Weathering the Sea Change in Fair Credit Reporting Act Litigation in 2014

by Littler

In 2013, the ballooning number of employment class actions illuminated the sea change in Fair Credit Reporting Act (FCRA) litigation.  The FCRA was enacted in 1970 during President Nixon's administration, and is hardly in its adolescence.  FCRA claims against employers, even class action lawsuits, are far from novel.  Historically, though, such employment claims were infrequent and did not distract the plaintiff's bar from the feeding frenzy provided by wage and hour laws.  Now, the storm clouds undoubtedly are gathering under the FCRA, and thus the investment by employers in fortifying their FCRA compliance is likely to pay substantial dividends.  Below, we summarize the FCRA and offer five recommendations for weathering the stormy seas in 2014.1

Summary of FCRA Obligations on Employers that use Consumer Reports for Employment Purposes

Despite the use of the term "credit" in the statute's name, the FCRA does far more than regulate the exchange of consumer credit information between the nationwide credit bureaus (e.g., Experian, Equifax, and Transunion) and creditors in connection with mortgage lending and other consumer credit transactions (e.g., credit reports).  The FCRA also regulates the exchange of consumer information between employers that use, and consumer reporting agencies (or CRAs) that provide, screening reports that include credit history and many other types of information.  Generally speaking, employers must comply with the FCRA when they order virtually any type of report from a CRA, including reports derived from public record sources (e.g., criminal and motor vehicle records checks).  Thus, the FCRA has for over four decades imposed requirements on employers that use "consumer reports" or "investigative consumer reports" for employment purposes.  A consumer report is generally known as a "credit report" or a "background check report" prepared by a CRA, whereas an investigative consumer report is a special type of consumer report whereby the CRA obtains information through personal interviews (e.g., an in-depth reference check). 

Broadly speaking, the FCRA's primary requirements on employers may be divided into two categories: requirements that employers must follow (1) before they obtain a consumer report from a CRA, and (2) if they take "adverse action" against an individual based in whole or in part on information contained in the consumer report (e.g., if the job applicant interviewed poorly, but also had a history of felony convictions).

Before an employer may obtain a consumer report from a CRA, typically it must make a "clear and conspicuous" written disclosure to the consumer, in a document consisting "solely" of the disclosure, that a consumer report may be obtained.  The applicant or employee must provide written permission before the employer can obtain a consumer report for employment purposes.  The employer also must make a certification to the CRA regarding its "permissible purpose" for the report, and its compliance with relevant FCRA provisions and state and federal equal opportunity law.  If the employer intends to obtain an "investigative consumer report" on an applicant or employee, the employer must also allow the individual to request information about the "nature and scope" of the investigation, and the employer must respond in writing to any such request within five days from either the date of the request or when the report was obtained, whichever is later. 

After the employer obtains the report, the employer must follow certain requirements if it intends to take "adverse action" against the applicant or employee based in whole or in part on the contents of the report.  In the context of a consumer report used for employment purposes, an adverse action broadly includes "a denial of employment or any other decision for employment purposes that adversely affects any current or prospective employee." 

Before the employer implements the adverse action against the applicant or employee, the employer must provide a "pre-adverse action" notice to the individual, which must, at a minimum, include a copy of both the consumer report and the Consumer Financial Protection Bureau's (CFPB) Summary of Rights.2

Once the employer is prepared to take the adverse action against the applicant or employee, it must then provide an adverse action notice to the individual.  The adverse action notice, which can be made in writing, orally, or by electronic means, must, at a minimum, contain the following information:

  1. The name, address and telephone number of the CRA that provided the report to the employer;
  2. A statement that the CRA did not make the adverse decision and is not able to explain why the decision was made;
  3. A statement setting forth the applicant's or employee's right to obtain a free disclosure of his or her report from the CRA if the applicant or employee makes a request for such a disclosure within 60 days; and
  4. A statement setting forth the applicant's or employee's right to dispute directly with the CRA the accuracy or completeness of any information contained in the report that the CRA provided to the employer.

Potential Liability for FCRA Non-Compliance

The FCRA affords a private right of action against an employer for "negligently" or "willfully" failing to comply with any of the FCRA's requirements.  A civil action must be brought by the earlier of: (1) two years after the date of discovery by the plaintiff of the violation; or (2) five years after the date on which the violation that is the basis of the alleged liability occurred.

The range of available damages varies for negligent and willful violations. An employer that negligently fails to comply with any requirement of the FCRA with respect to an applicant or employee is liable for: (1) actual damages sustained by that individual; and (2) reasonable attorneys' fees and costs.  An employer that is found to have willfully failed to comply with the FCRA is liable for: (1) actual damages or statutory damages ranging between $100 and $1,000; (2) punitive damages; and (3) reasonable attorneys' fees and costs.

