Why Employers Must Get Permission for Background Checks

Employers often use background checks to confirm identity, assess risk, and verify information supplied by job applicants. But the law does not allow screening to happen casually or secretly. In many hiring situations, employers must first provide clear notice, obtain written permission, and follow specific procedures before using a third-party background reporting company.

The rules matter for both sides of the hiring relationship. Employers reduce legal risk when they follow the correct process, and applicants gain a chance to understand what information may be collected and to challenge mistakes before an employment decision is made.

What a lawful background check process usually requires

A background check is not just a private employer decision; when a consumer reporting agency is involved, the Fair Credit Reporting Act applies. That framework generally requires employers to give a standalone disclosure, obtain written authorization, and handle adverse decisions through a separate notice process.

• Give the applicant a clear written disclosure before the check begins.
• Obtain the applicant’s written permission to order the report.
• Use the information only for a legitimate hiring purpose.
• Provide pre-adverse and adverse action notices if the report may lead to rejection.

These obligations are designed to prevent surprise screening and to ensure that people are not denied opportunities because of inaccurate or incomplete records.

Why written consent is so important

Written consent is one of the central safeguards in the background check process. The FTC explains that employers must get an applicant’s written permission before using a background reporting company, and the EEOC likewise states that applicants and employees must authorize the check in writing.

That consent is not a formality. It is evidence that the person knew a background report was being requested and understood that the employer might use the information when making a hiring, promotion, or firing decision. If the employer wants to continue obtaining reports during employment, that broader use should be stated clearly and conspicuously.

What the notice should tell applicants

The notice requirement is intended to be straightforward. A separate disclosure informs the applicant that a background report may be obtained and may affect the employer’s decision. The notice should stand on its own rather than being hidden inside a long application or buried among unrelated terms.

Applicants also have rights after a negative report is used against them. Before an employer makes a final adverse decision, the person generally must receive a copy of the report and a summary of rights so that errors can be corrected.

When an employer cannot rely on background information

Even when a background check is allowed, employers cannot use it in a discriminatory way. The EEOC warns that screening decisions may not be based on race, national origin, color, sex, religion, disability, genetic information, or age for workers age 40 or older. Employers must apply the same standards to everyone and be careful when using criteria that may disproportionately affect protected groups.

That means the presence of a record does not automatically end the inquiry. According to best-practice guidance, employers should consider the job involved, the nature of the offense, and how much time has passed before deciding whether a disqualifying risk actually exists.

The role of individualized assessment

One of the most important ideas in modern hiring law is individualized assessment. Rather than treating every record the same, an employer should consider whether a particular conviction is genuinely relevant to the duties of the job.

This is especially important where the work involves money, confidential information, fiduciary responsibilities, or other sensitive duties. The Stephens Law Firm notes that legitimate business reasons matter, and that employers should not make automatic exclusions without looking at the facts. Best-practice materials similarly recommend focusing on recent, job-related convictions instead of using prior criminal history as a blanket disqualifier.

How ban-the-box rules change the timing

In many jurisdictions, employers are not allowed to ask about criminal history too early in the hiring process. The materials provided in the search results show that some state laws require employers to wait until after an interview, a conditional offer, or another defined stage before asking about criminal records.

This timing rule is often described as ban-the-box policy. Its purpose is to ensure that applicants are first evaluated on qualifications and experience rather than immediately being filtered out because of a record. The exact rule depends on the state and employer size, so companies must check local law before adding criminal-history questions to applications or interview forms.

What employers should review before ordering a report

Before requesting a background check, employers should ask a basic compliance question: is the report truly necessary for this job? Background checks can be legitimate when tied to business needs, but they should not be used as a fishing expedition.

Common reasons for a lawful check include positions that involve access to money, confidential data, or legal responsibilities over other people’s property or finances. Employers should also remember that more information is not always better; overbroad screening can create unnecessary legal exposure and can exclude qualified candidates for reasons unrelated to the work.

What happens if the report may lead to rejection

If an employer plans to deny employment because of something in the report, it must follow the adverse action process required by the FCRA. That process gives the applicant a chance to review the report, dispute inaccuracies, and understand which company supplied the information.

This step is not optional. The FTC explains that employers must give the person a copy of the report and a summary of rights before making a final decision, and then provide a final adverse action notice if the decision stands. The point is to avoid final decisions based on wrong information or on records that the applicant could have corrected.

Why accuracy matters so much

Background reports can contain mistakes, outdated entries, or records that belong to someone else. Because those errors can affect hiring, employers are expected to use reliable reporting practices and applicants are given a right to dispute inaccuracies.

This accuracy requirement is one reason employers should avoid treating a background report as an absolute truth. A report is a tool for decision-making, not a substitute for judgment. When the data is incomplete or when an issue is old and irrelevant, a careful review is more defensible than a reflexive denial.

How state law can be stricter than federal law

Federal rules do not always tell the whole story. The search results show that some states impose additional limits, including rules about criminal-history questions, timing, and reporting periods. Texas materials, for example, describe restrictions on asking about criminal history on applications for certain employers and note that criminal background checks may look back seven years in some contexts.

New York sources also show limits on how employers may use criminal history and when they may inquire about it. Because these laws vary widely, employers must check both federal and state requirements before updating their forms or screening practices.

Best practices for a fairer screening policy

A strong background check policy should do more than satisfy technical legal requirements. It should also support fair, consistent hiring decisions.

• Use a job-related screening standard tied to actual workplace risk.
• Wait until the proper stage of the hiring process to ask about criminal history.
• Keep the disclosure and authorization separate from unrelated paperwork.
• Review reports individually instead of using automatic bans.
• Give applicants a meaningful chance to correct errors before final rejection.

These practices can reduce the chance of unlawful discrimination while also improving the quality of hiring decisions.

Frequently asked questions

Do employers always need permission for a background check?

When the employer uses a consumer reporting agency, written permission is generally required before the check is run.

Can an employer reject an applicant based on any criminal record?

No. Employers should consider whether the record is relevant to the job and should avoid blanket exclusions that are not tied to business necessity.

Can the background check be used before an interview?

Sometimes federal law allows a check at the hiring stage, but some states limit when criminal-history questions can be asked or when screening can begin.

What if the report is wrong?

The applicant has the right to dispute inaccurate information, and the employer must provide required notices before making a final adverse decision.

Does the same rule apply after someone is hired?

Yes, the FCRA rules can also apply to employment-related reports used for promotions, continued employment, or other workplace decisions.

Practical takeaway for employers

Employers can use background checks responsibly, but only when they respect consent, notice, accuracy, and fairness requirements. The safest approach is to connect screening to the real demands of the job, obtain written authorization, and treat the report as one part of a careful, individualized review rather than as a final answer.