Most employers assume the Fair Credit Reporting Act does not apply when screening independent contractors, but that assumption is wrong in most circumstances and carries compounding legal risk as federal guidance has been in force for several years and state laws continue to expand. This article explains the legal basis for FCRA coverage of contractor screening, the regulatory shifts that took effect starting in 2023, and the five compliance failures that most commonly expose companies to liability today.
Key Takeaways
- The FCRA applies to background checks on independent contractors in most circumstances where an individual, not a business entity, is being screened.
- The FCRA's "employment purposes" definition, under 15 U.S.C. Section 1681a(h), has been interpreted by courts to cover contractor relationships when the engaging company exercises meaningful control over the work.
- A standalone written disclosure, separate from any contractor agreement, must precede any consumer report request.
- The company must obtain written authorization from the contractor before initiating the background check.
- When an adverse decision is based in whole or in part on the report, the two-step adverse action process applies to contractors, not only employees.
- Regulators and courts have consistently held that contractor classification alone does not remove FCRA obligations when a company obtains a consumer report on an individual to evaluate that person for an engagement.
- A number of states maintain their own consumer reporting laws that impose stricter requirements than federal FCRA, and several have extended those protections expressly to contractor relationships.
- A contractor screening policy that has not been reviewed recently is overdue for a full compliance audit.
Introduction
A company engaged a pool of 1099 contractors to support a product rollout. Before onboarding each contractor, the company ran background checks through a third-party screening provider. It provided no separate disclosure and collected no written authorization. Its position was straightforward: these are contractors, not employees, so the FCRA does not apply. This reasoning has driven regulatory inquiries and civil litigation across the country. It is not a theoretical risk.
Employers widely hold the assumption that the FCRA does not cover independent contractor screening, and that assumption is incorrect in most circumstances. Moreover, it has become more legally dangerous over the past several years as federal guidance has clarified scope, enforcement activity has increased, and state laws have extended independent protections to contractor relationships.
Does the FCRA apply to independent contractor background checks? In most circumstances, yes. When a company uses a third-party consumer reporting agency to obtain a background report on an individual contractor for the purpose of evaluating that person for an engagement, the FCRA's "employment purposes" definition applies. The primary exception involves contractor relationships with a business entity rather than an individual, or situations where the engaging company exercises no meaningful control over the work. That exception is narrower than most employers assume.
The Legal Foundation: Does the FCRA Actually Cover Contractors?
Defining "Employment Purposes" Under the FCRA
The FCRA applies whenever a company uses a consumer report for "employment purposes," a term defined at 15 U.S.C. Section 1681a(h) as the use of a consumer report to evaluate a consumer for employment, promotion, reassignment, or retention as an employee. On its face, that definition refers to employees. Courts have interpreted "employment purposes" more broadly, however, when the economic realities of the relationship resemble employment, particularly when the engaging company exercises meaningful control over how, when, and where the work is performed.
The Control Test and Contractor Relationships
Courts have considered several factors when determining whether the FCRA applies to a contractor relationship, with the degree of control a company exercises over the work being among the most frequently cited. Importantly, the analysis varies by jurisdiction, and no single test has gained uniform adoption across all federal courts. When a company directs a contractor's schedule, sets performance standards, supervises work quality, and can terminate the relationship at will, those factors support the conclusion that the relationship falls within the FCRA's employment purposes framework. As a result, legal risk increases in proportion to the degree of control exercised, though employers should consult qualified legal counsel for a jurisdiction-specific assessment.
The Genuine Exception: Business Entity Contracts
FCRA applicability is genuinely less clear in one specific situation: when a company contracts with a business entity, such as an LLC or corporation, rather than with an individual. In that case, the background check may not constitute a "consumer report" under the FCRA because the company did not obtain the report on a natural person for employment purposes. This exception applies when the contracting relationship operates as a true vendor arrangement, meaning the business entity bears its own liability, uses its own subcontractors, and the engaging company does not control the means of performance.