The U.S. Supreme Court has held that, to prove a "willful" violation of the FCRA, a plaintiff must demonstrate that the company either "knowingly" or "recklessly" acted in violation of the FCRA.3 In various contexts, businesses have asserted the lack of willfulness as a defense in class action litigation, most successfully when the particular statutory provision is susceptible to more than one reasonable interpretation.  

Class Action Illustrations

While the liability related to individual lawsuits or regulatory actions certainly is sufficient to deter non-compliance, another growing risk to employers is class action suits alleging that employers have willfully failed to comply with some of the FCRA's requirements as to all applicants or employees, such as by failing to obtain proper authorizations from, or provide a copy of the background reports to, applicants or employees before adverse action is taken.  One of the first high-profile FCRA cases against an employer involved a settlement of over $5 million with a transit provider.  Recently, however, several other multi-million dollar settlements were reached based on alleged technical violations of the FCRA by employers:

  • a national retailer reached a $3 million settlement;
  • a national pizza delivery chain reached a $2.5 million settlement; and
  • a trucking company reached a $2.75 million settlement.

FCRA class actions typically allege that the employer has not just failed to comply with a technical requirement of FCRA, but that the employer has done so willfully.  The strategic reason for invoking the willful violation provision in class action litigation is to try to minimize the impact of individualized issues regarding causation and damages, which arise in connection with negligent violation claims.

Recommendations for Employers for 2014

  1. Employers should arrange for a privileged review of their background check consent forms.  A thorough review of these forms may help avoid the types of claims raised in an emerging line of cases that take issue with, for example, an employer's inclusion of text beyond the minimum necessary for FCRA disclosures.
  2. Employers should implement procedures to help ensure that adverse action notices are sent at least five business days after the pre-adverse action notice.  Employers should also consider how to best record personnel decisions such that, if necessary, the employer can prove that the reason an applicant was rejected was because of a poor interview, failure to provide requested follow-up information, drug test failure, etc., rather than based – even in part – on the background report. 
  3. Motor carriers – who already are in the crosshairs of the plaintiff's bar – should continue to vigorously monitor ongoing class litigation addressing the nature and extent of the mandatory disclosures to applicants that submit applications remotely, rather than by physically visiting one of the employer's terminals.  In one surprising federal district court opinion, the court ruled that, when trucking applicants do apply remotely, compliance with the motor carrier provisions in the FCRA is mandatory, not optional, which means that it is no defense for the motor carrier to say that it complied with the requirements applicable to non-motor carriers.
  4. Employers should be mindful of their duties when contacted by a CRA about information they provided about a former employee, such as his or her employment history.  As a so-called "furnisher" of information, employers must re-investigate any information provided to a CRA upon learning that the former employee has submitted a dispute about the accuracy of the information to the CRA.
  5. Employers should carefully review which entity is designated as the "employer" on the FCRA paperwork, and ensure the reference is appropriately broad or narrow.  In one recent federal district court opinion, the court allowed the plaintiff to pursue putative class action claims under the FCRA against several defendants within a corporate family because it was unclear which company in the family of companies would actually be accepting the job application and using the background check report.


Even a cursory review of the class action filings from 2013 reveals that the storm clouds are gathering under the FCRA.  Thus, the investment by employers in fortifying their FCRA compliance is likely to pay substantial dividends. 

Similarly, in 2014, employers should continue to watch for new local regulations relating to criminal records (such as the so-called "ban-the-box" laws)4 and the Equal Employment Opportunity Commission's (EEOC) intensive systemic enforcement actions under anti-discrimination laws, such as Title VII of the Civil Rights of 1964.5

1 For more detailed coverage of the FCRA's requirements on employers, see Rod M. Fliegel and Jennifer L. Mora, The FTC Staff Report on “40 Years of Experience with the Fair Credit Reporting Act” Illuminates Areas of Potential Class Action Exposure for Employers, Littler Report (Dec. 12, 2011), available at; Rod M. Fliegel, Jennifer L. Mora and William Simmons, Fair Credit Reporting Act Amendment Offers Important Protections From Lawsuits Targeting Background Check Programs, Littler Report (Sept. 10, 2013), available at

2 See Rod M. Fliegel and Jennifer Mora, Employers Must Update FCRA Notices for Their Background Check Programs Before January 1, 2013, Littler ASAP (Sept. 4, 2012) available at

