A Step-by-Step Adverse Action Compliance Checklist

1. Pre-Adverse Action (Before Any Final Decision)

Before you make a final call, the FCRA requires that you give the candidate a fair opportunity to review
the information being used.

That means sending three things:

A pre-adverse action notice
A copy of the background check report
A Summary of Rights under the FCRA

This requirement is explicitly outlined in federal law.

What About Timing?

The law doesn’t define an exact waiting period—but it does require a “reasonable” amount of time.

In practice, most organizations use 5–7 business days as a defensible standard.

The Consumer Financial Protection Bureau (CFPB) provides the official Summary of Rights document
that must be included:

If the Candidate Disputes the Report

At that point, the process pauses.

You’re required to:

Allow the background screening company to reinvestigate
Wait until the dispute is resolved before proceeding

This obligation comes from the reinvestigation provisions under the FCRA.

2. Apply an Individualized Assessment (EEOC Best Practice)

While not written directly into the FCRA, the Equal Employment Opportunity Commission (EEOC)
strongly recommends that employers avoid automatic disqualifications.

Instead, they advise evaluating each situation using what are commonly known as the Green Factors:

The nature and severity of the offense
The time elapsed since it occurred
The relevance of the offense to the role

This guidance is designed to reduce the risk of disparate impact claims.

In practice, this means taking a closer look before making a final call—and documenting your reasoning.

3. Final Adverse Action (After the Waiting Period)

If you decide to move forward after the waiting period, the final step is to send a Final
Adverse Action Notice.

This notice must include:

Confirmation that the decision has been made
Contact information for the background screening provider
A statement that the provider did not make the decision
The candidate’s right to dispute the report
The right to request another copy within 60 days

These requirements are outlined here.

Don’t Overlook State and Local Requirements

Federal law is just the baseline.

Many states and cities have added their own requirements—often referred to as “ban
the box” or fair chance laws.

These can affect:

When you’re allowed to review criminal history
How long you must wait before taking action
Whether you must provide a written justification

Examples include:

Because these laws vary widely, it’s important to evaluate compliance based on where the
candidate is located—not just where your company operates.

Documentation: Your Strongest Line of Defense

If there’s one theme that consistently shows up in compliance reviews, it’s this:

If it isn’t documented, it didn’t happen.

For each adverse action decision, you should be able to produce:

The background report used
Proof that the pre-adverse notice was sent
A clear timeline showing the waiting period
Notes from your individualized assessment
Any communication from the candidate
The final adverse action notice

The EEOC provides general recordkeeping guidance for employers here

A well-documented process not only reduces risk—it also creates consistency across your
hiring decisions.

The Most Common Adverse Action Mistakes

Across industries, the same issues show up repeatedly:

Skipping or rushing the pre-adverse action step
Failing to include required documents
Applying inconsistent hiring standards
Overlooking state-specific requirements
Not keeping adequate records

None of these are complicated—but they’re easy to miss without a structured process.

Final Takeaway: Compliance Is About Consistency

Adverse action isn’t just a legal requirement—it’s a process discipline.

The organizations that handle it well aren’t doing anything complicated. They’re doing
the basics consistently, every time, with documentation to back it up.

That’s what reduces risk.