Bigfirmlit is a non-attorney self-help legal document preparation service. We are not a law firm and do not provide legal advice. This guide is for general informational purposes only.
Running a background check on a job applicant or prospective tenant sounds straightforward. You order a report from a screening company, review it, and make a decision. In California, the reality is considerably more complicated — and the gap between what most employers think the process requires and what the law actually demands is wide enough to generate significant class action litigation.
California employers are bound by two parallel legal frameworks: the federal Fair Credit Reporting Act (FCRA, 15 U.S.C. §1681 et seq.) and California's Investigative Consumer Reporting Agencies Act (ICRAA, Civil Code §1786 et seq.). Both apply simultaneously. ICRAA is stricter, and employers who know only federal law are routinely exposed to state-level liability they did not anticipate.
This guide covers what California employers, HR professionals, and property managers are legally required to do — before, during, and after running a background check.
Section 1: The Dual-Law Framework — FCRA and ICRAA Apply at the Same Time
The FCRA governs "consumer reports" broadly — any report used for employment, tenancy, or credit purposes compiled by a consumer reporting agency (CRA). It applies nationwide.
California's ICRAA governs a subset: investigative consumer reports — reports that include information about a person's character, general reputation, personal characteristics, or mode of living, obtained through personal interviews or background investigation (not just database lookups). If the report your screening vendor produces includes employment verification, reference checks, or character-related findings, it is almost certainly an investigative consumer report subject to ICRAA.
What this means in practice:
- If you use a licensed CRA (Checkr, Sterling, First Advantage, Accurate Background, etc.) and their report goes beyond a pure credit check into employment history, criminal background, or personal characteristics, both FCRA and ICRAA apply.
- ICRAA sets a higher compliance standard in several areas. Where the two laws conflict, employers must meet the stricter obligation.
- The "we didn't know about ICRAA" defense does not reduce statutory damages for willful violations.
Section 2: Before You Order the Report — Disclosure and Authorization Requirements
This is where most employers get the process wrong, and it is the single most litigated area in FCRA/ICRAA compliance.
The Standalone Disclosure Requirement
FCRA §1681b(b)(2)(A) requires that before ordering a consumer report for employment purposes, the employer must provide a clear and conspicuous written disclosure to the applicant — in a document that consists solely of the disclosure. The disclosure cannot be:
- Combined with the employment application
- Included as a section within an offer letter
- Buried in an onboarding packet
- Attached to or incorporated into any other document
This is the #1 violation California employers make. An applicant who received a background check disclosure embedded in their application form has a viable FCRA claim before any adverse action ever occurs.
ICRAA §1786.16 reinforces this requirement and adds specific California obligations: the disclosure must also inform the applicant that:
- An investigative consumer report may be obtained
- They have the right to inspect the report
- The name, address, and phone number of the CRA being used
Written Authorization Before Ordering
Both FCRA and ICRAA require written authorization from the applicant before the report is ordered. This is separate from the disclosure. Best practice: a two-part form — disclosure on page one, authorization signature on page two, nothing else on either page.
ICRAA-Specific: 3-Day Copy Delivery Obligation
ICRAA §1786.16(b) requires that once the employer receives the investigative consumer report, it must provide a copy to the applicant within 3 business days. This is not a pre-adverse action obligation — it applies regardless of whether adverse action is being contemplated. The moment the report arrives, the 3-day clock starts.
Section 3: AB 1008 — Ban the Box for California Employers with 5+ Employees
California's "ban the box" law (AB 1008, effective January 1, 2018, codified at Government Code §12952) applies to any employer with 5 or more employees and imposes a sequential process for criminal history inquiries.
What Is Prohibited Before a Conditional Offer
Employers subject to AB 1008 cannot:
- Ask about criminal history on the initial application
- Inquire into criminal history during early interviews or screening
- Run a criminal background check before making a conditional offer of employment
The conditional offer must be extended first. Only after that conditional offer is on the table can the employer order the background check and review criminal history.
Individualized Assessment Before Withdrawing a Conditional Offer
If the background check reveals a conviction and the employer is considering withdrawing the conditional offer, an individualized written assessment is required. The assessment must evaluate:
- The nature and gravity of the offense or conduct
- The time elapsed since the offense, conduct, or completion of the sentence
- The nature of the job held or sought
A blanket policy of disqualifying anyone with a felony conviction — without this individualized assessment — violates Government Code §12952.
