Applicant + Employer Reference

Employment Background Check Questions

What employers can and cannot ask, what shows up on a pre-employment report, the EEOC and FCRA rules that govern both sides, and the 2025-2026 state-law shifts (ban-the-box, Clean Slate, marijuana, credit checks) that change the rules in real time.

Employment is the most heavily regulated use of background checks in the United States. Three federal frameworks — the FCRA, Title VII as interpreted by the EEOC, and the federal Fair Chance Act — layer on top of state ban-the-box laws, state Clean Slate laws, state credit-check restrictions, and state drug-testing restrictions. This guide is the 2026 reference for both sides: what employers can do, what applicants can demand, and what the regulatory landscape actually looks like in your state.
In this section — the 2026 hiring landscape in four numbers.

1. What's at Stake in 2026 Employment Screening

94% U.S. employers conducting background checks (SHRM 2024)
$4,700 Average cost per hire (SHRM Real Costs of Recruitment)
37 States with ban-the-box / fair-chance laws (NELP, current count)
30 days FCRA window for CRA dispute investigation, 15 U.S.C. §1681i

Pre-employment background screening is now near-universal in U.S. hiring, but the legal terrain it sits on has been completely rewritten in the last decade. The federal scaffolding has three layers: the Fair Credit Reporting Act (FCRA), 15 U.S.C. §1681 et seq., which governs consent, content, and adverse-action mechanics; Title VII of the Civil Rights Act, as interpreted by EEOC, which polices disparate-impact use of criminal records; and the federal Fair Chance Act (effective Dec 20, 2021), which bans criminal inquiry before a conditional offer for federal hires and federal contractors.

Stacked on top of that federal frame is a dense and growing patchwork of state law. As tracked by the National Employment Law Project and the Clean Slate Initiative: a majority of states have some form of ban-the-box / fair-chance rule (NELP's recent edition counts roughly 37); a growing number of states operate Clean Slate automatic sealing in some form; about a dozen states plus several major cities restrict employer credit checks; and more than 20 states now provide some level of off-duty cannabis or salary-history protection. The exact counts shift as new statutes take effect — consult the linked trackers for the current authority in your jurisdiction. Employers operating across state lines cannot run a one-size-fits-all process; applicants need to know which protections apply where.

What this page does Treats every section bilaterally. Each rule, each form, each statutory deadline is described from the applicant's perspective and the employer's. Where one side has a duty, the other has a right.
In this section — the FCRA's parallel obligations on screening firms and on employers.

2. Both Sides of the FCRA Wall

The FCRA imposes parallel obligations on the consumer reporting agency (CRA) that prepares the report and the employer (the "user") that orders it. Missing any one of these creates federal liability under 15 U.S.C. §1681n (willful) or §1681o (negligent), with statutory damages of $100 to $1,000 per willful violation plus actual damages and attorney fees.

What the screening company must do (15 U.S.C. §1681e)

  • Verify the user has a permissible purpose under §1681b
  • Follow reasonable procedures to ensure maximum possible accuracy of the report
  • Reinvestigate disputed items within 30 days under §1681i
  • Notify the consumer if public-record adverse information is reported for employment under §1681k
  • Provide the consumer a free copy of the file on request under §1681j

What the employer must do (15 U.S.C. §1681b(b))

  1. Standalone disclosure. Written notice that a consumer report may be obtained — must be a clear, conspicuous document by itself (not buried in the application).
  2. Written authorization. Applicant signs consent. May be combined with the disclosure but cannot contain extraneous waivers or release-of-liability language (a frequent litigation trigger).
  3. Certification to the CRA. Employer certifies a permissible employment purpose and FCRA compliance.
  4. Pre-adverse action notice. If considering an adverse decision based even in part on the report: send the applicant a copy of the report and the CFPB "Summary of Your Rights Under the FCRA".
  5. Reasonable waiting period. FCRA does not specify a fixed number of days. FTC informal guidance has long suggested roughly five business days as a reasonable benchmark; many employers use five to seven business days. State or local law may impose its own timing.
  6. Final adverse action notice. Names the CRA (with phone and website), states the CRA did not make the decision, confirms the right to a free copy within 60 days, and the right to dispute inaccurate information.
Most common employer violation Burying the FCRA disclosure inside the job application. Federal courts have repeatedly held this defeats the "standalone document" requirement, exposing the employer to class-action damages even if the report itself was accurate and the hiring decision sound.
In this section — EEOC's 2012 guidance, the Green factors, and the consent-decree record.