However, when the business entity is a single-member LLC operated by one person who performs all the work personally, regulators and courts have not uniformly treated this structure as outside FCRA scope. Consequently, each situation requires analysis of the specific facts, and employers should consult qualified legal counsel before concluding that a contractor relationship falls outside FCRA coverage.
The Three FCRA Requirements That Apply to Contractor Screening
The FCRA imposes three core procedural obligations when a company obtains a consumer report on an individual contractor: a standalone disclosure, written authorization, and, where applicable, a two-step adverse action process. Each requirement applies independently, and therefore a failure on any one of them constitutes a separate violation.
Disclosure: The Standalone Document Requirement
Before obtaining a consumer report on an individual contractor, the company must provide a clear and conspicuous written disclosure stating that a consumer report may be obtained for employment purposes. Under 15 U.S.C. Section 1681b(b)(2)(A), this disclosure must consist solely of the disclosure itself. Combining it with a contractor services agreement, an onboarding packet, or any other document constitutes a per se violation of the standalone requirement, regardless of whether actual harm occurred. Courts have certified class actions based on this structural defect alone, without any showing of individual harm.
Authorization: Written Consent Before the Check Runs
Additionally, the FCRA requires written authorization from the individual before a company obtains a consumer report. Under 15 U.S.C. Section 1681b(b)(2)(B), authorization may appear on the same document as the disclosure or separately. Electronic signatures are generally valid under the E-SIGN Act (15 U.S.C. Section 7001). The company must collect authorization before initiating the check. Consent collected after a report has already been run does not satisfy this requirement.
| Requirement | Document Type | Timing |
| FCRA Disclosure | Standalone only, no other content permitted | Before the check is ordered |
| Written Authorization | Same page as disclosure or separate document | Before the check is ordered |
| Pre-Adverse Action Notice | Includes report copy and Summary of Rights | Before final adverse decision |
| Final Adverse Action Notice | Includes CRA info and dispute rights | After reasonable waiting period |
Adverse Action: The Two-Step Process Applies to Contractors
Common misconception: "We only need consent for employees." The FCRA's authorization requirement applies wherever the employment purposes definition applies. Written authorization is required before obtaining a consumer report on an individual contractor being evaluated for an engagement. The legal obligation does not turn on whether the person is classified as an employee or a contractor.
When a company decides not to engage a contractor, or terminates an existing engagement based in whole or in part on a consumer report, the FCRA's two-step adverse action process applies. First, before taking any adverse action, the company must provide a pre-adverse action notice that includes a copy of the consumer report and the CFPB's Summary of Rights. This step gives the individual an opportunity to dispute inaccurate information before the decision becomes final.
Second, after a reasonable waiting period, the company issues a final adverse action notice. That notice must include the CRA's name, address, and phone number; a statement that the CRA did not make the adverse decision; and notice of the right to obtain a free copy of the report within sixty days. The FCRA does not specify a minimum number of days for this waiting period, but FTC staff guidance indicates that five business days is generally reasonable. Combining both notices into one communication, or skipping the pre-adverse action step entirely, violates the FCRA.
The Regulatory Shifts That Reshaped Contractor Screening Obligations
Three developments beginning in 2023 collectively redefined the compliance baseline for contractor background checks: an increasingly established regulatory position on gig workers, sustained CFPB enforcement activity, and a wave of state law expansions. Employers who have not updated their programs to reflect all three are not simply behind on emerging issues. In fact, they are out of compliance with requirements that have been in effect for years.
The Regulatory Position on Gig Workers: Established, Not Emerging
Regulators and courts have consistently held that contractor classification alone does not remove FCRA obligations when a company obtains a consumer report on an individual to evaluate that person for an engagement. This position directly addresses the growing use of background screening in platforms and organizations that classify workers as independent contractors. Furthermore, employers still operating under the assumption that contractor status resolves the FCRA question are not facing a new interpretation. Rather, they are operating outside a compliance framework that is well established. Employers should verify current FTC and CFPB guidance at ftc.gov and consumerfinance.gov before finalizing any compliance determination.