The 5-Business-Day Dispute Window
After completing the individualized assessment and deciding to proceed with withdrawal, the employer must:
- Provide the applicant with a written preliminary notice identifying the specific conviction(s) at issue
- Attach a copy of the background check report
- Attach the individualized assessment document
- Give the applicant at least 5 business days to respond
During those 5 days, the applicant may submit evidence of inaccuracy (challenging the conviction record itself) or evidence of rehabilitation (character letters, certificates of completion, evidence of stable employment, etc.).
The employer must then consider the response before making a final decision. Ignoring the response, or taking final adverse action before the window closes, is a separate violation.
Final Adverse Action Notice
If the employer proceeds with withdrawal after considering the response, a final written notice must be provided. It must:
- State the final decision
- Inform the applicant of their right to file a complaint with the California Civil Rights Department (CRD)
- Identify any procedure for the applicant to request reconsideration
Section 4: The Pre-Adverse Action Process Under FCRA and ICRAA
The requirements in this section apply to all employment background checks — not just those involving criminal history. If any information in the report is being used to deny or withdraw employment, the following process applies.
What Must Be Provided Before Taking Adverse Action
Before an employer makes a final adverse decision based on any background check findings, it must provide:
- A copy of the full background check report
- "A Summary of Your Rights Under the Fair Credit Reporting Act" (the CFPB-prepared notice)
- California rights notice under Civil Code §1786.26 (the state-required summary of ICRAA rights)
All three documents must be delivered to the applicant before the adverse action is final.
The Waiting Period
The applicant must have a reasonable time to dispute the report before the employer makes its final decision. CFPB guidance sets 5 business days as the minimum. California practice — reflected in employer policies that have survived litigation — typically uses a 5 to 10 business day window. Document the start date of the waiting period; this is evidence in any subsequent dispute.
Employers cannot take adverse action the same day they send the pre-adverse notice. The sequence matters:
Pre-adverse notice + report delivered → waiting period → final decision
Final Adverse Action Notice
After the waiting period, if the employer proceeds, it must provide a separate final adverse action notice that:
- Identifies the name, address, and phone number of the CRA that furnished the report
- Informs the applicant they can obtain a free copy of the report from the CRA within 60 days
- States that the CRA did not make the adverse decision and cannot explain why the decision was made
- Informs the applicant of their right to dispute the accuracy of the report directly with the CRA
Section 5: Liability Exposure — What Noncompliance Costs
A single hire processed with a noncompliant background check procedure is not one legal risk — it is multiple independent violations.
Federal FCRA liability (15 U.S.C. §1681n, §1681o):
- Willful violations: Statutory damages of $100 to $1,000 per violation, punitive damages, and attorney fees — without any proof of actual harm
- Negligent violations: Actual damages plus attorney fees
California ICRAA liability (Civil Code §1786.50):
- Actual damages
- Punitive damages up to $10,000 per willful violation
- Attorney fees
How violations multiply with a single applicant:
| Procedural Step | Law | Violation if Skipped |
|---|---|---|
| Standalone disclosure | FCRA §1681b | 1 independent violation |
| ICRAA §1786.16 notice | ICRAA | 1 additional violation |
| Copy delivered within 3 business days of receipt | ICRAA §1786.16(b) | 1 additional violation |
| Pre-adverse notice with report | FCRA + ICRAA | 1+ violations |
| Waiting period observed | FCRA + ICRAA | 1 additional violation |
| Final adverse action notice | FCRA | 1 additional violation |
| AB 1008 individualized assessment | Gov. Code §12952 | Separate FEHA violation |
A single applicant moving through a noncompliant process can generate 4 to 7 independent statutory violations. Multiply that by a volume-hiring operation and the class action exposure is real — this is among the most actively litigated employment law areas in California federal courts.
Help Candidates Get Their Records — Document Support for ICRAA Requests
Candidates who want to request their own background check file under ICRAA have a right to do so, including for up to one year after the report was furnished. Bigfirmlit prepares the formal records request documents for self-represented individuals navigating this process.