3. EEOC and the 2012 Arrest/Conviction Guidance

The EEOC's Enforcement Guidance on the Consideration of Arrest and Conviction Records (April 25, 2012) is still controlling. It is built on a Title VII disparate-impact theory: blanket disqualification policies based on criminal history have a documented adverse impact on Black and Hispanic applicants, and unless the policy is "job-related and consistent with business necessity," it violates 42 U.S.C. §2000e-2.

The Green factors (job-related/business-necessity assessment)

From Green v. Missouri Pacific Railroad, 549 F.2d 1158 (8th Cir. 1977):

  1. Nature and gravity of the offense or conduct
  2. Time elapsed since the offense or completion of the sentence
  3. Nature of the job sought, including duties, supervision, and access to vulnerable populations or assets

Individualized assessment

Before excluding an applicant the employer should give the individual notice and an opportunity to demonstrate why exclusion is not warranted in their specific case — rehabilitation evidence, time in the workforce since the offense, education completed, references, age at the time of the offense, mitigating circumstances. A pattern of automatic exclusion based on conviction history alone, without this assessment, is the practice the EEOC targets.

Real consent-decree record

  • Pepsi Beverages — $3.13M (2012), blanket exclusion of applicants with arrest records pending prosecution.
  • BMW Manufacturing — $1.6M (2015), criminal background check rolled out to incumbent contractors with disparate-impact effect.
  • Dollar General — $6M (2019), nationwide criminal-history screening program lacking individualized assessment.
EEOC vs. FCRA — two separate compliance tracks FCRA is about process (disclosure, consent, adverse action). EEOC is about substance (whether the conviction-based decision is job-related). An employer can run a perfect FCRA process and still face an EEOC charge if the underlying disqualification policy lacks individualized assessment.
In this section — the ban-the-box / fair-chance landscape (NELP tracker), and the conditional-offer rule.

4. Ban-the-Box and Fair-Chance Hiring — State Matrix

"Ban-the-box" is shorthand for laws that prohibit employers from asking about criminal history on the initial job application. Stronger fair-chance laws push the inquiry all the way back to after a conditional offer of employment. The National Employment Law Project tracker (current edition) counts roughly 37 states and over 150 cities and counties with some form of fair-chance law. Counts shift as new statutes pass — check the live tracker for current numbers.

StateCoverageWhen employer can inquireStatute (representative)
CaliforniaPublic + private, 5+ employeesAfter conditional offerCal. Gov. Code §12952 (Fair Chance Act 2018)
New YorkPublic + private (NYC: all; state: public)After conditional offer (NYC); varies stateNYC Admin Code §8-107(11-a) (Fair Chance Act 2015, expanded 2021)
IllinoisPublic + private, 15+ employeesAfter conditional offer (interview phase)820 ILCS 75 (Job Opportunities for Qualified Applicants Act)
MassachusettsPublic + privateAfter initial applicationM.G.L. c.151B §4 (2010)
ColoradoPublic + private, 11+ employeesAfter initial applicationC.R.S. §8-2-130 (Chance to Compete Act 2019)
WashingtonPublic + privateAfter determining qualificationsRCW 49.94 (2018)
New JerseyPublic + private, 15+ employeesAfter initial applicationN.J.S.A. 34:6B-11 et seq. (Opportunity to Compete Act 2014)
ConnecticutPublic + privateAfter initial applicationC.G.S. §31-51i (2017)
OregonPublic + privateAfter initial interview / conditional offerORS 659A.360 (2016)
PennsylvaniaPublic only at state levelAfter initial applicationExecutive Order 2017-03 (Philadelphia ordinance covers private)
MarylandPublic + private, 15+ employeesAfter first in-person interviewMd. Code Labor & Empl. §3-1601 (2020)
VirginiaPublic, 15+ employee privateAfter application/before interview variesVa. Code §2.2-2807 (state); §19.2-389.3 (marijuana)
TexasPublic only (state agencies, Austin private)After application screeningTex. Gov. Code §656 (state)
ArizonaPublic onlyAfter applicationA.R.S. §41-1755 (Executive Order)
MichiganPublic only at state levelAfter application screeningExecutive Directive 2018-04

