What is the FCRA:

The Fair Credit Reporting Act (FCRA) is a federal law (15 U.S.C. §§ 1681–1681x) that governs credit reports, background checks, consumer reporting agencies, and the rights consumers have to access, dispute, and correct their information. It also restricts who can access a consumer report and for what legally permissible purpose.

Who it applies to:

The FCRA applies to three major groups: consumer reporting agencies, furnishers of information, and users of consumer reports. These categories are defined throughout federal regulations implementing the Fair Credit Reporting Act.

Why it matters in background screening:

The Fair Credit Reporting Act applies whenever an employer uses a third‑party background screening company to gather information about a job applicant or employee. In that situation, the background report becomes a consumer report, and the screening company becomes a consumer reporting agency (CRA) under the law.

This triggers strict requirements for both the employer and the screening company.

Scherzer’s Relevance:

Scherzer International complies with the FCRA by implementing AI‑supported accuracy controls, securing proper disclosures and written authorizations, and following all required pre‑adverse and adverse‑action procedures when delivering employment background screening services.


A Unified Credit Reporting System: CFPB Clarifies Federal Preemption Under the FCRA

On October 28, 2025, in a significant move toward regulatory clarity, the Consumer Financial Protection Bureau (CFPB) issued a new interpretive rule reaffirming the broad preemptive scope of the Fair Credit Reporting Act (FCRA) over state laws. This rule replaces the narrower interpretation issued in July 2022, which the CFPB formally withdrew in May 2025.

Why This Matters

The FCRA, enacted in 1970 and amended multiple times since, governs the creation and use of consumer reports. It has always included a preemption clause, but the scope of that clause has evolved. In 1996, Congress expanded FCRA’s preemption to cover specific subject matters, aiming to prevent a fragmented regulatory landscape. This expansion was made permanent in 2003 to support a unified national credit reporting system.

The CFPB’s latest interpretive rule confirms that the FCRA broadly preempts state laws that touch on the subject matter regulated by the federal statute. This clarification is intended to promote consistency across the credit reporting industry and ensure that consumers and businesses operate under a single, coherent set of standards.

The Shift from 2022

The 2022 interpretive rule argued for a narrow reading of FCRA’s preemption clause, suggesting that states could regulate areas like medical debt, rental information, and arrest records unless those regulations directly conflicted with specific FCRA provisions. The CFPB now asserts that this interpretation was flawed, both legally and practically.

According to the Bureau, the language of the FCRA—particularly section 1681t(b)(1)—uses broad terms like “no requirement or prohibition” and “with respect to any subject matter regulated under,” which indicate Congress’s intent to occupy the field of consumer reporting. The phrase “relating to” further expands the scope, encompassing any state law connected to the topics covered by the FCRA.

Legal and Legislative Support

The CFPB’s position is supported by legislative history and judicial precedent. Congress explicitly aimed to create national standards to avoid a “patchwork system of conflicting regulations.” Courts have consistently interpreted the FCRA’s preemption clause broadly, finding that state laws addressing the same subject matter as federal provisions are preempted even if they don’t mirror the exact language of the FCRA.

Implications on Compliance

While the CFPB’s interpretive rule provides helpful guidance, it is important to note that interpretive rules are not binding on any court. Courts may choose not to adopt the CFPB’s interpretation, and legal challenges could arise depending on jurisdiction and context.

 

Disclaimer: This communication is for general informational purposes only and does not constitute legal advice. The summary provided in this alert does not, and cannot, cover in detail what employers need to know about the amendments to the Philadelphia Fair Chance Law or how to incorporate its requirements into their hiring process. No recipient should act or refrain from acting based on any information provided here without advice from a qualified attorney licensed in the applicable jurisdiction.

October 31st, 2025|Categories: Compliance Corner for Employment Decisions|Tags: , , |

California Consumer Privacy Act (CCPA) and Employment Background Screening

Key Points:

  1. Limited Applicability Due to AB 25

Initially, the CCPA broadly defined “consumer” to include job applicants and employees. However, Assembly Bill 25 (AB 25) amended the CCPA to temporarily exclude personal information collected from job applicants, employees, and independent contractors from most CCPA provisions.

