Background Check Authorization Form: A Guide for Employers
Learn everything you need to know about background check authorization forms, legal compliance requirements, and best practices for HR managers, startup founders, and small business owners.
Introduction
A Background Check Authorization Form is a legal document that employers use to obtain permission from job candidates or employees before conducting background checks. This form is not just a formality—it's a critical compliance requirement under federal and state laws, including the Fair Credit Reporting Act (FCRA). For HR managers, startup founders, and small business owners, understanding how to properly implement background check authorizations can protect your company from potential lawsuits while helping you make informed hiring decisions. This guide explains what these forms must include, how to use them correctly, and common pitfalls to avoid.
0/5000
Key Things to Know
- 1
The Background Check Authorization Form must be a standalone document, separate from your employment application and other onboarding paperwork.
- 2
You must provide a clear disclosure that you will be conducting a background check and obtain written authorization before proceeding with any background screening.
- 3
If you take an adverse action (like not hiring someone) based on background check results, you must follow the FCRA's two-step adverse action process, which includes providing pre-adverse action and adverse action notices.
- 4
Different types of background checks (criminal, credit, driving records, etc.) may have different legal requirements and restrictions depending on your state and industry.
- 5
Keep signed authorization forms on file for at least the duration of employment plus any applicable statute of limitations period for potential claims.
- 6
Review and update your Background Check Authorization Forms regularly to ensure continued compliance with changing laws and regulations.
- 7
Consider working with a reputable background check provider that understands compliance requirements and can help you navigate the legal landscape.
Key Decisions
Small Business Owner
Your choice of background check provider affects the specific language needed in your authorization form, as well as the reliability and compliance of your background check process. The FCRA places obligations on both employers and the consumer reporting agencies (CRAs) that provide background checks.
Professional background check company (established provider specializing in employment screening)
Most common and generally safest option. These companies typically provide FCRA-compliant forms and processes, reducing your compliance burden.
Most Common OptionIntegrated HR platform (background checks through your existing HR software)
Increasingly common for businesses using comprehensive HR platforms. Convenient but requires verifying that the integrated solution is fully FCRA-compliant.
Direct checks with primary sources (court records, previous employers, etc.)
Less common due to complexity and compliance risks. May be less expensive but places full compliance burden on your business and may miss important information.
While the FCRA requires written authorization, you can choose different levels of consent that affect what you can do with the background check information and when. The scope of consent affects your flexibility in using the information and may require different language in your authorization form.
Standard one-time consent (authorization for a single background check)
Most common for small businesses. Simplest approach that meets basic FCRA requirements for a single check.
Most Common OptionBlanket consent (authorization for background checks throughout employment)
Common for positions with ongoing compliance requirements. Provides flexibility but may raise privacy concerns and might not be enforceable in all jurisdictions.
Tiered consent (different levels of authorization based on stages of the hiring process)
Less common but used by some larger organizations. Balances privacy concerns with business needs by escalating the depth of checks as candidates progress.
The FCRA requires specific procedures when you take an 'adverse action' (like not hiring someone) based on information in a background check. Your approach to handling negative findings affects both compliance requirements and fairness in your hiring process. This decision influences what disclosures you need to include in your authorization form.
Follow FCRA adverse action procedures (pre-adverse action notice, waiting period, final adverse action notice)
This is the legally required minimum for FCRA compliance. It gives candidates a chance to dispute inaccurate information before final decisions are made.
Most Common OptionEnhanced process with individualized assessment (consider job relevance, time passed, and rehabilitation evidence before making decisions)
Becoming more common as best practice and required in some jurisdictions. Provides greater protection against discrimination claims and may identify qualified candidates you might otherwise reject.
Simplified process for certain minor issues (automatically waive minor infractions or those beyond a certain age)
Used by employers wanting to expand their talent pool. May help avoid screening out qualified candidates for minor or old issues unrelated to job performance.