Beyond these 15 examples, additional ban-the-box or fair-chance states (most public-sector only) include Delaware, Georgia, Hawaii, Indiana, Kansas, Kentucky, Louisiana, Maine, Minnesota, Missouri, Nebraska, Nevada, New Mexico, North Dakota, Ohio, Oklahoma, Rhode Island, Tennessee, Utah, Vermont, and Wisconsin. Coverage scope and exempt industries vary by state — check the NELP tracker for the current authority in your jurisdiction.

Applicant action step If you live in a ban-the-box state and the application asks about criminal history before a conditional offer, save the listing, screenshot the application, and file a complaint with your state Department of Labor or attorney general. Statutory damages and reinstatement remedies vary by state but are real.
In this section — the 2019 federal Fair Chance Act for federal jobs and contractors.

5. The Federal Fair Chance Act

Enacted in 2019 as part of the National Defense Authorization Act and codified at 5 U.S.C. §9202, the Fair Chance to Compete for Jobs Act took effect December 20, 2021. It prohibits federal agencies and federal contractors (for contracts above the simplified-acquisition threshold) from requesting criminal-history information from an applicant before a conditional offer of employment.

Who it covers

  • All federal civilian agencies
  • Federal contractors (for the position to be filled in connection with a covered contract)
  • Excludes positions requiring access to classified information, law enforcement, national security positions, and a handful of other statutory exceptions

Penalties

For agencies and federal employees: progressive discipline, including written warning, suspension, or removal for repeated violations. For federal contractors: civil monetary penalties up to $1,000 for a first violation, escalating for subsequent violations. The OPM and the Office of Federal Contract Compliance Programs share enforcement.

Federal vs. state stacking The Fair Chance Act sets a floor for federal hires and contractors. Many states impose stricter timing (conditional offer in California; after first interview in Maryland; after qualifications determined in Washington) and broader coverage (private employers under various thresholds). Where state law is stricter, state law controls.
In this section — the salary-history ban movement and what it changed.

6. Salary-History Bans

More than twenty states plus the District of Columbia and a growing list of localities now prohibit employers from asking about an applicant's salary history. The policy goal is pay equity: if women and minority workers enter the workforce at depressed wages and each new employer benchmarks against the prior salary, the gap compounds across careers.

Salary-history ban states (representative)

StateEffectiveStatuteCoverage
CaliforniaJan 1, 2018Cal. Labor Code §432.3All private + public, all sizes
MassachusettsJul 1, 2018M.G.L. c.149 §105AAll employers
New YorkJan 6, 2020N.Y. Labor Law §194-aAll employers
ColoradoJan 1, 2021Equal Pay for Equal Work ActAll employers (with posting requirements)
WashingtonJul 28, 2019; expanded 2023RCW 49.58All employers 15+
IllinoisSep 29, 2019820 ILCS 112/10All employers
New JerseyJan 1, 2020N.J.S.A. 34:6B-20All employers
ConnecticutJan 1, 2019C.G.S. §31-40zAll employers
HawaiiJan 1, 2019HRS §378-2.4All employers
VermontJul 1, 201821 V.S.A. §495mAll employers
OregonOct 6, 2017ORS 652.220All employers
MaineSep 17, 201926 M.R.S.A. §628-AAll employers
AlabamaSep 1, 2019Ala. Code §25-1-40All employers (partial)
DelawareDec 14, 201719 Del. C. §709BAll employers
District of ColumbiaJun 24, 2022D.C. Code §1-1024All employers
MarylandOct 1, 2020Md. Code Labor §3-304.2All employers
NevadaOct 1, 2021NRS 613.133All employers
North CarolinaApr 2, 2019Executive Order No. 93State agencies
PennsylvaniaSep 4, 2018Executive Order 2018-18-03State agencies
Rhode IslandJan 1, 2023R.I. Gen. Laws §28-6.18All employers
VirginiaJul 1, 2020Va. Code §40.1-28.7:4All employers
Puerto RicoMar 9, 2017Equal Pay ActAll employers
Applicant tactic In a salary-history-ban state you are entitled to refuse the question. Employers shifted to "salary expectations" instead — answer with a range based on the posted role + market data (Glassdoor, BLS OEWS, Levels.fyi), not a number anchored to your prior pay.
In this section — pay-transparency laws and what must be in the posting.