This exclusion was in effect until January 1, 2023, after which some CCPA rights were extended to employees and job applicants. As of now, employers must comply with the following CCPA provisions when using background screening services:

  • Notice at collection–employers must inform applicants about:
  • What personal data is being collected (e.g., criminal history, credit data, identifiers)
  • The purpose of data collection (e.g., hiring decisions)
  • Data security obligations:
    Employers must implement reasonable security measures to protect personal data. If a breach occurs due to negligence, affected individuals may sue for statutory damages.
  1. Overlap with Other Laws

Employers in California must also comply with:

  • Fair Credit Reporting Act (FCRA)
  • Investigative Consumer Reporting Agencies Act (ICRAA)
  • Consumer Credit Reporting Agencies Act (CCRAA)

These laws govern how background checks are conducted, what disclosures are required, and how adverse actions must be handled.

 

Disclaimer: This communication is for general informational purposes only and does not constitute legal advice. The summary provided in this alert does not, and cannot, cover in detail what employers need to know about the amendments to the Philadelphia Fair Chance Law or how to incorporate its requirements into their hiring process. No recipient should act or refrain from acting based on any information provided here without advice from a qualified attorney licensed in the applicable jurisdiction.

Takeaways for Employers from the Grijalva v. ADP Screening Decision

The Ninth Circuit’s August 2025 ruling in Grijalva v. ADP Screening clarified how exclusions from federally funded healthcare programs and similar long-term listings, such as sex offender registries, can be reported under the Fair Credit Reporting Act (FCRA).

Key Implications for Employers:

  • Ongoing exclusions are reportable. Even if the exclusion began over seven years ago, it’s considered a current status and can appear in a background report.
  • The reason for the exclusion may not be reportable. If the underlying cause (e.g., an administrative action) occurred more than seven years ago and isn’t a criminal conviction, Consumer Reporting Agencies (CRAs) generally cannot report it unless the candidate is expected to earn $75,000 or more annually.
  • Employers can ask candidates directly. If you need context behind an exclusion or listing, you’re free to ask the candidate. CRAs may be restricted from providing that information due to FCRA limitations.
  • Convictions are treated differently. Criminal convictions are reportable regardless of age under the FCRA, but several states impose their own time-based restrictions.

 

Disclaimer: This communication is for general informational purposes only and does not constitute legal advice. The summary provided in this alert does not, and cannot, cover in detail what employers need to know about the amendments to the Philadelphia Fair Chance Law or how to incorporate its requirements into their hiring process. No recipient should act or refrain from acting based on any information provided here without advice from a qualified attorney licensed in the applicable jurisdiction.

Pitfalls of Delegating the Employment Adverse Action Process to Consumer Reporting Agencies

In the complex landscape of employment background screening, compliance with the Fair Credit Reporting Act (FCRA) and state-specific laws is critical. One area that demands particular attention is the adverse action process, that is, the legal steps an employer must follow when deciding not to hire a candidate based on information in a background report. While some employers may be tempted to outsource this process to their consumer reporting agency (CRA), doing so can expose them to legal and regulatory risks.

The Employer’s Legal Responsibility Under the FCRA

The FCRA requires employers to follow a two-step process before taking adverse action:

  1. Pre-Adverse Action Notice: Along with this notice, the employer must provide the candidate with a copy of their consumer report and a summary of rights under the FCRA.
  2. Adverse Action Notice: After a reasonable waiting period–typically at least five business days, per Federal Trade Commission (FTC) guidance–the employer may send a final notice if they decide not to hire the candidate.

This process allows candidates to dispute inaccurate or incomplete information before a final decision is made.

Timing Matters: The Risk of Premature Decisions

The timing between the pre-adverse and adverse action notices is not explicitly defined in the FCRA, but courts and regulators have consistently held that five business days is the minimum acceptable waiting period. If a CRA sends both notices too close together or simultaneously, it undermines the candidate’s right to dispute the report and may be seen as a violation of the FCRA.

Who Is Making the Hiring Decision?

The most critical issue arises when a CRA appears to be making the hiring decision rather than the employer. If a CRA sends adverse action notices without the employer’s review or discretion, it could be construed that the CRA is deciding the candidate’s eligibility for employment. This is problematic because:

  • Only the employer can assess job-relatedness and business necessity.
  • CRAs are not equipped to perform individualized assessments, which are required under many state and local laws.

Fifteen states (California, Colorado, Connecticut, Hawaii, Illinois. Maine, Maryland, Massachusetts, Minnesota, New Jersey, New Mexico, Oregon, Rhode Island, Vermont and Washington) have “Ban-the-Box” laws, several of which require employers to conduct individualized assessments before taking adverse action based on criminal history. Additionally, cities and counties like Los Angeles, New York City, and San Francisco have their own ordinances that include more stringent requirements for these assessments. These assessments typically involve evaluating the nature and gravity of the offense, its relevance to the job, and the time that has passed, and must be documented and provided to the applicant. They cannot be delegated to a CRA.   