3 Safeco Ins. Co. of Am. v. Burr, 551 U.S. 47, 52, 69 (2007).

4 See Rod Fliegel, Pam Salgado, Dan Thieme and Jennifer Mora, Seattle Adopts Ordinance Limiting Inquiries Into and Use of Criminal Records for Employment Purposes, Littler ASAP (June 20, 2013) available at:; Rod Fliegel and Jennifer Mora, Rhode Island Enacts "Ban the Box" Law Prohibiting Employment Application Criminal History Inquiries Until the First Job Interview, Littler ASAP (July 17, 2013) available at; Dale Deitchler, Rod Fliegel, Susan Fitzke and Jennifer Mora, Minnesota Enacts "Ban the Box Law" Prohibiting Employment Application Criminal History Checkmark Boxes and Restricting Criminal Record Inquiries Until After Interviews or Conditional Job Offers, Littler ASAP (May 17, 2013) available at

5 See Rod Fliegel, Barry Hartstein and Jennifer Mora, EEOC Issues Updated Criminal Record Guidance that Highlights Important Strategic and Practical Considerations for Employers, Littler ASAP (Apr. 30, 2012) available at:

Written by:


Littler on:

Readers' Choice 2017
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up using*

Already signed up? Log in here

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
Privacy Policy (Updated: October 8, 2015):

JD Supra provides users with access to its legal industry publishing services (the "Service") through its website (the "Website") as well as through other sources. Our policies with regard to data collection and use of personal information of users of the Service, regardless of the manner in which users access the Service, and visitors to the Website are set forth in this statement ("Policy"). By using the Service, you signify your acceptance of this Policy.

Information Collection and Use by JD Supra

JD Supra collects users' names, companies, titles, e-mail address and industry. JD Supra also tracks the pages that users visit, logs IP addresses and aggregates non-personally identifiable user data and browser type. This data is gathered using cookies and other technologies.

The information and data collected is used to authenticate users and to send notifications relating to the Service, including email alerts to which users have subscribed; to manage the Service and Website, to improve the Service and to customize the user's experience. This information is also provided to the authors of the content to give them insight into their readership and help them to improve their content, so that it is most useful for our users.

JD Supra does not sell, rent or otherwise provide your details to third parties, other than to the authors of the content on JD Supra.

If you prefer not to enable cookies, you may change your browser settings to disable cookies; however, please note that rejecting cookies while visiting the Website may result in certain parts of the Website not operating correctly or as efficiently as if cookies were allowed.

Email Choice/Opt-out

Users who opt in to receive emails may choose to no longer receive e-mail updates and newsletters by selecting the "opt-out of future email" option in the email they receive from JD Supra or in their JD Supra account management screen.


JD Supra takes reasonable precautions to insure that user information is kept private. We restrict access to user information to those individuals who reasonably need access to perform their job functions, such as our third party email service, customer service personnel and technical staff. However, please note that no method of transmitting or storing data is completely secure and we cannot guarantee the security of user information. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time.

If you have reason to believe that your interaction with us is no longer secure, you must immediately notify us of the problem by contacting us at In the unlikely event that we believe that the security of your user information in our possession or control may have been compromised, we may seek to notify you of that development and, if so, will endeavor to do so as promptly as practicable under the circumstances.

Sharing and Disclosure of Information JD Supra Collects

Except as otherwise described in this privacy statement, JD Supra will not disclose personal information to any third party unless we believe that disclosure is necessary to: (1) comply with applicable laws; (2) respond to governmental inquiries or requests; (3) comply with valid legal process; (4) protect the rights, privacy, safety or property of JD Supra, users of the Service, Website visitors or the public; (5) permit us to pursue available remedies or limit the damages that we may sustain; and (6) enforce our Terms & Conditions of Use.

In the event there is a change in the corporate structure of JD Supra such as, but not limited to, merger, consolidation, sale, liquidation or transfer of substantial assets, JD Supra may, in its sole discretion, transfer, sell or assign information collected on and through the Service to one or more affiliated or unaffiliated third parties.

Links to Other Websites

This Website and the Service may contain links to other websites. The operator of such other websites may collect information about you, including through cookies or other technologies. If you are using the Service through the Website and link to another site, you will leave the Website and this Policy will not apply to your use of and activity on those other sites. We encourage you to read the legal notices posted on those sites, including their privacy policies. We shall have no responsibility or liability for your visitation to, and the data collection and use practices of, such other sites. This Policy applies solely to the information collected in connection with your use of this Website and does not apply to any practices conducted offline or in connection with any other websites.

Changes in Our Privacy Policy

We reserve the right to change this Policy at any time. Please refer to the date at the top of this page to determine when this Policy was last revised. Any changes to our privacy policy will become effective upon posting of the revised policy on the Website. By continuing to use the Service or Website following such changes, you will be deemed to have agreed to such changes. If you do not agree with the terms of this Policy, as it may be amended from time to time, in whole or part, please do not continue using the Service or the Website.

Contacting JD Supra

If you have any questions about this privacy statement, the practices of this site, your dealings with this Web site, or if you would like to change any of the information you have provided to us, please contact us at:

- hide
*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.