7. Pay-Transparency Laws 2024-2026

The companion movement to salary-history bans: requiring employers to publish the pay range in the job posting. Pay-transparency laws are spreading rapidly and 2025-2026 brought several major effective dates.

JurisdictionEffectiveStatuteWhat must be disclosed
ColoradoJan 1, 2021Equal Pay for Equal Work Act (C.R.S. §8-5-201)Hourly or salary range + general benefits description
New York CityNov 1, 2022NYC Admin Code §8-107(32)Min & max annual base salary or hourly range
New York StateSep 17, 2023N.Y. Labor Law §194-bMin & max salary + job description
CaliforniaJan 1, 2023 (SB 1162)Cal. Labor Code §432.3(c)Pay scale on request + in posting for 15+ employees
WashingtonJan 1, 2023RCW 49.58.110Wage scale or salary range + general benefits
Illinois (HB 3129)Jan 1, 2025820 ILCS 112/10Pay scale + benefits for 15+ employees
Maryland (SB 525)Oct 1, 2024Md. Code Labor & Empl. §3-304.2Wage range + general benefits
MinnesotaJan 1, 2025Minn. Stat. §181.173Salary range + general benefits for 30+ employees
New JerseyJun 1, 2025N.J.S.A. 34:6B-25.1 (S2310)Hourly or salary range + benefits for 10+ employees
VermontJul 1, 2025Act 155 (2024)Wage/salary range for 5+ employees
MassachusettsOct 29, 2025Salary Range Transparency Act (Ch.141, Acts of 2024)Pay range for 25+ employees + EEO-1 wage data reporting
Cleveland, OHOct 27, 2025Ord. 104-2025Pay scale in posting

Penalties

California: $100 to $10,000 per violation. New York State: civil penalties to $3,000. Washington: actual damages or $5,000 per applicant (whichever greater) plus statutory penalties. Illinois (HB 3129): $250-$10,000 per violation. Massachusetts: written warning for first violation, then $500-$25,000.

Posted-range honesty test Watch for the "$50K-$500K" gimmick range — technically compliant, useless to applicants, and now a litigation target. CA and WA have begun enforcement actions against employers posting unreasonably broad ranges that defeat the law's purpose.
In this section — AI hiring tools, bias audits, and the 2026 Colorado AI Act.

8. AI in Hiring — Bias Audits and Automated Decisions

Algorithmic hiring tools — resume parsers, video-interview scoring, automated rejection systems — are now regulated as a class. The 2023-2026 wave of laws imposes pre-deployment bias audits, applicant-notice requirements, and (in Colorado's case starting June 30, 2026 after the original Feb 1, 2026 date was pushed back by SB25B-004) a comprehensive duty of care.

