hr.cafe
Share your story
Hiring & I-9 Practical people operations Professional turning points High · Active FCRA § 1681b(b)(3) class actions & state fair-chance audits

Between Background Check and Rejection: The Five-Business-Day FCRA Pre-Adverse Calendar

Revoking a conditional offer before delivering the report, CFPB rights summary, and state fair-chance assessment triggers class-wide statutory damages. Run this day-by-day clock.

Between Background Check and Rejection: The Five-Business-Day FCRA Pre-Adverse Calendar — hr.cafe field guide banner
Controlling authorities: 15 U.S.C. § 1681b(b)(3)(A) · 15 U.S.C. § 1681m(a) · Cal. Gov. Code § 12952 & 2 CCR § 11017.1 · NYC Admin. Code § 8-107(11-a) Portable tool: Multi-Jurisdiction Pre-Adverse Calendar & Vendor Proof-of-Delivery Audit Log
Jurisdiction
US Federal FCRA (15 U.S.C. §§ 1681b, 1681m) + CA, NYC & Philadelphia Overlays
Employer threshold
All US employers ordering third-party CRA background reports (CA Fair Chance: 5+ staff; NYC: 4+)
Decision trigger
Preliminary intent to revoke offer, deny promotion, or terminate based in whole or part on a CRA report
Review cadence
Reviewed on CFPB Summary of Rights updates, FCRA settlements, or CA/NYC/PA fair-chance rules
Direct Operational Answer

Direct operational answer

Under 15 U.S.C. § 1681b(b)(3)(A), before revoking an offer or taking adverse employment action based in whole or part on a consumer report, employers must deliver a pre-adverse notice, the full report, and the current CFPB Summary of Rights, then wait at least five full business days—or up to ten business days in Philadelphia and disputed California cases—before issuing final notice under § 1681m(a). Under the hr.cafe calendar, HR freezes backfills until delivery timestamps clear.

Gate 1: Why the Pre-Adverse Packet Must Go Out Before Anyone Calls the Runner-Up

Under 15 U.S.C. § 1681b(b)(3)(A), the pre-adverse action notice must go out while your hiring decision is genuinely preliminary. Calling the Hiring Manager to extend an offer to Candidate #2 on Day 1 proves your five-day wait was a sham.

Here is how a routine background flag turns into a seven-figure class lawsuit. On Monday morning, a consumer reporting agency (CRA) marks a warehouse supervisor's motor-vehicle or criminal report "Consider / Fail Matrix." By Monday at 2:00 p.m., the recruiter flips the candidate's ATS status to "Rejected — Background," reopens the requisition, and texts the second-choice finalist. On Tuesday, the CRA's automated portal mails a pre-adverse letter promising five days to respond to a decision that already happened 20 hours earlier.

Federal courts treat that sequence as a textbook violation of 15 U.S.C. § 1681b(b)(3)(A). Whenever an employer uses a consumer report "in whole or in part" for an adverse employment purpose—revoking a conditional hire, denying an internal transfer, or terminating an active worker—it must first provide two mandatory items before taking the adverse action:

  1. A complete, unredacted copy of the consumer report relied upon; and
  2. The current Consumer Financial Protection Bureau (CFPB) notice titled A Summary of Your Rights Under the Fair Credit Reporting Act (12 CFR Part 1022, Appendix K—verify your vendor uses the current CFPB contact version, not an obsolete 2018 template).

Look at recent class-action arithmetic to see why missing proof of step one destroys defense leverage. Under 15 U.S.C. § 1681n, willful FCRA violations carry statutory damages of $100 to $1,000 per applicant without proof of out-of-pocket financial loss, plus punitive damages and plaintiff attorneys' fees. In Taylor v. J.B. Hunt Transport, Inc. (preliminarily approved June 2025 for $5 million across roughly 14,915 class members), plaintiffs targeted applicants adjudicated on background reports, including a 5,681-person subgroup for whom no pre-adverse notice record existed. Even a 1,200-applicant screening cohort over a two-year lookback creates $120,000 to $1.2 million in statutory exposure if your vendor cannot produce timestamped proof that Packet #1 went out first.

Gate 2: Count Business Days Correctly Across Federal, California, NYC, and Philadelphia Clocks

Five calendar days is never five business days. Layer your candidate's work location onto the federal FCRA baseline before setting the final-decision release date.

Federal FCRA text requires waiting a "reasonable period of time" after the applicant receives the pre-adverse packet. Long-standing Federal Trade Commission (FTC) opinion guidance and federal district court rulings set five full business days from receipt as the baseline floor—excluding the day of transmission, Saturdays, Sundays, and federal holidays. If you send paper packets via USPS First-Class Mail rather than verified electronic delivery, add three to five postal transit days before Day 1 of the business-day clock even begins.

