdrawing an Offer Because of the Background Check

When something on the report leads you to reconsider, the FCRA and the NYC Fair Chance Act each impose their own steps, and both apply.

The FCRA requires a two-step notice. First, a pre-adverse action notice with a copy of the report and a summary of the applicant’s FCRA rights, giving the applicant a reasonable period to review and dispute inaccuracies. Then, if you go through with the decision, a final adverse action notice that identifies the screening company, states that the vendor did not make the hiring decision, and tells the applicant about the right to dispute and get a free copy of the report.⁶

NYC employers must also complete a Fair Chance Analysis before making the withdrawal final:

Give the applicant a copy of the background check and any other documents used to identify the record.
Prepare a written analysis applying the Article 23-A factors and the NYC Fair Chance factors, and share it with the applicant.
Hold the position open for at least five business days from when the applicant receives the analysis, so the applicant can respond.¹

If the applicant sends new information during that window, revisit the analysis, update it in writing, and give the applicant another chance to respond. Skipping any step opens the door to enforcement by the NYC Commission on Human Rights.⁷

Credit History

In New York City, most employers cannot pull or consider credit history for hiring, promotion, or termination. The Stop Credit Discrimination in Employment Act treats it as an unlawful discriminatory practice and covers credit card debt, student loans, bankruptcies, judgments, liens, child support, and any other measure of creditworthiness.⁸

The exemptions are narrow:

Police and peace officers as defined under New York Criminal Procedure Law
Positions requiring a federal or state security clearance for access to classified information
Senior positions with significant financial authority, such as a CFO or COO overseeing funds or assets of $10,000 or more
Positions where a credit check is required by federal or state law or a self-regulatory organization⁹

Bank tellers, cashiers, salespeople, clerical workers, and private security staff are not exempt, even when they handle money. The financial-authority exemption targets executive control, not routine cash handling.⁸

Outside New York City there’s no equivalent blanket ban. Employers still have to follow the FCRA when a screening vendor pulls the report: written notice, written consent, and the adverse action sequence if the report drives a negative decision.¹⁰

What Can and Cannot Appear on the Report

The FCRA generally bars consumer reporting agencies from reporting adverse information older than seven years, including civil judgments, paid tax liens, collections, and arrests that did not lead to a conviction. Bankruptcies can go back ten years. Criminal convictions have no federal age limit and can be reported indefinitely under the FCRA alone.¹¹

New York narrows that gap. Under General Business Law Section 380-j, consumer reporting agencies cannot report criminal convictions more than seven years old for positions with an annual salary of $25,000 or more, which covers most jobs in the state.

The Clean Slate Act, signed into law in late 2023, adds automatic sealing on top of the reporting limits:

Misdemeanors are sealed three years after the sentence is imposed.
Felonies are sealed seven years after the sentence is imposed, with time spent incarcerated excluded from the count.

Sealed records are generally unavailable to employers and shouldn’t appear on a standard background check. Sex offenses and certain other categories are excluded from automatic sealing.¹² Don’t assume a report captures a complete history, and never penalize an applicant for failing to disclose a sealed record.

Disclosure and Consent Before Running the Check

The FCRA requires a standalone written disclosure, in clear language, telling the applicant a background check will be conducted. It has to be separate from the job application and free of unrelated content, including liability waivers. You also need the applicant’s written authorization before ordering the report.¹⁰

New York General Business Law Article 25 adds state-level requirements for investigative consumer reports, which go beyond database searches and involve personal interviews with acquaintances, former coworkers, or neighbors. Before ordering one, notify the applicant that such a report may be requested and provide a summary of rights. If the applicant asks, disclose the nature and scope of the investigation.

The most common FCRA mistake is a cluttered disclosure form. Burying the notice inside a longer document, adding waivers, or combining it with other forms is what turns a single hiring decision into class-action exposure. A one-page standalone document that says a background check will be conducted, and asks for the applicant’s signature, is the safe form.

Holding and Disposing of the Records

The EEOC requires employers to keep application materials and hiring records, including background check results, for at least one year after creation or after a personnel action, whichever is later. State and local government employers, educational institutions, and federal contractors with at least 150 employees and a contract worth at least $150,000 must keep them for two years. If a discrimination charge is filed, preserve all related records until the case ends.¹³

The FTC’s Disposal Rule requires reasonable measures to prevent unauthorized access when it’s time to get rid of the records. Paper has to be shredded, burned, or pulverized so it cannot be reconstructed. Electronic files have to be erased or the media destroyed. If you outsource destruction, use due diligence in picking and monitoring the vendor.¹⁴

What Noncompliance Costs

Penalties stack across the three frameworks.

A willful FCRA violation exposes the employer to statutory damages of $100 to $1,000 per affected individual, plus punitive damages, plus attorney’s fees and court costs. Negligent violations bring actual damages and attorney’s fees.¹⁵ The real risk is class actions: a defective disclosure form or a missed notice affects every applicant who went through the same process, and per-person damages scale accordingly. FCRA class actions regularly settle for millions on facts that look technical at first.

The NYC Commission on Human Rights enforces both the Fair Chance Act and the Stop Credit Discrimination in Employment Act. Civil penalties reach $125,000 per unlawful discriminatory practice, or $250,000 if the violation was willful, wanton, or malicious.¹⁶ The Commission can also order compensatory damages, back pay, and policy changes, and applicants can sue directly under the NYC Human Rights Law.

Violations of Article 23-A and the New York State Human Rights Law can produce compensatory damages, back pay, and reinstatement. Applicants can file with the New York State Division of Human Rights or go straight to court. Employers operating in New York City can face parallel investigations and penalties from state and city agencies at the same time.

1
NYC.gov. Fair Chance Act: Fact Sheet for Employers
2
Consumer Financial Protection Bureau. Fair Credit Reporting: Background Screening
3
New York State Senate. New York Correction Law 753 – Factors to Be Considered Concerning a Previous Criminal Conviction; Presumption
4
New York State Senate. New York Correction Law 753
5
NYS Division of Criminal Justice Services. Article 23-A of the Correction Law
6
Federal Trade Commission. What Employment Background Screening Companies Need to Know About the Fair Credit Reporting Act
7
NYC.gov. NYC Commission on Human Rights Legal Enforcement Guidance on the Fair Chance Act
8
NYC Commission on Human Rights. Stop Credit Discrimination in Employment Act: Legal Enforcement Guidance
9
City of New York Commission on Human Rights. FAQs for Stop Credit Discrimination in Employment Act
10
Federal Trade Commission. Background Checks on Prospective Employees: Keep Required Disclosures Simple
11
Federal Register. Fair Credit Reporting: Background Screening
12
New York State Senate. New York Senate Bill 2023-S211A
13
U.S. Equal Employment Opportunity Commission. Background Checks: What Employers Need to Know
14
eCFR. Part 682 – Disposal of Consumer Report Information and Records
15
Office of the Law Revision Counsel. 15 U.S. Code 1681n – Civil Liability for Willful Noncompliance
16
NYC Administrative Code. Section 8-126 Civil Penalties Imposed by Commission