Home › Background Checks › How Checks Work › The Consent Step: Why Background Checks Require Your Permission
Background Checks

The Consent Step: Why Background Checks Require Your Permission

Consent isn't just a formality. Understand the legal reasons background checks require written authorisation before any search begins.

Background Checks Editorial Team
8 min read · Jul 27, 2025
The Consent Step: Why Background Checks Require Your Permission

Photo: searchopenrecords editorial

—— In This Article
  1. Why the Law Requires Your Permission
  2. What the Consent Form Must Contain
  3. Self-Checks, Permissible Purposes, and Special Cases

Key Takeaways

  • Federal law — specifically the FCRA — requires written consent before most formal background checks can legally proceed.
  • The consent form must be a standalone document, not buried in an employment application.
  • Consent gives you the right to know a check is being run and, in many cases, which agency ran it.
  • Running a check on yourself does not require third-party consent because you are both the subject and the requester.
  • State laws may impose additional consent requirements beyond the federal baseline.
  • Refusing to consent is your right, but it may affect eligibility for a job, tenancy, or other opportunity.

Why the Law Requires Your Permission

When an employer, landlord, or other organization wants to run a formal background check, they cannot simply proceed on their own initiative. The Fair Credit Reporting Act (FCRA) — the primary federal statute governing consumer reports — requires that the subject of the check provide written authorization beforehand. This rule exists because a background report is a powerful document: it may contain criminal history, credit information, employment verification, and other sensitive data that directly shapes major life decisions.

Congress built the consent requirement into the FCRA to give individuals a meaningful opportunity to know they are being investigated, understand what kind of information will be gathered, and correct any inaccuracies before a decision is made. The consent step is, in essence, the law's way of keeping background screening transparent rather than covert.

It is worth distinguishing between a formal consumer report and an informal public-records search. The FCRA's written-consent requirement applies to reports produced by a CRA — a company whose business is assembling consumer data — for a defined permissible purpose. Browsing publicly available court records or news articles on your own does not trigger FCRA obligations. That distinction matters: see our explainer on employer access versus your privacy for where that boundary sits.

The FCRA is specific about the consent document's format. It must be a clear and conspicuous disclosure provided in a document that consists solely of the disclosure — meaning it cannot be tucked inside a job application, offer letter, or multi-page onboarding packet. This standalone requirement prevents employers from burying consent language where a candidate might miss it.

At minimum, the disclosure must inform you that a consumer report may be obtained for employment (or another stated) purposes. The authorization you sign confirms you have received this notice and agree to the search proceeding. Many state laws layer additional requirements on top — for example, California, New York, and Washington each impose supplemental disclosure rules that go beyond the federal baseline.

Keep a Copy of What You Sign

Before submitting any consent form, request or save a copy for your records. If questions arise later about the scope of your authorization — or if you need to dispute a report — having the original document makes it much easier to understand exactly what you agreed to and when.

Once you have signed, you are generally entitled to request a copy of the report and to know the name of the CRA that produced it. Those follow-on rights are part of the same legal framework. Our article on your legal rights when a background check is run on you covers those protections in detail.

Self-Checks, Permissible Purposes, and Special Cases

Not every background check scenario involves a third party requesting consent. When you run a check on yourself, you are simultaneously the subject and the requester, so the third-party authorization requirement does not apply. This distinction has practical implications for job seekers who want to review their own records before an employer does — a step that can surface errors worth correcting in advance. Learn more in our guide comparing personal checks versus employer-ordered checks.

Beyond employment, the FCRA recognizes several other permissible purposes for running a report — including tenancy screening, credit underwriting, and licensing reviews. Each purpose carries its own notice and consent obligations. A landlord screening a rental applicant, for instance, must follow the same standalone-disclosure rule as an employer would.

96%

Employers that conduct background checks on some or all new hires

According to a survey by the Professional Background Screening Association (PBSA), the vast majority of U.S. employers screen candidates before making hiring decisions.

§ 1681b

FCRA section governing permissible purposes and consent

15 U.S.C. § 1681b is the specific statutory provision that restricts when a CRA may furnish a consumer report and what certification the requesting party must provide.

50+

U.S. states and territories with additional background check disclosure laws

Many states layer supplemental notice, consent, or timing requirements on top of the federal FCRA baseline, meaning compliance obligations vary significantly by location.

Understanding what happens once consent is given is equally important. After you sign, the requesting organization submits your information to a CRA, which then queries its data sources and assembles a report — a process detailed in our walkthrough of what actually happens after you hit submit. Consent is the door; everything that follows depends on it being properly opened.

Frequently Asked Questions

For a formal report obtained through a consumer reporting agency, the FCRA requires your written authorization beforehand. An employer who skips this step violates federal law. However, an employer can review publicly available information — such as court records or social media — without your permission, since that falls outside the FCRA's definition of a consumer report.
Refusing is your legal right, but it carries practical consequences. An employer, landlord, or other requester can typically decline to proceed with your application if you withhold consent. They cannot, however, retaliate against you unlawfully or use refusal as a pretext for discrimination.
Yes. Under the Electronic Signatures in Global and National Commerce Act (E-SIGN Act), electronic signatures are legally equivalent to handwritten ones in most U.S. contexts. Many background check platforms now collect consent through secure digital forms.
This depends on the language of the consent form and applicable state law. Some forms authorize ongoing or periodic checks — common in positions of trust. If you are unsure whether a consent you signed covers future checks, request a copy of the form you signed and review its scope.
The FCRA's consent requirement applies specifically to consumer reporting agencies compiling reports for defined permissible purposes. Informal public-records searches by private individuals sit outside that framework but are governed by separate privacy and data laws. See our address lookup privacy explainer for more on that boundary.
Once a report has already been requested and obtained, withdrawing consent generally has no retroactive effect on that report. You can decline to authorize future checks, but reports already procured with valid consent remain legally obtained. Contact the requesting party in writing if you wish to limit future use.
Background Checks Editorial Team

Background Checks Editorial Team

Background Checks Editorial Team is the collective byline for our editorial team and contributor network. Articles published under this byline or an editorial pen name are researched, written, and reviewed according to our editorial standards for clarity, consistency, and independence before publication.

View author profile
The content on this site is for informational purposes only and is not a substitute for professional advice. Always consult a qualified professional for guidance specific to your situation.