For criminal-history flags, municipal and state Fair Chance statutes override bare federal notices. You cannot mail a generic two-paragraph FCRA form letter in California, New York City, or Philadelphia:

  • California Fair Chance Act (Cal. Gov. Code § 12952 & 2 CCR § 11017.1 — 5+ employees): Before sending the preliminary notice, HR must complete a written individualized assessment weighing nature/gravity of the offense, time elapsed, and the specific job duties. The preliminary notice must identify the specific disqualifying conviction(s), attach the report, and explain the right to submit rehabilitation/mitigating evidence or accuracy disputes. You must wait at least 5 business days from receipt (under 2 CCR § 11017.1, email without confirmed opening presumes 2 business days for delivery; postal mail presumes 5 calendar days inside CA or 10 outside CA before the 5-business-day clock even starts!). If the candidate notifies you within those 5 business days that they are disputing report accuracy or gathering rehabilitation records, you must grant at least 5 additional business days (10+ business days total). California Civil Rights Department settlements—including its June 2026 Signal Hill enforcement agreement—routinely audit missing individualized assessments.
  • New York City Fair Chance Act (NYC Admin. Code § 8-107(11-a) — 4+ employees): Employers must complete the NYC Commission on Human Rights Fair Chance Notice sharing their written Article 23-A / seven-factor Fair Chance analysis, provide copies of all supporting inquiry records, and hold the position open for at least 5 business days from receipt so the candidate can respond.
  • Philadelphia Fair Criminal Record Screening Standards (Phila. Code § 9-3504 — 1+ employees in city): Lookback is capped strictly at convictions within seven years (excluding incarceration time), requires an individualized assessment, and mandates 10 business days after written notice and report delivery for the applicant to submit evidence of inaccuracy or explanation before any final adverse decision.
Operational Clock Matrix · hr.cafe

FCRA + Fair-Chance Pre-Adverse Waiting Calendar (Worked Thursday-Packet Example)

Jurisdiction & Rule Mandatory Packet #1 Contents Minimum Wait Clock Packet Sent Thu Oct 1 (Verified Email) — Earliest Final Action Dispute / Mitigation Extension
Federal FCRA Baseline
15 U.S.C. § 1681b(b)(3)(A)
Pre-adverse notice + full CRA report + current CFPB Summary of Rights. 5 full business days from receipt (excl. weekends/holidays). Fri Oct 2 = Day 1; Thu Oct 8 closes Day 5 -> Fri Oct 9 (if Oct 12 holiday not inside window). Pause clock while CRA reinvestigates disputed record (up to 30 days under § 1681i).
California (5+ staff)
Cal. Gov. Code § 12952; 2 CCR § 11017.1
FCRA packet + CA preliminary notice naming exact conviction(s) + right to submit rehab/dispute. 5 business days from receipt (2 bus. days presumed email transit unless read-confirmed). Presumed receipt Mon Oct 5 -> Day 5 closes Mon Oct 12 (holiday skips to Tue Oct 13) -> Wed Oct 14. Mandatory +5 business days if applicant states intent to dispute accuracy or gather evidence.
New York City (4+ staff)
NYC Admin. Code § 8-107(11-a)
FCRA packet + written NYC Fair Chance Notice showing factor-by-factor analysis. 5 full business days from applicant receipt; seat must remain held open. Confirmed receipt Thu Oct 1 -> Day 5 closes Thu Oct 8 -> Fri Oct 9. Must re-evaluate factor analysis in writing if candidate submits rehab or error proof.
Philadelphia (1+ staff)
Phila. Code § 9-3504
FCRA packet + written preliminary notice + specific criminal record relied upon (<7-yr rule). 10 full business days from receipt to contest accuracy or offer explanation. Confirmed receipt Thu Oct 1 -> 10 business days (skipping Columbus Day Oct 12) -> Mon Oct 19. Hold decision until timely submitted accuracy or mitigation packet is reviewed.

Gate 3: Execute the Dispute Pause When the Record Belongs to Someone Else

Common-surname merges and unindexed county dockets produce real false positives every week. Freezing your vendor's auto-adverse timer the moment a candidate replies saves both a good hire and a lawsuit.

