A Step-by-Step Adverse Action Compliance Checklist

1. Pre-Adverse Action (Before Any Final Decision)

Before you make a final call, the FCRA requires that you give the candidate a fair opportunity to review the information being used. That means sending three things:

• A pre-adverse action notice
• A copy of the background check report
• A Summary of Rights under the FCRA

What About Timing?

The law doesn't define an exact waiting period — but it does require a "reasonable" amount of time. In practice, most organizations use 5–7 business days as a defensible standard.

If the Candidate Disputes the Report

At that point, the process pauses. You're required to allow the background screening company to reinvestigate, and wait until the dispute is resolved before proceeding.

2. Apply an Individualized Assessment (EEOC Best Practice)

While not written directly into the FCRA, the EEOC strongly recommends that employers avoid automatic disqualifications. Instead, they advise evaluating each situation using what are commonly known as the Green Factors:

• The nature and severity of the offense
• The time elapsed since it occurred
• The relevance of the offense to the role

This guidance is designed to reduce the risk of disparate impact claims. In practice, this means taking a closer look before making a final call — and documenting your reasoning.

3. Final Adverse Action (After the Waiting Period)

If you decide to move forward after the waiting period, the final step is to send a Final Adverse Action Notice. This notice must include:

• Confirmation that the decision has been made
• Contact information for the background screening provider
• A statement that the provider did not make the decision
• The candidate's right to dispute the report
• The right to request another copy within 60 days

Don't Overlook State and Local Requirements

Federal law is just the baseline. Many states and cities have added their own requirements — often referred to as "ban the box" or fair chance laws. These can affect when you're allowed to review criminal history, how long you must wait before taking action, and whether you must provide a written justification.

Examples include the California Fair Chance Act, New York Article 23-A, the NYC Fair Chance Act, and the Illinois Human Rights Act. Evaluate compliance based on where the candidate is located — not just where your company operates.

Documentation: Your Strongest Line of Defense

If there's one theme that consistently shows up in compliance reviews, it's this: if it isn't documented, it didn't happen. For each adverse action decision, you should be able to produce:

• The background report used
• Proof that the pre-adverse notice was sent
• A clear timeline showing the waiting period
• Notes from your individualized assessment
• Any communication from the candidate
• The final adverse action notice

The Most Common Adverse Action Mistakes

• Skipping or rushing the pre-adverse action step
• Failing to include required documents
• Applying inconsistent hiring standards
• Overlooking state-specific requirements
• Not keeping adequate records

Final Takeaway: Compliance Is About Consistency

Adverse action isn't just a legal requirement — it's a process discipline. The organizations that handle it well aren't doing anything complicated. They're doing the basics consistently, every time, with documentation to back it up. That's what reduces risk.