NYC Local Law 144 — Automated Employment Decision Tools

  • Effective: July 5, 2023, enforcement by NYC Department of Consumer and Worker Protection
  • Coverage: Any "AEDT" used to substantially assist or replace discretionary employment decisions in NYC
  • Requirements: Annual independent bias audit; public summary of audit; applicant notice 10 business days before use; alternative-process option
  • Statute: NYC Admin Code §20-870 through §20-874

Illinois AI Video Interview Act

  • Effective: January 1, 2020 (amended 2022)
  • Requirements: Notice + consent before AI analysis of video interviews; demographic reporting if AI is the sole hiring decision factor
  • Statute: 820 ILCS 42/

Colorado AI Act (SB24-205) — Effective June 30, 2026 (delayed)

The most comprehensive U.S. state AI law to date. Originally set for Feb 1, 2026, the effective date was delayed to June 30, 2026 by SB25B-004 (signed Aug 28, 2025). Imposes a duty of reasonable care to protect consumers from algorithmic discrimination in "high-risk" AI systems — including employment, education, and lending. Requires:

  • Impact assessments before deployment
  • Annual reviews
  • Notice to consumers when an AI is making a consequential decision
  • A right to appeal and human review
  • Disclosure to the Colorado Attorney General within 90 days of discovering algorithmic discrimination

Statute: C.R.S. §6-1-1701 et seq.

EEOC AI guidance

The EEOC issued two technical-assistance documents (May 2023 disparate-impact guidance and May 2022 ADA guidance) clarifying that Title VII and ADA continue to apply when employers use algorithmic tools — the employer is responsible for the bias of its tools, vendor liability shields notwithstanding.

Applicant privacy note In NYC and Illinois you are entitled to notice that an AI tool is scoring your application or interview. If you do not receive notice, you have a private right of action in IL (820 ILCS 42/) and a complaint route through DCWP in NYC.
In this section — the states that restrict employer credit checks (current count: roughly a dozen, including the major cities below).

9. Credit Checks in Hiring — State Restrictions

Federal law (FCRA) permits employer credit checks with applicant consent. A number of states (currently around eleven, including CA, CO, CT, HI, IL, MD, NV, OR, VT, WA) plus several major cities (including NYC, Philadelphia, Chicago, and DC) restrict the practice (see the CLEAR / U.S. Department of Labor research review) further, often allowing it only for positions with fiduciary responsibility, financial-account access, or law enforcement duties.

JurisdictionStatuteGeneral rule
CaliforniaCal. Labor Code §1024.5Prohibited except for managerial, law enforcement, financial-account, IT-sensitive positions
ColoradoC.R.S. §8-2-126 (Consumer Credit Reporting Act)Prohibited unless job-related; written justification required
ConnecticutC.G.S. §31-51ttProhibited except for financial institution, managerial, fiduciary positions
HawaiiHRS §378-2.7Permitted only after conditional offer; managerial/supervisory positions exempt
Illinois820 ILCS 70 (Employee Credit Privacy Act)Prohibited except for narrowly-defined sensitive positions
MarylandMd. Code Labor & Empl. §3-711Prohibited except managerial, financial, ID-sensitive positions
NevadaNRS 613.520Prohibited except where reasonably related to job
OregonORS 659A.320Prohibited except for financial institutions, law enforcement, managerial positions
Vermont21 V.S.A. §495iProhibited except where required by law or for narrowly-defined positions
WashingtonRCW 19.182.020Prohibited unless job-related; written justification required
New York CityNYC Admin Code §8-107(9)(d)Strongest in nation: prohibited for nearly all private employers, narrow exceptions
PhiladelphiaPhila. Code §9-3500Prohibited except for fiduciary or law-enforcement positions
ChicagoMuni. Code §6-25Prohibited unless permitted by Illinois state law
District of ColumbiaD.C. Code §32-1431Prohibited except where required by law or for narrowly-defined positions
Why employer credit checks collapsed since 2010 Two reasons: state restrictions, and academic research (notably Yale Law's Bartik & Nelson 2019) finding little correlation between credit history and job performance outside narrow fiduciary roles. Many large employers dropped the practice voluntarily even where legal.
In this section — GINA, ADA, ADEA, PDA, PWFA, and cannabis protections.