Consider a composite failure that people operations auditors see every quarter. An accounting analyst shares a first name, last name, and birth month with an out-of-state defendant whose felony charge was dismissed four years ago. On Day 2 of the pre-adverse window, the candidate emails the recruiter attaching a clerk-certified dismissal docket and confirms she opened an accuracy dispute with the CRA under 15 U.S.C. § 1681i. Nobody unchecks the screening vendor's "Auto-Adverse at Day 5" box. On Day 6, the vendor fires off the final rejection letter automatically while the CRA is still correcting its file.

Wire three manual circuit breakers into your ATS and CRA integration today:

  1. Disable blind "auto-final" dispatch on disputed or fair-chance files: Require an affirmative human sign-off in the CRA portal before Packet #2 (the Final Adverse Action Notice) can transmit.
  2. Pause the countdown immediately upon candidate contact: If an applicant replies within the waiting window stating an item is inaccurate, expunged, sealed, dismissed, or belongs to another person, lock the ATS stage in "Pre-Adverse — Dispute Hold" and confirm the CRA has opened a § 1681i reinvestigation.
  3. Run a written reassessment if mitigating context arrives: When a candidate confirms the conviction is accurate but submits rehabilitation records, steady post-offense employment history, or proof that an error occurred in job-duty matching, document a second written individualized assessment before deciding whether to clear the hire or proceed to final adverse action.

Gate 4: Issue the § 1681m(a) Final Adverse Notice and Lock Proof-of-Sending Logs

If the waiting clock expires with zero resolution, your second letter must include four exact statutory disclosures under 15 U.S.C. § 1681m(a). Archive immutable delivery receipts for at least five years.

Never let a recruiter send a casual two-line rejection email saying "Unfortunately we cannot move forward based on your background screen." Under 15 U.S.C. § 1681m(a), the Final Adverse Action Notice must explicitly provide: (1) notice of the final adverse action, (2) the exact name, street address, and toll-free telephone number of the CRA that furnished the report, (3) a clear statement that the CRA did not make the adverse employment decision and is unable to provide the specific reasons why the action was taken, and (4) notice of the candidate's statutory right to obtain a second free copy of the consumer report from the CRA within 60 days and to dispute the accuracy or completeness of any item under 15 U.S.C. § 1681i (plus any state-required reconsideration appeal notice, such as FEHA complaint rights under Cal. Gov. Code § 12952(c)(5)).

======================================================================
FCRA § 1681b(b)(3) / § 1681m(a) & FAIR-CHANCE AUDIT PROOF LOG
======================================================================
Candidate Name & Req ID:        [Full Name] · Req #[XXXX]
Work Location (City / State):   [City, State — Check Remote Home Address!]
CRA Vendor & Report ID:         [Vendor Name] · Report #[XXXXXXXX]

1. STANDALONE DISCLOSURE & Conditional OFFER CHECK
[ ] Standalone § 1681b(b)(2) disclosure signed (zero liability waivers inside)
[ ] Criminal check ordered strictly AFTER conditional job offer (CA/NYC/Phila)
[ ] Written Individualized Assessment signed BEFORE Packet #1: [YYYY-MM-DD]

2. PACKET #1 — PRE-ADVERSE ACTION DELIVERY PROOF
- Sent Timestamp (UTC):         [YYYY-MM-DD HH:MM UTC] via [Portal/Email/USPS]
- Confirmed/Presumed Receipt:   [YYYY-MM-DD] (Add 2 bus. days unconfirmed CA email)
- Attached Full CRA Report?     [YES] · Archive Hash/PDF ID: [________]
- Attached Current CFPB Rights? [YES] (12 CFR Pt. 1022 App. K verified)
- Attached State/City Notice?   [YES / N/A] (CA § 12952 / NYC Fair Chance / Phila)

3. WAITING CLOCK & DISPUTE GATE (HOLD REQUISITION SEAT OPEN)
- Required Business-Day Floor:  [5 Bus. Days / 10 Bus. Days Phila]
- Earliest Lawful Final Date:   [YYYY-MM-DD at 09:00 AM Local]
- Candidate Dispute/Rehab Sent? [NO / YES on YYYY-MM-DD -> Auto-Timer Paused]
- Second Reassessment Logged:   [N/A / Completed YYYY-MM-DD by HR Reviewer]

4. PACKET #2 — FINAL ADVERSE ACTION (§ 1681m(a))
- Sent Timestamp (UTC):         [YYYY-MM-DD HH:MM UTC] (Strictly >= Earliest Date)
- Verified CRA Name/Addr/Phone + Non-Decision Statement + 60-Day Free Copy Right
======================================================================

Role Discipline Across Talent Acquisition, HR Ops, and Screening Vendors

Your CRA's Master Services Agreement almost certainly disclaims legal responsibility for your adverse-action timing. Audit vendor letter templates and recruiter habits every six months.