CFPB Enforcement: An Active, Not Passive, Posture
The CFPB shares FCRA enforcement authority with the FTC and has maintained active enforcement against both consumer reporting agencies and employers for procedural FCRA failures from 2023 through the present. Specifically, enforcement actions have targeted failures in the adverse action process, deficient disclosures, and use of consumer reports without documented permissible purpose. Employers who operate contractor screening programs without documented procedures and retained records consequently face continued exposure. Verify current enforcement activity against the CFPB's public enforcement database before finalizing any compliance assessment.
State Law: A Layered and Still-Evolving Landscape
| State / Jurisdiction | Key Law or Provision | Applicability to Contractors |
| California | AB 2188 (eff. Jan. 1, 2024); ICRAA (Civil Code § 1786) | Cannabis use protections apply in some contractor contexts; stricter disclosure rules apply |
| New York City | Amended Fair Chance Act | Extends to some contractor relationships depending on control exercised |
| Illinois | Illinois Human Rights Act amendments | Restricts criminal record consideration in some contractor engagement contexts |
| Massachusetts, Washington, Colorado | Ban-the-box provisions | Applicability to contractors varies by state; subject to active litigation |
These changes are in effect and, moreover, have been for a sufficient period that regulated employers should have already adjusted their programs. A contractor screening policy not reviewed since before 2023 is therefore operating outside the current compliance framework on multiple dimensions simultaneously.
The Five Most Common FCRA Compliance Failures in Contractor Screening
The failures below are not edge cases. They appear consistently in litigation, regulatory inquiries, and internal compliance audits across industries that rely on contractor workforces.
Procedural Failures at the Screening Stage
- Using the employment application or contractor agreement as the FCRA disclosure. The disclosure must be a standalone document containing only the disclosure statement. Placing it inside a contractor services agreement, offer letter, or onboarding form is a per se statutory violation. Courts have certified class actions based on this defect alone, without any showing of actual harm to individual plaintiffs.
- Skipping the pre-adverse action notice for contractors. The two-step adverse action process applies to contractors where employment purposes are triggered, not only to employees. Many companies issue a final adverse action notice immediately, or omit both notices entirely for contractor relationships. Either approach violates the FCRA if the employment purposes definition is met.
- Running checks without documented permissible purpose. The FCRA requires that companies obtain consumer reports only for permissible purposes, defined at 15 U.S.C. Section 1681b. Employers must maintain written records establishing why each check was run, for what role, and on what basis they established permissible purpose. In a dispute or regulatory inquiry, the employer bears the burden of demonstrating permissible purpose.
Ongoing and Multi-State Failures
- Reusing consent forms from a prior engagement. A signed authorization from a previous contract period does not cover a background check for a new or renewed engagement. Instead, each new consumer report requires fresh written authorization. This error is especially common in organizations that maintain ongoing contractor rosters and run periodic re-screening without collecting updated authorizations.
- Ignoring state mini-FCRA laws. A number of states have enacted consumer reporting statutes that impose requirements stricter than those under federal law. Some expressly address contractor relationships or use definitions broad enough to encompass them. As a result, a uniform national screening policy that does not account for the contractor's state of work creates multi-state exposure that federal FCRA alone does not resolve.
Each failure carries independent liability exposure. Organizations with multiple failures in place therefore face compounding risk across each contractor engagement.