10. What Employers Cannot Ask

Several federal statutes and a growing list of state laws restrict the content of what an employer can request or consider, independent of the FCRA process.

Genetic Information Nondiscrimination Act (GINA)

42 U.S.C. §2000ff. Employers cannot request, require, or purchase genetic information about an applicant or family member. The EEOC's GINA enforcement page covers details. Background-check vendors must scrub family-medical-history data from any record they deliver.

Americans with Disabilities Act (ADA) — medical inquiry

42 U.S.C. §12112(d). Pre-offer medical exams or disability-related inquiries are prohibited. Post-offer medical exams are allowed only if required of all entering employees in the same job category. Drug testing is not a medical exam, but post-2024 EEOC guidance treats marijuana-use inquiries differently in states with off-duty protections.

Age Discrimination in Employment Act (ADEA)

29 U.S.C. §623. Applicable to employers with 20+ employees. Prohibits inquiry into birth date or graduation dates that effectively reveal age, when used to discriminate against applicants 40+.

Pregnancy Discrimination Act (PDA) + Pregnant Workers Fairness Act (PWFA 2023)

42 U.S.C. §2000gg. The 2023 PWFA expanded protections, requiring reasonable accommodations for pregnancy, childbirth, and related conditions. EEOC final regulations took effect June 18, 2024.

Off-duty cannabis protections (a growing number of states)

States restricting employer cannabis-use discrimination include New York (N.Y. Labor Law §201-d), New Jersey (N.J.S.A. 24:6I-52), Connecticut (P.A. 21-1), Montana (M.C.A. §39-2-313), Rhode Island (R.I. Gen. Laws §21-28.11-29), Washington (RCW 49.44.240, effective Jan 1, 2024), California (Cal. Gov. Code §12954, effective Jan 1, 2024), Minnesota (Minn. Stat. §181.938), Nevada (NRS 613.132), Illinois (820 ILCS 55), and DC. Most protect off-duty use only and contain safety-sensitive exceptions.

Common employer overreach Pre-employment health questionnaires that include family medical history. This violates GINA even when phrased indirectly. CRA vendors that include "medical history" sections in their reports are exposing employers to GINA liability.
In this section — the applicant playbook when a job offer is rescinded.

11. Applicant Playbook — What To Do If You're Denied

If an employer denies, withdraws, or modifies an offer based even in part on a background-check report, you have specific federal rights with statutory deadlines. Move fast — the 60-day free-report window starts at the adverse action.

  1. Demand the adverse action notice in writing. Federal law requires it. An oral or vague "we went with another candidate" email is not enough if a consumer report was part of the decision.
  2. Identify the CRA. The notice must name the screening company with phone and website.
  3. Request your free copy. Contact the CRA within 60 days of adverse action; FCRA §1681j entitles you to a free file disclosure.
  4. Review every line. Look for name-collision matches, dismissed/sealed cases shown as convictions, stale records past the 7-year window for non-conviction items.
  5. File a dispute with the CRA. Certified mail, return receipt. Identify each item, attach documentation (court dispositions, sealing orders, ID confirming wrong-person matches). FCRA §1681i gives the CRA 30 days to investigate.
  6. If the dispute is denied, escalate. File a complaint with the CFPB — the agency forwards your complaint to the company with a 15-day response window.
  7. If you suspect discrimination, file an EEOC charge. Strict deadline: 180 days from adverse action (300 in states with parallel agencies).
  8. FCRA private right of action. Statute of limitations is 2 years from discovery of violation or 5 years from violation, whichever is earlier. Recoverable: actual damages, statutory $100-$1,000 per willful violation, attorney fees, punitive damages.
Pre-emptive self-check Pull your own consumer report before you apply. CRAs like Checkr, GoodHire, Sterling, and HireRight offer self-checks for $20-$50. Catching and disputing errors before an employer sees them is the highest-leverage action you can take.
In this section — the employer compliance checklist for 2026.

12. Employer Compliance Checklist

Building a defensible 2026 screening program is mostly about templated workflows and documented assessments. Use this as a self-audit.