The timing of background checks in your hiring process has legal implications. Many jurisdictions have 'ban-the-box' laws that restrict when employers can ask about criminal history. Additionally, the timing affects your operational workflow and candidate experience. The FCRA requires that you obtain authorization before conducting the check, regardless of when in the process you choose to do it.
After a conditional job offer has been made
Most common approach and compliant with 'ban-the-box' laws. Allows you to focus on qualifications first and only invest in background checks for serious candidates.
Most Common OptionAfter initial interview but before final selection
Less common but used by some employers to narrow down finalists. May not comply with all 'ban-the-box' laws depending on your location.
Periodically for current employees (in addition to pre-employment)
Used in industries with ongoing compliance requirements or positions with high security concerns. Requires specific language in your authorization form about ongoing or periodic checks.
Background checks can vary in scope and depth. The type you choose should align with your business needs and the position being filled. More comprehensive checks provide more information but cost more and may require additional disclosures or consent. Under the Fair Credit Reporting Act (FCRA), you must disclose the specific types of checks you'll be conducting, so this decision affects what your form must include.
Basic background check (criminal history, identity verification, employment verification)
Most common for general positions. Provides essential information while being less invasive and typically less expensive.
Most Common OptionComprehensive background check (includes basic checks plus credit history, education verification, and professional license verification)
Common for positions with financial responsibilities, management roles, or positions requiring specific credentials. More expensive but provides greater protection.
Industry-specific background check (includes specialized checks relevant to your industry, such as healthcare sanctions, driving records, or drug testing)
Used for regulated industries or positions with specific risk factors. Provides targeted information relevant to particular job requirements.
Startup Founder
The method of obtaining authorization and storing consent forms has implications for both legal compliance and operational efficiency. Electronic signatures are increasingly common but must meet specific requirements under the ESIGN Act and state laws. Your approach affects both the format of your authorization form and your record-keeping procedures.
Electronic authorization with compliant e-signature system
This modern approach streamlines the process using digital signature platforms that comply with ESIGN Act requirements. It's increasingly common, especially for remote hiring, but requires proper implementation to ensure legal validity.
Most Common OptionTraditional paper forms with wet signatures
This traditional method is still used by many companies and has clear legal precedent. It creates physical records but may slow down the hiring process, especially for remote candidates.
Hybrid approach based on candidate location/preference
This flexible approach accommodates different situations but requires maintaining two separate systems and ensuring consistent compliance across both electronic and paper processes.
Many employers now conduct periodic re-checks of current employees, not just pre-employment screening. This practice requires specific authorization language in your forms. Your policy on continuous or periodic screening affects both your authorization form content and your ongoing compliance obligations.
One-time pre-employment check only
This traditional approach is simplest to administer and communicate to candidates. The authorization form will clearly state it's for a single check prior to employment.
Most Common OptionInitial check plus periodic re-screening during employment
This approach provides ongoing risk management but requires clear disclosure in the authorization form that checks may be repeated periodically, with specific timing and scope information.
Continuous monitoring for certain positions
This most comprehensive approach involves real-time alerts about new criminal records or other changes. It requires explicit authorization language and careful implementation to avoid privacy concerns.
The FCRA requires specific procedures when you make an adverse employment decision based on information in a background check. Your approach to handling negative findings affects both legal compliance and fairness to candidates. This question addresses the post-check process that must be referenced in your authorization form.
Follow FCRA adverse action procedures with individualized assessment
This comprehensive approach includes pre-adverse action notice, opportunity for the candidate to respond, and final adverse action notice if proceeding with rejection. It includes individualized assessment of criminal history as recommended by the EEOC.
Most Common OptionBasic FCRA compliance without individualized assessment
This approach meets minimum legal requirements but may increase risk of discrimination claims by not considering the nature of offenses, time passed, and rehabilitation evidence in relation to job duties.