Records Request Packet — $118.15 Formal records request and dispute letter preparation for consumer reporting agency file requests under FCRA and ICRAA.
Section 6: ICRAA-Specific Obligations Summary
California's ICRAA imposes several obligations that FCRA does not:
| Obligation | FCRA Requires? | ICRAA Requires? |
|---|---|---|
| Standalone disclosure document | Yes | Yes (stricter — must also name CRA) |
| Notice of right to inspect report | No | Yes |
| Written notice within 3 days of ordering the report | No | Yes |
| Deliver copy within 3 days of receiving the report | No | Yes |
| Candidate may request report up to 1 year after furnishing | No | Yes |
| State rights summary (§1786.26) with pre-adverse notice | No | Yes |
The "notice within 3 days of ordering" obligation is frequently missed. It is not a notice that a check might be ordered — it must be provided after the order is actually placed, confirming that a report has been requested.
Section 7: Property Managers and Landlords — Tenant Screening Obligations
The same ICRAA framework that applies to employment background checks applies equally to residential tenancy screening. Property managers, landlords, and property management companies running background checks on rental applicants must comply with all ICRAA obligations:
- Standalone disclosure before ordering
- Written authorization
- Delivery of copy within 3 business days of receiving the report
- Pre-adverse action notice with copy of report and dispute window before denying tenancy
Landlords cannot substitute their own investigation. Running an ad hoc search of court records via PACER, CalCourts, or county clerk databases and calling it a "background check" does not comply with ICRAA. ICRAA's framework applies to CRA-furnished investigative consumer reports. If a landlord wants to use criminal or civil history in a tenancy decision, they must use a licensed CRA and follow the full ICRAA process.
For tenants who believe they were wrongly denied based on a noncompliant screening process, the notice-and-delivery violation alone may constitute a willful ICRAA violation carrying up to $10,000 in punitive damages.
Section 8: Practical Compliance Checklist
Use this checklist for every background check your organization runs in California:
Before ordering:
- Standalone disclosure form prepared (no other content on the document)
- ICRAA notice included: CRA name/address, right to inspect, right to copy
- Written authorization signed separately before ordering
- For employment with 5+ employees: conditional offer extended before criminal inquiry (AB 1008)
After ordering:
- Candidate notified in writing within 3 business days of placing the order (ICRAA)
- Copy delivered to candidate within 3 business days of receiving the report (ICRAA)
If considering adverse action:
- Pre-adverse action package assembled: report + FCRA summary + California ICRAA rights notice (§1786.26)
- Pre-adverse notice delivered; start date of waiting period documented
- 5–10 business day dispute window observed before final decision
- For criminal history: individualized written assessment completed (AB 1008)
- Candidate's response (if any) reviewed and considered before final decision
- Final adverse action notice delivered: CRA identified, free copy rights disclosed, CRA non-decision-making role stated, CRD complaint right noted
Recordkeeping:
- Signed disclosure and authorization on file
- Pre-adverse and final adverse notices on file with dates
- AB 1008 individualized assessment on file
If You've Already Received a Noncompliant Adverse Action Notice
If you are a candidate or tenant who received an adverse action — or no notice at all — from an employer or landlord who did not follow these steps, you may have a claim under FCRA, ICRAA, or Government Code §12952. Bigfirmlit prepares demand letters for individuals who have experienced violations of their background check rights.
Demand Letter Packet — $109.65 Formally notify an employer or landlord of specific FCRA or ICRAA violations and your intent to assert your rights. Prepared for self-represented individuals.
Related Guides
- California Background Check Laws: What Tenants and Job Applicants Must Know (ICRAA + FCRA) — the applicant-side companion to this guide
- How to File an Employment Discrimination Complaint with the California CRD — if the adverse action also involved discrimination based on a protected class
- California Employer Retaliation and Wrongful Termination Complaint Guide — if withdrawal of the offer was accompanied by retaliatory conduct
Bigfirmlit is a non-attorney self-help legal document preparation service registered as a Legal Document Assistant under California Business & Professions Code §6400 et seq. We prepare legal documents at your direction. We do not provide legal advice, legal representation, or attorney services. Nothing in this guide constitutes legal advice. For advice specific to your situation, consult a licensed California attorney.