Train hiring managers through your manager support briefings never to call or text a candidate about a flagged background item directly. Keep raw criminal or credit reports quarantined inside HR compliance permissions so line managers see only "Pending Pre-Onboarding Clearance" until the FCRA clock finishes.

Recruiter / TA Ops

Keep the requisition seat open during the entire pre-adverse window, never contact backup finalists prematurely, and notify HR Compliance within one hour if a candidate replies with a dispute.

HR Compliance

Complete written individualized assessments before Packet #1, calculate business-day plus transit clocks for CA/NYC/Philadelphia, disable blind auto-adverse dispatch, and archive delivery receipts for 5+ years.

Line Manager

Stay completely walled off from raw CRA reports and background-dispute emails so no off-script phone call revokes the conditional offer during the statutory five-to-ten-day window.

Primary statutes, regulations, and enforcement dockets

  1. 15 U.S.C. § 1681b(b)(2)–(3) & § 1681m(a) — Fair Credit Reporting Act Employment Provisions (Office of the Law Revision Counsel) — Codifies standalone background disclosure, mandatory pre-adverse report and rights delivery before adverse action, and post-decision § 1681m(a) notices.
  2. Federal Trade Commission — Using Consumer Reports: What Employers Need to Know — Official FTC employer guidance detailing the two-step pre-adverse and final adverse action sequence and record-disposal obligations.
  3. 12 CFR Part 1022, Appendix K — CFPB Summary of Consumer Rights Under the FCRA (eCFR) — Official model Summary of Rights notice required inside every 15 U.S.C. § 1681b(b)(3)(A) pre-adverse employment packet.
  4. California Civil Rights Department — Fair Chance Act (Cal. Gov. Code § 12952 & 2 CCR § 11017.1) Employer Guidance — Details mandatory individualized assessments, delivery-transit presumptions, 5-business-day initial windows, and 5-business-day dispute/rehabilitation extensions.

Practitioner questions on the edge cases

Does the FCRA pre-adverse process apply if we reject a candidate based on a reference check HR conducted directly by phone?

If an internal HR employee personally calls a listed reference without using a third-party consumer reporting agency (CRA), federal FCRA § 1681b(b)(3) does not apply. However, if a third-party background vendor conducts, compiles, or scores reference, employment-verification, education, MVR, credit, or criminal checks on your behalf, that vendor packet is a consumer report and triggers full two-step FCRA pre-adverse and final adverse obligations.

If an applicant admits a conviction on a post-offer self-disclosure form before the CRA report returns, can we skip the 5-business-day FCRA wait?

Two traps make skipping the clock dangerous. First, if you ordered a CRA report and review it at all to verify or evaluate that disclosure, the action is based "in whole or in part" on a consumer report under 15 U.S.C. § 1681b(b)(3). Second, state and municipal Fair Chance statutes—including California Gov. Code § 12952 and NYC Admin. Code § 8-107(11-a)—apply to self-disclosed conviction history too, still requiring a written individualized assessment and full statutory business-day response clock.

Which state's Fair Chance clock governs a fully remote hire living in Philadelphia for a company headquartered in Texas?

Apply the stricter rule between the physical seat where the remote employee will perform work and the office managing the role. Both Philadelphia Code § 9-3504 and California/NYC agencies assert coverage when the job duties are performed within their borders, meaning a remote hire working from a Philadelphia apartment requires Philadelphia's 7-year conviction cap and 10-business-day pre-adverse waiting window.

How long must we hold a job open when a candidate files a formal accuracy dispute with the background vendor?

Under 15 U.S.C. § 1681i(a)(1), a CRA has up to 30 days to complete its reinvestigation of a consumer dispute (though clean court-docket errors often resolve in 3 to 7 business days). In California, 2 CCR § 11017.1 mandates at least 5 additional business days upon dispute notice; across all states, holding the seat until the CRA issues its revised report—unless documented, urgent operational necessity forces a good-faith staffing call reviewed by counsel—is your strongest defense against a § 1681b(b)(3) claim.

Get the Thursday edition

One email a week with new practitioner stories and primary-sourced HR playbooks. Free, and one click to unsubscribe.

Weekly on Thursdays. Your email is used for nothing else. Privacy.

Keep reading

Where this decision connects to neighboring statutory clocks and workflows.

All field guides

First-person practitioner stories on these topics

Field Note

The investigation finding I got wrong

A detailed, consistent account felt like enough. One question from my manager changed the finding, and two months later it mattered.

HR business partner (example) 2 min read
Esc