Legal Precedent: When a CRA Crosses the Line

While there is limited case law directly holding that a CRA made the decision instead of the employer, courts have scrutinized situations where employers failed to retain control over the adverse action process. In Goode v. LexisNexis Risk & Information Analytics Group, Inc., the court emphasized that employers must make the final employment decision and cannot rely solely on automated decision tools provided by CRAs.

Additionally, in Henderson v. CoreLogic, the court found that the CRA’s automated scoring system used to filter candidates could be interpreted as making employment decisions, raising serious FCRA compliance concerns.

These cases underscore the importance of employer discretion and the legal risks of outsourcing the hiring decision.

Conclusion

Delegating the adverse action process to a CRA may seem efficient, but it can lead to serious compliance failures. Employers must remain actively involved in evaluating background check results, conducting individualized assessments, and making final hiring decisions. The stakes are too high to outsource this critical function.

 

Disclaimer: This communication is for general informational purposes only and does not constitute legal advice. The summary provided in this alert does not, and cannot, cover in detail what employers need to know about the amendments to the Philadelphia Fair Chance Law or how to incorporate its requirements into their hiring process. No recipient should act or refrain from acting based on any information provided here without advice from a qualified attorney licensed in the applicable jurisdiction.

Philadelphia City Council Amends and Expands Fair Criminal Record Screening Standards Law (commonly referred to as the “Fair Chance Law” or “Ban-the-Box”).

What is this about?

On September 25, 2025, the Philadelphia City Council passed a bill amending and expanding the existing Philadelphia Fair Chance Law. This legislation introduces several changes to enhance protections for job applicants and employees with criminal records. It becomes effective on January 6, 2026, and applies to employers in Philadelphia.


Key Changes:

Shortened Lookback Period for Misdemeanors

Under the existing Fair Chance Law, employers are prohibited from considering conviction information that is older than seven years from the date of the inquiry. The new amendments reduce the lookback period for misdemeanors to four years. The lookback period for felony convictions remains subject to the
seven-year window.

Summary Offenses Excluded From Employment Decisions:

The amendments reconcile the limitations under the Fair Chance Law with those imposed by the Pennsylvania Criminal Records Information Act (CHRIA) by confirming that employers may not consider summary offenses—offenses that do not rise to the level of a felony or misdemeanor—in making
employment decisions.

Added Protections for Expunged or Sealed Records:

Employers may not consider expunged or sealed criminal records. Furthermore, if such records appear in a background check or in PennDOT driver history reports, employers must allow applicants to provide proof of sealing or expungement before making a final decision.

Notice of Background Checks:

Employers who choose to provide notice of their intention to perform a
background check during the hiring process, such as in a job advertisement or in a job offer, must now also state that any consideration of the background check will be an individualized assessment based on the applicant’s or employee’s specific record and the requirements and duties of the particular
job.

Notice and Rebuttal Opportunities
Employers will have additional pre-adverse action requirements, which include
providing applicants or employees with:

  1. A summary of the applicant’s or employee’s rights under the Fair Chance Law.
  2. A statement that the employer will consider evidence of any error in the criminal history records, evidence of rehabilitation, or other mitigation if provided by the applicant or employee. A list of the types of evidence that may be offered includes:
      • the completion of a mental health or substance use
        disorder treatment program
      • the completion of a job training program
      • the completion of a GED or post-secondary education
        program
      • service to the community
      • work history in a related field since the time of conviction
        or incarceration
      • an active occupational licensure, commercial driver

    licensure, or other licensure necessary to perform the specific duties of the job.

  3. Instruction as to how the applicant or employee can exercise their right to provide evidence or explanation directly to the employer.

Anti-Retaliation Protections

The amendments provide a rebuttable presumption of retaliation if an employer takes adverse action within 90 days of an applicant or employee asserting their rights under the Fair Chance Law. Employers must demonstrate that any adverse action was taken in good faith and unrelated to the protected activity.

Why compliance matters:

Employers with operations in Philadelphia—including those hiring remote or hybrid workers—who may fall under the city’s jurisdiction, should use the time before January 6, 2026, to review their policies and prepare for implementation of the Fair Chance Law’s amended requirements. Most notably, employers should update their pre-adverse action notices to comply with the expanded notice and rebuttal rights to ensure that they are based on objective criteria that are unrelated to the applicant’s or employee’s exercise of their rights under the
Fair Chance Law.

What SI is doing:

SI provides employment-related background check reports that comply with federal, state, and local employment laws. SI stays current with changes in the laws that affect how an employer can use an individual’s personal information in an employment decision. SI’s policies and procedures will include compliance with the new Fair Chance Law amendments.

