What Happens to Your Information After a Background Check Is Complete
Once a report is delivered, your data doesn't disappear. Learn how retention, storage, and deletion obligations work under U.S. law.

Photo: searchopenrecords editorial
—— In This Article
Key Takeaways
- Background check companies are legally required to securely store and eventually destroy consumer report data.
- The FCRA governs how consumer reporting agencies handle data after a report is delivered.
- Employers and landlords who receive reports also have their own disposal obligations.
- Consumers retain the right to dispute inaccurate information even after a report has been used.
- Retention periods vary by company policy, record type, and applicable state law.
The Report Is Delivered — But the Data Doesn't Disappear
Many people assume that once a background check report reaches an employer, landlord, or lender, the underlying data is discarded. In reality, it enters a regulated lifecycle governed primarily by the Fair Credit Reporting Act (FCRA) — the federal law that controls how consumer reporting agencies (CRAs) collect, use, and store personal information.
Consumer reporting agencies are not simply pass-through services. They maintain databases, compile records from multiple sources, and generate reports that constitute consumer reports under federal law. That designation carries obligations that extend well beyond the moment of delivery. To understand where that underlying data comes from in the first place, see our article on how court record information flows into background check reports.
Retention: How Long Screening Companies Hold Your Data
There is no single, universal retention period mandated by the FCRA for background check records. Instead, retention is shaped by a combination of federal baseline requirements, state law, and individual company policy. In practice, many CRAs retain report data for five to seven years, though some keep records longer depending on the record category and business purpose.
Certain record types have their own reporting time limits — for example, most negative information cannot be reported after seven years, and bankruptcies after ten. These reporting windows are distinct from retention windows: a company may lawfully hold data in its internal systems longer than it is permitted to include that data in a new consumer report. Our overview of how long records stay on a background check report breaks down these lookback limits by record category.
7 years
Maximum reporting window for most negative records
The FCRA sets a seven-year limit on reporting most adverse information, including civil suits, arrests without conviction, and late payments.
10 years
Maximum period for bankruptcy reporting
Chapter 7 bankruptcies can be reported for up to ten years under the FCRA, making them one of the longest-lasting items on a consumer report.
30 days
Standard dispute investigation window
Under the FCRA, consumer reporting agencies generally have 30 days to investigate a consumer's dispute about information in their report.
State laws can impose stricter retention and deletion rules. California's Consumer Privacy Act (CCPA), for instance, gives California residents additional rights to know what personal data a business holds and, in some circumstances, to request its deletion.
The Disposal Rule: Secure Destruction Is a Legal Obligation
When retention periods end, the FCRA and associated FTC regulations require that consumer report information be disposed of securely. This obligation applies to both the CRA that generated the report and the business that received it. The FTC's Disposal Rule (16 C.F.R. Part 682) specifies that reasonable measures must be taken to prevent unauthorized access during the disposal process.
In practical terms, this means shredding paper records and using secure deletion or degaussing for electronic data — not simply moving files to a trash folder or discarding printed reports in an open recycling bin. Employers, landlords, and other end-users of background check reports carry this same obligation under the rule. Government agencies that originate the underlying public records operate under separate frameworks; understanding government record retention schedules explains how those source-record timelines work.
Your Ongoing Rights After the Report Is Used
Receiving an adverse decision — a rejected job application, a denied rental — does not end your rights under the FCRA. If you were subject to an adverse action based in whole or in part on a background check, the FCRA entitles you to a free copy of the report and information about disputing inaccurate entries. The CRA must investigate disputes within a legally specified timeframe, generally 30 days.
Critically, the right to dispute inaccurate information persists as long as that information remains in the CRA's system. This means errors can — and should — be corrected even after a hiring decision has already been made, protecting you in future checks. For a full breakdown of the rights attached to background check disclosures, see your legal rights when a background check is run on you.
It is also worth noting that different negative records carry different maximum reporting periods. How long negative records can legally appear on a background check outlines the federal and state time limits that constrain what CRAs can include in future reports.
This article provides general educational information about background check data practices under U.S. law. It is not legal advice. Consult a qualified attorney for guidance specific to your situation.