State-Specific Rules That Go Beyond FCRA
Federal FCRA sets a floor, not a ceiling. Several states impose requirements that are stricter, broader, or both, and some extend those requirements explicitly to contractor relationships. The table below summarizes key jurisdictions. Employers should verify current requirements with qualified legal counsel for each state where contractors perform work.
| State / Jurisdiction | Key Statute | Lookback Period | Notable Contractor-Specific Rule |
| California | ICRAA (Civil Code § 1786); AB 2188 | 7 years (most record types) | Stricter disclosure rules; cannabis use protections apply in some contractor contexts |
| New York / NYC | NY State consumer reporting law; NYC Fair Chance Act | 7 years | NYC Fair Chance Act covers some contractor relationships |
| Illinois | Illinois Human Rights Act (amended) | 7 years | Criminal record restrictions apply in some contractor engagement contexts |
| Massachusetts | CORI reform; ban-the-box provisions | 7 years | Ban-the-box applicability to contractors varies; verify locally |
| Washington | Washington Fair Chance Act | 7 years | Applicability to contractors subject to active litigation |
| Colorado | Colorado ban-the-box provisions | 7 years | Applicability to contractors varies; verify locally |
What These State Rules Mean in Practice
Beyond the federal baseline, employers must treat state law as a parallel and often stricter compliance track. For instance, California's ICRAA imposes disclosure timing and content requirements that go further than the federal standalone rule. Similarly, New York City's Fair Chance Act introduces sequencing obligations that affect when and how a company may initiate a background check conversation with a contractor. In states where applicability to contractors remains under litigation, the conservative and legally defensible approach is to apply the same protections the law extends to employees until courts or regulators provide clearer guidance.
For a full state-by-state analysis of contractor background check laws, consult a current legal reference or regulatory guidance from the applicable state agency.
Building a Compliant Contractor Screening Process
The steps below reflect the federal FCRA baseline. Step 9 requires additional verification for each contractor's work location, as state requirements vary significantly.
- Confirm whether the FCRA applies to the specific contractor relationship by analyzing whether an individual or a business entity is being screened and the degree of control the company exercises over the work.
- Prepare a standalone FCRA disclosure document containing only the disclosure statement. No agreements, terms, or onboarding materials may appear on this document.
- Obtain signed written authorization from the contractor before initiating the background check. Electronic signatures are valid. Retain a copy of the signed authorization.
- Run the check only through a consumer reporting agency compliant with applicable law. Document which CRA the company used, the report type requested, and the date the company obtained the report.
- If the report returns information that may affect the engagement decision, initiate the pre-adverse action process immediately. Provide a copy of the consumer report and the CFPB's Summary of Rights before finalizing any adverse decision.
- Provide a reasonable waiting period after delivering the pre-adverse action notice before issuing any final adverse action notice. The FCRA does not specify a statutory minimum, but FTC staff guidance indicates that five business days is generally reasonable. Consult legal counsel for jurisdiction-specific expectations.
- Issue the final adverse action notice if the company proceeds with disengagement. Include all required content: CRA contact information, a statement that the CRA did not make the decision, and notice of the individual's dispute rights.
- Retain all records, including the disclosure, authorization, consumer report, pre-adverse action notice, and final adverse action notice, for a minimum of two years.
- Identify the contractor's work location and verify applicable state mini-FCRA requirements, ban-the-box rules, lookback period limits, and any other state or municipal requirements.
- Schedule an annual policy review, or set a regulatory update process, to capture changes in applicable federal guidance and state law.
Conclusion
FCRA compliance for contractor background checks is a core legal obligation for any company that screens individual contractors through a third-party consumer reporting agency. The framework governing that obligation is well established, and regulators have maintained an active enforcement posture. Employers who have not updated contractor screening programs to reflect current regulatory expectations and applicable state law expansions are not waiting on a developing situation. They are operating outside the current compliance baseline. A review of current procedures against the requirements described here, supported by qualified legal counsel for jurisdiction-specific guidance, is therefore warranted before the next contractor engagement.
Frequently Asked Questions
Does the FCRA apply to background checks on independent contractors?
The FCRA applies to background checks on independent contractors in most circumstances where a company screens an individual through a third-party consumer reporting agency to evaluate that person for an engagement. Under 15 U.S.C. Section 1681a(h), courts and regulators have interpreted the "employment purposes" definition broadly to cover contractor relationships where the engaging company exercises meaningful control. The label of "independent contractor" does not, by itself, remove FCRA obligations.