Pre-deployment

  • Written FCRA disclosure on a standalone document (no waivers, no extraneous language)
  • Separate written authorization signed before any report is ordered
  • Vendor diligence: does your CRA carry adequate E&O insurance? Is it accredited by the Professional Background Screening Association?
  • Written conviction-history policy reflecting EEOC Green-factor individualized assessment
  • State-specific addenda for each jurisdiction in which you hire

During the screen

  • Order only the report scopes that are job-related (avoid pulling a credit report for non-fiduciary roles in restrictive states)
  • Document the conditional offer in writing where ban-the-box law requires it
  • Limit access to the report to decision-makers with a need to know

Adverse action workflow

  • Pre-adverse action notice + copy of report + Summary of Rights
  • Reasonable waiting period (FCRA does not specify; FTC informal guidance treats roughly 5 business days as a reasonable benchmark)
  • Document any individualized assessment conducted
  • Final adverse action notice with CRA contact + free-copy + dispute-right language

Retention

  • EEOC: 1 year for applications and related records (29 C.F.R. §1602.14); longer if a charge is filed
  • FCRA: no specific federal retention rule but Sarbanes-Oxley + state law may apply
  • State-specific record-keeping rules in CA, NY, IL, MA — consult counsel
Compliance program: small employer minimum (1) Standalone disclosure + consent template; (2) PBSA-accredited CRA; (3) two-letter adverse action template; (4) written conviction-history policy referencing EEOC guidance; (5) state-specific addendum library. Five documents. Build them once, defend them forever.
In this section — the 2026 frontier: AI laws, salary-history expansion, marijuana, biometrics.

13. The 2026 Frontier

Several pending or recently-enacted laws will reshape employment screening through 2026 and beyond.

  • Colorado AI Act — effective June 30, 2026 after the legislature delayed implementation from the original Feb 1, 2026 date via SB25B-004 (signed Aug 28, 2025). First comprehensive state AI law; duty of reasonable care against algorithmic discrimination in employment.
  • California SB 1100 — effective Jan 1, 2025. Bans most driver's-license requirements in job postings unless driving is an essential function. Reaches the screen indirectly by limiting MVR pulls.
  • Federal AI hiring regulation — OFCCP and EEOC actively coordinating; expect formal rule proposals by 2026-2027.
  • Biometric Information Privacy — IL BIPA litigation continues; TX, WA, NY have parallel statutes; AZ, FL, KY, MD have bills pending. Fingerprint-based clocking-in systems and biometric onboarding are litigation targets.
  • Clean Slate expansion — New York (effective Nov 16, 2024) and a growing list of other states (including PA, MI, MN, NJ, VA, CT per the Clean Slate Initiative tracker) have automated-sealing laws shrinking the pool of records visible to employers. CA SB 731 made misdemeanor and many felony records auto-sealed after 4 years conviction-free.
  • Off-duty cannabis — expect 5-8 more states to enact protections through 2027.
Reading the trend Three vectors are tightening simultaneously: less data visible (Clean Slate sealing), less data usable (ban-the-box + credit restrictions + cannabis protections), and more procedural overhead (AI bias audits + individualized assessments). The 2026 employer's screening program looks nothing like the 2016 version.

14. Frequently Asked Questions

How long does an employment background check take in 2026?

Most CRA-issued reports return in 1-3 business days for U.S. candidates. Fingerprint-based federal IdHS adds 3-10 business days. International components can extend turnaround to 2-6 weeks depending on country and document availability. Counties with manual records (rural southern U.S., parts of Texas) can take 7-14 days alone.

What shows up on an employment background check?

Identity (SSN trace + address history), criminal records (county/state/federal), sex offender registry, sometimes credit (where state law allows), motor vehicle record for driving roles, education and employment verification, and professional license verification. The FCRA 7-year rule limits non-conviction records for jobs paying under $75,000 (15 U.S.C. §1681c(b)(3)).

Can an employer reject me solely because of a criminal conviction?

