Background Checks

What Happens to Your Information After a Background Check Is Complete

Once a report is delivered, your data doesn't disappear. Learn how retention, storage, and deletion obligations work under U.S. law.

What Happens to Your Information After a Background Check Is Complete

Photo: searchopenrecords editorial

—— In This Article
  1. The Report Is Delivered — But the Data Doesn't Disappear
  2. Retention: How Long Screening Companies Hold Your Data
  3. The Disposal Rule: Secure Destruction Is a Legal Obligation
  4. Your Ongoing Rights After the Report Is Used

Key Takeaways

  • Background check companies are legally required to securely store and eventually destroy consumer report data.
  • The FCRA governs how consumer reporting agencies handle data after a report is delivered.
  • Employers and landlords who receive reports also have their own disposal obligations.
  • Consumers retain the right to dispute inaccurate information even after a report has been used.
  • Retention periods vary by company policy, record type, and applicable state law.

The Report Is Delivered — But the Data Doesn't Disappear

Many people assume that once a background check report reaches an employer, landlord, or lender, the underlying data is discarded. In reality, it enters a regulated lifecycle governed primarily by the Fair Credit Reporting Act (FCRA) — the federal law that controls how consumer reporting agencies (CRAs) collect, use, and store personal information.

Consumer reporting agencies are not simply pass-through services. They maintain databases, compile records from multiple sources, and generate reports that constitute consumer reports under federal law. That designation carries obligations that extend well beyond the moment of delivery. To understand where that underlying data comes from in the first place, see our article on how court record information flows into background check reports.

Retention: How Long Screening Companies Hold Your Data

There is no single, universal retention period mandated by the FCRA for background check records. Instead, retention is shaped by a combination of federal baseline requirements, state law, and individual company policy. In practice, many CRAs retain report data for five to seven years, though some keep records longer depending on the record category and business purpose.

Certain record types have their own reporting time limits — for example, most negative information cannot be reported after seven years, and bankruptcies after ten. These reporting windows are distinct from retention windows: a company may lawfully hold data in its internal systems longer than it is permitted to include that data in a new consumer report. Our overview of how long records stay on a background check report breaks down these lookback limits by record category.

7 years

Maximum reporting window for most negative records

The FCRA sets a seven-year limit on reporting most adverse information, including civil suits, arrests without conviction, and late payments.

10 years

Maximum period for bankruptcy reporting

Chapter 7 bankruptcies can be reported for up to ten years under the FCRA, making them one of the longest-lasting items on a consumer report.

30 days

Standard dispute investigation window

Under the FCRA, consumer reporting agencies generally have 30 days to investigate a consumer's dispute about information in their report.

State laws can impose stricter retention and deletion rules. California's Consumer Privacy Act (CCPA), for instance, gives California residents additional rights to know what personal data a business holds and, in some circumstances, to request its deletion.

When retention periods end, the FCRA and associated FTC regulations require that consumer report information be disposed of securely. This obligation applies to both the CRA that generated the report and the business that received it. The FTC's Disposal Rule (16 C.F.R. Part 682) specifies that reasonable measures must be taken to prevent unauthorized access during the disposal process.

In practical terms, this means shredding paper records and using secure deletion or degaussing for electronic data — not simply moving files to a trash folder or discarding printed reports in an open recycling bin. Employers, landlords, and other end-users of background check reports carry this same obligation under the rule. Government agencies that originate the underlying public records operate under separate frameworks; understanding government record retention schedules explains how those source-record timelines work.

Your Ongoing Rights After the Report Is Used

Receiving an adverse decision — a rejected job application, a denied rental — does not end your rights under the FCRA. If you were subject to an adverse action based in whole or in part on a background check, the FCRA entitles you to a free copy of the report and information about disputing inaccurate entries. The CRA must investigate disputes within a legally specified timeframe, generally 30 days.

Critically, the right to dispute inaccurate information persists as long as that information remains in the CRA's system. This means errors can — and should — be corrected even after a hiring decision has already been made, protecting you in future checks. For a full breakdown of the rights attached to background check disclosures, see your legal rights when a background check is run on you.

It is also worth noting that different negative records carry different maximum reporting periods. How long negative records can legally appear on a background check outlines the federal and state time limits that constrain what CRAs can include in future reports.

This article provides general educational information about background check data practices under U.S. law. It is not legal advice. Consult a qualified attorney for guidance specific to your situation.

Frequently Asked Questions

Retention periods vary by company and record type, but most consumer reporting agencies retain report data for several years. Some states impose additional requirements. The company's privacy policy and applicable federal rules govern their specific timeline.
The FCRA does not grant a universal right to erasure, but some state laws — such as California's CCPA — give residents additional deletion rights. You can contact the CRA directly and consult your state's privacy statutes to understand what options apply to you.
Yes, employers typically retain copies of background check reports as part of their hiring records. They are also legally obligated to dispose of those records securely when the retention period ends, in compliance with the FCRA's disposal rule.
Improper disposal of consumer report information violates the FCRA's disposal rule and FTC regulations. Affected consumers may have grounds to file a complaint with the FTC or pursue civil remedies under the FCRA.
No. Background check reports and credit reports are distinct products, though both are regulated by the FCRA as consumer reports. Credit reports focus on financial history, while background check reports typically cover criminal records, employment history, and other public records.
Background Checks Editorial Team

Background Checks Editorial Team

Background Checks Editorial Team is the collective byline for our editorial team and contributor network. Articles published under this byline or an editorial pen name are researched, written, and reviewed according to our editorial standards for clarity, consistency, and independence before publication.

View author profile
The content on this site is for informational purposes only and is not a substitute for professional advice. Always consult a qualified professional for guidance specific to your situation.