FCRA Adverse Action Notices: The Pre-Adverse Action Step, the 615(a) Content List, and the Timing Record Employers Must Keep

Employers using consumer reports in hiring, promotion, reassignment, or retention decisions must manage adverse-action notices as a documented process. The federal Fair Credit Reporting Act (FCRA) generally requires a pre-adverse disclosure before a report-based employment decision and a separate adverse-action notice after the decision.

A controlled workflow identifies the applicable rule, provides the required documents, allows a meaningful opportunity to respond, and preserves evidence of each notice event. The requirements below are based on the FTC's March 2026 text of the FCRA, FTC employer guidance, and the CFPB Summary of Rights under the FCRA.

Confirm the applicable FCRA provisions

The employment pre-adverse-action requirement is in FCRA Section 604(b)(3)(A), codified at 15 U.S.C. § 1681b(b)(3)(A). Before taking adverse action based in whole or in part on a consumer report, the employer must provide the individual with a copy of the report and a written description of FCRA rights.

The post-adverse-action notice is required by Section 615(a), codified at 15 U.S.C. § 1681m(a). It applies after an adverse action based in whole or in part on information in a consumer report.

These are separate stages with different timing and content. A final notice does not replace the required pre-adverse disclosure.

Distinguish Section 615(b) from employment screening

Section 615(b)(1) is not the employment pre-adverse-action rule. It addresses certain personal, family, or household credit decisions based on information from a person other than a consumer reporting agency. It provides that the consumer may request the nature of the information in writing within 60 days after learning of the action. It does not establish a general employment notice requirement or a 30-day deadline to furnish the disclosure.

Employment screening instead follows Section 604(b)(3)(A) before the decision and Section 615(a) after it. Organizations handling consumer-report-based credit decisions should assess those requirements separately. Financial institutions can review related financial services compliance resources.

Step 1: Furnish the pre-adverse-action documents

Before finalizing an adverse employment decision based in whole or in part on a consumer report, furnish:

1. A copy of the consumer report. Provide the report obtained for the employment decision.
2. The written Summary of Rights. Use the current CFPB-prescribed summary applicable to the process.

The disclosure gives the individual an opportunity to review the report and identify information to discuss or dispute. The file should establish which report was provided and which version of the rights summary accompanied it.

A notice letter can accompany these documents and explain that the employer is considering adverse action based on the report. The letter should identify a response channel and explain how the individual can submit corrections or other relevant information. The employer should review any response under a consistent process before making the final decision.

The FCRA does not set a specific federal waiting period between the pre-adverse disclosure and final action. FTC staff opinions from 1997–1998 described five business days as a reasonable practice in certain circumstances, while emphasizing that the appropriate interval depends on the facts. That guidance is not a regulation or a universal statutory deadline. See the FTC's Weisberg advisory opinion and Coffey advisory opinion.

A documented procedure should set a response period that gives the individual a meaningful opportunity to review and respond. It should also account for applicable State or local requirements, which may impose additional obligations.

Step 2: Issue the post-adverse-action notice

After taking adverse action based in whole or in part on a consumer report, the employer must provide the Section 615(a) notice. The notice may be oral, written, or electronic under the statute. A written notice supports a clear, retrievable record of what was communicated.

The required notice elements include:

• The name, address, and telephone number of the consumer reporting agency that furnished the report, including its toll-free telephone number when applicable.
• A statement that the consumer reporting agency did not make the decision and cannot provide the specific reasons for it.
• Notice of the individual's right to obtain a free copy of the report from the agency within 60 days.
• Notice of the right to dispute the report's accuracy or completeness with the agency.

A concise employer explanation of the report information that contributed to the decision can make the communication clearer. Keep that explanation distinct from the agency's role: the employer made the decision, not the consumer reporting agency. The FCRA's Section 615(a) list does not separately specify an employer explanation as one of the listed notice elements, but other applicable laws or policies may require additional explanation.

For an employment decision, do not add credit-score content simply because a consumer report was used. FCRA credit-score disclosures apply to specified credit adverse actions under Section 615(a)(2), subject to applicable statutory provisions. They are distinct from the employment notice checklist.

Record the sequence, not only the final letter

Notice delivery requirements are easier to review when the record shows the full sequence from report review through final decision. Record each event with its date, responsible owner, method, and supporting evidence.

A practical notice file includes:

• The report used and the copy furnished to the individual.
• The version of the Summary of Rights sent with the report.
• The pre-adverse notice, if used, and the date and method of furnishing.
• The response period applied and the basis for selecting it.
• Any response, dispute, correction, or supplemental information received.
• The date of the final decision and the decision-maker or authorized role.
• The final adverse-action notice and the exact content sent.
• Delivery records, returned mail, failed transmissions, and any reissued notice.

These elements support compliance evidence by linking the notice content to the correct individual, report, decision, and delivery event. A file should preserve the original versions and event dates rather than overwrite them with later corrections.

Where a durable delivery record is needed, organizations can use USPS Certified Mail and retain the mailing receipt, tracking information, and available delivery record with the notice file. Certified Mail documents mailing and tracking events. It does not, by itself, establish that every recipient received or reviewed the enclosed materials.

Organizations can align this workflow with a broader notice record retention process and their established compliance services.

Set retention rules without treating the limitations period as a mandate

FCRA Section 628, codified at 15 U.S.C. § 1681w, addresses proper disposal of consumer information derived from consumer reports. It does not establish a general period requiring employers to retain adverse-action notices or notice evidence.

FCRA Section 618, codified at 15 U.S.C. § 1681p, generally sets a lawsuit limitations period of the earlier of two years after discovery of the violation or five years after the violation occurred. These are filing limits, not automatic records-retention rules.

A retention schedule should account for the type of record, other applicable federal, State, and local requirements, organizational policy, and any investigation, dispute, or legal hold. Preserve relevant records while a hold applies, restrict access to sensitive screening information, and securely dispose of covered consumer information when authorized.

FCRA violations can carry civil liability. For willful noncompliance, Section 616 provides for actual damages or statutory damages of $100 to $1,000 in individual actions, possible punitive damages, and attorney's fees and costs. For negligent noncompliance, Section 617 provides for actual damages and, in successful actions, attorney's fees and costs. See 15 U.S.C. §§ 1681n and 1681o.

Use a controlled notice sequence

A repeatable process helps hiring and compliance teams establish ownership, apply timing consistently, and produce a reliable notice record:

1. Confirm that the decision involves a consumer report and identify the report used.
2. Before final adverse action, provide the report and current written Summary of Rights.
3. Record the date and method of furnishing and the response period applied.
4. Review and document any response before making the final decision.
5. If adverse action is taken, issue the Section 615(a) notice with all required content.
6. Preserve the notices, report copy, rights-summary version, decision dates, and delivery evidence.
7. Apply retention, access-control, legal-hold, and disposal procedures.

The process should be reviewed for exceptions and jurisdictional requirements before use. Employers and financial services organizations should confirm specific obligations with qualified counsel or the relevant authority.

This article provides general compliance information, not legal advice.