 

Disclaimer: This communication is for general informational purposes only and does not constitute legal advice. The summary provided in this alert does not, and cannot, cover in detail what employers need to know about the amendments to the Philadelphia Fair Chance Law or how to incorporate its requirements into their hiring process. No recipient should act or refrain from acting based on any information provided here without advice from a qualified attorney licensed in the applicable jurisdiction.

Do Employers Still Use Credit Reports for Hiring Decisions?

The short answer is yes, but not as often, and with certain limitations.

As hiring practices evolve, many employers are rethinking the use of credit reports in the hiring process. While still common in finance, government, and executive roles, credit checks for other positions are increasingly scrutinized for their relevance, fairness, and legal risk.

Why Some Employers Still Use Them:

  • To assess financial responsibility for roles involving access to money or sensitive data
  • To comply with industry regulations
  • To help mitigate fraud or identity risks

Why Many Do Not Use Them:

  • Credit history does not equal job performance
  • Risk of discrimination or bias
  • Growing legal restrictions at the state and local levels
  • FCRA compliance requirements are strict and costly if mishandled

Several states and localities have laws that limit or ban private employers from conducting employment credit checks, except in specific roles.

Best Practices for Employers:

  • Use credit checks only when job-relevant
  • Have policies in place defining what information on a credit report is disqualifying (note: credit reports do not show judgments or tax liens)  
  • If you’re a multi-state employer, consider eliminating credit checks if laws in one or more of your locations prohibit or limit these checks
  • Always follow FCRA guidelines

Credit checks are no longer a default step in hiring–they’re a strategic choice that requires careful consideration.

The Fair Credit Reporting Act and Commercial Transactions

Does the Fair Credit Reporting Act (FCRA) apply to commercial transactions?

Although the FCRA is generally limited to consumer-purpose transactions (e.g., those primarily for personal, family, or household purposes), there is no straightforward answer regarding commercial transactions. This is because the FCRA defines a “consumer” as just an “individual.” The FCRA does not require the consumer/individual to obtain the loan specifically for a consumer purpose. Whether and how the FCRA applies depends on the facts and circumstances regarding the commercial transaction.

Commercial Loans, Personal Liability, and the Permissible Purpose Requirement

When an individual applies for a loan primarily for personal, family, or household purposes, the lender has a permissible purpose under the FCRA to obtain the individual’s consumer report.

However, a commercial transaction does not give rise to a permissible purpose except for a report on an individual – such as a sole proprietor or principal of a company – who will be personally liable for the debt. In a Federal Trade Commission (FTC) staff opinion letter dated in 2001, the FTC stated that “it is reasonable to view a business transaction in which an individual has accepted personal liability for the business debt as involving the consumer, thus providing a permissible purpose for the lender to obtain a consumer report under Section 604(a)(3)(A).”

A follow-up question is whether the commercial loan application itself is enough of a permissible purpose when the individual is only a guarantor and not otherwise related to the transaction or debtor. Another 2001 FTC opinion letter concluded that if an individual has any personal liability on a business loan, including just a guarantee, there would be a permissible purpose by means of the application for credit.

These opinion letters have been reaffirmed in subsequent FTC publications.

As a caveat, however, it is important to remember that these opinion letters are merely informal guidance and are not binding on the FTC, the courts, or other governmental regulators. That is why we think the best practice is to get written authorization from the individual (another form of permissible purpose under the FCRA) before preparing the report.

Reporting Adverse Information

When the FCRA applies to a commercial transaction, the restrictions for reporting adverse information should be followed. The restrictions generally prohibit reporting adverse information that pre-dates the report by seven years. Bankruptcies that pre-date the report by 10 years cannot be reported. Criminal convictions can be reported regardless of the date.

The FCRA also provides an important exemption to these reporting restrictions. If a credit transaction involves, or may reasonably be expected to involve, a principal amount of $150,000 or more, the restrictions on reporting adverse information do not apply.

Adverse Action Notice

When the FCRA applies to a commercial transaction, does the adverse action notice requirement apply? The general rule in the FCRA is that if the lender obtains a consumer report and takes adverse action based, in whole or in part, on any information in the report, the lender must give the consumer an adverse action notice. Therefore, in the commercial context, the lender should give the consumer an adverse action notice if the loan application is denied.

What about guarantors? Although the FCRA is silent on whether guarantors are included for purposes of an adverse action notice, the FTC clarified the issue in a 2000 advisory letter. If the consumer is only a guarantor (i.e., secondarily liable on the loan), then an adverse action notice would not be required to be provided to the guarantor. This is true even if the application is denied based on information in the guarantor’s consumer report.