Automatic disqualification for certain findings
This is the most restrictive approach and carries significant legal risk under EEOC guidance and state laws that require individualized assessment. It may be justified only for legally mandated exclusions in regulated industries.
The timing of background checks has legal implications under 'ban-the-box' laws in many jurisdictions, which restrict when employers can inquire about criminal history. Additionally, timing affects candidate experience and hiring efficiency. Your choice impacts both compliance requirements and practical aspects of your hiring workflow.
After a conditional job offer has been extended
This approach complies with most 'ban-the-box' laws and is considered a best practice. It allows you to evaluate candidates on their qualifications first, before considering background information.
Most Common OptionAfter initial interview but before final selection
This middle-ground approach may save time in the hiring process but could violate certain local laws that require delaying background checks until after a conditional offer.
Only for certain positions based on role requirements
This selective approach can be cost-effective but requires clear documentation of why certain positions require background checks to avoid discrimination claims.
Different types of background checks require different levels of disclosure and authorization under the Fair Credit Reporting Act (FCRA) and state laws. Some checks, like credit history reviews, have additional disclosure requirements beyond standard criminal background checks. Your selection will determine what specific language must be included in your authorization form to ensure legal compliance and avoid potential lawsuits.
Criminal background check only
This is the most basic and common type of background check that verifies if candidates have criminal records. It requires standard FCRA disclosures but has fewer additional requirements than other check types.
Most Common OptionComprehensive check (criminal, credit history, education, employment verification)
Comprehensive checks provide the most complete picture of candidates but require additional specific disclosures, particularly for credit checks. These are common for positions with financial responsibilities or executive roles.
Customized check based on position (different checks for different roles)
This approach tailors background checks to job requirements, which can be more cost-effective and privacy-conscious. However, it requires creating multiple authorization forms specific to each check type and position.
HR Manager in Growing Company
Many employers now conduct periodic or continuous background checks on existing employees, not just during hiring. This practice helps identify issues that may arise during employment but requires careful implementation to respect employee privacy and comply with notice and consent requirements. The approach you choose affects both your risk management strategy and your ongoing compliance obligations.
No ongoing checks after initial hiring
This traditional approach is simplest to administer but may leave gaps in risk management. It's still common in many industries without specific regulatory requirements for ongoing screening.
Most Common OptionPeriodic rescreening at regular intervals (annually, bi-annually)
Regular rescreening helps identify new issues that may affect an employee's suitability for their position. This approach is increasingly common in regulated industries or for positions with significant responsibility. It requires obtaining fresh authorization for each check.
Continuous monitoring for certain positions or all employees
Continuous monitoring services alert employers to new criminal records, license suspensions, or other relevant changes as they occur. This approach is becoming more common for sensitive positions but requires careful implementation to avoid privacy concerns and ensure ongoing consent is properly documented.
Data retention policies for background check information balance compliance requirements with privacy concerns. Various laws may dictate minimum retention periods for employment records, while data privacy best practices suggest limiting retention to necessary timeframes. Your retention policy affects your ability to defend against potential claims while also impacting data security obligations.
Retain for the duration of employment plus 1 year for hired employees; 1 year for non-hired applicants
This approach balances compliance with federal recordkeeping requirements (which generally require at least one year retention) while limiting unnecessary data retention. It provides sufficient records for defending potential claims while respecting privacy concerns.
Most Common OptionRetain for the duration of employment plus 3 years for hired employees; 2 years for non-hired applicants
This more conservative approach provides stronger protection against potential claims, as some statutes of limitations extend beyond one year. However, it increases data security responsibilities and may conflict with data minimization principles.
Retain only until hiring decision is made, then destroy all information not required by law
This minimal retention approach prioritizes data privacy but may leave you vulnerable if you need to defend hiring decisions. It's generally not recommended unless you operate in jurisdictions with strict data privacy laws that mandate minimal retention.