Do you need written consent to run a background check on a 1099 contractor?
Written authorization is required before a company obtains a consumer report on a 1099 contractor when the FCRA applies. Specifically, under 15 U.S.C. Section 1681b(b)(2)(B), the employer must collect written consent before initiating the check, and electronic signatures are valid. Moreover, a consent form signed for a previous engagement does not cover a new or renewed background check. Fresh authorization is therefore required for each new consumer report.
What is the adverse action process for a contractor?
When a company bases an adverse decision in whole or in part on a consumer report, the FCRA's two-step adverse action process applies to contractors. First, the company must deliver a pre-adverse action notice with a copy of the report and the Summary of Rights before finalizing the decision. After a reasonable waiting period, the company then issues a final adverse action notice containing all required disclosures. Notably, the FCRA does not specify a statutory minimum waiting period; FTC staff guidance indicates five business days is generally reasonable.
Can a company be sued for running a background check on a contractor without consent?
A company that runs a background check on a contractor without proper written authorization, or that fails to provide a standalone FCRA disclosure, may face civil liability under the FCRA. Willful violations may result in statutory damages ranging from $100 to $1,000 per violation, plus punitive damages and attorney's fees under 15 U.S.C. Section 1681n. Negligent violations may similarly result in actual damages and attorney's fees under 15 U.S.C. Section 1681o. Federal courts have certified class actions on these grounds based on disclosure and authorization defects alone.
How does California AB 2188 affect contractor background checks?
California AB 2188, effective January 1, 2024, prohibits adverse action based on off-duty cannabis use in most applicant and worker contexts, including some contractor relationships, when testing methods detect past use rather than current impairment. As a result, employers in California should confirm that their contractor drug screening practices comply with this restriction. Applicability depends on the nature of the role and the degree of control the company exercises.
What changed in FCRA contractor screening rules starting in 2023?
Regulators and courts have consistently held that contractor classification alone does not remove FCRA obligations when a company obtains a consumer report on an individual to evaluate that person for an engagement. Additionally, the CFPB maintained active enforcement for procedural FCRA failures throughout this period. Several states also enacted laws affecting contractor screening, including California AB 2188 and New York City Fair Chance Act amendments. As of 2026, these positions and state requirements represent the established compliance baseline. Employers should therefore verify current federal guidance at ftc.gov and consumerfinance.gov.
Additional Resources
- Fair Credit Reporting Act (15 U.S.C. § 1681 et seq.), Full Text
https://www.ftc.gov/legal-library/browse/statutes/fair-credit-reporting-act - FTC Consumer Report: Permissible Purposes and Employer Obligations
https://www.ftc.gov/business-guidance/resources/using-consumer-reports-what-employers-need-know - CFPB Summary of Consumer Rights (Required Adverse Action Enclosure)
https://www.consumerfinance.gov/consumer-tools/credit-reports-and-scores/consumer-reporting-companies/fcra-summary-of-rights/ - California Investigative Consumer Reporting Agencies Act (Civil Code § 1786 et seq.)
https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?sectionNum=1786.&lawCode=CIV - California AB 2188 (2022), Cannabis Use Protections
https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202120220AB2188 - New York City Commission on Human Rights, Fair Chance Act Guidance
https://www.nyc.gov/site/cchr/law/fair-chance-act.page - CFPB Annual Report on Fair Lending and Consumer Reporting Enforcement
https://www.consumerfinance.gov/data-research/research-reports/
ABOUT THE CREATOR
Charm Paz, CHRP
Recruiter & Editor
Charm Paz is an HR professional at GCheck, specializing in background screening, fair hiring, and regulatory compliance. She holds from the Professional Background Screening Association (PBSA) and helps organizations navigate employment regulations with clarity and confidence.
With a background in Industrial and Organizational Psychology, she translates policy into practice to build ethical, compliant, human-centered hiring systems that strengthen decision-making over time.