February 13th, 2025|Categories: Commercial Transactions Due Diligence|Tags: , |

Reporting Criminal Convictions, the FCRA, and State Laws

Under the Fair Credit Reporting Act (FCRA), criminal convictions can appear in a background report regardless of when they occurred. It does not matter how old the conviction is. However, some states have passed their own legislation similar to the FCRA that does place restrictions on reporting criminal convictions.

Which states restrict reporting on convictions?

California, Colorado, Hawaii, Kansas, Maryland, Massachusetts, Montana, New Mexico, New York, New Hampshire, Texas, and Washington all have laws that limit the scope of reporting criminal convictions to seven years. In Hawaii, the seven-year limit is for felonies only; the reporting of misdemeanors is limited to five years. The District of Columbia limits the reporting of criminal convictions to 10 years.

All states not listed above follow the FCRA rule that criminal convictions can appear in a background report regardless of when they occurred.

The Salary Exception States

Seven of the states listed above allow an exception to their rule of limiting reporting criminal convictions to seven years. The exception is based on the salary the candidate is expected to make. If the salary exceeds a certain threshold, the seven-year limitation does not apply, and criminal convictions can appear in the candidate’s background report regardless of when they occurred.

Salary Exception States Candidate’s Potential Salary Threshold
Colorado $75,000
Kansas $20,000
Maryland $20,000
New Hampshire $20,000
New York $25,000
Texas $75,000
Washington $20,000

Workplace Investigations and the FCRA

Before a background check can be conducted on an applicant or employee, the FCRA requires that an employer (our client) provide a written disclosure form and obtain a signed authorization from the applicant or employee. While these requirements will apply to nearly all background checks, there are two situations in which the FCRA permits an employer to dispense with the disclosure and authorization requirements — an investigation of (1) suspected misconduct relating to employment or (2) compliance with federal, state, or local laws and regulations, the rules of a self-regulatory organization, or any preexisting written policies of the employer.

This alleviates the concern that providing the subject with advance disclosure of the investigation and obtaining the subject’s authorization to conduct the investigation would greatly hamper the investigation itself.

However, the FCRA does impose an obligation on the employer if adverse action, such as termination or suspension, is taken against the employee because of the investigation. In those situations, the FCRA requires the employer to provide the employee with a summary of the nature and substance of the investigation. Although the FCRA does not specify the time period within which the employer must provide the summary, it seems reasonable to provide it just after the adverse action is taken.

The FCRA does not require the employer to provide the employee with a copy of any report prepared for the investigation, nor does the FCRA require the employer to disclose in the summary the sources of the information obtained in the investigation. If co-workers, vendors, customers, or other individuals provided damaging information about the employee, their identities would not need to be disclosed to the employee in the FCRA summary.

CFPB’s Advisory Opinion on Name-Only Matching for Consumer Reporting

On July 12, 2022, the Consumer Financial Protection Bureau (CFPB) issued an advisory opinion regarding the “permissible purpose requirement” of the Fair Credit Reporting Act (FCRA) as it applies to both a consumer reporting agency (CRA) and a user of consumer reports (e.g., employer).

The CFPB’s position is that name-only matching records in a consumer report violate the permissible purpose requirement in FCRA section 604(a)(3). The CFPB noted that consumer report users must ensure they do not violate a person’s privacy by obtaining or using a report without a permissible purpose, and that a consumer reporting agency should not provide reports with “possible matches” to users.

The CFPB further warned that including a disclaimer in the report, such as “this record was matched to the subject by First Name, Last Name ONLY and may not belong to your subject; your further review of the [source] is required in order to determine if this is your subject” does not adequately address the problem of using name-only matching procedures because the report may include information about a person other than the subject for whom the CRA has a permissible purpose. In the CFPB’s view, a disclaimer “will not change the fact that the consumer reporting company has failed to satisfy the requirements of 604(a)(3) and has provided a consumer report about a person lacking a permissible purpose with respect to that person.”

The CFPB’s advisory opinion raises the possibility that employers, as users of such consumer reports, could be held liable for FCRA permissible purpose violations resulting from a CRA’s matching procedures or mistakes. The opinion emphasized the CFPB’s position that there is strict liability for obtaining or using a consumer report without a permissible purpose and also included a reminder about criminal liability for knowing or willful violations of the FCRA provisions.

July 19th, 2022|Categories: Compliance Corner for Employment Decisions|Tags: , |
Go to Top