Federal Title VII (via EEOC guidance) and most state fair-chance laws require an individualized assessment using the Green factors: nature of offense, time elapsed, and nature of the job. Blanket exclusion policies have been the subject of multi-million-dollar EEOC consent decrees.

What is the FCRA 7-year rule?

Under 15 U.S.C. §1681c, non-conviction records (arrests not leading to conviction, civil suits, paid tax liens, accounts in collection) cannot be reported beyond 7 years for jobs paying less than $75,000 annually. Criminal convictions have no federal time limit, but several states (CA, NY, MA, NM) impose 7-year limits on convictions too.

Can my employer pull my credit report?

Under federal FCRA, yes, with your written consent. Eleven states (CA, CO, CT, HI, IL, MD, NV, OR, VT, WA) plus NYC, Philadelphia, Chicago, and DC restrict the practice further, often limiting it to fiduciary, financial-account, or law-enforcement positions. Check your state law.

What's the difference between an arrest record and a conviction record?

An arrest is the moment of detention; a conviction is the court judgment. Arrests without conviction are inherently less reliable indicators of conduct, and the EEOC's 2012 guidance explicitly counsels employers not to rely on arrest records standing alone. Under FCRA §1681c, arrest records cannot be reported beyond 7 years for jobs paying under $75,000.

Do I have to consent to a background check?

Legally, no. Practically, refusing to consent ends the application. The FCRA requires the employer to obtain your written authorization before ordering a consumer report; the consent itself is voluntary in the legal sense.

What is a "conditional offer" and why does it matter?

A conditional offer is a job offer made contingent on successful completion of remaining checks (background, drug test, reference verification). State fair-chance laws use it as the trigger point: criminal-history inquiries can only happen after the conditional offer. The offer letter should state the contingencies clearly.

How do I dispute a wrong record on my report?

Request a free copy from the CRA within 60 days of adverse action under FCRA §1681j. Send a dispute letter by certified mail identifying each item, with documentation. The CRA must investigate and respond within 30 days under §1681i. If denied, escalate to the CFPB complaint portal.

Does ban-the-box mean an employer can never look at criminal history?

No. Ban-the-box only moves the inquiry later in the process (after initial application, after first interview, or after conditional offer depending on the jurisdiction). Once the inquiry happens, the employer can still consider criminal history — subject to the EEOC's individualized-assessment framework and any state-specific rules.

Can an employer rescind a job offer after the background check?

Yes, if the FCRA two-step adverse action process is followed correctly. The conditional offer is exactly that — conditional. If material information surfaces, the employer must send a pre-adverse notice with the report, wait a reasonable period (FCRA does not set a fixed minimum; FTC guidance treats roughly 5 business days as reasonable), then send the final adverse action notice. A rescission without individualized assessment can trigger an EEOC charge.

What's the difference between an employment check and a security clearance?

An employment background check is a private-sector review of public records, identity, and (sometimes) credit. A federal security clearance is a federal investigation by the Defense Counterintelligence and Security Agency (DCSA) or sponsoring agency, with in-person interviews, foreign-contact review, financial review, and adjudication against the federal adjudicative guidelines (SEAD-4). Clearances take months and require continuous reinvestigation.

Can an employer use an AI tool to screen my application?

Yes, but the tool is subject to Title VII disparate-impact and ADA accessibility analysis (EEOC guidance May 2022 + May 2023). In NYC, you have a right to notice 10 business days before use under Local Law 144. In Illinois, you have a right to notice and consent if AI analyzes a video interview. In Colorado after June 30, 2026, you have a right to appeal and human review.

If I'm denied a federal job, do I have additional rights?

Yes. The Fair Chance Act (5 U.S.C. §9202) prohibits federal agencies and federal contractors from inquiring about criminal history before a conditional offer. Violations carry up to $1,000 per first offense for contractors and progressive discipline for federal officials. Complaint route: agency OIG, OPM, and OFCCP for contractors.

Last reviewed: June 2026. Written for both sides of the hiring desk.