What is the FCRA?
First enacted in 1970, the Fair Credit Reporting Act (FCRA) is comprehensive federal legislation to regulate the collection, dissemination, and use of consumer information. This legislation is the basis of consumer rights in the U.S. and no additional comprehensive privacy legislation yet exists. For this review, we will focus on consumer reports for employment purposes.
What is a Consumer Report?
A consumer report is a written, oral, or other communication from a consumer reporting agency (CRA) that reflects a consumer’s creditworthiness, credit standing, credit capacity, character, or general reputation. This information is obtained by entities for eligibility for personal credit, insurance, employment, or other purposes authorized by 15 U.S.C. § 1681a(d). This report can also include criminal and civil records, driving records, civil lawsuits, reference checks, and other information.
A consumer report is much broader in scope than just a credit report or a background check. These reports shared among subsidiary and parent corporations are still protected by the FCRA legislation.
Consumers – Are individuals, not corporate entities, about whom the report pertains. The individuals we background screen are considered consumers.
Consumer Reporting Agency (CRA)– Any person which, for monetary fees, dues, or on a cooperative nonprofit basis, regularly engages in whole, or part, in the practice of assembling or evaluating consumer credit information or other information on consumers to furnish consumer reports to third parties, and which uses any means or facility of interstate commerce to prepare or furnish consumer reports. By this definition, credit bureaus, employment screeners, and tenant screeners are all CRAs. PlusOne Solutions is considered a CRA.
End User– A person, or entity, that intends to make use of the information contained in a consumer report for a permissible purpose, under the Act. The employers and contracting Customers are considered End Users.
Furnisher– Persons or entities who supply needed information to CRAs. Examples: Banks and other credit grantors.
Certain steps that must be followed before an entity gets a Consumer Report. Additionally, these steps apply before and after an adverse action is taken based on that report.
Except for the consumer, who has rights under the FCRA as above, detailed below, each role has responsibilities:
When CRAs are providing information in the final consumer report, there are some exclusions to be considered. For example, convictions can be reported indefinitely while arrest records and other adverse information (for example, negative credit data, collections, civil judgments) may be limited to seven years only. If an employee is reasonably expected to make more than $75,000, some of these restrictions may not apply. Positive information, which will not cause an adverse impact on the consumer, can be reported without limitation. These guidelines must be followed to ensure compliance. A CRA, such as PlusOne Solutions, must comply with these restrictions when reporting data to end users.
The Federal Trade Commission (FTC) and Consumer Financial Protection Bureau (CFPB) jointly share enforcement authority for the FCRA. The EEOC is not a player in the FCRA; however, they influence the contents of the consumer report from the perspective of Title VII and ensuring the information in a consumer report is not used in a discriminatory manner.
Since the FCRA is a federal statute, it is typically prosecuted in federal district court. Claims must be brought either within two years after the consumer learns of the violation, or five years after the violation occurs. Constructive knowledge is all that is required to start the two-year clock.
Additionally, no harm must be proven to file a lawsuit. As a result, “technical” violations of the FCRA, which do not result in an adverse action against a consumer, are now the subject of litigation.
There are two groups of plaintiffs for FCRA actions – FTC/CFPB can bring enforcements and individual consumers can also bring lawsuits known as a private right of action. Adherence to these procedures is important because the FCRA provides for recovery of actual or statutory damages of $100 to $1,000 for each willful or deliberate violation of the statute, plus unlimited punitive damages. These penalties can result in significant settlement leverage for a case because the exposure for a company is potentially catastrophic.
The FCRA is a fee-shifting statute; so, prevailing plaintiffs can recover their reasonable attorney’s expenses as well. Plaintiffs have a right to a jury trial in FCRA cases; so, in most cases, the amount of damages is determined by the jury. FCRA errors are perfect fodder for one or more plaintiffs (also called class representatives) to bring a lawsuit on behalf of a group or “class” of people. Having a group of plaintiffs provides the potential for larger payouts and greater financial losses for non-compliant organizations.
The efforts to comply with the FCRA are important, but there may also be state consumer reporting requirements to consider as well. There are almost 20 states with some version, or overlap, of the FCRA rules or components of the legislation. Some of these requirements are preempted by the FCRA, but others may stand.
These state regulations include limitations on what, and how long, certain records may be reported. Additional limitations on reporting credit information, special disclosure or notice requirements, or needs such as offering free copies of reports to the consumer may exist. These laws are often quite detailed with exceptions based on positions being hired for, salary information, or job-relatedness requirements for criminal record reporting. States, municipalities, and even cities can have their versions of consumer reporting acts. While the FCRA is getting all the press these last few years, the state requirements should not be overlooked.
The FCRA requires organizations to follow certain procedures when using a consumer reporting agency to obtain a consumer report on current or prospective employees and contractors. When PlusOne Solutions is completing a consumer report on individuals in a contractor network for our customers, our work is regulated by the FCRA. There are obligations around the accuracy and reporting of data, ensuring appropriate disclosures are made and authorization has been obtained, confirming the purpose of the report and the reasonable purpose for obtaining the information in the report and other requirements. Working with our customers, we ensure the required steps are followed and that the consumer’s rights are upheld and respected at all steps of the process.
Contents are provided for information purposes only and should not be construed as legal advice. Users are reminded to seek legal counsel with respect to their obligations and use of PlusOne Solutions services.
To receive these updates directly in your email inbox, sign up for the newsletter.
Interested in learning more about our compliance services? Contact us at (877) 943-0100 or send us a message using the form below.