4.3 Background Reports, FCRA Duties & Financial Pretexting
Key Takeaways
The FCRA can make a private screening business a consumer reporting agency when it assembles information for employment, housing, credit, insurance, or another statutory eligibility purpose.
A permissible purpose is required; investigator licensure or a client request alone does not authorize a consumer report.
For employment reports, the employer must provide a clear stand-alone disclosure, obtain written authorization, and certify compliance to the reporting company.
Before adverse employment action based on the report, the employer provides the report and Summary of Rights; after action, the employer gives the required adverse-action notice.
A consumer reporting agency must use reasonable procedures for maximum possible accuracy and reinvestigate disputed information, generally within 30 days; financial-account pretexting remains prohibited.
Background Reports, FCRA Duties & Financial Pretexting
A background investigation is not regulated solely by what data it contains. The purpose, recipient, and business that assembled it determine whether the Fair Credit Reporting Act (FCRA) applies.
When the FCRA applies
A report can be a consumer report when a consumer reporting agency communicates information bearing on a person’s creditworthiness, character, reputation, personal characteristics, or mode of living for employment, housing, credit, insurance, or another statutory eligibility decision.
A private investigator or screening company can be a consumer reporting agency (CRA) even if it does not call itself a credit bureau. If it regularly assembles or evaluates information about consumers and furnishes reports for FCRA purposes, the duties follow the activity.
By contrast, an investigator gathering evidence for ordinary civil litigation or interviewing a fact witness is not necessarily preparing a consumer report. Do not assume every background file is covered or that every investigative file is exempt. Define the client’s purpose before searching.
Permissible purpose
A CRA may furnish a report only for a purpose authorized by 15 U.S.C. § 1681b. The user must identify and certify the purpose, and information obtained for one purpose should not be reused for an unrelated decision.
A PI license is not a permissible purpose. Curiosity, client wealth, a vague “asset check,” or a desire to see what is available is not enough. Document the requester, subject, purpose, authority, and intended user.
Employment reports: before procurement
Current FTC and EEOC guidance explains the employment sequence.
Before obtaining the report, the employer must:
- give the applicant or employee a clear and conspicuous written disclosure in a stand-alone format that a consumer report may be obtained for employment purposes;
- obtain written authorization; and
- certify to the reporting company that the required notice and permission were provided, FCRA duties will be followed, and the information will not be used unlawfully.
The stand-alone document should not be buried in the job application or loaded with liability waivers and unrelated certifications.
An investigative consumer report uses personal interviews about character, general reputation, personal characteristics, or lifestyle. Additional notice and disclosure-of-scope duties apply. A courthouse-only search and a neighbor-interview character report are not identical products.
Accuracy and identity matching
A CRA must maintain reasonable procedures to assure maximum possible accuracy. For public-record criminal information used in employment, current status and identity are critical.
Use multiple identifiers where lawfully available. Verify the court, case number, charge, filing date, disposition, sentence, and subsequent modification. Distinguish an arrest from a charge, a charge from a conviction, and a conviction from a later expungement or reversal. Do not report a namesake’s case.
The FCRA generally restricts reporting of many adverse items older than seven years and bankruptcies older than ten years, subject to statutory exceptions. Criminal-conviction treatment differs from nonconviction information under federal law, and state law or client policy may be stricter. Apply the current statute to the particular report instead of relying on a memorized table alone.
Adverse employment action
If an employer may take adverse action based in whole or in part on a consumer report, the employer first provides:
- a copy of the report relied on; and
- the current “Summary of Your Rights Under the Fair Credit Reporting Act.”
This pre-adverse step gives the person a meaningful chance to review and dispute the report. The FCRA does not state a universal five-business-day waiting period for every employment decision. The employer must allow a meaningful opportunity under the circumstances and should follow current legal guidance.
After the final adverse action, the employer provides notice including the reporting company’s name, address, and phone number; a statement that the reporting company did not make the decision and cannot explain the employer’s reasons; and notice of the right to dispute accuracy or completeness and obtain an additional free report within the applicable period.
Disputes and reinvestigation
When a consumer disputes information, a CRA generally has 30 days to conduct a reasonable reinvestigation, subject to the statute’s extensions and exceptions. It must review relevant information, verify the source, and correct or delete inaccurate, incomplete, or unverifiable information.
Repeating the same database query is not always a reasonable reinvestigation. Retrieve the source record, resolve identity, contact furnishers or custodians as appropriate, and communicate the result.
Users, CRAs, and investigators have different duties
| Actor | Core responsibility |
|---|---|
| Employer/user | Purpose, disclosure, authorization, pre-adverse and post-adverse notices, lawful decision standards |
| CRA/screening company | Purpose certification, accuracy procedures, file disclosures, dispute and reinvestigation duties |
| Field investigator/subcontractor | Lawful collection, source documentation, accurate reporting, compliance with the CRA’s controlled process |
A contract cannot shift away a statutory duty. Each actor documents its own compliance.
Financial information and pretexting
The Gramm-Leach-Bliley Act, 15 U.S.C. §§ 6821–6827, prohibits obtaining customer information from a financial institution by false statements, forged documents, or impersonation. There is no private-investigator exception.
Do not call a bank pretending to be the customer, buy a purported “bank balance search” with an undisclosed method, or use credentials supplied without authority. Lawful alternatives include client-provided records, public liens and filings, authorized discovery, subpoenas issued through legal process, and judgment-enforcement procedures.
The Driver’s Privacy Protection Act similarly requires a permitted use for protected motor-vehicle information. A professional subscription does not create permission for each query.
Exam method
First decide whether the report is used for a consumer-eligibility purpose and whether the investigator’s business is functioning as a CRA. Then identify the permissible purpose, procurement steps, accuracy duty, and adverse-action stage. Reject choices that treat a license, payment, or signed client contract as a substitute for federal authorization.
When can a private background-screening business be a consumer reporting agency under the FCRA?
When it regularly assembles or evaluates consumer information and furnishes it for covered eligibility purposes
Only when it uses a credit score
Only when it is owned by a national credit bureau
Never, because investigators are exempt
Before obtaining an employment consumer report, what must the employer generally do?
Publish the report online
Provide a clear stand-alone disclosure, obtain written authorization, and make the required certification to the reporting company
Wait five business days after hiring
Obtain a PI license
What is the proper response to a consumer’s specific identity-match dispute?
Rely on the client’s original assumption
Keep reporting until a court orders removal
Conduct a reasonable reinvestigation and correct or delete inaccurate, incomplete, or unverifiable information
Close the file without reviewing the source
Sections you finish are checked off in the contents.