The FCRA requires a specific process when you consider taking an 'adverse action' (like not hiring someone) based on information in a background check. This process includes providing pre-adverse action notice, a copy of the background check report, a summary of rights under the FCRA, and time for the candidate to respond before a final decision. Your approach to adverse findings also has implications for fair hiring practices and potential discrimination claims.
Follow FCRA requirements with individualized assessment of relevance to the specific position
This approach complies with FCRA requirements while also following EEOC guidance on considering the nature of the offense, time passed, and relevance to the job. It provides the most legal protection while promoting fair hiring practices.
Most Common OptionImplement a bright-line policy that automatically disqualifies candidates with certain types of records
Some employers use clear-cut policies for efficiency, but this approach carries significant legal risk. Blanket policies can lead to disparate impact discrimination claims and may violate ban-the-box laws in some jurisdictions.
Delegate review to hiring managers with general guidelines
This decentralized approach gives flexibility but can lead to inconsistent application of standards. Without proper training, hiring managers may make decisions that expose the company to discrimination claims.
The timing of background checks has legal implications. Many jurisdictions have 'ban-the-box' laws that restrict when employers can inquire about criminal history. Additionally, the timing affects your compliance obligations under the FCRA, particularly regarding adverse action procedures if you decide not to hire someone based on background check results.
After a conditional job offer has been extended
This approach complies with most ban-the-box laws and is considered a best practice. It allows you to evaluate candidates on their qualifications first, while still giving you the opportunity to rescind an offer if necessary.
Most Common OptionDuring the final interview stage
Some employers conduct checks before making an offer to avoid the awkwardness of rescinding offers. This approach may not comply with ban-the-box laws in certain jurisdictions.
Only for certain positions based on job responsibilities
This tiered approach applies different standards based on the position's level of responsibility or access to sensitive information. While efficient, it requires clear documentation of why certain positions require checks to avoid discrimination claims.
The Fair Credit Reporting Act (FCRA) requires that employers disclose the specific types of background checks they intend to perform. Being transparent about the scope of your background checks not only ensures legal compliance but also sets clear expectations with candidates. Different types of checks reveal different information and may be subject to different legal requirements. Some checks may require additional disclosures or have specific timing requirements depending on your industry and location.
Basic background check (criminal history, employment verification, education verification)
This is the most standard package used by many employers across industries. It covers the fundamental areas of concern without being overly intrusive.
Most Common OptionComprehensive background check (basic checks plus credit history, driving records, and professional license verification)
More thorough checks are common for positions involving financial responsibility, driving company vehicles, or requiring professional credentials. These checks require additional disclosures under the FCRA.
Industry-specific background check (tailored to specific regulatory requirements in healthcare, finance, education, etc.)
Specialized checks are necessary for regulated industries where employees may have access to sensitive information or vulnerable populations. These often include checks against industry-specific databases or watchlists.
Background Check Authorization Form Requirements
FCRA Disclosure Statement
A clear and conspicuous disclosure that a background check will be conducted, presented as a standalone document (not embedded in the employment application or other documents).
State-Specific Disclosures
Additional disclosures required by specific states (e.g., California, New York, Massachusetts) where the applicant lives or will work.
Authorization Language
Explicit language stating that the individual authorizes the employer to obtain a background check/consumer report.
Scope of Authorization
Clear description of what types of information may be collected (criminal records, credit history, employment verification, education verification, etc.).
Consumer Reporting Agency Information
Name, address, and phone number of the consumer reporting agency that will conduct the background check.
Right to Request Additional Disclosures
Statement informing the individual of their right to request additional disclosures regarding the nature and scope of the investigation.
Right to Obtain Report Copy
Statement informing the individual of their right to obtain a copy of the background check report.
Adverse Action Notification Process
Explanation of the pre-adverse and adverse action notification process if information in the report may result in an adverse employment decision.
Ban-the-Box Compliance
Ensure compliance with any applicable 'ban-the-box' laws that restrict when criminal history inquiries can be made in the hiring process.